Privacy Policy

Last updated: March 18, 2026 | Market Finganas S.A.P.I. de C.V.

1. Data Controller

Market Finganas S.A.P.I. de C.V. ("FitalMx", "we", "us"), with registered address in Mexico City, CDMX, Mexico, is the data controller responsible for the processing of your personal data in accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and, where applicable, the California Consumer Privacy Act (CCPA).

2. Data We Collect

We collect data you provide directly: full name, email address, phone number, city of residence, monthly spending range, and current FX conversion method. We also collect automatically: IP address, browser type, device information, pages visited, referral source, and UTM campaign parameters.

3. Purpose of Processing

Your data is used to: (a) process your card application; (b) provide customer support; (c) send communications about your application status; (d) improve our services; (e) comply with legal obligations including KYC/AML requirements under LGOAAC and LFPIORPI.

4. Legal Basis

We process your data based on: (a) your explicit consent when submitting the application form; (b) contractual necessity to provide our services; (c) legal obligations under Mexican financial regulations.

5. Data Sharing

We do not sell your personal data. We may share data with: (a) regulated financial partners for card issuance and KYC verification; (b) technology providers for analytics and communication (data processing agreements in place); (c) regulatory authorities when legally required.

6. Data Retention

Application data is retained for the duration of your relationship plus 5 years as required by Mexican financial regulations. Analytics data is anonymized after 24 months. You may request deletion subject to legal retention requirements.

7. ARCO Rights (Mexico)

Under LFPDPPP, you have the right to Access, Rectify, Cancel, and Oppose (ARCO) the processing of your personal data. To exercise these rights, contact: privacy@fitalmx.com. We will respond within 20 business days.

8. CCPA Rights (California)

California residents have the right to: know what data we collect; request deletion; opt-out of sale (we do not sell data); non-discrimination for exercising rights. Contact: privacy@fitalmx.com.

9. Security

We implement enterprise-grade security measures including AES-256 encryption, TLS 1.2+ for data in transit, access controls, and regular security audits. All sensitive data is encrypted at rest and in transit.

10. Cookies

We use essential cookies for language preference and session management. Analytics cookies are used to understand site usage. No third-party advertising cookies are used on this domain.

11. Changes

We may update this policy. Material changes will be communicated via the email associated with your application. Continued use of our services constitutes acceptance.

12. Contact

For privacy inquiries: privacy@fitalmx.com
Market Finganas S.A.P.I. de C.V., Mexico City, CDMX, Mexico.