TUNTON Private credit · Monterrey
ESEN
Contact
ESEN
Legal

Privacy Notice

Last updated: July 5, 2026

This is a courtesy English translation; the Spanish version is the legally binding one.

1. Data controller

Tunton Fin, S.A.P.I. de C.V. ("Tunton"), with its address in San Pedro Garza García, Nuevo León, México, is responsible for the processing of your personal data under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Mexican Federal Data Protection Law) in force (published in the DOF on March 20, 2025, effective as of March 21, 2025, the "Law") and its applicable regulations.

2. Personal data we process and its classification

This site does not use tracking cookies, does not host forms that send information to our servers, and does not store any data whatsoever: the calculators run entirely in your browser, and the contact form merely drafts a message that you decide to send via WhatsApp. We process personal data only when you contact us via WhatsApp, phone, email, or in person, and during the evaluation and, where applicable, the execution of a credit transaction:

  • Identification and contact: name, phone, email, address, official ID.
  • Property and financial: income, obligations, credit history (with your authorization), information about the assets or cash flows offered as collateral.
  • Those required by anti-money-laundering rules (LFPIORPI and provisions), including identification of the beneficial owner.

We do not collect sensitive personal data. We ask that you not send it to us through any channel.

3. Purposes of processing

Primary purposes (necessary for the legal relationship):

  1. Address your contact request and assess the feasibility of the proposed transaction;
  2. Analyze payment capacity and appraise collateral (origination);
  3. Compile the identification file required by the LFPIORPI (art. 17, section IV) and file the notices the law requires;
  4. Execute, formalize, and administer the credit agreements and their collateral, including collections;
  5. Comply with legal, regulatory, and tax obligations, and defend rights in the event of a dispute.

Secondary purposes (not necessary; require your consent): sending you information about Tunton's services and content. You may refuse or object to these purposes at any time by writing to [email protected], without affecting the main relationship.

4. Transfers

We do not sell or transfer your data for commercial purposes. It is only disclosed: (i) to competent authorities when a law requires it (e.g., notices to the UIF/SAT under the LFPIORPI); (ii) to public notaries (fedatarios públicos) and registries for the formalization and recording of transactions and collateral; (iii) to professional advisors (legal, accounting, appraisers) bound by confidentiality, to the extent indispensable for the primary purposes. These disclosures are made under the Law; when a transfer requires your consent, we will request it.

5. ARCO rights and revocation of consent

You may exercise your rights of Access, Rectification, Cancellation, and Objection (ARCO), as well as revoke your consent and request the limitation of use or disclosure, by sending your request to [email protected] with: (i) your name and a means to respond to you; (ii) a document proving your identity (or the representation, where applicable); (iii) a clear description of the data and the right you are exercising; and (iv) any element that facilitates its location.

Under the Law in force, we will respond within a maximum of twenty days from receipt of the request — extendable by ten additional days once only, with justified notice — and, where applicable, we will give it effect within the fifteen days following the response.

If you believe your right to data protection has been violated, you may turn to the competent authority on the matter (the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance), which assumed the functions of the former INAI).

6. Retention and security

We retain the data during the legal relationship and the applicable legal periods (including the 10-year period under anti-money-laundering rules for identification files), under reasonable administrative, technical, and physical security measures and restricted access.

7. Changes to this notice

Any modification will be published on this page (tunton.com/en/aviso-de-privacidad/) with its update date. Continued use of our channels after publication implies knowledge of the notice in force.