Privacy notice

1. Personal data that will be processed

Through the forms available on our websites, we collect the following personal identification and contact data directly from you:

• Full name.
• Contact phone number with international dialing code. The selected country is used to format and validate the number; we do not ask for your nationality.
• Email address.
• Your preferred contact method, if you choose to provide it.

We also collect the following information about the property for which you are requesting assistance:

• The service you are interested in: property marketing (sale or rental), property regularization, or property management.
• The transaction you are interested in: sale or rental, when you request property marketing services.
• The city, borough or area where the property is located.
• The property type, when you request property marketing or management services.
• Whether you have an estimated price, when you request property marketing services and choose to indicate this; we do not ask for the amount.
• The issue on which you are seeking property regularization guidance: deed, construction, possession, ejidal land tenure, outstanding debts, property recovery, or general guidance.
• Whether the property is rented out and, optionally, your property management needs: rent, tenants, maintenance, documentation or follow-up.
• Any additional comments you freely and optionally choose to provide.

When available, we associate your request with the source, medium and campaign of the link through which you reached the website, as well as the referring page without its parameters. This information is obtained from the link itself and your browser, and is included with your request when you submit it, regardless of your decision about statistical cookies.

To manage your request, we assign it a reference number and record the submission date and your consent choices. For security purposes, your connection's IP address is used temporarily to prevent abusive submissions, without being included in your request.

Automatically, and subject to your consent under section 9 of this notice, we record statistical information about your use of the website, such as the pages you visit, the time you spend on them, and the medium through which you accessed the site.

Information about the property may relate to your assets. We obtain your express consent through the mandatory checkbox on the forms to use that information exclusively for the stated purposes. We do not request sensitive personal data, bank account details, income information, documents or files at this initial contact stage. Avoid including sensitive data, identification documents or other people's personal data in your comments. If a subsequent service requires additional information or documentation, we will explain its purpose and the appropriate ways to provide it before collecting it.

For buyers and tenants, we collect the listing reference number you inquire about, your search requirements (location, property type, transaction, budget and features), and your contact details. When accounts are enabled, we will record an identifier, verified email address, boards and linked requests. Google sign-in will receive the basic identity and email data you authorize; we will not request your Google password. Accounts and Google sign-in are not yet available.

2. Purposes of processing

Your personal data will be used for the following necessary purposes, which form the basis of and are essential to our legal relationship with you:

• Contact you using the contact method you have provided.
• Send an automatic acknowledgment of receipt of your request to the email address you provide.
• Understand the property's characteristics and your objectives so that we can explain the scope of our services.
• Handle your request to sell or rent out real estate.
• Handle your request for guidance on property regularization, identify the issue you have raised, and explain the options and scope of the service.
• Handle your request for property management, understand its rental status and the tasks you wish to delegate, and explain the scope of the service.
• Advise you on credit claims and rights subject to litigation that are secured by real estate, and provide guidance on your investment in the real estate market.
• Follow up on your request and manage it internally.

Additionally, provided that you do not object, we will use your personal data for the following purposes, which are not necessary to handle your request:

• Prepare internal statistics and analyses to improve our services and website.
• Send information about services, offers and promotions related to our real estate activities.
• Send commercial communications about available properties that, based on the information you have provided, may match your profile or be of interest to you. For this purpose, we analyze the transaction type, location and property type you indicated in order to select the properties we present to you.

If you do not want your personal data to be processed for these additional purposes, you may let us know by sending your request to the email address given in section 6 of this notice. Refusing the use of your data for these purposes will not be a reason for us to refuse to handle your request.

Property inquiries: respond to your inquiry, confirm availability and terms, schedule viewings, and follow up through the adviser assigned by DEFINE, in accordance with the data transfer rules in section 3.

Assisted property searches: address the requirements you specify, send relevant options, and follow up for six months or until you cancel the search. For accounts and boards, provide access, retain selections and display request status; no request is linked based on a matching email address without verification.

3. Data processors and transfers of personal data

To operate our website and follow up on your request, we use technology service providers that act as data processors under Article 2, section XII, of the Law. These providers supply website hosting, information storage, email delivery and statistical analysis of visits. These processors may only process your data in accordance with our instructions and are contractually required to maintain confidentiality and apply security measures. Providing data to a processor does not constitute a transfer under Article 2, section XX, of the Law and therefore does not require your consent.

With regard to data transfers, we inform you of the following:

We do not share your personal data with brokers, collaborating agents or any other third party automatically, systematically or as a routine part of handling your request. Your data remains in our custody.

In accordance with the second paragraph of Article 35 of the Law, the request forms include the following clause, which you are entirely free to accept or decline:

I authorize the transfer of my personal data to brokers and agents who collaborate with DEFINE Bienes Raíces when necessary to handle my request.

You are free to decide whether to select this checkbox, and your decision is recorded together with the date and time it was made.

If you select the checkbox, we may transfer your data to a broker or collaborating agent in our network when necessary to handle your request, within the purposes stated in section 2 of this notice.

If you do not select the checkbox, we will not transfer your data to collaborating brokers or agents to handle your request without first obtaining your express consent. If handling your specific request requires the involvement of a broker or collaborating agent, we will ask for your express consent at that time, first informing you of the recipient's identity and the specific purpose of sharing the data. You may refuse that consent without affecting the assistance we provide through our own resources.

In either case, refusing to authorize the transfer will not be a reason for us to refuse to handle your request.

When a transfer is made with your consent, we will provide the recipient with this privacy notice and the purposes for which you authorized processing. The recipient will assume the same obligations as this data controller, in accordance with Article 35 of the Law.

Apart from the circumstances described above, we do not sell, lease or rent your personal data. Your information may only be disclosed without your consent in the cases provided for by Article 36 of the Law, or in compliance with a court order, ruling, or duly reasoned and legally grounded order from a competent authority.

The adviser assigned to a property may be part of DEFINE or an external third party. We verify the adviser's relationship with DEFINE before directing an inquiry to them. If the adviser is external, or their relationship with DEFINE has not been confirmed, the inquiry will only be sent to them if you have selected the separate, optional data transfer checkbox. If you do not select it, if no adviser is assigned, or if the adviser is inactive, the request is directed to tuexito@definebr.com. Refusing the transfer does not prevent you from receiving assistance from DEFINE. Inquiries and requests are routed to DEFINE's support team through tuexito@definebr.com. Technical notices and catalog update notices are managed through sistema@definebr.com. Technical incidents requiring escalation are reported to administration through definebienesraices@gmail.com, with only the minimum necessary information and without customer contact details or the content of customer requests.

4. Security measures

In accordance with Article 18 of the Law, we have established and maintain administrative, technical and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access or processing. Information collected through the forms is transmitted over encrypted connections and stored in environments with restricted access. We require the service providers we engage to comply with these measures as well.

Under Article 19 of the Law, if a security breach occurs that significantly affects your economic or moral rights, we will inform you immediately so that you can take appropriate steps to protect your rights.

Under Article 20 of the Law, everyone involved in any stage of processing your personal data is required to maintain its confidentiality. This obligation continues even after their relationship with us has ended.

5. Retention and blocking periods

Your personal data will be retained for twenty-four months from our last contact with you. We consider this period necessary and proportionate in view of the usual decision-making timeframes for real estate transactions.

Once that period ends, and in accordance with Articles 10 and 24 of the Law, your data will be blocked for a period equivalent to the limitation period for claims arising from the legal relationship on which the processing was based, solely to determine any potential liabilities relating to that processing. During the blocking period, your data will not be processed in any way. Once that period has elapsed, it will be permanently deleted from our databases.

This is subject to any legal provision requiring a longer retention period, or to your data being necessary to fulfill an ongoing contractual obligation between you and this data controller.

Inquiries, searches, requests and accounts: twenty-four months from the last contact. You may request deletion of your account through the ARCO channel described in section 6, subject to the legal exceptions for retention and blocking stated there. The six-month period of active search follow-up does not extend that retention period.

Operational notices containing personal data: ninety days after the matter is closed. Sanitized API reads: ninety days; copies of published versions: twelve months, including the date, time and version. The minimum operational retention period of thirty days does not limit cancellation rights or override legal obligations. Operational backups are kept on the server or in the restricted-access database.

6. How to exercise your ARCO rights

You have the right to access the personal data we hold about you and to learn about the conditions and general characteristics of its processing; to request rectification or correction when it is inaccurate, incomplete or out of date; to request its cancellation from our files, registers, records and systems; and to object to the processing of your data on legitimate grounds, under Articles 21 to 26 of the Law.

To exercise any of these rights, you must submit your request to the Personal Data Department, designated under Article 29 of the Law, by email at definebienesraices@gmail.com or at the data controller's address given at the beginning of this notice. The Personal Data Department is headed by Lic. Gamaliel Del Castillo.

Under Article 28 of the Law, your request must include the following information and supporting documents:

• Your name and address, or another means of receiving notifications.
• Documents establishing your identity or, where applicable, the authority and identity of your legal representative.
• A clear and precise description of the personal data for which you wish to exercise an ARCO right, unless you are exercising the right of access.
• A description of the right you wish to exercise or what you are requesting.
• Any other information or document that helps locate your personal data.

We will notify you of our decision within a maximum of twenty business days after receiving your request. If the request is granted, it will be implemented within the fifteen business days following the date on which we communicate our response. These periods may be extended once for an equal period when the circumstances of the case justify it. Exercising your ARCO rights is free of charge; charges may only be made to recover the costs of reproduction, copies or delivery.

7. Withdrawal of consent

You may withdraw the consent you have given us to process your personal data at any time, without retroactive effect. To do so, you must submit your request through the channel specified in the preceding section and meet the requirements set out there. Please bear in mind that, in some cases, we may be unable to fulfill your request or stop using your data immediately because a legal obligation may require us to continue processing your personal data.

8. Options and channels for limiting the use or disclosure of your data

If you wish to stop receiving information about services, offers, promotions and advertising, you may request this at any time from the Personal Data Department by emailing definebienesraices@gmail.com and expressly stating that you wish to limit the use or disclosure of your data for those purposes.

You may also disable the tracking technologies used on our website at any time, as explained in the following section.

9. Cookies and tracking technologies on our website

Our website uses cookies and similar technologies for two different purposes:

Strictly necessary cookies. These are essential to the website's basic operation and to remembering your decision about statistical cookies. These cookies do not require your consent because the site cannot operate correctly without them.

Statistical or analytics cookies. These help us understand, in aggregate, how the website is used: which pages are visited, how long visitors stay, which medium brought them to the site, and how they interact with the form, without including their contact details. This information is used exclusively to improve the browsing experience and our services, and is not used to identify you individually.

Statistical cookies will only be activated if you give your consent. When you first visit our website, you will see a notice allowing you to accept or reject them. If you reject them, no analytics cookie will be installed and Google Analytics will not be activated. This does not prevent you from submitting the form or affect the source information associated with your request under section 1. Your decision will be saved for later visits, and you may change it at any time using the cookie settings link in the website's footer.

Regardless of the above, you may disable or delete cookies at any time through your web browser's settings.

Only if you authorize it, the comparison feature uses the functional cookie define_compare to store up to three listing reference numbers for thirty days. define_functional stores your choice for thirty days; withdrawing permission deletes the saved selection. Without authorization, the comparison remains in the tab's memory. Recently viewed listings are also kept only in that memory. The catalog does not use analytics or advertising cookies.

10. Changes to this privacy notice

This privacy notice may be amended, changed or updated as a result of new legal requirements, our own needs in connection with the services we offer, our privacy practices, or other reasons.

We undertake to keep you informed of changes to this notice by publishing them in the privacy section of our websites at https://definebr.com and https://catalogo.definebr.com, always indicating the date of the latest update. We recommend reviewing that section periodically.

11. Competent authority

If you believe that an act or omission on our part has infringed your right to personal data protection, or suspect a violation of the Ley Federal de Protección de Datos Personales en Posesión de los Particulares, you may file the corresponding data protection request with the Secretaría Anticorrupción y Buen Gobierno, the competent authority in this matter under Articles 38 and 39 of the Law.

Data sources

Source: INEGI, Catálogo Único de Claves Geoestadísticas. Accessed: 23 October 2026. Standardized by DEFINE, without endorsement by INEGI.