Short answer: Casas en Valladolid limits access to seller contacts, exact property locations and transaction records. Clients can ask what data is held, request ARCO rights and follow a documented escalation path under Mexico's private-sector privacy law.
Last editorial review: July 23, 2026. This page explains practice and is not a substitute for legal advice.
The legal baseline
Private businesses in Mexico handle personal data under the Federal Law on Protection of Personal Data Held by Private Parties. The current law requires lawful, transparent handling and recognizes the rights of Access, Rectification, Cancellation and Opposition, commonly called ARCO rights.
Our privacy notice controls the details of the data relationship. Ask for the current notice before sharing sensitive documents.
1. We limit property-location exposure
Public marketing may omit an exact pin, house number or owner identity when publishing it would create a security or privacy risk. A qualified prospect can receive the information needed for a showing after identity, purpose and appointment details are clear.
We do not treat secrecy as a substitute for due diligence. Before a buyer pays, the notary and relevant professionals still need the correct legal property and seller information.
2. We separate public marketing from transaction records
Listing photographs and descriptions are not the same as:
- identification documents;
- tax records;
- title copies;
- bank details;
- signatures;
- private phone numbers;
- contracts and notarial drafts.
Access should be limited to the people who need the record for a legitimate step. WhatsApp is useful for scheduling, but clients should not send unnecessary identity or banking documents into a general chat.
3. We verify who receives information
Before disclosing a sensitive location or document, we may ask for the person's name, purpose and connection to the transaction. Sellers should also verify that the person claiming to be an advisor appears in the INSEJUPY public registry.
License verification does not give an advisor unlimited permission to distribute data. Purpose and consent still matter.
How to exercise ARCO rights
Send a written request through the contact method in the current privacy notice. Include:
- your full name and a way to receive the response;
- enough information to identify the relationship or record;
- the ARCO right being requested;
- the specific correction, cancellation or opposition sought;
- identity or representation evidence required by law.
Do not post identity documents publicly. Ask how to transmit them securely.
Privacy escalation path
- Contact Casas en Valladolid using the privacy-notice channel and keep proof of the request.
- Allow the legal response period and answer any valid identity clarification.
- If the response is incomplete, request a written explanation and obtain qualified Mexican privacy counsel.
- Use the current federal complaint or rights-protection route identified by the governing law and official federal portal. Government responsibilities changed after the 2025 reform, so verify the competent authority at the time of filing rather than relying on an old agency name.
For federal transparency and current institutional orientation, consult Transparencia para el Pueblo and the law itself.
What clients should do
- Share only what is needed for the current step.
- Cover unrelated account numbers in a preliminary document.
- Confirm the recipient before sending.
- Ask why a document is required.
- Keep copies of consent and requests.
- Report a lost phone or compromised account promptly.
For a normal property inquiry, start with a WhatsApp Agent and avoid sending sensitive records until the purpose and recipient are confirmed.
FAQ
Why is an exact property location sometimes withheld?
To protect occupants and owners before a qualified showing. It is later disclosed when legitimately needed.
Can a buyer see title information?
Yes, due diligence requires correct legal information. The timing and secure channel should be coordinated with the seller, agency and notary.
What are ARCO rights?
They are the rights of Access, Rectification, Cancellation and Opposition concerning personal data.
Can I request deletion of every record?
You can request cancellation, but legal retention duties or an active transaction may limit immediate deletion. The response should explain the basis.
Is WhatsApp a secure document archive?
It is primarily a communication channel. Avoid sending unnecessary identity, banking or signed records through chat.
Does an INSEJUPY license prove privacy compliance?
No. It verifies state real-estate authorization, while privacy duties arise from separate law and the actual handling of data.
What should I do after a suspected disclosure?
Contact the agency immediately, preserve evidence, change compromised credentials and obtain legal guidance when sensitive data is involved.