Privacy Notice

Last updated: October 7, 2026

Privacy Notice

This is a translation for reference. In case of any discrepancy, the Spanish version prevails.

1. Identity and Address of the Controller

COVA Consulting S.C. (“COVA”), located at Blvd. Francisco L. Montejano #1280, Int. 203, 2.º piso, Torres del Sol (Torre Norte), Col. Fovissste, C.P. 21038, Mexicali, Baja California, México, is responsible for processing your personal data under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”).

Sales of COVA SEALS security seals are invoiced by Magdalena Sofía Villarreal Vega, located at Arcos de Chapultepec No. 1280, Col. Los Arcos, Mexicali, Baja California, Mexico, who is responsible for the contact and billing data of seal customers and processes it under this same privacy notice. Requests regarding that data may be sent to the email address in section 5.

2. Personal Data We Process

  • Identification and contact: name, position, company, email, phone or WhatsApp, and company address.
  • Employment and professional data of our clients’ personnel and their business partners, needed to provide our services: name, position, department, signature, training records, and participation in audits, interviews and effectiveness tests.
  • Billing data: tax ID (RFC), company name and tax address.

COVA does not request sensitive personal data. If a service ever requires it, we will first obtain your express written consent.

3. Purposes of Processing

Primary purposes, necessary for our relationship with you:

  • Providing consulting, training, audit and verification services, including the CTPAT, OEA and Parque Industrial Seguro programs.
  • Preparing proposals, contracts, invoicing and collections.
  • Responding to information requests, appointments and communications.
  • Compiling the files and evidence required by certification programs and authorities.
  • Complying with applicable legal obligations.

Secondary purposes, not necessary for our relationship with you:

  • Sending newsletters and news on international trade and supply chain security.
  • Inviting you to events and training sessions.

If you do not want your data used for secondary purposes, you may say so at any time by replying to our newsletters with the word UNSUBSCRIBE or by writing to acorona@gcova.com.mx. Your refusal will not affect the services we provide to you.

4. Transfers and Processors

Your data may be transferred, in the cases permitted by the Law, to:

  • Competent authorities in Mexico and abroad (for example, SAT, Mexico’s National Customs Agency or U.S. Customs and Border Protection), when necessary for certification procedures you request from us or when legally required.
  • The Mexican Association of Private Industrial Parks (AMPIP), for verification of the Parque Industrial Seguro program requested by the park.

COVA also relies on web hosting, email, cloud storage and accounting providers, which process personal data solely on COVA’s behalf and under confidentiality obligations.

5. ARCO Rights and Withdrawal of Consent

You may access, rectify, cancel or object to the processing of your personal data (ARCO rights), as well as withdraw your consent or limit the use of your data. To do so, send your request to acorona@gcova.com.mx including:

  • Your name and a means to receive the response.
  • A document proving your identity or, where applicable, legal representation.
  • A clear description of the data and the right you wish to exercise.
  • Any other information that helps locate your data.

COVA will respond to your request within the time limits set by the Law.

6. Cookies and Tracking Technologies

This site does not use its own cookies or any analytics or advertising tools. It uses Google Fonts to display typefaces, a third-party service that may log technical data such as your IP address. Links to WhatsApp, Facebook, X and LinkedIn are governed by those platforms’ privacy policies.

7. Changes to This Notice

Any change to this privacy notice will be published on this page with the date of the last update.

8. Authority

If you believe your right to personal data protection has been violated, you may contact Mexico’s Secretaría Anticorrupción y Buen Gobierno, the competent authority.