AS Consulting Group Pacific is AS Consulting Group's business gateway and website for companies headquartered in China and Taiwan that are entering or operating in the United States and Mexico. It is not a separate legal entity from the controller identified below. The inquiry form is not designed to receive tax IDs, bank-account information, passwords, complete financial statements or sensitive personal data.
Data controller
Arreguin Sánchez y Asociados S.C. (AS Consulting Group) is the controller responsible for inquiries collected through asconsultinggrouppacific.com.
This notice is issued under the privacy rules applicable to this Mexico-based controller. Where a particular processing activity is also subject to mandatory privacy rules in another jurisdiction, we will address applicable requests as required by law.
Personal data we process
When you submit the consultation form, we may process:
- Identity and contact data: name, company, work email and an optional telephone / WhatsApp number.
- Business context: headquarters location and current expansion or operating stage.
- Inquiry scope: target market(s), requested services or business needs and your free-text message.
- Source information: the page from which the inquiry originated and, when present, UTM source, medium and campaign values used to understand inquiry attribution.
- Security data: for short-term abuse and duplicate-submission prevention, the application uses a non-reversible HMAC-derived identifier based on the IP address. The raw IP address is not written to the inquiry record.
Please do not submit tax IDs, access credentials, SAT passwords, e.firma files, bank-account information, complete financial statements, health information or other sensitive information that is unnecessary for an initial inquiry.
Purposes of processing
Information obtained through the Pacific inquiry gateway is used only for purposes necessary to handle the inquiry:
- receive, validate and respond to your inquiry and contact you;
- understand your headquarters, target market, operating stage and professional-service needs;
- determine whether the inquiry should be handled by an AS Consulting Group U.S., Mexico, Asia Desk or cross-border team;
- arrange an initial professional discussion and, where appropriate, prepare a scope, proposal or follow-up information request;
- maintain an internal business record of the inquiry and its follow-up;
- protect the form and website from spam, automated abuse and repeated submissions; and
- when the website has a notification address configured, send the valid inquiry to the ASCG recipient responsible for follow-up.
The current Pacific website does not use inquiry-form data for newsletter subscriptions, advertising audiences, remarketing, third-party advertising, automated profiling or the sale of personal data. If those purposes or technologies are introduced later, this notice and any required consent mechanism will be updated before they are enabled.
Internal routing, cross-border processing and service providers
Pacific is specifically designed for cross-border needs involving China / Taiwan headquarters and operations in the United States and Mexico. Your inquiry may therefore need to be accessed by relevant AS Consulting Group teams or affiliated entities inside or outside Mexico so the appropriate professional path can be identified and, where agreed, services can be provided.
Where permitted by applicable law, intra-group routing may occur when an applicable legal exception is met—for example, a qualifying transfer among affiliates under common control or a transfer necessary to establish, maintain or perform a relationship involving you—or with consent where consent is legally required. Recipients must use the information only for the inquiry and related service purposes and remain subject to appropriate confidentiality and security obligations.
The website may also rely on infrastructure providers engaged by the controller, such as website hosting and email-service providers. Those providers act as processors and may access information only to the extent needed to provide their technical services. AS Consulting Group's membership in SMS Latinoamérica does not, by itself, make that network the controller of Pacific inquiries.
We may also disclose information where required by law, a competent authority or where necessary to establish, exercise or defend legal rights.
Retention, minimization and security
Valid inquiry records are retained only for as long as reasonably necessary to respond, evaluate a potential business relationship, manage follow-up communications and satisfy applicable legal, accounting, compliance or legal-defense requirements. If no relationship is established and the information is no longer needed for those purposes, records should be deleted or anonymized under the controller's internal retention process.
The HMAC identifier used for form rate limiting is active only during a 15-minute window; the application removes stale rate-limit files after that window. The raw IP address is not written into the lead record. Hosting infrastructure may maintain standard server-access logs under its own security and retention policies.
We use administrative, technical and physical safeguards proportionate to the risk, including CSRF protection, a honeypot, server-side validation and sanitization, rate limiting, protected lead storage, access restrictions and security HTTP headers to reduce the risk of unauthorized access, loss, alteration or misuse.
Cookies, browser storage and analytics
Pacific currently uses only a PHP session cookie needed to maintain form security and state. It supports CSRF / form-session functionality and is not used for advertising tracking.
The website may temporarily store the source page and UTM parameters in the browser's sessionStorage so an inquiry can be attributed to its source during the same browsing session. This browser storage is normally removed when the session is closed.
The current version does not include Google Analytics, Meta Pixel, advertising cookies, remarketing or other third-party behavioral-tracking tools. If such technologies are added before launch or later, this notice will first be updated and any additional cookie or consent mechanism will be evaluated.
ARCO rights, limits on use and withdrawal of consent
You may request, as applicable, Access (Acceso), Rectification (Rectificación), Cancellation (Cancelación) or Objection (Oposición) regarding your personal data. You may also request limits on use or withdraw consent where applicable.
Email privacidad@uberprototech.com with the subject “Solicitud de derechos ARCO”. To help us process the request, please include:
- your name and an email address or other means for receiving the response;
- the right you wish to exercise and the data or processing activity concerned;
- information that helps us locate the inquiry record, such as your company and the email used to submit the inquiry; and
- where necessary, appropriate documentation to verify your identity or a representative's authority. We will request only information reasonably necessary to verify the request.
Under applicable Mexican law, the controller generally has up to 20 days from receipt of a complete ARCO request to communicate its determination and, when the request is granted, up to 15 additional days to make it effective, subject to legally permitted extensions.
If you simply want follow-up on an inquiry that has not become a professional relationship to stop, you may use the same email address.
Changes to this notice
If there is a material change to the processing purposes, categories of data, cross-border handling, tracking technologies or rights mechanism, this page will be updated. The current version will remain available at asconsultinggrouppacific.com/en/aviso-de-privacidad/ with its last-updated date. Where applicable law requires an additional form of notice, we will use that method as well.