Rabbit Privacy Notice

Detalle semicirculo

Rabbit Impulsora de Mercados, S.A. de C.V., Rabbit Soluciones Logísticas, S.A. de C.V., and Rabbit SF, S.A.P.I. de C.V. (jointly or separately, “Rabbit” or the “Data Controller”), with its address at Calle Juan Salvador Agraz No. 65, 17th Floor, Col. Santa Fe Cuajimalpa, Cuajimalpa de Morelos, C.P. 05348, Mexico City, hereby informs you that it will process the personal data that you, hereinafter referred to as (the “Data Subject” or “You”), provide to us, in accordance with the principles of lawfulness, quality, consent, information, purpose, fairness, proportionality, and accountability set forth in the Federal Law on the Protection of Personal Data Held by Private Parties (“the Law”), its Regulations (“RLFPDPPP”), as well as the Guidelines and other applicable regulatory provisions.


Moreover, we inform You that during the processing of the personal data you provide to us, we will implement the necessary measures to comply with the principles of lawfulness, quality, consent, information, purpose, fairness, proportionality, and accountability, all of which are under our control.

Privacy Notice: This document, which is made available to you in physical, electronic, or any other format.


Consent: The free, specific, and informed manifestation of your will to allow Rabbit to process your Personal Data.

Personal Data: Any information concerning an identified or identifiable natural person.


Data Subject: The natural person to whom the Personal Data pertains.

ARCO Rights: Data Subjects’ rights of Access, Rectification, Cancellation, and Opposition in relation to their Personal Data.


Processor: The individual or legal entity that processes Personal Data on behalf of Rabbit, whether individually or jointly with others.


Rabbit Ecosystem: The set of Rabbit Applications, Websites, and/or Platforms, or those of any Business Partner, that are interrelated and used for the provision of Rabbit Services to the User.


Controller: The individual or legal entity that determines the purposes and means of the Processing of Personal Data, which, for purposes of this Privacy Notice, shall be Rabbit.


Financial Services: Refers indistinctly to credit products made available by Propaga to Rabbit’s clients, whose separate privacy notice is available at: https://terminos-condiciones.propaga.io/aviso-privacidad.


Rabbit Services: The products and services provided by Rabbit either in person or through its Applications, Websites, and Platforms.


Websites: The website created and managed by Rabbit, accessible via the internet for the provision of Rabbit Services, located at https://rabbitmx.com/, and, as applicable, any other websites added by Rabbit as referenced in the Specific or General Terms and Conditions available at https://rabbitmx.com/terminos-y-condiciones.


Processing: The collection, use, disclosure, or storage of Personal Data by any means. “Use” includes any action such as access, handling, exploitation, transfer, or disposition of Personal Data.


Transfer: Any communication of data to a person other than the Controller or Processor.

This Privacy Notice applies to the Personal Data collected through: (i) our website https://rabbitmx.com; (ii) any other page, portal, or system made available to you for the purposes of requesting our services; and (iii) our mobile or computer applications, by telephone or any other electronic means (hereinafter, the “Electronic Media”). By using the Rabbit Ecosystem, you acknowledge and agree to the processing of your Personal Data.

The Processing of the Data Subject’s Personal Data, collected by or provided to Rabbit, has the following necessary purposes:

  1. To verify your identity and the authenticity of the information provided, including references and partners.
  2. To provide the services contracted by the Client.
  3. To compile files, databases, and systems required to deliver services efficiently.
  4. To conduct background checks via third parties, agencies, or authorities to verify the data provided.
  5. To comply with legal requirements from competent authorities.
  6. To register your data in Rabbit’s systems before and after providing services.
  7. To contact you for data correction and updates.
  8. To comply with applicable legislation and regulatory obligations.
  9. To enable access to Rabbit’s premises.
  10. To manage the legal relationship with the Shopkeeper and fulfill contractual obligations.
  11. To include the Shopkeeper’s data in Rabbit’s client service database.
  12. To contact the Client regarding the provision of contracted services.
  13. To record and address complaints or claims and evaluate service quality.
  14. For billing, payment collection, and transaction processing.
  15. To include the third party’s data in Rabbit’s client service database.
  16. To contact the third party if needed for service provision.
  17. For billing, payment collection, and transaction processing if the third party is making the payment.
The Data Subject’s Personal Data may also be used for the following secondary purposes:
  1. Marketing and advertising purposes;
  2. To offer, as applicable, other financial products or services of Rabbit or of any of its controlling, subsidiary, affiliate, or related entities, or any other company under the same common control or principal shareholder, provided they operate under the same internal policies and processes, as permitted by applicable legislation;
  3. To conduct statistical analysis, generate informational models, and/or create behavioral profiles (current or predictive).
Furthermore, we will use the Data Subject’s Personal Data for business intelligence, market research, visibility of the Data Subject’s activity through our electronic media, quality control and monitoring of our electronic media, and to send newsletters and offers.

The Data Subject may unsubscribe from newsletters and promotional communications at any time by following the instructions provided in the footer of the corresponding email.

At all times, the Data Subject may express their refusal to allow their Personal Data to be processed for purposes that are not essential for fulfilling the legal relationship with Rabbit.
Depending on the context, Rabbit may collect the following categories of Personal Data, either directly from the Data Subject or from third-party sources:

  1. Identification data
  2. Asset and/or financial data

The specific data may include:
  1. Full name
  2. Phone number(s)
  3. Tax ID (RFC)
  4. Email address(es)
  5. Address(es), including ZIP code
  6. Date and place of birth
  7. Population Registry Number (CURP)
  8. Visits to Electronic Media
  9. ID
  10. Personal references
  11. Bank account details
  12. Credit record

Please, be aware that if you access Rabbit from a public or shared computer, your information may remain visible to others. You are responsible for ensuring that your personal information is deleted from any shared device you use.

Rabbit may also collect non-personal information for statistical and business purposes to analyze market behavior and competitive positioning. If non-personal data is combined with Personal Data, it will be treated as Personal Data and protected accordingly.

Rabbit may carry out national and/or international transfers of Personal Data to the extent necessary to fulfill the specific and applicable purposes of the Processing and, where applicable, to establish, maintain, or fulfill the corresponding legal relationship.
Rabbit may transfer your data to financial service providers and portfolio management entities, as well as their assignees, successors-in-interest, investors, and/or creditors.


In all cases, the recipients of the Personal Data shall assume the same obligations and/or responsibilities as Rabbit, limited strictly to what is necessary for the specific Processing purpose, and in accordance with the provisions of this Privacy Notice.
Furthermore, Rabbit may transfer the Data Subject’s Personal Data without requiring express consent in the cases permitted by the Law.

Rabbit provides the means and procedures for the exercise of your ARCO Rights as follows:

  1. To access your Personal Data held by Rabbit and to learn how it is being processed;
  2. To rectify it in case it is outdated, inaccurate, or incomplete;
  3. To cancel it when you believe it is not being processed in accordance with applicable principles, duties, and obligations;
  4. To object to its processing for specific purposes.

To execute ARCO Rights, a written request must be submitted either (i) at Rabbit’s registered address, or (ii) via email to the Data Protection Officer identified in this Privacy Notice. The request must use the format provided by Rabbit (hereinafter the “Request”) and must be accompanied by the following:

The name of the Data Subject and a copy of their official identification, and if applicable, the legal representative’s ID. If submitted through a representative, documentation proving such authority must be included.

A clear and precise description of the Personal Data involved, as well as the specific ARCO right(s) being exercised. The request must be signed by the Data Subject or their legal representative.

Responses to requests that meet these requirements will be provided to the Data Subject or their representative by email within a period not exceeding 20 (twenty) business days from receipt. This period may be extended by an additional 20 (twenty) business days when justified, in which case the Data Subject will be notified.

If the request is deemed valid, Rabbit will carry out the corresponding actions within 15 (fifteen) business days from the date the response is communicated to the Data Subject or, if applicable, to their representative or legal proxy. Rabbit may only deny such requests in cases permitted by law or regulation and will notify the Data Subject accordingly. This deadline may also be extended for an additional 15 (fifteen) business days when justified.

To limit the use or disclosure of your Personal Data beyond the exercise of ARCO rights or consent revocation, Rabbit maintains an exclusion list for secondary purposes identified in this Privacy Notice. You may request to be added to this list by sending an email to privacidad@rabbitmx.com or through other contact methods enabled by Rabbit.

You may revoke the consent previously granted to Rabbit for the Processing of your Personal Data, provided that:


Such data is not necessary to fulfill the essential purposes described above, within the limits established by law; and

There is no legal obligation requiring Rabbit to continue processing your Personal Data.


Once identity or legal representation is confirmed, we will exclude your data from our systems within a period not exceeding 90 (ninety) business days following receipt of the request.

Rabbit has implemented administrative, technical, and physical security measures based on international best practices regarding quality and data security, in order to protect your Personal Data against damage, loss, alteration, destruction, unauthorized access, or use. These same standards are required of our business partners and affiliates, including controlling, controlled, subsidiary, and/or affiliated companies, even when services are provided by such related parties.

Rabbit hereby notifies you that it may use (“cookies” or “web beacons”) on its website to confirm your identity, personalize your access to the Rabbit Ecosystem, monitor your usage, and analyze your behavior as an internet user. The sole purpose of using these technologies is to enhance your browsing experience and improve site functionality. Through these technologies, personal data may be collected in accordance with the Law and its Regulations.


You may disable these technologies by adjusting your browser settings and choosing to disable or reject cookies. Please note that the process for disabling such technologies may vary depending on the platform, browser, and mobile device you use to visit our website.


Our websites may contain links to external sites whose content and privacy policies are not the responsibility of Rabbit. In such cases, the user will be subject to the privacy policies of those external sites, and Rabbit shall bear no responsibility whatsoever.

Rabbit reserves the right to update or modify this Privacy Notice at any time, either due to changes in the Law or resulting from any substantial changes to Rabbit or to the characteristics of the Personal Data collected, as well as to the purposes set forth herein. In the event of a substantial change to this Privacy Notice, you will be notified through any of the following means: (i) the Rabbit website, and/or (ii) by email.
Rabbit shall not be liable if you fail to receive notice of changes to this Privacy Notice due to issues with your email account, internet connection, or any other circumstances not attributable to Rabbit.

For your security and information, we strongly recommend that you periodically review the content of this Privacy Notice (“Privacy Notice for Clients and/or Users”) at https://rabbitmx.com/aviso-de-privacidad, or direct any requests for information or clarifications to our email address: privacidad@rabbitmx.com.

This Privacy Notice complies with the requirements established by the Law, its Regulations, the Guidelines, and other applicable legal provisions.