Privacy Policy
In accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”), Mystery Solutions provides the following privacy notice.
1. Who is responsible for your personal data
Mystery Solutions is responsible for the use and protection of your personal data. This notice explains what data we collect, what we use it for and how you can exercise your rights.
Address: Marte #30, between Campeche and Tampico, Jardines de Mocambo, Boca del Río, Veracruz, Mexico, postal code 94299.
Phone: +52 (297) 970 6207
Email: contacto@mystery.solutions
Website: https://mystery.solutions/
2. Personal data we collect
Depending on how you deal with us, we may collect the following data:
- Identification and contact: name, company, phone number, email address and postal address.
- Your request: your company’s industry, the number of locations or cities you are interested in, and the message you write in the chat, in our forms, by WhatsApp, by email or by phone.
- Purchase and billing (online store): billing and delivery details. Payments are processed through third-party platforms (Mercado Pago and PayPal).
- Browsing: IP address, browser and device type, pages visited, the page from which you contacted us and, if you arrived from an ad, the ad click identifier. This data is obtained through cookies and similar technologies (see section 6).
- If you register as a mystery shopper: name, gender, age, education, profession, work experience, marital status, children, own vehicle, information about your consumption habits (how often you eat out, alcohol consumption and dietary preferences), address, city, state, country, mobile phone, email address, platform password and, optionally, bank details (card number, account holder, CLABE account number and bank) so that we can pay you for your evaluations. Bank details are optional; by providing them, you expressly consent to their processing for that purpose.
Through the chat, the contact forms and the online store we do not request sensitive personal data.
3. Purposes of the processing
Necessary purposes, which are essential for our relationship with you:
- To handle and follow up on your request for information, a proposal or a quote made through the chat, the forms, WhatsApp, phone or email.
- To prepare and send you proposals and quotes, and to contact you by phone, email or WhatsApp.
- To provide the services you contract (mystery shopping evaluations, reports and after-sales support) and to manage the business relationship.
- To process purchases, payments, deliveries and invoicing in the online store.
- If you register as a mystery shopper: to review your registration, assign evaluations to you, follow up on your performance and make the corresponding payments.
- To comply with legal, tax and accounting obligations and to respond to requests from competent authorities.
- To keep the website secure and prevent spam and fraud.
Secondary purposes, which are not necessary for our relationship with you:
- To produce statistics and analyze the use of the website in order to improve it.
- To measure the effectiveness of our advertising.
If you do not want your data to be processed for the secondary purposes, you can tell us at any time by writing to contacto@mystery.solutions. Your refusal will not affect how we handle your request or the services you have asked us for.
4. Who we share your data with
We do not sell or transfer your personal data. To operate the website and handle your request we rely on providers that process data on our behalf: hosting and email (IONOS), analytics and advertising (Google Analytics, Google Tag Manager and Google Ads), spam protection (Cloudflare Turnstile), payment services (Mercado Pago and PayPal) and messaging (WhatsApp, a Meta service, only if you decide to continue the conversation that way). These providers also apply their own privacy notices. Outside these cases, we will not share your data with third parties unless a competent authority requires it or the Law allows it.
The chat and the website forms send what you write to our email so that an advisor can follow up with you. If you decide to continue on WhatsApp, the summary of your request is written into a message that you send yourself.
5. How long we keep your data
We keep your data only for as long as necessary to fulfill the purposes described in this notice and to comply with applicable legal obligations; after that, we will block it and delete it from our records.
6. Cookies and similar technologies
Our website uses cookies and similar technologies (for example, from Google Analytics, Google Tag Manager and Google Ads) to remember preferences, measure the use of the website and measure the effectiveness of our advertising. You can disable them in your browser settings; doing so does not prevent you from browsing the website, although some features may not work properly. More information: how Google uses information from sites or apps that use its services and the Google Analytics opt-out browser add-on.
7. ARCO rights
You have the right at all times to know what personal data we have about you, what we use it for, and the conditions of its use (Access). Likewise, you have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); you also have the right to have your information removed from our records or databases when you believe it is not being used properly (Cancellation); and you have the right to object to the use of your personal data for specific purposes (Objection). These rights are known as ARCO rights.
To exercise them, send your request to contacto@mystery.solutions or through our contact page: https://mystery.solutions/en/contact/. Your request must include your name and a way for us to send you the answer, a document that proves your identity (or your representative’s), a clear description of the data and of the right you wish to exercise, and any element that helps us locate your information. In the same message you can ask for the procedure and requirements for exercising your rights.
We will reply by email within a maximum of 20 business days from the day we receive your request and, if it is granted, we will carry it out within the following 15 business days. Both periods may be extended once for an equal period when circumstances justify it. Exercising ARCO rights is free of charge, except for reproduction and shipping costs.
Contact details of the area responsible for handling these requests:
Address: Marte #30, between Campeche and Tampico, Jardines de Mocambo, Boca del Río, Veracruz, Mexico, postal code 94299.
Phone: +52 (297) 970 6207
Email: contacto@mystery.solutions
Other contact method: https://mystery.solutions/en/contact/
8. Revoking your consent and limiting the use or disclosure of your data
You may revoke at any time the consent you have given us for the processing of your personal data, without retroactive effect. Please note that, for certain purposes, revoking your consent will mean that we cannot continue providing the service you requested or that your relationship with us will end. To revoke your consent or to limit the use or disclosure of your information, send your request to contacto@mystery.solutions or to https://mystery.solutions/en/contact/. You may also ask for the corresponding procedure and requirements. We will reply within a maximum of 20 business days.
9. Data protection authority
If you believe your right to the protection of personal data has been violated, you may file a complaint with the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance), the authority responsible for the protection of personal data held by private parties in Mexico.
10. Changes to this notice
Any change to this notice will be published on this same page: https://mystery.solutions/en/privacy-policy/.
Last updated: October 15, 2026.
