Privacy Policy

Last updated on October 5, 2025.

Welcome to ARCO ("we," "us," or "our"). This Privacy Policy is designed to help you understand how we collect, use, disclose, and safeguard your personal information when you use our website and related services, in compliance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).


1. RESPONSIBLE PARTY / IDENTITY OF THE DATA CONTROLLER

Legal Name: Aldo Giovanni Alarcón Gómez
Commercial Name: ARCO S.A.S
Email: team@arco.org.mx
Phone: +1 (407) 630-9725

The responsible party for the collection, use, and protection of your personal data is Aldo Giovanni Alarcón Gómez, operating under the commercial name ARCO SAS.

2. PERSONAL INFORMATION WE COLLECT

We may collect the following categories of personal information:

2.1 Identification Data:

  • Full name

  • Email address

  • WhatsApp number and phone number

  • Date of birth

  • Nationality

  • Copy of official identification (passport, INE/IFE)

2.2 Contact and Location Data:

  • City and country of residence

  • Mailing address (if applicable)

2.3 Academic and Professional Data:

  • Academic background and educational level

  • English language proficiency level

  • Work experience

2.4 Travel and Program-Related Data:

  • Travel history

  • Immigration status

  • Visa application information

2.5 Financial Data (if applicable):

  • Payment information for program fees

2.6 Sensitive Personal Data:
We do not intentionally collect sensitive personal data such as health information, religious beliefs, or racial/ethnic origin. If such data is provided voluntarily, it will be handled with heightened security measures and will require your express consent.

3. PURPOSE OF DATA PROCESSING

We use your personal information for the following primary purposes (necessary for the service):

  • Evaluate your eligibility and candidacy for Work & Travel programs

  • Process your application for cultural exchange programs (J-1 visa and similar)

  • Coordinate with authorized sponsors, employers, and U.S. government authorities

  • Provide personalized guidance, support, and consultation services

  • Manage pre-departure and in-program assistance

  • Comply with legal and regulatory obligations in Mexico and the United States

Secondary purposes (requiring your consent):

  • Send you program updates, news, promotional materials, and opportunities related to cultural exchange

  • Improve our website user experience and services

  • Conduct internal statistical analysis and market research

If you do not wish for your data to be used for secondary purposes, you may send an email to team@arco.org.mx indicating "I do not consent to secondary data processing."

We never sell or commercially exploit your personal data.

4. DATA SHARING AND TRANSFERS

Your personal information may be shared with:

Domestic transfers (within Mexico):

  • Legal, accounting, and IT service providers who assist us in operating our business

International transfers:

  • U.S. Department of State-designated sponsors for J-1 visa programs

  • Employers and host organizations in the United States

  • U.S. government authorities (Department of State, Department of Homeland Security) as required by law

All third parties are contractually obligated to maintain the confidentiality and security of your personal data. International data transfers comply with LFPDPPP requirements, as they are necessary for the fulfillment of the service you requested.

5. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and analytics tools to improve user experience and understand visitor behavior:

  • Google Analytics: Collects anonymized usage statistics

  • Meta Pixel (Facebook): Tracks website interactions for marketing purposes

  • WhatsApp Widget: Facilitates direct communication with our team

You may disable cookies through your browser settings, though this may affect website functionality. For more information, consult your browser's help documentation.

6. DATA SECURITY

We implement administrative, technical, and physical security measures to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Encryption of data in transit and at rest

  • Access controls and authentication protocols

  • Regular security audits and updates

  • Staff training on data protection practices

Despite our efforts, no security system is impenetrable. We cannot guarantee absolute security but commit to notifying you promptly in case of any data breach.

7. YOUR RIGHTS (ARCO RIGHTS)

In compliance with the LFPDPPP, you have the right to:

  • Access: Request confirmation of what personal data we hold about you

  • Rectification: Correct inaccurate or incomplete data

  • Cancellation: Request deletion of your data when no longer necessary

  • Opposition: Object to specific data processing activities

How to Exercise Your Rights:

To exercise any of these rights (ARCO Rights), please submit a written request to:

Email: team@arco.org.mx
Subject line: "ARCO Rights Request"
Your request must include:

  1. Full name and email address

  2. Copy of official identification (INE/IFE or passport)

  3. Clear description of the right you wish to exercise

  4. Any documents supporting your request

  5. Preferred method to receive our response (email or physical mail)

Response timeframe: We will respond to your request within 20 business days from receipt. If your request is approved, changes will take effect within 15 business days following our response.

Right to Revoke Consent:

You may revoke your consent for data processing at any time by sending an email to team@arco.org.mx with the subject line "Revocation of Consent." Please note that revoking consent may prevent us from continuing to provide services to you.

8. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Specifically:

  • Active program participants: Duration of the program plus 5 years for legal and administrative purposes

  • Prospective applicants who do not complete the program: 2 years from last contact

  • Marketing communications: Until you unsubscribe or request deletion

9. CHILDREN'S PRIVACY

We do not knowingly collect personal information from anyone under 18 years of age without parental or legal guardian consent. Work & Travel programs are intended for individuals 18 years or older. If you believe a minor has provided personal data to us without proper consent, please contact us immediately at team@arco.org.mx, and we will promptly delete such information.

10. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or legal requirements. Material changes will be communicated through:

  • A notice on our website homepage

  • Email notification to registered users (if applicable)

The "Last Updated" date at the top of this document indicates when changes were last made. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

11. CONTACT US

If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact us at:

Email: team@arco.org.mx
You may also file a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) at www.inai.org.mx if you believe your privacy rights have been violated.

Thank you

Your trust and privacy matter to ARCO.
Thank you for trusting us with an experience that goes beyond travel.


Written and last revised by Aldo Giovanni A. Gomez on October 5, 2025.