Privacy Policy

Last updated: April 16, 2026

1. Identity and Contact Details of the Data Controller

This Privacy Policy governs the processing of personal data by:

Finanzas Embebidas Ximple, SOFOM E.N.R. ("Ximple," "we," "us," or "our")
Av. Insurgentes Sur 1602, Col. Credito Constructor, CDMX 03940, Mexico
Email: hola@ximple-mx.com
Website: ximple-mx.com

Ximple is a Sociedad Financiera de Objeto Multiple, Entidad No Regulada (SOFOM E.N.R.), supervised by the Comision Nacional Bancaria y de Valores (CNBV) pursuant to Article 56 of the Ley General de Organizaciones y Actividades Auxiliares del Credito (LGOAAC).

2. Legal Basis

This Privacy Policy is issued in compliance with the Ley Federal de Proteccion de Datos Personales en Posesion de los Particulares (LFPDPPP), its Regulations, and the Guidelines issued by the Instituto Nacional de Transparencia, Acceso a la Informacion y Proteccion de Datos Personales (INAI).

3. Personal Data We Collect

Depending on the services you use or apply for, Ximple may collect the following categories of personal data:

• Identification data: Full name, date of birth, CURP, RFC, official government-issued ID number, nationality
• Contact data: Home and business address, email address, telephone and mobile number
• Financial and credit data: Bank account information, income level, existing credit obligations, transaction history, credit bureau information (with your express consent)
• Business data: Business name, business address, RFC, industry sector, annual revenue, number of employees, supplier relationships
• Technical and usage data: IP address, browser type, pages visited on our website, cookies and session identifiers, device identifiers
• Sensitive personal data: We do not collect biometric or health data except where strictly required for identity verification and with your explicit consent.

4. Purposes of Processing

We process your personal data for the following primary purposes (required for the provision of our services):

• Evaluating and processing credit applications
• Establishing and administering credit facilities, including the Ximple Card and Ximple Instant Loan
• Conducting identity verification and anti-money laundering (AML) checks as required by Mexican law
• Managing repayment schedules and collections
• Complying with legal and regulatory obligations, including reporting to the CNBV, CONDUSEF, SAT, and credit bureaus
• Providing customer service and resolving disputes

We may also process your data for the following secondary purposes, for which you may object at any time:

• Sending marketing communications about Ximple products and services
• Conducting market research and product development surveys
• Analyzing usage patterns to improve our credit models and website

If you do not wish your data to be used for secondary purposes, please contact us at hola@ximple-mx.com.

5. Transfers of Personal Data

Your personal data may be transferred to the following categories of third parties:

• Credit bureaus: Buro de Credito and Circulo de Credito, for credit reporting as required by law
• Banking and payment partners: Financial institutions that process your loan disbursements and repayments
• Regulatory authorities: CNBV, SAT, CONDUSEF, FIU, and other government authorities as required by applicable law
• Technology service providers: Cloud hosting, analytics, and security vendors acting as data processors under contractual data protection obligations
• Collection agencies: In the event of default, and only to the extent permitted under your credit agreement

We do not sell your personal data to third parties for their own marketing purposes.

6. Your ARCO Rights

Under the LFPDPPP, you have the following rights regarding your personal data (known as "ARCO rights"):

• Access: Request confirmation of whether we hold your personal data and obtain a copy
• Rectification: Request correction of inaccurate or incomplete personal data
• Cancellation: Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations
• Opposition: Object to the processing of your personal data for secondary purposes

To exercise your ARCO rights, please send a written request to hola@ximple-mx.com including: your full name, a copy of your official ID, a description of the data you wish to access/correct/cancel/oppose, and your contact details. We will respond within 20 business days.

7. Data Retention

We retain your personal data for as long as our credit relationship is active and for the periods required by applicable law after its termination. Credit and financial records are retained for a minimum of 10 years in accordance with Mexican financial regulations. After the applicable retention period, data is securely deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and employee training on data protection obligations.

In the event of a personal data security breach that could significantly affect your rights, we will notify you and the INAI within the timeframes required by law.

9. Cookies

Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookie Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date. Continued use of our services after a policy update constitutes acceptance of the revised policy.

11. Contact

For questions or concerns about this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer at:

Finanzas Embebidas Ximple, SOFOM E.N.R.
Attn: Data Protection
Av. Insurgentes Sur 1602, Col. Credito Constructor, CDMX 03940, Mexico
Email: hola@ximple-mx.com

You also have the right to lodge a complaint with the INAI (inai.org.mx) if you believe your data protection rights have been violated.

← Back to Home    Terms of Service →