DNExpress Data Processing Agreement

Why Does DNExpress Collect My Personal Information?

When you hire DNExpress (Doble Nacionalidad Express LLC), we require certain personal information and documents to provide immigration and legal services in Mexico and the United States. All this information is necessary for the sole purpose of conducting the aforementioned services. The required personal information and documents may include, but are not limited to:

• Your legal name, address, phone number, and email address
• Birth certificate(s). (yours, your children’s, or your parents’)
• Marriage certificate(s).
• Government-issued identifications or passports (yours and/or your parents/spouse/children)

The documents requested will only be the strictly necessary ones for us to be able to provide you with the legal services previously mentioned.DNExpress will never ask for information unrelated to the services you have hired us to perform.

How Does DNExpress Use My Personal Information?

We use your personal information only to complete the services you hired us for. This includes:

1. Case Review – Reviewing your documents to confirm eligibility before beginning services.
2. Government Submissions – Sharing information with federal, state, or local authorities, primarily in Mexico, the U.S., and Canada, only as required by your case.
3. Official Requests – Purchasing certified copies of various documents, apostilles, translations, permits, or authorizations.
4. Document Renewal – Using prior documents (e.g., an old birth certificate) to obtain updated or corrected versions of it.
5. Compliance – Taking any step required by law to achieve the immigration or legal outcome you hired us for.
6. Other Necessary Actions – Any other activity reasonably related to fulfilling your request.

How Long Does DNExpress Keep My Information?

DNExpress retains client files for an 12 (twelve) months after the conclusion of rendered services. For example: Many clients return to us years later to process documents for their children, spouses, or parents, or to recover lost documents. Retaining records allows us to serve you more efficiently in the future.

How Does DNExpress Protect My Information?

We take your privacy and security seriously. Our strictly-enforced measures include:

• Use of Norton Antivirus on company computers
• Secure storage of files on Microsoft OneDrive business accounts
• Personalized business domains for all communications
• Restricted staff access to sensitive client files meaning that no employee has access to any documents outside of our company computers.
• Shredding of unnecessary hard-copy documents

Your Rights Under Mexican and U.S. Law

In Mexico: You are protected by the ARCO rights (Access, Rectification, Cancellation, Opposition) under the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

In the United States (California): You are protected by the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Together, these give you the right to:

• Right to Know: Request what information DNExpress has about you, its sources, its purposes, and with whom it has been shared.
• Right to Delete: Ask DNExpress to delete your personal information (with legal exceptions).
• Right to Opt-Out of Sale/Sharing: Instruct DNExpress not to sell or share your data for marketing purposes.
• Right to Correct: Request correction of inaccurate personal data.
• Right to Limit Sensitive Use: Restrict the use of sensitive data (e.g., SSN, passport, financial, genetic, or geolocation data) to only what is necessary to provide services.
• Right to Notification: Be informed at or before the point of collecting about what data is gathered and why.

Does DNExpress Sell or Share My Data?

• No, DNExpress will never sell your personal data.
• No, DNExpress does not transfer your data to third parties without your consent.

From time to time, DNExpress may collaborate with third-party companies for commercial purposes. For example:

• A Mexican real estate company may request us to introduce their services to our clients. In such cases, DNExpress may send you an email invitation to consider their services. Your participation is always optional.

Can I Request the Deletion of My Data?

Yes. You may request DNExpress to delete your information at any time.

• A “Delete My Information” request form will be available on our website.
• https://doblenacionalidadexpress.com/request-to-erase-personal-data/
• DNExpress will have 10 business days to confirm completion.
• We will erase:

• • Emails, WhatsApp messages, and digital files from our systems and OneDrive

• • Physical documents (shredded securely)

⚠️ Important: Because many clients use multiple emails, phone numbers, and social accounts, you are responsible for providing all contact information associated with your case. If you omit details, DNExpress may not be able to fully erase every record.

Disclaimer

This policy is provided for informational purposes and does not create a contract of employment or alter the legal nature of DNExpress services. DNExpress complies with applicable data protection laws in both Mexico and the United States.