Comprehensive Privacy Notice — Leaderlix

Last updated: November 4, 2026

1. Identity and address of the data controller

Digital Business, Coaching and Marketing Services LLC (hereinafter “Leaderlix,” “we,” or “the Controller”), a company incorporated in the United States of America, commercially operating under the Leaderlix brand, is the data controller responsible for the processing of your personal data in accordance with the General Data Protection Regulation of the European Union (GDPR, Regulation EU 2016/679) where applicable.

Becas y Conferencias LTFL S.C., domiciled in Mexico City, Mexico, acts as joint controller and is the obligated entity under Mexico's Federal Law for the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

Leaderlix operates three business units:

• Leaderlix Health — Medical communication and key opinion leader development for the pharmaceutical industry.
• Leaderlix Teams — Corporate training, leadership, and executive communication.
• Leaderlix Profit — Strategic consulting focused on business results.

Privacy contact:

• Email: contact@leaderlix.com
• Website: https://leaderlix.com/en/legal/privacidad

2. Personal data we collect

We do not collect sensitive personal data as defined in Article 3, Section VI of the LFPDPPP, nor special categories of data under Article 9 of the GDPR.

3. Purposes of processing

3.1 Primary purposes

1. Management of the B2B business relationship, including registration and administration of corporate contacts.
2. Organization, coordination, and follow-up of in-person and virtual events.
3. Provision of contracted corporate training, consulting, and medical communication services.
4. Administration of access to our LMS and CRM platform (FOCUS1).
5. Issuance of invoices, quotations, and commercial documentation.
6. Operational communication related to contracted services or confirmed events.
7. Sending what a physician requests in our forms: the confirmation of their registration, the speaker's guide and an email alert for each new congress in their specialty. Every congress alert includes a one-click unsubscribe link.
8. Compliance with applicable legal, tax, and regulatory obligations.

3.2 Secondary purposes

1. Sending commercial communications, newsletters, and promotional materials.
2. Invitations to events, seminars, and activities organized by Leaderlix.
3. Preparation of studies, statistical analyses, and market segmentation for internal purposes.
4. Service quality evaluation through satisfaction surveys.

To opt out of secondary purposes, contact contact@leaderlix.com.

4. Legal basis for processing

4.1 Under the LFPDPPP (Mexico)

• Implied consent: By providing your personal data and not expressing objection (Article 8, LFPDPPP).
• Legal relationship: Processing necessary for fulfillment of contractual obligations (Article 10, Section IV, LFPDPPP).

4.2 Under the GDPR (European Union)

• Legitimate interest (Article 6.1.f GDPR): For processing professional contact data in B2B business relationships.
• Performance of a contract (Article 6.1.b GDPR).
• Consent (Article 6.1.a GDPR): For commercial electronic communications. Withdrawable at any time.
• Legal obligation (Article 6.1.c GDPR): For tax and regulatory compliance.

5. Source of personal data

1. Directly from the data subject: Registration forms, event sign-ups, quotation requests, business card exchange.
2. Platform migration: Data previously stored in HubSpot CRM, migrated to FOCUS1.
3. Professional networks: Publicly available LinkedIn profile information.
4. Imports from corporate clients: Participant lists for events or training programs.

6. Data transfers

6.1 Domestic transfers

• Tax and regulatory authorities, where legally required.
• Accounting and legal service providers, under confidentiality agreements.

6.2 International transfers

Your personal data is stored and processed on servers in the United States of America, operated by Railway.

Leaderlix does not sell, rent, or trade personal data to third parties.

7. Data subject rights

7.1 ARCO Rights (LFPDPPP)

• Access: Know what personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Cancellation: Request deletion of your data.
• Opposition: Object to processing for specific purposes.

7.2 GDPR Rights

• Data portability (Art. 20 GDPR): Receive your data in structured format (CSV or JSON).
• Restriction of processing (Art. 18 GDPR).
• Object to legitimate interest processing (Art. 21 GDPR).
• Not be subject to automated decisions (Art. 22 GDPR).
• Withdraw consent at any time.
• Lodge a complaint with an EU supervisory authority.

7.3 How to exercise rights

Send a request to: contact@leaderlix.com

Include: full name, associated email, description of the right, and supporting documentation.

Response times: LFPDPPP: 20 business days. GDPR: 1 calendar month.

In Mexico, complaints may be filed with INAI: www.inai.org.mx.

8. Cookies and tracking technologies

Google Analytics is configured with IP anonymization enabled.

First-party measurement cookies. Leaderlix uses its own cookies, with no third parties, to know which page or campaign (utm parameters, ad or referring site) brought a person who fills out one of our forms: that origin only leaves your browser together with the form you submit. If you arrived through a personal link we sent you or have already filled out a form, and you accepted analytics cookies, we also record which pages of the site you visit; without that consent no visit is recorded. They last at most 13 months (the latest-origin cookie, 30 days) and you can delete them from your browser at any time.

8.1 Advertising (Google AdSense)

Blog pages and medical congress guides show ads from Google AdSense, a Google LLC service. No other part of the site (services, case library, forms or presentations) carries ads. Google and its partners may use third-party cookies and similar technologies to serve ads, cap how often you see the same one, measure them and prevent fraud.

• Without your consent to personalized advertising (the checkbox in the cookie notice), ads are not personalized: they depend on the page content, not on your interests, and no cookies are used to personalize them.
• With your consent, Google may show ads based on your visits to this and other sites.
• You can change or withdraw your choice at any time with the button below, turn off Google ad personalization in Google My Ad Center or other providers’ in www.aboutads.info.

How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites. Google Privacy Policy: policies.google.com/privacy. Leaderlix does not receive or sell personal data through these ads.

Cookie preferences

9. Data retention period

10. Security measures

Technical: Encryption at rest (PostgreSQL), TLS/HTTPS, RBAC, secure token authentication, encrypted backups.

Administrative: Internal data processing policies, confidentiality agreements, staff training, incident response procedures.

Physical: Railway data centers with SOC 2 certification.

11. Data Protection Officer

Email: contact@leaderlix.com

Controller: Digital Business, Coaching and Marketing Services LLC, USA.

Joint Controller (LFPDPPP): Becas y Conferencias LTFL S.C., Mexico City, Mexico.

12. Changes to this privacy notice

Leaderlix reserves the right to modify this privacy notice. Changes will be published on this page and, for material changes, data subjects will be notified at least 30 days in advance.

13. Applicable law and jurisdiction

• Mexico: LFPDPPP, its Regulations, and Privacy Notice Guidelines. Competent courts: Mexico City.
• European Union: GDPR and applicable member state legislation.