Bluegreen

Help center

Answers to what we get asked most, and Bluegreen's legal documents.

Draft to be completed

This document has controller details still to be filled in (in square brackets) and is pending legal review. It is not the final version.

Contents 13
  1. 1. Introduction
  2. 2. Your rights
  3. 3. What data you can ask us to delete
  4. 4. What we cannot delete
  5. 5. How to request deletion
  6. 6. Identity verification
  7. 7. Timelines
  8. 8. What happens after deletion
  9. 9. Providers
  10. 10. Alternatives to full deletion
  11. 11. If you are not satisfied
  12. 12. Changes to this policy
  13. 13. Contact

Data Deletion Policy

Version 1.0 · In force from [EFFECTIVE DATE] · Draft pending legal review

This is a translation for convenience. The Spanish version, Política de Eliminación de Datos, is the governing version and prevails in case of any difference.

1. Introduction

At Bluegreen we respect your right to decide over your personal data. This policy explains how to ask us to delete your data, which data we can delete, which we must keep and why, and what alternatives you have.

It complements the privacy notice, which is the main document on how we process your data under the Federal Law on the Protection of Personal Data Held by Private Parties published in the Official Gazette on 20 March 2025.

The controller is [LEGAL NAME], which operates the Bluegreen brand, with its address at [FULL REGISTERED ADDRESS].

2. Your rights

You have the right to:

  • Cancellation: ask us to delete your personal data when it is no longer needed for the purposes of the privacy notice.
  • Objection: ask us to stop using your data for a specific purpose.
  • Revocation of consent: withdraw the consent you gave us, for example for identity verification or for receiving news.

You can also ask for access to your data or its rectification. All these rights are exercised as explained in §5.

3. What data you can ask us to delete

Type of dataExamples
Form requestsName, email, phone, company, materials, pickup address and your message
Portal accountName, email, phone, position, language and notice preferences, sessions
Identity verificationPhoto of your official ID, selfie and the result of the biometric comparison
Emails you sent usYour message and its attachments, unless they are part of a transaction file
Carrier and driver dataLicence, vehicle and plates, except what appears in documents of completed trips

4. What we cannot delete

Some laws require us to keep certain data even if you ask for its deletion. In those cases we keep it only as long as the obligation requires and only for that purpose:

  • Tax records: CFDI invoices, withholdings, Carta Porte and the information of each transaction, for the period required by tax and commercial laws.
  • Signed documents and chain of custody: handover records, contracts, letters of intent and their electronic signatures (with date, time, IP address and, if you granted it, location), kept under NOM-151-SCFI-2016. Deleting a signature would break the proof of the transaction for every party.
  • Fraud and material theft prevention: the minimum data needed to avoid dealing again with anyone who presented material of unlawful origin or false information.
  • Legal defence: data related to a pending dispute, audit or request from an authority, until it is resolved.
  • Impact certificates: a lot's certificate is kept so its public verification keeps working. That verification shows no personal data.

Anonymised data (which can no longer be linked to you) is not personal data and we may keep it.

5. How to request deletion

Today the portal does not have an option to delete your account yourself. Requests are made by email.

Write to [EMAIL FOR ARCO RIGHTS] with the subject "Data deletion request" and include:

  1. Your full name and the email you contacted us from or have an account with.
  2. A copy of your current official ID. If you act for someone else, the document proving your representation.
  3. Which data you want us to delete, or whether you want us to delete everything possible.
  4. If you know them, the company you belong to and the number of a lot, so we can find your data faster.

6. Identity verification

Before deleting any data we confirm that the request comes from you or from someone with authority to represent you. This prevents someone else from deleting your data or your access.

  • We check the ID you attach and that the email of the request matches the one we have on record.
  • If something does not match, we will ask for additional information before continuing.
  • We use your ID only to handle the request and do not keep it longer than needed to document that we handled it.

7. Timelines

  1. Acknowledgement: we confirm we received your request within [PERIOD].
  2. Answer: we tell you whether it applies, and which data we will delete and which we will keep for the reasons in §4, within [PERIOD], inside the periods set by law.
  3. Execution: if it applies, we delete the data from our active systems within [PERIOD].
  4. Backups: database backups are overwritten within [BACKUP PERIOD]. Until then they are not used for anything except an emergency restore, and if a restore happens we apply your deletion again.
  5. Confirmation: we let you know by email when we are done.

8. What happens after deletion

  • You lose access to the portal and the account cannot be recovered. If you later want to work with us again, we open a new account.
  • If you have lots in progress, pending payments or records awaiting signature, we close them first. Deletion does not extinguish those obligations.
  • Save beforehand, or ask us for, a copy of the documents you want to keep (CFDI invoices, records, certificates), because you will not be able to view them in the portal afterwards.
  • The documents we must keep (§4) remain stored with restricted access and are not used for other purposes.
  • Your company keeps its own information about the transactions, because it belongs to the company too.

9. Providers

When we delete your data, we also do so in the services that store it on our behalf (hosting, database and email) and, if you verified your identity, we ask [IDENTITY VERIFICATION PROVIDER] to delete your ID and your selfie. The list of providers is in the privacy notice.

10. Alternatives to full deletion

If you do not want to delete everything, you can:

  • Stop receiving news: use the link at the foot of each announcement or turn news off in the account section of the portal. Service notices about your lots and your account will still reach you.
  • Close your sessions: from your account in the portal you can close sessions open on other devices.
  • Remove a person from your company: if someone left your company, ask us to deactivate their user. They lose access without losing the history of the company's transactions.
  • Correct your data: if the problem is that some data is wrong, ask for rectification instead of deletion.
  • Withdraw a permission: remove the location permission in your browser or revoke your consent to identity verification.

11. If you are not satisfied

If you believe we did not handle your request properly, you can go to the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Government), the authority for personal data held by private parties.

12. Changes to this policy

If we change this policy, we will publish the new version on this page with its version number and date. If the portal ever lets you delete your account directly, we will explain it here.

13. Contact

  • Deletion requests and ARCO rights: [EMAIL FOR ARCO RIGHTS]
  • General email: bluegreen@pietrini.ai
  • Phone: [PHONE]
  • Address: [FULL REGISTERED ADDRESS]

Related documents: privacy notice, terms and conditions, cookie policy and help center.