Privacy notice

Updated: October 20, 2026

We use your information to respond to you and support your program journey. We collect what each stage calls for and explain when another provider is involved. You can browse without accepting analytics.

You choose how to get in touch

You can prepare and book your conversation in Libe, within this website. WhatsApp and email open when you choose those channels. Booking a call does not sign you up for marketing.

What we need depends on your stage

Answering an inquiry requires contact details. Moving forward with a program may require identity, eligibility and contract documents. Before requesting sensitive information or sharing identifiable data with a sponsor, we explain the purpose and applicable terms.

You stay in control of optional uses

You can reject analytics or change your choice in Privacy preferences. To access, correct or request deletion of your data, object to processing or withdraw consent, email team@arco.org.mx. Rejecting optional uses does not prevent you from receiving the main service.

The controller is Aldo Giovanni Alarcón Gómez, a Mexican individual operating under the trade name ARCO, with a privacy and claims address at Paseo de las Palmas 49, interior 5, Jardines de las Ánimas, Xalapa, Veracruz, C.P. 91196, México.

Email team@arco.org.mx or call +52 228 501 5006. This address receives correspondence, notices and claims. In-person service requires an appointment.

This Notice covers arco.org.mx and contact, scheduling, assessment, proposals, contracting, payments, preparation, program coordination, support and claims. Before collecting data at each stage, ARCO provides the corresponding privacy information and internally keeps the version provided and evidence that it was made available.

Information may come from you, a representative where appropriate, an authorized university or reference, or a sponsor, employer, insurer, authority, bank or provider connected with your case. ARCO does not buy personal-data lists for campaigns.

The website has its own form in Libe to prepare and book your conversation. When you confirm a booking, ARCO receives your name, email and the information you choose to share to arrange it. We use Cal.com to manage scheduling and Google Meet for the video call. The website has no active payment flow.

Browsing and security: IP address, date and time, requested page, basic browser and device information, and technical records needed to deliver and protect the website. Your privacy choice is also kept in your browser.

Contact and scheduling: name, email, phone or WhatsApp number, availability and inquiry. An assessment may include your university, English level, academic stage and what you choose to share about how you found ARCO. Libe may save your answers in this browser so you can continue where you left off. Optional fields are identified in each form. Avoid sensitive information in open-ended answers.

Assessment and program: age, city, university, degree, semester, date of birth, nationality, passport, identification, student status, academic and work history, résumé, references, English, availability and program requirements. Proof of funds is limited to cases where it is necessary.

Contracts, signatures and payments: contract documents, signers' identity and contact details, evidence of delivery, acceptance and electronic signature, dates and verification records for that process; payments, tax information, receipts, bank references, reconciliations, chargebacks and refunds. We do not retain complete card numbers or security codes.

Sensitive information: where lawful and necessary for a specific purpose, this may include health, allergies, accessibility, vaccinations, background or conduct checks, sensitive immigration information and emergency data. Before collection, we explain purpose, necessity, recipients, channel, retention and applicable express consent. Signing a contract or accepting cookies does not by itself authorize all of this processing.

Calls and meetings help us understand your case. Material agreements and decisions are confirmed in writing. This Notice is not by itself consent to record you or publish your image.

Necessary purposes depend on the stage: answering inquiries; scheduling and preparing sessions; assessing eligibility, English and fit; verifying identity and preventing fraud; preparing and retaining proposals and contracts; managing signatures, milestones, payments and refunds; identifying the sponsor and coordinating the file; preparing documents, insurance and administrative consular guidance; providing support, assessing urgent situations and involving the appropriate party; meeting obligations and handling rights requests, claims and disputes.

ARCO does not decide visas or admission on behalf of an authority. Material decisions about acceptance, guarantees, payments, suspension, refunds or sensitive transfers require review by an authorized person. Analysis tools, summaries or suggestions may support that review, but cannot make the decision alone. You may request an explanation and correct material information.

Optional purposes: promotions, newsletters, alumni and referral activities, testimonials, photographs, public content, personalized advertising, remarketing, nonessential analytics and non-anonymized internal research require a separate choice where applicable. Rejecting them does not prevent the main service. Booking or signing does not subscribe you to them. The website has no active Meta Pixel or remarketing.

  • Google Analytics 4: nonessential measurement, only after your consent.
  • Cal.com and Google Calendar: booking, scheduling preparation and availability when you choose to book.
  • Google Meet: the video call for your booked session.
  • WhatsApp: communication when you choose that channel.
  • Zoho Mail: institutional email.
  • Zoho Sign: delivery and electronic signature of contract documents and retention of the corresponding signing evidence.

Providers may process information outside Mexico depending on their infrastructure and applicable agreements. Their involvement is limited to the relevant purpose. Choosing analytics does not open scheduling, WhatsApp or email. The actual signing information and verification methods are explained in the process used; not every verification offered by a provider is assumed to apply to every person.

During the program, information may also need to be shared with the Designated Sponsor, host employer or worksite, insurer, competent authorities, authorized bank or processor, and advisers bound by confidentiality. Only necessary information is shared, distinguishing service processing from transfers that require additional conditions.

Before H2 and before identifiable information is transferred to a sponsor, ARCO provides its identity, country, purpose, necessary data categories and secure channel. A sponsor change requires a new notice. Sensitive information retains its specific consent requirements where applicable and is not sent to a provider without checking the necessary conditions.

An adult participant's family does not automatically receive their information, even if the family pays. Participant authorization or an applicable legal basis is required.

Contract payments are handled separately through an identified payment instruction. When a hosted payment processor is used, card details are entered in that provider's own flow. ARCO may retain amount, milestone, currency, date, reference, status, receipt and refund evidence, and a limited identifier where necessary.

ARCO does not request card details by WhatsApp, email or telephone, retain complete card numbers or security codes, or make automatic charges. This website has no active payment flow. Information about the contractual payment channel is provided before its use.

Essential functions deliver the site and remember your choice. Analytics is optional: you can accept, reject or configure it, and change your choice later in Privacy preferences.

Google Analytics 4 loads only after a valid choice. ARCO's measurement uses pages and interaction categories, not names, emails, phone numbers, form answers, messages or free text. The website does not send a personal user identifier, disables advertising-personalization signals and does not use Google Signals.

The local choice expires within 180 days; the local first-contact reference, within 30 days. If your browser communicates Global Privacy Control, analytics remains rejected and its local state is cleared.

When consent is rejected, expires or is withdrawn, the site stops sending events and requests deletion of known measurement cookies on ARCO's domain. This does not retroactively erase information a provider already received; you can exercise your rights through the relevant channels.

  • Local first-contact reference: no more than 30 days.
  • Local privacy choice: no more than 180 days. This browser record does not replace the contracting file.
  • Hosting records and consented analytics: according to configuration, necessary purpose and applicable agreements.
  • Scheduling, email and conversations: as long as needed to handle the request and applicable obligations.
  • Prospects who do not contract: up to 12 months after the last meaningful interaction, subject to valid requests or retention duties.
  • Contracts, signature evidence, payments, receipts, refunds and legal defense: for applicable legal periods. The 2027 documents provide at least 10 years for records covered by article 49 of Mexico's Commercial Code.
  • Operational sponsor and visa file: operational closure plus 12 months, subject to obligations or claims.
  • Passports, health, background and sensitive documents: 90 days after sponsor or program closure, subject to a specific necessary retention obligation.
  • Backups: deletion within 90 days after the applicable deletion, respecting retention duties.

A claim or specific obligation preserves only related information, with review of the need. It does not justify indefinite retention of everything. After applicable periods, information is deleted or anonymized.

You may request access, correction, deletion or objection, withdraw consent, or limit use and disclosure by emailing team@arco.org.mx, with the subject ARCO rights / Privacy.

Provide your name, reply channel, the right or consent concerned, and enough detail to identify the request. Only documents necessary for proportional identity or representation checks are requested. ARCO responds within applicable legal periods. You may also contact the competent Mexican federal authority for personal data held by private parties.

Where specific consent is needed, the data, purpose, required or optional nature, recipient and country, consequences of not providing it, retention and applicable withdrawal channel are identified. Rejecting optional uses does not limit the main service.

In scheduling, acknowledgment of the Notice concerns session data, not marketing. The relevant information must accompany collection, along with access to this integral Notice. Completing a booking does not imply consent for other purposes.

ARCO applies access controls, additional verification where available, encryption in transit, activity records, separation of environments and deletion or anonymization measures. Secrets and sensitive data are not placed in web addresses. A significant breach is investigated and communicated according to risk and applicable law. Absolute security is not promised.

Summer Work Travel is for adults. A minor's inquiry is limited to general guidance until capacity, representation, necessity and applicable consent are reviewed. Additional information is not deliberately collected without that review.

Updates are identified by date and apply prospectively. Material changes in purpose, recipient, sensitive data or technology are communicated and require a new choice where appropriate. Continued use of the website does not by itself authorize a new optional purpose.

For questions, email team@arco.org.mx.