Black Box Engineering

    Privacy Policy

    Last updated: 25 August 2026

    1. Who we are

    This website, blackboxeng.com, is operated by Black Box Ingeniería, S.A. de C.V. ("Black Box," "we," "us"), a Mexican corporation with its registered address at Gral. Benjamín Hill No. 97, Int. 2, Col. Hipódromo Condesa, Alcaldía Cuauhtémoc, Ciudad de México, C.P. 06170, Mexico.

    Black Box Ingeniería, S.A. de C.V. is the party responsible (responsable) for the personal data collected through this site, as that term is used in Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

    We work alongside our affiliate Black Box Controls LLC, a Delaware limited liability company, which contracts for work performed in the United States. Where a business inquiry relates to work in the United States, your information may be shared with Black Box Controls LLC as described in Section 6.

    2. What this notice covers

    This notice describes how we handle personal data collected through this website. It does not cover data we hold about you under a signed services agreement, employment relationship, or supplier contract — those relationships are governed by their own terms.

    3. What we collect

    Information you give us directly

    • Contact form and email. Your full name, email address, company name, the subject of your inquiry, and the contents of your message.
    • Job applications. If you apply for a role, we collect the information you submit — typically your name, contact details, curriculum vitae or résumé, work history, education, and any other information you choose to include. Applications reach our recruitment mailbox and are recorded in our applicant tracking system.

    Information collected automatically

    • IP address, browser type and version, device and operating system, referring page, pages viewed, and time spent on the site.
    • Cookies and similar technologies, as described in Section 8.

    What we ask you not to send. Please do not submit drawings, specifications, pricing, safety information, or other confidential or proprietary material through the contact form or by unsolicited email. We cannot treat unsolicited submissions as confidential — see our Terms of Use. If you need to share technical material, tell us and we will put a confidentiality agreement in place first.

    Sensitive personal data. We do not seek and ask you not to provide sensitive personal data — including data revealing racial or ethnic origin, health, religious or philosophical belief, union membership, sexual orientation, or political opinion. If you include such data in an application or message, you consent to our processing it for the purpose for which you provided it.

    4. Why we process it — primary purposes

    We process personal data to:

    • respond to your inquiry and provide the information or proposal you requested;
    • evaluate a potential engagement and prepare a scope, quotation, or agreement;
    • assess your candidacy for a role, communicate with you about it, and administer our hiring process;
    • operate, secure, and maintain the website;
    • comply with legal, tax, and regulatory obligations in Mexico and the United States.

    These are our primary purposes. They are necessary to the relationship you are initiating with us.

    5. Secondary purposes — and how to decline them

    With your consent, we also process contact data to send you occasional updates about our services, capabilities, or published technical material.

    This is a secondary purpose and is not necessary to the relationship. You may decline it at any time, with no effect on the primary purposes, by writing to privacy@blackboxeng.com with the subject line "Limit use of my data," or by using the unsubscribe link in any message we send. We will confirm within five business days.

    6. Who we share it with

    We do not sell personal data, and we do not trade it.

    We share personal data with:

    • Our affiliate, Black Box Controls LLC (United States), where your inquiry concerns work contracted or performed in the United States, for the purposes in Section 4. This transfer is necessary to the relationship you are initiating and, under Article 37 of the LFPDPPP, does not require separate consent.
    • Service providers who process data on our behalf, under contract and only on our instructions. These currently include our website host, our email and productivity provider, our transactional email provider, our applicant tracking system, and our web analytics provider. These providers are engaged as processors (encargados) and are not permitted to use your data for their own purposes.
    • Professional advisors, auditors, and authorities, where we are legally required to disclose or where necessary to establish or defend a legal claim.

    7. International transfers

    We are based in Mexico. Several of our service providers, and our affiliate Black Box Controls LLC, are located in the United States, and the website itself is hosted in the United States. Your personal data will therefore be transferred to and stored in the United States.

    Where we transfer data to a processor, we do so under contractual terms requiring the recipient to maintain protections consistent with this notice and with Mexican law. By submitting information through this site, you acknowledge this transfer.

    8. Cookies and analytics

    This site uses only cookies that are strictly necessary for it to function. We do not use advertising cookies, we do not build advertising profiles, and we do not track you across other websites.

    We measure aggregate traffic — which pages are read, which sites refer visitors, which countries they come from — using a privacy-first analytics service that sets no cookies, stores nothing on your device, and does not identify individual visitors. Because nothing is stored on your device, there is no cookie consent for you to give or withhold here.

    You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the site from working.

    9. How long we keep it

    • Business inquiries that do not lead to an engagement: 24 months from last contact, then deleted.
    • Inquiries that lead to an engagement: for the life of the relationship and for the period required by Mexican and US commercial and tax law thereafter.
    • Job applications where we do not proceed: 12 months, so we can consider you for future openings. Tell us at any time if you would prefer we delete them sooner.
    • Analytics data: we keep no copy of our own. Our analytics provider makes aggregated measurements available to us for approximately the previous six months, and holds more detailed measurements only briefly before aggregating them.

    10. How we protect it

    We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the data — including access controls limiting internal access to those who need it, encryption in transit, and confidentiality obligations that bind our personnel and continue after their engagement ends.

    No system is perfectly secure. If a breach materially affects your rights, we will notify you and the competent authority as required by law.

    11. Your ARCO rights

    Under Mexican law you have the right to access your personal data, to rectify it where it is inaccurate or incomplete, to cancel it where you believe it is not being handled lawfully, and to object to its processing for a specific purpose. You may also revoke consent you have given, and limit the use or disclosure of your data.

    To exercise any of these rights, write to privacy@blackboxeng.com with:

    1. your name and an email address at which we can reply;
    2. a document proving your identity, or the authority of anyone acting for you;
    3. a clear description of the data concerned and the right you are exercising;
    4. for rectification requests, the correction sought and any supporting document.

    We will respond within 20 business days of receiving a complete request, and give effect to it within 15 business days of that response, in line with the LFPDPPP. There is no charge, except reproduction or delivery costs where those apply.

    If you are not satisfied with our response, you may bring the matter to Mexico's competent data protection authority — the functions formerly held by INAI now sit with the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).

    12. If you are in the United States or elsewhere

    We extend the rights in Section 11 — access, correction, deletion, and objection — to anyone who contacts us, regardless of where they live. Use the same address and process.

    We do not sell or share personal information as those terms are defined under California law, and we have not done so in the preceding twelve months. We do not use personal data for cross-context behavioral advertising. We will not discriminate against you for exercising any privacy right.

    13. Children

    This site is directed to businesses and to professionals seeking employment. It is not directed to children, and we do not knowingly collect data from anyone under 18. If you believe a child has provided us data, write to us and we will delete it.

    14. Changes to this notice

    We may update this notice as our practices or the law change. The current version is always posted at blackboxeng.com/privacy-policy with the date it took effect. Where a change materially affects how we use data you have already given us, we will tell you by email before it takes effect.

    15. Contact

    Black Box Ingeniería, S.A. de C.V. Gral. Benjamín Hill No. 97, Int. 2 Col. Hipódromo Condesa, Alcaldía Cuauhtémoc Ciudad de México, C.P. 06170, Mexico

    Privacy matters: privacy@blackboxeng.com General inquiries: contacto@blackboxeng.com