COMPREHENSIVE PRIVACY NOTICE
Just Management IT S de R.L. de C.V.
Commercial name: EB2B (eb2b.io)
Last updated: May 12, 2026
Document prepared in accordance with the Federal Data Protection Act
Personal Documents Held by Individuals (Official Gazette of the Federation, March 20, 2025)
1. Identity and address of the Data Controller
In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter, “LFPDPPP”), published in the Official Gazette of the Federation on March 20, 2025, and effective as of March 21, 2025, as well as its Regulations and other applicable provisions, Just Management IT S de R.L. de C.V. (hereinafter “EB2B,” “we,” or “the Data Controller”), operating under the trade name EB2B and with the website eb2b.io, hereby informs you of the following:
Company Name: Just Management IT S de R.L. de C.V.
Trade name: EB2B
Address: Tajin 204, Narvarte Ote, Benito Juárez, Mexico City, Mexico, ZIP Code 03023
Email address for privacy:
Sitio web: https://eb2b.io
Data Protection Department: EB2B Privacy Department, contact via contacto@eb2b.io
EB2B is an intelligence and benchmarking platform specializing in B2B (business-to-business) e-commerce in Mexico and Latin America. The Data Controller collects and processes personal data in connection with the provision of its membership services, data analysis, industry reports, editorial content, and professional community.
2. Personal information we collect
For the purposes described in this Privacy Notice, EB2B may collect and process the following categories of personal data:
2.1. Identification and contact information
Full name, work email address, phone number (including WhatsApp), job title or position within the company, name of the company or organization, country, and city of residence.
2.2. Professional and employment information
Industry or business sector, role in e-commerce decision-making, e-commerce platform used (e.g., Magento, VTEX, BigCommerce, Shopware, Shopify Plus), the company’s level of digital maturity, and professional experience relevant to B2B e-commerce.
2.3. Business and benchmarking data
Estimated sales volume (annual GMV), e-commerce performance metrics (conversion rates, average order value, sales channels), product categories sold, and other operational indicators voluntarily provided through surveys, forms, or interviews.
Note: Business and benchmarking data are collected at the company level. When this data is associated with an identifiable individual (for example, through their corporate email address), it is considered personal data subject to this Notice.
2.4. Browsing and Platform Usage Data
IP address, browser type and operating system, pages visited within eb2b.io, visit duration, cookies, and tracking identifiers (see our Cookie Policy for more details), interactions with emails (opens, clicks), and data generated by web analytics tools.
2.5. Financial Data
Billing information (company name, RFC, tax address, tax status, use of CFDI) and transaction data related to membership payments. EB2B does not directly store credit or debit card numbers; payments are processed by certified payment service providers or payment gateways.
2.6. Sensitive data
EB2B does not intentionally collect sensitive personal data. Sensitive data is defined as data relating to racial or ethnic origin, health status, religious, philosophical, or moral beliefs, union membership, political opinions, sexual orientation, or other similar categories. In the exceptional event that any sensitive data is collected, your express written consent will be obtained in accordance with Article 8 of the LFPDPPP.
3. Purposes of the processing
EB2B processes your personal data for the following purposes, distinguishing between those that are necessary for the legal relationship (mandatory) and those that are voluntary:
3.1. Necessary purposes (do not require additional consent)
- a) Create and manage your user account on the eb2b.io platform and manage your membership (Essential, Professional, or Enterprise).
- b) Process payments, issue invoices (CFDI), and maintain the corresponding accounting records.
- c) Provide the contracted services: generating benchmarking reports, industry analyses, dashboards, and exclusive content for members.
- d) Manage your participation in the EB2B WhatsApp group and other associated professional communities.
- e) Respond to your requests, inquiries, complaints, or claims.
- f) Comply with applicable legal, tax, accounting, and regulatory obligations.
- g) Exercise or defend EB2B’s rights in legal or administrative proceedings.
3.2. Optional purposes (require your consent)
- h) Send marketing communications, newsletters, invitations to events, webinars, and promotional content related to the B2B eCommerce ecosystem.
- i) Perform profiling and segmentation for the purposes of personalizing content, providing report recommendations, and improving the user experience.
- j) Prepare market studies, statistical analyses, and aggregated industry reports that do not identify individual account holders.
- k) Share your data with business partners (associations, chambers of commerce, technology providers) for networking or joint promotional purposes.
If you do not wish for your personal data to be processed for the optional purposes listed in subsections h), i), j), and k), you may indicate this by sending an email to contacto@eb2b.io with the subject line “Objection to Secondary Purposes.” Your refusal will not be grounds for denying you the services you have contracted.
4. Mechanisms to Limit the Use or Disclosure of Your Data
You can restrict the use or disclosure of your personal data through any of the following methods:
- a) Send an email to contacto@eb2b.io requesting to be added to our opt-out list to stop receiving marketing communications.
- b) Use the “Unsubscribe” link included in every marketing email we send you.
- c) Set your cookie preferences in our cookie management banner on eb2b.io
- d) Request the deletion of your account and associated data through the user dashboard or by email to contacto@eb2b.io
EB2B will maintain an internal list of subscribers who have requested that the processing of their data be restricted, which will be consulted prior to any communication campaign.
5. Transfers of Personal Data
EB2B may transfer your personal data to the following domestic and international third parties for the purposes described herein:
International transfers are carried out under the exceptions provided for in Article 36 of the LFPDPPP, primarily the need to fulfill the membership agreement entered into with the data subject. EB2B has entered into Data Processing Agreements (DPAs) with each data processor, ensuring that they maintain levels of protection equivalent to or higher than those required by Mexican law.
EB2B does not sell, rent, or share your personal data with third parties for purposes other than those described in this Notice.
6. ARCO Rights (Access, Rectification, Cancellation, and Objection)
You have the right to access your personal data held by EB2B, to correct it when it is inaccurate or incomplete, to have it deleted when you believe it is no longer necessary for the purpose for which it was collected, and to object to its processing for specific purposes, in accordance with Articles 21 et seq. of the LFPDPPP.
6.1. Procedure for Exercising ARCO Rights
To exercise any of your ARCO rights, you must send a request to the EB2B Privacy Department via email at contacto@eb2b.io, including the following information:
- a) The account holder’s full name and the email address registered on the platform.
- b) A clear and precise description of the personal data with respect to which you wish to exercise any of the ARCO rights.
- c) Any other information or document that facilitates the identification of the personal data.
- d) In the case of requests for correction, the changes to be made and the documentation supporting the request.
6.2. Response Times
EB2B will notify the account holder of its decision within a maximum of twenty (20) business days from the date the request is received. If the request is approved, it will take effect within fifteen (15) business days following the date the response is communicated. These deadlines may be extended once for an equal period, provided that the circumstances of the case warrant it.
6.3. Right to Object to Automated Decisions
Under the current LFPDPPP, you have the right to object to decisions based solely on the automated processing of your personal data, including profiling, when such decisions produce legal effects concerning you or similarly significantly affect you. To exercise this right, please contact contacto@eb2b.io
7. Withdrawal of Consent
You may revoke your consent to the processing of your personal data at any time, without retroactive effect, by sending an email to contacto@eb2b.io with the subject line “Revocation of Consent.” EB2B will respond to your request within a maximum of twenty (20) business days.
It is important to note that withdrawing your consent may limit or prevent the provision of the contracted services, depending on the purposes for which consent is withdrawn.
8. Use of Cookies and Tracking Technologies
EB2B uses cookies and digital tracking technologies on its website, eb2b.io Cookies are text files that are stored on your device when you visit our site and allow us to recognize you, remember your preferences, and analyze how the platform is used.
For complete information about the types of cookies we use, their purposes, duration, providers, and options for managing them, please see our Cookie Policy, available at https://eb2b.io/politica-de-cookies.
Under the LFPDPPP, cookies that collect personal data (such as IP addresses or unique identifiers) are subject to the principles of information and consent set forth in this law. You can manage your cookie preferences through the management banner available on our website.
9. Safety Measures
EB2B has implemented and maintains administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, unauthorized use, access, or processing, in accordance with the requirements of the LFPDPPP and its Regulations. These measures include, but are not limited to:
- a) SSL/TLS encryption for all website communications.
- b) Storage on servers with industry-standard security certifications.
- c) Role-based access control for authorized personnel.
- d) Confidentiality agreements with all employees and suppliers who process personal data.
- e) Regular backups and business continuity plans.
- f) Periodic review and updating of security measures.
10. Notification of Security Breaches
In the event of a security breach that significantly affects the economic or moral rights of data subjects, EB2B will notify the affected data subjects immediately and without delay, in accordance with Article 19 of the LFPDPPP. The notification shall include, at a minimum:
- a) Nature of the incident.
- b) Compromised personal data.
- c) Recommendations to the account holder to protect his or her interests.
- d) Corrective actions implemented.
- e) Ways to get more information.
EB2B voluntarily adheres to the standard of reporting within seventy-two (72) hours of becoming aware of the breach, as a best practice aligned with international standards.
11. Changes to the Privacy Notice
EB2B reserves the right to modify this Privacy Notice at any time to reflect changes in legislation, regulations, our privacy practices, or the services we offer. Any modifications will be posted on our website, , and, when the changes are substantial, you will be notified via email at the address registered in your account at least ten (10) calendar days before they take effect.
We recommend that you review this Privacy Notice periodically to stay informed about how we protect your data.
12. Competent Authority
If you believe that your right to personal data protection has been violated by any act or omission on the part of EB2B, or if you suspect a violation of the provisions of the LFPDPPP and its Regulations, you may file the corresponding complaint or report with the Secretariat for Anti-Corruption and Good Governance (SABG), the competent authority for the protection of personal data held by private individuals in accordance with current legislation.
SABG website: https://www.gob.mx/anticorrupcion (subject to change).
13. Applicable Law and Jurisdiction
This Privacy Notice is governed by the Federal Law on the Protection of Personal Data Held by Private Parties (DOF, March 20, 2025), its Regulations (2011, to the extent they do not conflict), the Guidelines for Privacy Notices (DOF, January 17, 2013, to the extent applicable), Article 16, paragraph two, of the Political Constitution of the United Mexican States, and other applicable provisions of Mexican law.
14. Consent
By providing your personal data to EB2B through our web forms, email, WhatsApp, surveys, or any other means, and by using our services, you consent to the processing of your data in accordance with the terms of this Privacy Notice.
For purposes that require express consent (Section 3.2), EB2B implements specific consent mechanisms (unchecked checkboxes) that will be presented at the time of data collection.