SumoSayce S.A. de C.V. (SUMO, All You Can Eat), located at Av. de las Granjas No. 35, interior 44, Colonia Las Colonias, Cd. López Mateos, Atizapán de Zaragoza, Estado de México, C.P. 52953, states that it is responsible for the processing of personal data obtained from its customers, which may be collected through the following means:
This Comprehensive Privacy Notice is made available to the data subject prior to the collection of their personal data, in strict adherence to the principles of information, lawfulness, consent, quality, purpose, loyalty, proportionality, and accountability set forth in the Law itself.
- Directly, when the data subject enters their personal data through our website.
- Indirectly, when the data subject transfers personal data under the assumptions of Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties and its Regulations, or by having given their consent for it.
- Indirectly, when information is obtained through publicly available sources permitted by the Federal Law on Protection of Personal Data Held by Private Parties.
In order to fulfill the purposes described in this Comprehensive Privacy Notice, the party responsible will collect and process the following personal data:
SUMO, All You Can Eat will not collect or process sensitive personal data; if you contact us through social media, we may collect data from your public social media profile in order to respond to your inquiries regarding the products we offer.
- Full name
- Gender
- Complete address
- Contact phone number
- Email address
- Tax data (RFC, address, and business name)
- Financial and/or asset data (bank card number, expiration date, and security code)
- Information you voluntarily provide to us for handling complaints, claims, or requests for information.
The personal data we collect will be used by the party responsible as follows:
Primary purposes
- To address your opinions, complaints, and/or suggestions.
- To verify your identity and validate the accuracy and quality of the information provided.
- To address questions related to the purchase of our products and/or services.
- To handle purchase requests and process payments for products and services.
- Banking clarifications.
- To carry out inquiries, investigations, and reviews related to complaints or claims.
- To comply with requirements from competent authorities in legally established cases.
- To carry out billing procedures related to purchased products.
- To evaluate the quality of our services.
- For analytical, statistical, and marketing purposes, solely for the purpose of providing you with better service.
- To handle requests for the exercise of ARCO rights and revocation of consent.
Secondary purposes
If you do not wish your personal data to be processed for secondary purposes, please send an email to aviso_privacidad@sumo.com.mx stating so and specifying that the objection is for the SUMO, All You Can Eat brand; we will respond through the same means within a maximum of 20 business days.
The objection referred to above will not be grounds for us to stop providing you with our services or to stop selling you our products.
- To build profiles of customers and users of the products offered by the party responsible.
- To send communications related to offers, promotional messages, and communications for marketing, advertising, and commercial prospecting purposes about new or existing products or services.
- To conduct surveys, market studies, participate in events, contests, trivia, games and sweepstakes, participate in social media and chats, and gather information that allows us to evaluate the quality of our products and services.
SUMO, All You Can Eat may transfer personal data to its subsidiaries, associates, affiliates and/or companies belonging to the same control group of the registered trademark ("the affiliates"), as well as, where applicable, to any authority that requires it under applicable law.
The transfer of personal data referred to in this section does NOT require the consent of the data subjects, in accordance with Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties.
- To the affiliates, to carry out profiling, identification, and customer/consumption-habit knowledge activities through the application of various data analysis technologies.
- To the affiliates, to carry out commercial prospecting activities and contact you with advertising, promotional, and informational content the affiliates consider of interest to you.
- To the affiliates, to carry out marketing campaigns, statistics, surveys, and studies on consumption habits in relation to the goods and/or services they offer.
- To a competent authority, when the personal data held is required by that authority or must be delivered in strict compliance with the Law.
At any time, you or your duly accredited legal representative may exercise any of the rights of Access, Rectification, Cancellation, or Opposition (ARCO rights), as well as revoke your consent to the processing of your personal data.
To exercise the rights referred to above, you must send your request to the Information Privacy area at the email address aviso_privacidad@sumo.com.mx, indicating whether you wish to exercise any of your ARCO rights or revoke your consent, and specifying that your request is for the SUMO, All You Can Eat brand.
The request to exercise these rights must contain:
- The data subject's full name.
- Complete address and email address to which the response to your request should be sent.
- A clear and precise description of the data with respect to which the corresponding right is sought to be exercised.
- The purpose of the request.
- Any element that facilitates locating the data, attaching a copy of valid official identification and, where applicable, the document evidencing legal representation.
Response window
The maximum period for responding to your request will be 20 business days, counted from the day the corresponding access, rectification, cancellation, or opposition request is received. The response will be sent to the same email address provided in the request. Once that notification is received, the party responsible will have a period of 15 business days to make it effective, if applicable.
Grounds for denial
The party responsible may deny access to personal data, or the rectification, cancellation, or opposition to its processing, in the following cases:
- When the requester is not the data subject or their legal representation is not duly accredited.
- When the personal data is not found in the party responsible's database.
- When a third party's rights would be harmed.
- When there is a legal impediment or a ruling from a competent authority that restricts access to the personal data or does not allow its rectification, cancellation, or opposition.
- When the access, rectification, cancellation, or opposition have already been carried out.
If you wish to limit the use or disclosure of the personal data you have provided to us for advertising and/or marketing purposes, please send an email to aviso_privacidad@sumo.com.mx.
If the data subject believes that their right to personal data protection has been harmed by improper processing on the part of the party responsible and/or its processors, they may file the corresponding complaint with INAI. For more information, visit www.inai.org.mx.
This Privacy Notice may undergo changes, modifications, and/or updates based on:
Should changes be made to our Privacy Notice, this will be announced through the website www.sumo.com.mx, so we recommend you review it frequently.
- Legislative or case-law developments.
- Needs specific to the products and/or services we offer.
- Our own privacy practices, changes to our business model, or other causes specific to the brand.
If you use our services or purchase our products, it is understood that you authorize the use of your personal data as set forth in this Privacy Notice, which is governed by the laws in force and applicable in the United Mexican States. Any dispute arising from its application must be brought before the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) or before the competent judicial bodies of Mexico City. For more information, visit the official INAI website: www.inai.org.mx.
Last updated: September 4, 2026.