PRIVACY POLICY

COMERCIALIZADORA EPYA S.A. DE C.V (hereinafter ePya) with registered address at Av. Santa Fe 170, Santa Fe, Zedec Sta Fe, Alvaro Obregon, 01210 Mexico City, CDMX, recognizes the importance of the legitimate, controlled, and informed processing of your personal data, in order to guarantee your right to privacy and informational self-determination.

This Privacy Policy, corresponding to the ePya Mexico website (www.ePya.mx), is provided to you so that you know ePya's practices when handling - obtaining, using, disclosing, or storing your personal data.

Some of the personal data that may be collected are:

• Name.
• Activity (line of business).
• Postal address.
• Tax address.
• Review and collection address.
• Federal Taxpayer Registry (Registro Federal de Contribuyentes - RFC).
• Email address.
• Landline and/or mobile phone number.
• Name of the legal representative (if applicable).
• Signature of the legal representative (if applicable).
• Name of the payment manager.
• Banking and commercial references.
• Payment information (such as credit card number or bank account number).
• Currency type for invoicing.
• Information about requested credits.

ePya will handle your personal data only for the time necessary to fulfill the purposes described in this Privacy Policy and/or in accordance with applicable legal provisions.

The personal data collected by ePya will be used to deliver the contracted products and services, to develop and improve our services, to contact you, to communicate news regarding our products, for the creation and administration of your account, to carry out marketing and promotional activities, to provide you with information about products and services that we believe may be of interest to you, to interrelate databases and know your profile: tastes, preferences, and needs, to carry out invoicing for the acquired products and services, to send electronic invoices to the provided email address, to manage collections and payment processing, to implement protective measures against possible fraudulent transactions or their identification, and, in general, to comply with the proper development of our commercial and business relationship.

Your personal data may be used for other purposes as long as such purposes are compatible with those described above and can be considered analogous.

ePya may share your personal data with third parties, national or foreign, in order to comply with the purposes described above. The third parties to whom ePya may communicate your personal data are, for example: other affiliated or subsidiary companies of ePya; external professional advisors acting on behalf and for the account of ePya; service providers that are contracted to fulfill the described purposes and who act on behalf and for the account of ePya.

When ePya shares your personal data with third parties, it will ensure that these third parties take the necessary measures to protect the confidentiality and security of your personal data. ePya will require these third parties to comply with ePya's Privacy Policy and Privacy Policy and will prohibit them from using your personal data for a purpose other than those for which they were collected.

Likewise, ePya may communicate your personal data to third parties, national or foreign, independent of ePya, when the purpose is to comply with a legally acquired obligation, is required by resolution or determination of a competent authority, there is an emergency situation that puts your person or assets at risk, or when such data communication is provided for by any Law.

By being aware of the above, you give your consent for ePya to use and disclose your personal data in accordance with the description above, except in the exceptions marked by law.

ePya has adopted the necessary administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

Access to your personal data, held by ePya, will be limited to individuals who need to access said information for the purpose of carrying out the purposes identified in this Privacy Policy.

You, as the owner of personal data, may exercise the rights of access, rectification, cancellation, and opposition before ePya's Personal Data Protection Department, according to the following:

Right of Access.- to be informed which of your personal data is contained in ePya's databases, for what purposes they are used, the origin of said data, and the communications that have been made with them.

Right of Rectification.- to correct or update your personal data in case they are inaccurate or incomplete. You will have the obligation to inform ePya of the changes that must be made to your personal data, when such changes are only known to you and are attributable to you.

Right of Cancellation.- to have your personal data removed from ePya's databases. This request will lead to a blocking period after which the deletion of the data will proceed. There are cases where cancellation will not be possible under the terms of the Federal Law on Protection of Personal Data Held by Private Parties and other applicable legal provisions.

Right of Opposition.- to object, for a legitimate cause, to the processing of your personal data by ePya. In cases where the opposition concerns the receipt of certain communications, these communications will include the option to unsubscribe from the distribution list and stop receiving them.

ePya will make the Forms available for carrying out requests for access, rectification, cancellation, and opposition on its website: www.ePya.mx

In case there are changes or modifications to this Privacy Policy, the updated version of the Privacy Policy will be made available to you through the email address you provided. The lack of opposition to the modified Privacy Policy, within 5 business days following its reception, will be understood as acceptance and consent to the terms established therein.

In case you have questions or comments or any opposition regarding the Privacy Policy, or if you wish to exercise any of the rights that correspond to you under the Federal Law on Protection of Personal Data Held by Private Parties, we ask you to contact ePya's Personal Data Protection Department.

The security and confidentiality of the data that users provide when contracting a service or purchasing a product on the ePya website (www.ePya.mx) will be protected by a secure server under the Secure Socket Layer (SSL) protocol, so that the data sent will be transmitted encrypted to ensure its safeguarding.

To verify that you are in a protected environment, make sure an S appears in the navigation bar. Example: https://

However, and despite having safer tools every day, the protection of data sent over the Internet cannot be guaranteed 100%; therefore, once received, every effort will be made to safeguard the information.

This Confidentiality / Privacy statement is subject to the terms and conditions described above by ePya, which constitutes a legal agreement between the user and ePya. If the user uses ePya's services, it means they have read, understood, and agreed to the terms set forth above.

Authority

If the user considers that their rights regarding the protection of personal data have been violated, they have the right to go to the corresponding authority to defend their exercise. The authority is the Federal Institute for Access to Information and Data Protection (IFAI), its website is: www.ifai.mx.

What are Cookies and how are they used

Cookies are small pieces of information that are sent by the Website to your browser and stored on your computer's hard drive and are used to determine your preferences when connecting to our site's services. We only use cookies when the optional form is filled out in order to facilitate its completion; it is used only when a quote or comment about our products is requested. Furthermore, we do not have a login protocol, and we do not collect data on the browsing habits of our customers. In the case of using cookies, the "help" button found in the toolbar of most browsers will tell you how to avoid accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable all cookies.

ePya's Privacy Policy was updated on May 16, 2022.