Privacy Notice

Last Revision: December, 2025,

SPIP Solutions (hereinafter "The Company"), with registered address at Euro Business Park B63 Autopista México - Querétaro KM 201 El Marqués, 76240 Santiago de Querétaro, Qro., recognizes the importance of protecting your privacy and personal data. The lawful, controlled, and informed processing of your personal data is vital to achieving our corporate objectives across all areas of the business and reaffirms our commitment to privacy and your right to informational self-determination.

This Privacy Notice is intended to inform you about the treatment that will be given to your personal data when it is collected, used, stored and/or transferred by the Company, which is carried out in accordance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter the LFPDPPP).

Regarding this, we inform you of the following:

The personal data we collect from you will be used for the following purposes, which are necessary for your relationship with our company:

a) Clients: Generate a credit file and provide the services and products you have requested, inform you by physical or electronic means about new products or services, promotions or discounts and evaluate the quality of the service we provide.

b) Suppliers/creditors: Generate a specific file with the necessary data to establish a supply agreement for products and services, as well as manage the corresponding payments, ensuring that the products/services delivered by the supplier are properly documented.

c) Visits: Ensure control of their access and security within the Company's facilities and/or its Business Units.

d) Employees: Maintain an appropriate record of active personnel to maintain an employment relationship, inform the competent authorities in labor and social security matters as required by law, and create and maintain medical consultation files when the company's facilities have them.

e) Applicants: Maintain a temporary file with the curriculum information of candidates to fill any vacant position in the company.

For the purposes stated in this privacy notice, we may collect your personal data in different ways: when you provide it to us directly, when you visit our website or use our online services, or through publicly accessible sources.

The personal data we would use would be categorized as follows:

• Identification Data.

• Contact Information.

Based on Article 8 of the LFPDPPP, it will be understood that the holder tacitly consents to the processing of his data, when, having been made available to him the privacy notice, he does not express his opposition.

How can you access, rectify or cancel your personal data, or oppose its use?

You have the right to know what personal data we hold about you, what we use it for, and the conditions of its use (Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it deleted from our records or databases when you believe it is not being used appropriately (Cancellation); and to object to the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights.

Regarding the procedure and requirements for exercising your ARCO rights, we inform you of the following:

a) What information and/or documentation should the application contain? Name of the holder and address, in addition to documents that prove identity or legal representation.

b) How many days will it take to respond to your request? 5 business days.

c) How will we communicate the response to your request? By email.

d) In what media can the personal data that you request, if applicable, be reproduced? In printed form (PDF file).

You can revoke your consent for the use of your personal data

You may revoke any consent you have given us for the processing of your personal data. However, please note that we may not be able to fulfill your request or immediately cease processing your data in all cases, as we may be legally obligated to continue processing your personal data. Furthermore, you should be aware that for certain purposes, revoking your consent will mean that we can no longer provide you with the service you requested, or it will result in the termination of your relationship with us.

To revoke your consent, you must submit your request through the available channels. Regarding the procedure and requirements for revoking your consent, please note the following:

a) What information and/or documentation should the application contain? Name of the holder or legal representative and documents that prove identity or representation.

b) How many days will it take to respond to your request? 5 business days after receiving the request.

c) How will we communicate the response to your request? By email.