In accordance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, hereinafter referred to as “the Law,” this privacy notice is issued under the following terms:

Person Responsible for Personal Data

For the purposes of this privacy notice, Inver Xpert, S.A. de C.V. (trade name Inver Xpert, hereinafter IX), located at Del Quijote 4149A, Jardines de Universidad, Zapopan, Jalisco, Mexico, ZIP 45110, is responsible for the collection, disclosure, storage, use, handling, processing, transfer, and/or disposition, as well as the protection of personal data collected from its clients (hereinafter, the Holders).

Collected Personal Data

The personal data IX collects from the Holders includes (but is not limited to):

• Full name
• Home address
• Email address
• Age
• Date of birth
• Gender
• Marital status
• Nationality
• Phone number
• Occupation
• Tax ID (RFC)
• Current employment information
• Copy of official photo ID
• Proof of income
• Bank references
• Number of dependents

Your personal data is collected via email or through the delivery of documents that prove the aforementioned data, or through data transfers.

Sensitive Data Policy

As a policy, IX does not request any information that, under the Law, is considered sensitive data, such as religion, sexual preferences, political opinions, among others. The company supports and promotes diversity and therefore prohibits any discriminatory act or the request for any information that could imply such discrimination. If you voluntarily provide sensitive data, the company will process and safeguard it in accordance with the Law.

Purpose of Personal Data Processing

The data we collect is used for the following purposes:

• Drafting service agreements between IX and clients to establish terms and conditions for promoting the client’s property.
• Preparing lease agreements, purchase and sale promises, purchase and sale contracts, transfers, and investment projects for properties promoted by IX.
• Carrying out any procedure necessary to confirm the legal status of properties promoted by IX.
• Coordinating appointments with prospects at the client’s property promoted by IX.
• Exchanging information and proposals between the prospect and the client related to the property promoted by IX.
• Investigating the client’s credit and legal background.
• Completing all types of real estate transactions between the prospect and the client.
• Informing you of promotions, offers, and launches.
• Conducting marketing and prospecting activities.
• Performing statistical and market analysis.
• Inviting you to events.
• Keeping our records up to date.

Likewise, the personal data collected may also be used to comply with legal requests from competent authorities.

IX is not responsible for the accuracy or truthfulness of the data you provide, nor does it verify such data; it only receives, records, and stores it. You also declare and confirm that you have the express consent of any individuals whose personal information you provide, such as, for example: spouse, domestic partner, dependents, relatives, professional references, etc.

Exceptions

Please note that, in accordance with the Law, there are circumstances in which your consent is not required for the processing of your personal data, and therefore, its absence or refusal does not prevent IX from processing your personal data under the terms of the Law and other applicable regulations.

Options and Means Provided by IX to Limit the Use or Disclosure of Personal Data

The personal data of the Holders will be handled with the strictest confidentiality, following the administrative, physical, and technical security measures implemented by IX in its internal security policies and procedures, to prevent any unlawful disclosure and to limit its use to what is stated in this privacy notice.

Means for Exercising the Holder’s Rights

At any time, you or your duly authorized legal representative may exercise your rights of access, rectification, cancellation, and opposition.

To exercise your ARCO rights, you must submit your request to our office located at Del Quijote 4149A, Jardines de Universidad, Zapopan, Jalisco, Mexico, ZIP 45110, or email it to our personal data department at hola@inverxpert.com, addressed to the Data Protection Department.

The request must contain the following information:

• Holder’s full name
• Address and email address to receive the response
• Clear and precise description of the data for which the corresponding right is being exercised
• Purpose of the request
• Any element that facilitates locating the data
• Copy of official photo ID and, if applicable, document proving legal representation

The response period for your request will be 20 business days. The response will be communicated to the email address provided or via a letter sent to your address. Once notified, you will have 15 business days to make it effective. You may revoke your consent for the processing of your personal data at any time.

Data Transfers

Your personal data may be transferred to third parties, whether domestic or foreign, when necessary to fulfill obligations arising from your relationship with IX, under the terms of Article 37, Section VII of the Law.

It is important to note that any third party receiving your personal data will have the same obligations and responsibilities as IX, and this privacy notice will be communicated to such third party.

Changes to the Privacy Notice

Any changes to this privacy notice will be communicated through the following means:

• By email sent directly to you
• By posting notices in a visible area within IX’s operational offices

The privacy notice may be modified at any time to address legislative changes or internal policy updates within IX. If the purposes for which your personal data is processed are modified, your consent will be requested again, whether express or implied, as applicable.

Data Processing in Co-Ownership Schemes

In cases where properties are acquired under a co-ownership scheme, IX may collect and process additional data related to:

• Identification and verification of each co-owner
• Integration of documents and signatures in co-ownership contracts
• Administration and operation of the acquired shares (usage scheduling, maintenance fee management, and communication among co-owners)
• Communication of necessary information to other co-owners and/or the designated managing entity

The data processed due to co-ownership will be safeguarded with the same security measures described in this privacy notice and will be used solely to fulfill the purposes derived from this scheme.