Privacy Notice

In accordance with the provisions of the “GENERAL LAW ON THE PROTECTION OF PERSONAL DATA HELD BY OBLIGATED SUBJECTS”, CORPORATION MBE HOLDING MX, S.A. de C.V. declares that it is a company legally incorporated under Mexican law, with its registered address at Av. Isaac Newton 186_501, Polanco V Section, Miguel Hidalgo Borough, Mexico City, and states that it is responsible for the processing of your personal data.

Privacy Office located at the address indicated above.
Privacy Office phone numbers: 50041919
Email: privacidad@mx.mbelatam.com

DEFINITIONS:

Personal Data. Any information relating to an identified or identifiable natural person.
Data Subject. The natural person (DATA SUBJECT) to whom the personal data corresponds.
Controller. A natural or legal private entity that decides on the processing of personal data.
Processing. The collection, use (including access, handling, exploitation, transfer, or disposal of personal data), disclosure, or storage of personal data by any means.
Transfer. Any communication of data made to a person other than the controller or processor.
ARCO Rights. Rights of access, rectification, cancellation, and opposition.
Implied Consent. The data subject will be deemed to have consented to the processing of their data when, having been provided with the Privacy Notice, they do not express opposition.

PURPOSES OF THE INFORMATION. Your personal data will be used for identification, verification, contact purposes, processing applications for the granting of an individual franchise agreement, and promotion of franchise services.

WAYS OF COLLECTING YOUR PERSONAL DATA. For the activities indicated in this Privacy Notice, we may collect your personal data in different ways: when you provide it directly to us; when you visit our website or use our online services; and when we obtain information through other sources permitted by law.

PERSONAL DATA COLLECTED DIRECTLY:
We collect your personal data directly when you provide it to us through various means, such as:

• Email
• Full name
• Gender
• Date of birth
• Contact phone numbers
• Postal and tax address
• Tax information
• Payment information
• Commercial and banking references

PERSONAL DATA COLLECTED WHEN YOU VISIT OUR WEBSITE OR USE ONLINE SERVICES:
Such as:

• Email
• Full name
• Phone number
• Address

PERSONAL DATA COLLECTED THROUGH OTHER LEGALLY PERMITTED SOURCES:

USE OF SENSITIVE DATA. Sensitive data are those that affect the most intimate sphere of the data subject, or whose improper use may lead to discrimination or pose a serious risk.
We inform you that, to fulfill the purposes described in this notice, no sensitive personal data will be collected or processed.

LIMITATION OR DISCLOSURE OF YOUR PERSONAL DATA. The data controller undertakes to carry out only the following actions regarding your information:

• Sending emails
• Other actions
• Management of commercial operations

PROCEDURE TO EXERCISE ARCO RIGHTS. You have the right to access the personal data we hold about you and the details of its processing, as well as to rectify it if it is inaccurate or incomplete; to cancel it when you consider it unnecessary for the purposes stated in this Privacy Notice, when it is being used for unauthorized purposes, or when the contractual or service relationship has ended; or to oppose its processing for specific purposes.

The mechanisms implemented for exercising these rights (known as ARCO rights) include rectification, cancellation, and opposition by the Data Subject regarding the processing of their personal data:

1. The procedure begins by submitting the corresponding ARCO rights request at the address of our Privacy Office, indicated at the beginning of this Privacy Notice.
2. Your request must contain the following information:

• Name of the data subject
• Address or any other means of contact
• Documents proving identity and legal capacity

3. The response period for your request is: 20 days.

TRANSFER OF YOUR PERSONAL DATA. Your personal data may not be transferred within or outside the country, nor processed by external parties to this company.

We undertake not to transfer your personal information to third parties without your consent, except for the exceptions provided in Article 37 of the Federal Law on Protection of Personal Data Held by Private Parties, and to carry out such transfers under the terms established by that law.

MODIFICATIONS TO THE PRIVACY NOTICE. We reserve the right to make modifications or updates to this Privacy Notice at any time, to address legislative changes, internal policies, or new requirements for the provision or offering of our services or products.

We therefore undertake to keep this notice updated for your consultation, so that the DATA SUBJECT may exercise their ARCO rights and stay informed of any changes through notification to the last email address provided.

USE OF COOKIES. This Privacy Notice omits the use of cookies to collect information about you.

USE OF WEB BEACONS. This Privacy Notice omits the use of web beacons to collect information about you.

The parties agree that this notice shall be governed by the applicable legal provisions in Mexico City, particularly the provisions of the GENERAL LAW ON THE PROTECTION OF PERSONAL DATA HELD BY OBLIGATED SUBJECTS.

If you believe that your right to personal data protection has been violated by any conduct of our employees or by our actions or responses, or you suspect any violation of the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, you may file a complaint or claim with the Institute of Transparency, Access to Public Information, Personal Data Protection, and Accountability of Mexico City.

Last updated: September 1, 2025.