Privacy Notice

For Grupo Ortiz, your privacy and trust are of utmost importance. As part of our commitment, we implement legal and security measures to protect your personal data in accordance with the Federal Law on Protection of Personal Data Held by Private Parties, published in the Official Gazette on July 5, 2010, as well as its Regulations and Privacy Notice Guidelines. This document aims to regulate the legitimate, controlled, and informed use of the personal data you provide, ensuring your privacy.

Please read the following information carefully:

I. DATA CONTROLLER

The controller of your personal data is Grupo Ortiz (hereinafter, 'the Controller'), located at Calle Belisario Domínguez #30, Downtown, Morelia, Michoacán, phone 443 207 2593.

II. PURPOSE OF DATA USE

The personal data you provide will be used exclusively for the following purposes: Internal registration and management of contracted services. Issuance of digital tax receipts (CFDI). Sending communications related to our products and services. Confirmation and verification of your identity. Handling information requests, clarifications, and complaints.

III. DATA COLLECTED

The personal data you provide will be used exclusively for the following purposes: Internal registration and management of contracted services. Issuance of digital tax receipts (CFDI). Sending communications related to our products and services. Confirmation and verification of your identity. Handling information requests, clarifications, and complaints.

IV. DATA COLLECTION METHODS

Personal data will be collected through: Online forms on our website and social media. By phone, email, or messaging apps like WhatsApp, with your express consent.

V. LIMITATION OF USE AND DISCLOSURE

Grupo Ortiz has the necessary technical and human resources to ensure the protection of your personal data, preventing its loss, alteration, or misuse. We will only share your data with competent authorities when required by law. You have the right to limit the use and disclosure of your personal data by sending a request to: atencionacliente@grupo-ortiz.com.

VI. ARCO RIGHTS (Access, Rectification, Cancellation, and Opposition)

As the data subject, you have the right to: Access your personal data we hold. Request correction of inaccurate or incomplete data. Request deletion when not used as stated. Object to the use of your data for specific purposes. To exercise these rights, send a request to atencionacliente@grupo-ortiz.com including: Full name, a contact method, ID documents, and a clear description of the data subject to your request. You will receive a response within 20 business days.

VII. CONSENT REVOCATION

You may revoke your consent for data processing at any time by sending a request to: atencionacliente@grupo-ortiz.com.

VIII. PRIVACY NOTICE MODIFICATIONS

Grupo Ortiz reserves the right to modify or update this privacy notice in response to new legal provisions, internal policies, or business model changes. Updates will be available on our website: www.grupo-ortiz.com.

IX. SUPERVISORY AUTHORITY

If you believe your personal data rights have been violated, you may contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

For questions or clarifications, contact us at atencionacliente@grupo-ortiz.com. Last update: [December 8, 2025]