Vaserco, S. de RL de CV (hereinafter "Enature") in compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter the "Law") and its regulations (hereinafter the "Regulations"), in this regard, this Comprehensive Privacy Notice is issued for suppliers, customers, employees and any third party that has a relationship with the Company.

1. DEFINITIONS.
a) Owner. The natural person to whom the Personal Data is identified or corresponds.
b) Personal data. Any information concerning an identified or identifiable natural person.
c) Controller. Private legal entity responsible for the processing of Personal Data, i.e. the commercial company called Vaserco, S. de RL de CV.
d) Processing. The collection, use (including access, handling, utilization, transfer, or disposal of personal data), disclosure, or storage of personal data by any means.
e) ARCO Rights. Rights of access, rectification, cancellation, and objection to personal data.

2. RESPONSIBLE FOR THE PROTECTION OF YOUR PERSONAL DATA.

Enature, with registered address at Bodegas de San Juan, San Miguel Avenue, number 308, Industrial Subdivision, Zapopan, Jalisco, postal code 45019, is responsible for the use and protection of the personal data collected, in accordance with the terms of this Privacy Notice.

3. PERSONAL DATA.

For the purposes outlined in this Privacy Notice, Enature may collect your personal data in various ways: when you provide it to us directly, when you visit our website and social media, by completing online purchase applications, and when we obtain information through other sources permitted by law.
Personal data we collect directly:
a) Personal identification data: name(s) and surname(s).
b) Contact information: address, contact telephone number and email address.
c) Internet activity data: browsing history, search history, and other information about the consumer's interactions with our website.
d) Financial-asset data: bank accounts.
Please note that Enature will not request any sensitive data from you.

4. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA.

Enature collects, uses, and stores personal information, to the extent permitted by applicable law, for the purposes described below:
Main purposes:
a) Sale of products and/or provision of services;
b) Verify your identity;
c) Comply with the obligations contracted with our clients, suppliers, distributors and authorities;
d) Analysis of commercial preferences and needs;
e) Sending information about the products we sell;
f) Administrative purposes: issuing invoices and monitoring;
g) Prevention of fraud and credit risks;
h) Address your questions, complaints, clarifications, claims and suggestions as a customer;
i) Preparation of contracts or other corporate documents.
Secondary purposes:
a) Create and maintain business relationships with our customers, suppliers and distributors;
b) Create and maintain health and safety measures in our products;
c) Marketing, advertising or commercial prospecting;
d) Operation and improvement of our website and social networks;
e) Product usage analysis, market segmentation and statistics.
2 It should be noted that the processing of personal data by Enature will be limited to the fulfillment of the purposes set forth herein and, in the event that your personal data is intended to be processed for a purpose other than that established in this Privacy Notice, Enature will require your consent for such purpose.

5. PERSONAL DATA SECURITY.

Enature implements the necessary technical, administrative, and physical security measures to protect your personal data and prevent its damage, loss, alteration, destruction, or unauthorized use, access, or processing. Therefore, it will take the following actions:
(a) Confidentiality of information. Enature will maintain the confidentiality of your personal data collected, which will continue to exist even after the purposes for which it was collected have been fulfilled.
(b) Confidentiality Notice. If, for any reason, Enature needs to provide your personal data to third parties (under the terms provided by the Law or this Privacy Notice), it will notify said third parties of their obligation to comply with the provisions of the Law and the confidentiality of your personal data.
(c) Database management. Personal data is managed and safeguarded through the use of databases by designated individuals, and unauthorized persons are not permitted to use, consult, manage, or access it.

6. CONSENT.

In the event that the owner does not express opposition through a written request to the content and scope of this Privacy Notice, within the period of 7 (seven) days counted from the date on which Enature informs you about this Comprehensive Privacy Notice or its modifications, it will be understood that you give your tacit consent for Enature to process your personal data based on the purposes of this Notice.
In the event that you wish to revoke your consent or limit the use or disclosure of your personal data, in relation to one or more of the purposes of its treatment, you may at any time express this by means of a written request, sent to the email address: hola@enature.com.mx within a maximum period of 20 (twenty) days from the date of receipt of your revocation request, we will respond to you regarding the origin of the same via email, sent to the email address that you have indicated in the request itself or sent through postal service to the physical address that you have indicated for such purposes (the twenty days will be considered fulfilled at the time of delivering the document to the postal service).

7. ARCO RIGHTS.

Data subjects have the right to know which of their personal data is stored, what it is used for, and the conditions of its use (Access). They also have the right to request the correction of their personal data if it is outdated, inaccurate, incomplete, or erroneous (Rectification). They may also request that it be deleted from records or databases if they believe it is not being used appropriately (Cancellation). They may also object to the use of their personal data for specific purposes (Objection). These rights are recognized by the Political Constitution of the United Mexican States and regulated by the General Law on the Protection of Personal Data Held by Obligated Subjects.

8. EXERCISE OF ARCO RIGHTS.

Pursuant to the Law and its regulatory provisions, as the data subject, or through your duly accredited legal representative, you may submit or send a request to Enature's personal data department to revoke your consent, or to access, rectify, restrict, cancel, or object to your personal data. Requests for your ARCO rights must be sent by email to hola@enature.com.mx.
Enature will be responsible for managing requests from owners to exercise the ARCO rights referred to in the Law and other applicable legislation.

9. NOTICE ON COOKIES AND WEB BEACONS.

Enature uses various technologies to improve the efficiency of its websites, including your browsing experience. These technologies include the use of cookies. Cookies are small amounts of information that are stored in each user's browser so that the server remembers certain information that can be used later. This information

3 allows us to identify and save your personal preferences to provide you with a better browsing experience. Web beacons, on the other hand, are images inserted into a web page or email that can be used to monitor a visitor's behavior, such as storing information about the user's IP address, the length of time spent interacting with the page, and the type of browser used, among other things.
10. CHANGES TO THE PRIVACY NOTICE.

Enature reserves the right to make modifications or updates to this Privacy Notice at any time to address legislative or jurisprudential developments, internal policies, new requirements for the provision or offering of its products and services, or due to business practices. Therefore, the data subject is obligated to periodically review this Privacy Notice. Therefore, if Enature modifies the content of this Privacy Notice, it will notify the data subject via email, so that the data subject is able to exercise their ARCO rights.

11. TRANSFER OF PERSONAL DATA.

Your personal data may be transferred unless you (the data subject) expressly object to such transfer, in accordance with the provisions of the Law and its Regulations. In these cases, Enature will transfer your personal data subject to the execution of confidentiality agreements, provided that the third party to whom the data is transferred agrees to subject the processing of your personal data to this Privacy Notice, and this does not apply to any of the situations established in Article 37 of the Law. If you do not express your objection to the transfer of your personal data to third parties, it will be tacitly understood that you have granted Enature your consent to do so.

12. COMPLAINT TO INAI.

If you believe that your right to data protection has been violated by our conduct or omission, or if you believe there has been a violation of the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties, its regulations, and other applicable laws, you may file a complaint with the National Institute for Transparency, Access to Information, and Protection of Personal Data (INAI). Enature will notify the data subject of the decision within no more than 20 business days from the date the request was received.

13. APPLICABLE LEGISLATION AND JURISDICTION.

This Privacy Notice shall be governed by and construed in accordance with applicable Mexican law, in particular, the Federal Law on Personal Data Held by Private Parties and its Regulations. In the event of any controversy, dispute, or conflict arising from this Privacy Notice, the parties shall submit to the jurisdiction of the competent Courts of the First Judicial District of the State of Jalisco.

14. DECLARATION OF THE PERSON WHOSE PERSONAL DATA IS COLLECTED.

By accepting this Privacy Notice, I expressly consent to Enature processing my personal data under the terms of this Privacy Notice.
Last updated: 01/09/2024