PRIVACY NOTICE

PLEASE READ THIS PRIVACY NOTICE CAREFULLY TO UNDERSTAND HOW WE PROCESS YOUR PERSONAL DATA. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, PLEASE EXPRESSLY STATE SO.

HULSE S.A.P.I. de C.V., with address at [Address to be defined], USA, will be responsible for processing your personal data in accordance with this Privacy Notice; this means it will be in charge of how to use and protect your data.

What data will be collected?

The personal contact and/or identification data that the responsible party will process are: name, age, address, email, phone (mobile and/or landline), photographs and information shared by the Data Subject on social networks that is directly related to any of the brands owned by the responsible party, and where applicable, tax regime and use, and Federal Taxpayer Registry.

Sensitive Data

The responsible party will not collect or process sensitive data.

For what purpose do we process your personal data?

The Personal Data in possession of the responsible party will be used for the following purposes:

Necessary purposes:

• To fulfill obligations derived from the legal relationship between the Data Subject and the responsible party;
• To attend to requests related to the purchase and sale of products that you make through the Website or any of the contact channels, whether physical or digital;
• To deliver the products purchased through third parties contracted by the responsible party;
• Billing and collection for services;
• Maintaining records to track delivery, warranty and refund requests for products you purchase;
• To inform about changes or new products or services that are related to the contracting that the Data Subject may carry out;
• To evaluate the quality of service and products purchased.

Different purposes:

• Studies, records, statistics and analysis of information;
• Maintaining records for future requests;
• Statistical and market analysis;
• Maintaining the relationship with the Data Subject;
• Promotion of products and/or services.

In case the Data Subject does not wish the Responsible Party to process their personal data for the purposes provided in the "Different purposes" section above, please express your refusal by sending a written communication to the following email address: hola@hulse.mx.

Transfer

The Responsible Party may transfer the following personal data: name, address, postal code, email and phone to its subsidiaries, subsidiaries, controlling companies, affiliates and/or that belong to the same control group of the Company, for the purpose of such companies identifying the Data Subjects and offering and/or promoting the different goods, products and/or services of such Affiliates, as well as to carry out commercial prospecting.

The Responsible Party will not exchange, share, publish, disseminate, assign or sell your personal data to third parties unrelated to the Responsible Party, for purposes that are not necessary to fulfill obligations derived from the legal relationship between the Data Subject and the Responsible Party.

In case the Data Subject's Personal Data is required by a competent authority of any kind, it will be delivered to the latter in accordance with current legislation. In compliance with the provisions of applicable legislation, this data will be made available to them.

The transfers of Personal Data referred to in this section do not require the consent of the Data Subjects in accordance with the provisions of article 37 of the Law.

Limitation of use and disclosure of personal data

Data Subjects may limit the use and disclosure of their personal data in possession of the Responsible Party. For this, it will be sufficient to send a written message to the following address: hola@hulse.mx, Monday to Friday from 9:00 to 17:00 hrs., indicating the limitation to the use or disclosure of the desired data.

Request for access, rectification, cancellation or opposition of personal data and revocation of consent (ARCO rights)

All your personal data is processed in accordance with applicable and current legislation, therefore Data Subjects have at all times the right to access the personal data that the Responsible Party has and the details of their processing, as well as to rectify them in case they are inaccurate or incomplete; cancel them when they turn out to be excessive or unnecessary for the purposes that justified their obtaining; and oppose their processing.

Means to exercise ARCO rights (access, rectification, cancellation and opposition)

To initiate a request regarding ARCO rights, the Personal Data subject must submit a written request addressed to the Personal Data Department at the following address: hola@hulse.mx, Monday to Friday from 9:00 to 17:00 hrs., and containing the following information: i) The name of the Data Subject and their address or email to communicate the response to their request; ii) Documents that prove their identity, or the legal representation of the data subject; iii) Clear and precise description of the personal data regarding which any of the ARCO rights is sought to be exercised; and iv) Any other element or document that facilitates the location of personal data.

Means to revoke consent

At any time Data Subjects may request the revocation of consent granted to the Responsible Party to process their personal data. For this, it is sufficient to send a written request addressed to the Personal Data Department at the following address: hola@hulse.mx, Monday to Friday from 9:00 to 17:00 hrs., clearly detailing the data regarding which consent is revoked.

Options and means that the responsible party offers to limit the use or disclosure of personal data

Personal Data subjects have the possibility to limit the use or disclosure of their Personal Data by sending a request to the following address: hola@hulse.mx, Monday to Friday from 9:00 to 17:00 hrs., indicating the desired limitation to the use of their personal data.

Measures to protect personal data

To prevent unauthorized access to personal data and to ensure that information is used for the purposes established in this Privacy Notice, the Responsible Party has established physical, electronic and administrative procedures to prevent the use or disclosure of personal data to unauthorized third parties. These procedures are constantly evaluated and reviewed by the Personal Data Department, in order to control the use and disclosure of data.

Likewise, the Department knows and understands the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality and responsibility provided for in applicable legislation, so it will conduct and subject itself to such principles.

Notification of changes to the privacy notice

This Privacy Notice may be modified at any time to comply with legislative, jurisprudential, internal policy updates, and due to the modification of the policies of products and services offered by the Responsible Party. In such case, such modifications will be communicated in advance to the Data Subject through written communication or electronic means, depending on the information provided by the Data Subjects.

What are cookies and how are they used

Cookies are small text files that are stored on your computer or cell phone when you visit our Website. They don't take up too much space and will be automatically deleted when they expire. Some cookies expire at the end of your internet session, while others will be saved for a limited period of time.

We use cookies to facilitate your navigation on our Website, understand your interactions with us and, depending on the case, show you advertising based on your browsing history.

Accepting cookies is not a requirement to visit our Website. However, we would like to point out that the use of the "cart" on the Website is only possible with the activation of cookies. Cookies can be used to recognize your internet protocol address, which saves you time when entering our Website. We use cookies for your convenience on the Website, for example, to remember who you are when you want to modify your shopping cart without having to re-enter your email address. We also use this information to adapt our communications, such as by sending email messages with offers and promotions that are more relevant to Users. Your browser can be configured to not accept cookies, but this would restrict the use of our Website. Please accept our guarantee that the use of cookies does not contain personal data, and they are free of viruses. If you want to get more information about cookies, go to http://www.allaboutcookies.org, and to get information about deleting them from the browser, go to http://www.allaboutcookies.org/manage-cookies/index.html. The "help" button found in the toolbar of most browsers will tell you how to avoid accepting new cookies, how to make the browser notify you when you receive a new cookie or how to disable all cookies.

Acceptance of terms

I declare under oath that I have read this Privacy Notice in its entirety and fully understand its scope and content. Through this document I grant my consent for the Responsible Party to process my personal data in accordance with this Privacy Policy. Likewise, I consent to the processing of my personal data for the "Different Purposes" described in the section "FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?".

Last update date: 01/20/2025