Vaserco, S. de R.L. de C.V. (hereinafter "Enature") in compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter the "Law") and its regulations (hereinafter the "Regulation"), hereby issues this Comprehensive Privacy Notice for suppliers, customers, employees, and any third party that has a relationship with the Company.

1. DEFINITIONS.

a) Data Subject. The individual to whom the personal data pertains or identifies.

b) Personal Data. Any information concerning an identified or identifiable individual.

c) Responsible Party. A private legal entity that oversees the processing of personal data, namely the commercial company called Vaserco, S. de R.L. de C.V.

d) Processing. The obtaining, use (which includes access, management, utilization, transfer, or disposal of personal data), disclosure, or storage of personal data by any means.

e) ARCO Rights. Rights of access, rectification, cancellation, and opposition regarding personal data.

2. RESPONSIBLE FOR THE PROTECTION OF YOUR PERSONAL DATA.

Enature, located at Bodegas de San Juan, Avenida San Miguel, number 308, Industrial subdivision, Zapopan, Jalisco, postal code 45019, is responsible for the use and protection of the personal data collected, in accordance with the terms of this Privacy Notice.

3. PERSONAL DATA.

For the purposes stated in this Privacy Notice, Enature may collect your personal data in various ways: when you provide it directly, when you visit our website and social media, by filling out online purchase requests, and when we obtain information through other sources permitted by law.

Personal data we collect directly:

a) Identification personal data: name(s) and surname(s).

b) Contact data: address, contact phone number, and email.

c) Internet activity data: browsing history, search history, and other information about consumer interactions with our website.

d) Financial-asset data: bank accounts.

Please be informed that Enature will not request sensitive data of any kind.

4. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA.

Enature collects, uses, and stores, to the extent permitted by applicable laws, personal information for the purposes described below:

Main purposes:

a) Sale of products and/or provision of services;

b) Verify your identity;

c) Fulfill obligations contracted with our clients, suppliers, distributors, and authorities;

d) Analysis of preferences and business needs;

e) Sending information about the products we market;

f) Administrative purposes: issuing invoices and follow-up;

g) Prevention of fraud and credit risks;

h) Address your questions, complaints, clarifications, claims, and suggestions as a customer;

i) Preparation of contracts or other corporate documents.

Secondary purposes:

a) Create and maintain business relationships with our customers, suppliers, and distributors;

b) Create and maintain safety and health measures in our products;

c) Marketing, advertising, or commercial prospecting;

d) Operation and improvement of our website and social media;

e) Analysis of product usage, market segmentation, and statistics.

2 It should be noted that the processing of personal data by Enature will be limited to fulfilling the purposes set forth herein and, in the event that it is intended to process your personal data for a purpose other than that established in this Privacy Notice, Enature will require your consent for such purpose.

5. SECURITY OF PERSONAL DATA.

Enature implements necessary security measures, technical, administrative, and physical, to protect your personal data and prevent its damage, loss, alteration, destruction, or unauthorized use, access, or processing, and will carry out the following actions:

(a) Confidentiality of information. Enature will maintain confidentiality regarding your collected personal data, which will persist even after fulfilling the objectives for which they were collected.

(b) Confidentiality Notification. In the event that, for any reason, Enature needs to provide your personal data to third parties (under the terms provided in the Law or in this Privacy Notice), it will notify those third parties of their obligation to comply with the provisions of the Law and the confidentiality of your personal data.

(c) Database Management. Personal data is managed and safeguarded through the use of databases, by designated individuals for this purpose, without allowing its use, consultation, handling, or access to unauthorized persons.

6. CONSENT.

If the data subject does not express opposition by written request to the content and scope of this Privacy Notice, within a period of 7 (seven) days from the date on which Enature informs you about this Comprehensive Privacy Notice or its modifications, it will be understood that you give your tacit consent for Enature to process your personal data based on the purposes herein.

If you wish to revoke your consent or limit the use or disclosure of your personal data, in relation to one or more of the purposes of its processing, you may express this at any time by submitting a written request to the email address: hola@enature.com.mx. Within a maximum period of 20 (twenty) days from the date of receipt of your revocation request, we will respond regarding the validity of the request via email, sent to the email address you provided in the request or sent by postal service to the physical address you indicated for such purposes (the twenty days will be considered fulfilled at the moment the document is delivered to the postal service).

7. ARCO RIGHTS.

The data subject has the right to know which of their personal data is stored, for what purposes it is used, and the conditions under which it is used (Access). It is also their right to request the correction of their personal data in case it is outdated, inaccurate, incomplete, or erroneous (Rectification). Similarly, they may request that their data be deleted from records or databases when they believe it is not being used appropriately (Cancellation). Alternatively, they may oppose the use of their personal data for specific purposes (Opposition). This set of rights is recognized by the Political Constitution of the United Mexican States and regulated by the General Law on the Protection of Personal Data Held by Obligated Subjects.

8. EXERCISE OF ARCO RIGHTS.

In terms of the Law and its regulatory provisions, in your capacity as the data subject, or through your duly accredited legal representative, you may submit or send a request to the personal data area of Enature for the revocation of your consent, or for access, rectification, limitation, cancellation, or opposition regarding the same. The request for your ARCO rights must be sent by email to the address hola@enature.com.mx

Enature will be responsible for managing the requests of the data subjects for the exercise of the ARCO rights referred to in the Law and other applicable legislation.

9. NOTICE ABOUT COOKIES AND WEB BEACONS.

Enature uses various technologies to improve the efficiency of its websites, including your experience when browsing those sites. Among these technologies is the use of cookies. Cookies are small amounts of information that are stored in the browser used by each user so that the server can remember certain information that it can use later. This information

3 allows for the identification and storage of your personal preferences to provide you with a better browsing experience. Web beacons, on the other hand, are images embedded in a webpage or email that can be used to monitor a visitor's behavior, such as storing information about the user's IP address, the duration of interaction on that page, and the type of browser used, among others.

10. CHANGES TO THE PRIVACY NOTICE.

Enature reserves the right to make modifications or updates to this Privacy Notice at any time, in response to legislative or jurisprudential developments, internal policies, new requirements for the provision or offering of its products and services, or due to business practices. Therefore, it is the responsibility of the data subject to periodically review this Privacy Notice. Consequently, if Enature modifies the content of this Privacy Notice, it will notify you via email so that the data subject can exercise their ARCO rights.

11. TRANSFER OF PERSONAL DATA.

Your personal data may be transferred unless you (the data subject) expressly state your opposition, in accordance with the provisions of the Law and its Regulations. In these cases, Enature will carry out the transfer of personal data after entering into confidentiality agreements, provided that the third party to whom the data is transmitted agrees to subject the processing of personal data to this Privacy Notice, and it does not fall under any of the assumptions established in Article 37 of the Law. If you do not express your opposition to your personal data being transferred to third parties, it will be understood that you have tacitly granted Enature your consent for this.

12. COMPLAINT TO INAI.

If you believe that your right to the protection of your data has been violated by any conduct or omission on our part, or if you believe there has been a violation of the provisions set forth in the Federal Law on the Protection of Personal Data Held by Private Parties, its regulations, and other applicable regulations, you may file your complaint with the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI). Enature will communicate the determination made to the data subject within a period not exceeding 20 business days from the date the request was received.

13. APPLICABLE LEGISLATION AND JURISDICTION.

This Privacy Notice will be governed and interpreted in accordance with the provisions of the applicable Mexican legislation in force, especially the Federal Law on Personal Data Held by Private Parties and its Regulations. In the event of any controversy, dispute, or conflict related to this Privacy Notice, the parties will submit to the jurisdiction of the competent Courts and Tribunals of the First Judicial District in the State of Jalisco.

14. STATEMENT OF THE PERSON WHOSE PERSONAL DATA IS COLLECTED.

By accepting this Privacy Notice, I give my express consent for Enature to process my personal data under the terms of this Privacy Notice.

Date of last update: 01/09/2024