Estafeta Mexicana, S.A. DE C.V. Privacy Notice

IDENTITY AND ADDRESS OF THE RESPONSIBLE PARTY. ESTAFETA MEXICANA, S.A. DE C.V. (Estafeta), with address at Av. José Vasconcelos número 105, Piso 4, Col. Hipódromo Condesa, Del. Cuauhtémoc, C.P. 06170, Mexico City, is responsible for the treatment of your personal information.

PERSONAL DATA COLLECTED. In order to establish a legal relationship between Estafeta and the Holder, Estafeta will collect the following categories of Personal Data: (i) Identification Data, (ii) Images, videos and sounds from the video surveillance cameras of Estafeta's facilities and perimeter area, (iii) Contact data, and (iv) Tax and/or patrimonial data.

SENSITIVE PERSONAL DATA. Estafeta does not collect sensitive personal data; if necessary, your express consent will be requested for such purposes. Any other information that you provide to us and is not required in accordance with this Privacy Notice will be immediately deleted from Estafeta's databases.

PRIMARY PURPOSES. In order to establish a legal relationship between Estafeta and the Data Holder, Estafeta will process the Personal Data for the purposes described below:
1. Quotation and provision of courier, parcel, warehousing and logistic services that you require. 2. Sending information regarding the status of the service and/or product contracted, as well as tracking them through our platforms. 3. Manage and process payments for services and/or products. 4. Issue the corresponding tax receipts for the services and/or products contracted. 5. Manage and allow access to your account, in case of registering in any of Estafeta's web platforms. 6. Process and attend your requests in case you contact our customer service department. 7. Estafeta may carry out video-surveillance inside and in the perimeter area of its facilities in order to preserve and guarantee your security and that of Estafeta's facilities.

SECONDARY PURPOSES. Likewise, Estafeta may process the Personal Data for purposes that do not give rise to the legal relationship between Estafeta and the Holder, nor are they necessary for the existence of the legal relationship between Estafeta and the Holder, which consist of: 1. Conduct surveys to evaluate the quality of the services and/or products provided by Estafeta. 2. Send you by various means information regarding our services, products and promotions. 3. Invite you to participate in raffles, sweepstakes, contests, events and incentive programs. In case you do not want your personal data to be processed for any of the purposes described in this section, please send an email to datospersonales.clientes@estafeta.com; In case you do not express your refusal for the processing of your personal data within a period of 5 business days, it will be understood that you have given your consent.

USE OF COOKIES AND WEB BEACONS. We inform you that on our website we may make use of cookies, web beacons and other tracking technologies that allow us to fulfill the purposes informed in this Privacy Notice. The different types of cookies we use are:

Essential cookies: to enable you to make proper use of our website, so they cannot be disabled.
Cookies to remember your preferences and experience: these cookies allow us to remember your preferences, navigation options and personalized functions.
Cookies for performance and analytics purposes: we may use our own and third party cookies to identify how you use our Services in order to improve their performance and future developments.
First-party and third-party advertising cookies: we may place first-party and third-party advertising cookies (such as business partners and group companies) to show you advertising that we consider relevant to you.

You can disable the use of cookies through your browser by following the procedure established by your browser. Here is some information about the procedure established in the following browsers:
Internet Explorer: Tools -> Internet Options -> Privacy -> Settings. For more information, you can refer to Microsoft support or the browser's Help. Firefox: Tools -> Options -> Privacy and Security. For more information, you can refer to Mozilla support or the browser's Help. Chrome: Settings -> Security verification and/or -> Privacy and Security. For more information, you can refer to Google support or browser Help. Safari: Preferences -> Security. For more information, you can refer to Apple support or the browser's Help. Edge: Settings -> Privacy, search and services and/or Site permissions. For more information, you can refer to Microsoft support or the browser's Help.

TRANSFERS. In order to adequately provide the service we perform various transfers and/or referrals of data.
Personal data may be transferred or forwarded to subsidiaries or affiliates of Estafeta, with the understanding that your personal data will at all times be treated in accordance with the consent given in this Privacy Notice and with the understanding that such subsidiaries and affiliates operate under the same personal data protection policies as Estafeta and always subject to confidentiality obligations.
Your personal data may be transferred in case it is necessary for compliance with the law or by requirement of competent authority duly founded and motivated, at all times Estafeta will ensure that the information disclosed is strictly indispensable under the law or requirement.

Your personal data may be shared with the recipient and you declare that you obtained the personal data from the recipient in a lawful manner.
For the purpose of collections through our websites Estafeta uses third party payment processing providers, such third parties are obliged to keep your data under the strictest confidentiality and to use them exclusively for the purposes authorized by Estafeta in accordance with this Privacy Notice.
Any additional transfer of data that Estafeta performs and requires your consent will be notified to you personally so that you can consent or deny such consent.

ARCH RIGHTS AND REVOCATION OF CONSENT. You have the right to know what personal information we have about you, what we use it for and the conditions of the use we make of it (access). Likewise, it is your right to request the correction of your personal information in case it is outdated, inaccurate or incomplete (rectification); to have it removed from our records or databases (cancellation); as well as to oppose the use of your personal data for specific purposes (opposition). These rights are known as ARCO rights.
To exercise your ARCO rights, you must send your request to the Data Protection Department at datospersonales.clientes@estafeta.com The request must contain the following information
1. Name of the owner of the data. 2. Address and e-mail address to notify you of the response to your request. 3. Clear and precise description of the data with respect to which you are seeking to exercise the corresponding right. 4. Purpose of the request. 5. Any element that facilitates the location of the data.
Likewise, you must attach a copy of your identification and, if applicable, the document proving your legal representation.

The deadline for responding to the request will be 20 working days from the day on which the request to exercise ARCO rights was received. The response will be communicated to you within the aforementioned period to the email address you provided in your request or by sending a letter to the address provided in your request. Once such notification is received, you will have a period of 15 working days to make it effective if appropriate.
At any time, you may revoke the consent granted for the processing of your personal data, so that Estafeta stops using them. To do so, you must submit a request in the terms mentioned, for the exercise of ARCO rights. The procedure to follow will be the same as the one provided for the exercise of ARCO rights. If your request is granted, your data will no longer be processed by the Data Controller.

MEANS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL DATA. Your personal data will be treated under the strictest confidentiality, taking care of the administrative, physical and technical security measures that Estafeta implements in its internal security policies and procedures, avoiding the possible illicit disclosure of data and limiting its use to what is established in this Privacy Notice.

Estafeta is committed to use reasonable means of protection to ensure the security of personal data. In the event of a breach that affects the security of personal data, Estafeta undertakes to immediately notify the holder of the nature of the incident, the personal data compromised, recommendations that the holder may adopt, immediate corrective actions and the means to obtain more information.

CHANGES TO THE PRIVACY NOTICE. This privacy notice may undergo modifications, changes or updates derived from new legal requirements; our own needs for the products or services we offer; our privacy practices; changes in our business model, or legislative reforms.

Any changes to this Privacy Notice will be informed to you through the following means: (i) by notice sent to the email address you have provided to us and/or (ii) by posting on www.estafeta.com or www.tienda.estafeta.com If the purposes for which your personal data are processed change, your consent will be requested again if necessary.
Date of update: March 4, 2024