Privacy Notice – SUMIMAX MASTER COMMERCE, S.A. de C.V.

In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (the "Law"), its regulations, and applicable guidelines, we inform you of the following:

SUMIMAX MASTER COMMERCE, S.A. de C.V. (hereinafter referred to as "SUMIMAX MASTER COMMERCE, S.A. de C.V."), located in Mexico City, will be responsible for collecting your personal data, as well as for the use and protection of such data, including any data collected by its parent companies, subsidiaries, or affiliates, or by third parties contracted to provide services on behalf of SUMIMAX MASTER COMMERCE, S.A. de C.V., in accordance with this privacy notice (the "Privacy Notice").

Personal Data Collected

Due to your existing or future commercial relationship with SUMIMAX MASTER COMMERCE, S.A. de C.V., you may provide us with some of the following personal data:

• Identification and contact data: Full name and email address.

SUMIMAX MASTER COMMERCE, S.A. de C.V. does NOT collect data considered sensitive, which require a higher level of protection due to the risk that improper handling may pose to individuals' privacy and rights.

Purposes of Personal Data Processing

The personal data will be used for the following primary purposes:

• Identity Verification: To confirm the identity of users to prevent fraud and ensure that transactions are conducted securely.

• Regulatory Compliance: To ensure compliance with local and international regulations, such as anti-money laundering (AML) laws and know your customer (KYC) requirements.

• Transactions: To facilitate the purchase, sale, and transfer of services offered by SUMIMAX MASTER COMMERCE, S.A. de C.V., ensuring that transactions are processed efficiently and securely.

• Customer Service: To provide support to users, resolve issues, and respond to inquiries.

• Marketing and Communication: To send relevant information about service updates, promotions, and other related communications, provided that user consent is obtained.

• Analysis and Improvements: To analyze user behavior and site usage to enhance the services offered, identify areas for improvement, and develop new features.

• Prevention of Illegal Activities: To monitor user transactions and activities to detect and prevent suspicious or illegal activities.

Additionally, SUMIMAX MASTER COMMERCE, S.A. de C.V. may use your personal data for the following secondary purposes:

• Statistical purposes.

• To invite you to participate in events, training sessions, and promotions by SUMIMAX MASTER COMMERCE, S.A. de C.V.

• Advertising purposes.

Collection of Personal Data

We may collect your personal data in various ways: when you provide it to us directly, or when we obtain information through other sources permitted by law, always complying with the purposes outlined in this Privacy Notice.

Protection of Data of Minors

SUMIMAX MASTER COMMERCE, S.A. de C.V. will NOT collect personal data directly from individuals under 18 years of age. Only individuals over 18 may provide consent for the data collected. Parents/guardians are encouraged to regularly review and monitor their children’s use of email and other online activities to ensure they do not share personally identifiable information without prior consent. You may request the deletion of any personal data of your children at any time by sending a request to the following email address: administración@only-digital.com.

Transfer of Personal Data

Your personal data may be transferred to parent companies, subsidiaries, affiliates, or any other entities belonging to SUMIMAX MASTER COMMERCE, S.A. de C.V., both in Mexico and abroad; to third parties, domestic or foreign, for the fulfillment of the aforementioned purposes; or when such data communication is provided for by law or treaty, or when required by the competent authority.

We will ensure that such third parties maintain adequate security measures to protect your personal data and that they use it exclusively for the purposes for which it was collected, in accordance with this Privacy Notice. We will not disclose or transfer your data to unrelated third parties, except in the aforementioned cases and as provided by law.

Security Measures

We will implement the necessary technical, administrative, and physical security measures to ensure the integrity of your personal data and to prevent damage, loss, alteration, destruction, or unauthorized use, access, or processing. Only authorized personnel who have met confidentiality requirements will be allowed to participate in the handling of your data.

Authorized personnel are prohibited from allowing access to unauthorized individuals and from using your personal data for purposes other than those established in this Privacy Notice. The obligation of confidentiality remains even after the relationship with SUMIMAX MASTER COMMERCE, S.A. de C.V. has ended.

What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They are used to enhance your experience on the site, remember your preferences, and provide analytical data about your behavior on the site.

Types of Cookies We Use:

• Essential Cookies: Necessary for the basic functioning of the website. Without these cookies, some parts of the site would not work correctly.

• Performance Cookies: Collect information about how visitors use the site, such as the pages they visit most frequently. This data helps improve the functionality and performance of the site.

• Functionality Cookies: Allow the website to remember your choices (such as your username, language, or region) and provide enhanced, more personalized features.

• Advertising Cookies: Used to display ads that are relevant to you based on your interests. They also limit the number of times you see an ad and help measure the effectiveness of advertising campaigns.

You can control and manage cookies in various ways:

• Browser Settings: You can configure your browser to accept or reject cookies, or to alert you when a cookie is sent. Please refer to your browser's instructions for more details.

• Cookie Management Tools: Some websites provide specific tools to manage cookies directly from the site.

If you choose to disable cookies, some functionalities of the site may be affected, resulting in a less optimized experience. For example, you may not be able to access certain areas of the site, or some of the preferences you previously saved may not be remembered.

Rights of the Data Subject

You have the right to access your personal data that we hold and to obtain details about how it is processed. You also have the right to rectify your data if it is inaccurate or incomplete, to cancel it when you believe it is no longer required for any of the purposes stated in this Privacy Notice, or if it is being used for purposes you did not consent to. Additionally, you may oppose the processing of your data for specific purposes or limit its use or disclosure.

To exercise these rights, you must submit a request to the Personal Data Department at the following email address: administración@only-digital.com, including:

• Your name and a method for communicating the response to your request.

• Documents that prove your identity (such as a photo ID, passport, military ID, or driver's license), scanned; and if you are a legal entity, documents that prove the legal representation of the data subject (through a public deed showing the authority to carry out the act).

• A clear and precise description of the personal data regarding which you seek to exercise any of the rights.

• Any other element or document that facilitates the location of the personal data.

The response to your request will be provided, at your choice, via email. SUMIMAX MASTER COMMERCE, S.A. de C.V. will have a period of twenty business days, counted from the date the request was received or from when the data subject provided the required information, to inform you whether the request is valid. If affirmative, it will be fulfilled within fifteen days following the date of the response. The time frames may be extended once for an equal period when justified.

For more detailed information on the requirements for requests, their validity, or forms, you can contact the Personal Data Department directly at the company's address or at the email address: administración@only-digital.com.

Revocation of Consent

You have the right to revoke your consent for the processing of your personal data at any time, for which you must submit your request in accordance with the procedure and requirements outlined in the previous paragraphs.

Modifications to the Privacy Notice

SUMIMAX MASTER COMMERCE, S.A. de C.V. reserves the right to modify this Privacy Notice at any time to comply with legislative updates, jurisprudential changes, internal policies, new service requirements, or any other reason. Any modifications, as well as the updated document, will be available on the platforms or facilities where it is used.

Applicable Legislation

This Privacy Notice and the handling of your personal data by SUMIMAX MASTER COMMERCE, S.A. de C.V. are governed by the current and applicable legislation in the United Mexican States. Therefore, any disputes arising from its application must be addressed before the competent judicial authorities in Mexico City.