Privacy Policy

This Privacy Notice (the "Notice") establishes the privacy policies of Valafnc S.C. ("Vala", "we", "us" or "our") with offices located at Aguascalientes 177, Colonia Hipodromo, Delegacion Cuauhtemoc, CP06100, Mexico City, Mexico, and of any affiliate, subsidiary or related party, applicable with respect to the processing of personal data (the "Personal Data") through its respective websites (the "Site"), email, telephone or any other means through which your Personal Data is collected and processed, as detailed below (the "Channels"). We are committed to protecting your privacy when you visit, use, consult, review, register and request any information through our Site or our Channels. Vala is committed to complying with all provisions established by the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, guidelines and recommendations (the "Data Protection Law").

Please read the following information to learn how your information may be processed through the Site or, where applicable, the Channels and how it is handled. You acknowledge that our Notice is part of our Terms of Use, and by accessing or using our Site or, where applicable, the Channels, you accept all its terms and conditions. If you do not agree with these terms, please do not use the Site or, where applicable, the Channels.

We reserve the right to change our Notice at any time. Such changes, modifications, additions or deletions shall take effect immediately upon notification, made either by notice to the email address you provided as a registered user, by posting the updated Notice on our website, or by direct communication if you contact us through our Channels. You acknowledge and agree that as a user of our Site or, where applicable, the Channels, it is your responsibility to maintain a valid email address and/or telephone number, as well as to periodically review our Notice on the Site or, where applicable, the Channels, to be aware of any modifications. Your use of the Site or, where applicable, the Channels, after such modifications are made shall constitute: (a) your acknowledgment of said modifications to the Notice, and (b) your consent to the terms of the modified Notice.

Types of Information Collected

The type of information we collect depends on the use and purpose for which you contact us on the Site, or where applicable, the Channels. We collect Personal Data that you have voluntarily provided directly to us. We do not collect any personal data about you unless you voluntarily provide it to us. You will have the opportunity to review the information you send us before completing any order, form or registration. The means through which we collect information are:

• Email
• Telephone
• Website

1.1 Data Collection

1.1.1 Personal Data

This refers to information derived from the relationship between you and Vala, which allows us to identify you as an individual. You provide us with certain Personal Data when you:

• Register with us to obtain or use Vala's services;
• Participate in sweepstakes or contests sponsored by us;
• Sign up for special offers from third parties selected by Vala;
• Send email messages or comments, submit forms or transmit any other information by email;
• Complete a survey.

Your participation in such activities is completely optional. If you choose to participate in such activities, we may require you to provide us directly with Personal Data, provided that such information is necessary for us to fulfill your requests in relation to any of such activities, such as the following:

• Your full name (first name(s) and last name(s));
• Billing and shipping address, including your zip code;
• Email address;
• Telephone number and fax number.

Depending on the activity, certain information you provide directly will be identified and classified as mandatory and voluntary, respectively. The requested information will be mandatory if it is required for the purpose of contacting you. If you do not provide the information identified as mandatory for a particular activity or service, you will not be able to participate in that activity or service.

You have at any time the right to access, rectify and cancel your Personal Data or oppose its processing as indicated in Section 4 of this Notice.

Use of Information

We limit the use of Personal Data to the specific purposes that Vala requires, as established in our Notice. We take all reasonable measures to ensure that Personal Data is useful for its intended use, as well as to keep it updated; however, it is your responsibility to provide us with accurate data.

2.1 Purposes for Processing Your Personal Data

We use your Personal Data to:

• Provide our services to you, as required by our agreements with you, as well as to resolve conflicts or disputes and to comply with our agreements, including the Terms of Use of our Site and this Notice;
• Provide a better experience and greater efficiency in your purchases;
• Improve our marketing and promotion efforts for our services;
• Statistical analysis of the Site, or where applicable, the Channels used;
• Improve our product and service offerings;
• Improve our services;
• Contact you regarding administrative notices and/or send you occasional emails or periodic mailings regarding our products, services, special offers and events that may be of interest to you.

If you do not wish to receive this information, please click on the "Unsubscribe" link that appears in our emails and newsletters or contact us at the address or telephone number that appears in this Notice and we will remove your name from our mailing lists.

Disclosure and Transfer of Information

Vala does not sell, under any circumstances, your Personal Data such as your name, address, email address or telephone number, to any company. We offer some of our services through agreements with our subsidiaries, affiliates, processors, marketers, related parties, contractors, authorized distributors and other third parties that require us to share your Personal Data in order to offer those services. On the other hand, we recommend our service providers to adopt and guarantee at least the same rights recognized in this Notice; the use of Personal Data by our service providers shall be governed by their privacy policies, but in all cases shall be limited to the purposes for which your information is collected and processed under our Notice.

Eventually, a law or court order may require us to provide Personal Data to comply with a court order, subpoena or other legal process; in such cases, and to the extent necessary to comply with national security requirements, public interest or to comply with obligations established in the corresponding legislation, we may disclose your Personal Data. We reserve the right to report to the corresponding government authorities any activity that we in good faith consider to be illegal or unlawful.

Additionally, since Vala's operations and business are transnational, Vala may unify certain elements of its administration and processing of your information. Consequently, Vala may transfer or provide your Personal Data to its subsidiaries, affiliates, or any other third party, both within and outside the country where you reside. Similarly, we may buy or sell all or part of our business or the business of a third party. All or part of your Personal Data may be transferred to a new business or owner as a result of such transactions; however, your personal information will continue to be protected by Vala's Privacy Notice in effect at that time, unless otherwise agreed between you and Vala.

Please note that your decision to provide your Personal Data to Vala shall constitute proof of your consent to the processing of your Personal Data and to the transfer of such data to third parties within the purposes of our Notice. If you do not give your consent to any of the persons mentioned above, except in the case of a transfer for which, according to the law, your consent is not required, you may object to such transfer as established in Section 4 of this Notice.

4. Exercise of ARCO Rights

At any time you may request from Vala (i) access, rectification, cancellation and opposition to the processing of your stored Personal Data, (ii) the limitation of the use or disclosure of such Personal Data, (iii) restriction of the transmission of Personal Data to third parties, (iv) revocation of consent for its use, at any given time, as well as (v) any inquiry, question or request regarding our Notice and/or the processing of your Personal Data. For such purposes, please access the Site by logging into your account, or change your preferences on the Site by clicking on the corresponding link to update your profile contained in our emails and newsletters, or contact us by writing to: contacto@valafinance.mx.

Any request must comply with the following: a) The user's name and address, email address, telephone number or any other means to communicate the response to your request, b) documents proving identity or, where applicable, regarding the representative or legal attorney of the owner of the Personal Data; c) include a clear and precise description of the Personal Data regarding which any of the aforementioned rights are to be exercised, and d) any other element or document that facilitates the location of your Personal Data.

Vala will notify the user or their representative or legal attorney within a maximum period of ten (10) business days from the date of receipt of the request, of the resolution taken through the means indicated by the user in their request.

In case the access, rectification, cancellation or opposition to your Personal Data is admissible, it shall take effect within ten (10) business days following the date on which the response is notified to the user.

The request by the owner of the Personal Data will be denied in the following cases:

• When the requester is not the owner of the Personal Data, or their representative or legal attorney is not duly accredited for such purpose;
• When the Personal Data is not found in Vala's database;
• When there is a legal impediment or a resolution from the relevant authority restricting access to the Personal Data, or that does not allow the rectification, cancellation or opposition thereof; and
• When the rectification, cancellation or opposition has been previously completed.

Notwithstanding the foregoing, since we maintain a historical record of transactions carried out, you may not require us to delete the information associated with transactions that have been previously carried out on the Site. In addition to the foregoing, there will be information that cannot be completely deleted due to backup copies. You may be denied access to your personal information.

5. Relevant Considerations of Our Website

5.1 Security of Information

You can be assured that Vala will take reasonable steps to protect your Personal Data in our possession from loss, misuse, unauthorized access, disclosure, alteration, and destruction as mandated under Mexican Data Protection Law.

5.2 Cookies

When using our Site, we may collect information through cookies and/or other technologies, such as visit counters (pixel tags or web beacons), on your computer in order to facilitate and personalize your use on our Site. A cookie is a small text file of data that a website stores on your computer's hard drive (if your web browser allows it) for data storage purposes. You will always be able to reject our cookies if your web browser allows it.

The "Help" box located on the toolbar in most browsers will tell you how to prevent your browser from accepting new cookies, as well as how to have the browser notify you when you receive a new cookie or how to disable cookies completely. However, consider that cookies will allow you to take full advantage of some of the Site's features and these features may not be available to you if you disable cookies.

Additionally, we allow certain advertisers to display advertisements on our Site. These advertisers may place an independent cookie on your computer if you click on their link. Vala does not provide any of its advertisers with any type of Personal Data; however, Vala will not have access to or control over the cookies used by said advertisers. Vala also uses session cookies to remember your registration.

5.3 Links and Privacy Policies of Other Sites

Our Notice applies only to information collected by Vala. In case you are visiting our Site, once you click on a link to another website ("Linked Site"), you will leave our Site. Our Notice will not govern the content or privacy practices of any Linked Site. We recommend that you review the privacy statements of each and every Linked Site or other websites that collect Personal Data. You should contact advertisers, other websites or Linked Sites directly if you have any questions about their privacy policies or use of the information they collect.

5.4 Other Data Privacy Related Matters

a) Publication through public areas. You should understand and therefore take your precautions that when Personal Data is voluntarily disclosed (i.e., your name, email address, etc.) in any public area of the Site, that information, along with any information disclosed in your communication, may be collected and used by third parties and may result in unsolicited messages from third parties. These activities are outside our control and our Notice does not apply to such information. Any submission of information through public areas on the Site will be accepted on the understanding that it will be accessible to any third party. If you do not want your comments to be seen by third parties, you are advised not to make any publication in such areas.

b) User Registration and Password. When using our Site, you are solely and exclusively responsible for maintaining the confidentiality of your password and/or account information. To ensure the effectiveness of your password, we recommend that you do not disclose your user identification or password to any person. Please be careful and responsible when you are on the Internet.

6. Contact Information

If you have any questions about our Notice or if you believe that your Personal Data has been processed or disclosed in violation of our Notice, please contact us by sending a letter to:

You may also contact us by email at contacto@valafinance.mx.

We will investigate and seek to resolve complaints and disputes related to the use and disclosure of your Personal Data.