Privacy notice

In compliance with the Federal Law on Protection of Personal Data Held by Private Parties (the «Law»), RESPUESTA UNIVERSAL 42 S DE RL DE CV (hereinafter «RU42»), domiciled at Av. Eugenio Garza Sada #3820 Interior 801, Col. Mas Palomas (Valle de Santiago), Monterrey, Nuevo León, México, CP 64780, issues this privacy notice to inform you about our responsibility for and treatment of your personal data.

You may contact our office at the address above, or by email at hola@ru42.mx

How do we protect your personal data?

When collecting and processing the personal data you provide us, we comply with every principle set out in the Law (article 6): lawfulness, quality, consent, information, purpose, loyalty, proportionality, and accountability.

RU42 has administrative, technical, and physical security measures in place to protect your personal data, and we require the same from any service providers we engage. Even so, RU42 does not guarantee, in any form, the security of your data, nor that it cannot be intercepted, altered, or removed by third parties.

Why do we collect your personal data?

Your personal data will be used for the following purposes:

• Issuing sales invoices.
• Filing informational returns required by tax authorities.
• Internal administrative processes such as customer service, courier/shipping, purchasing, and billing.
• RU42 marketing and sales campaigns.

The personal data we collect from you freely and voluntarily may include some or all of the following: full name, tax address, home and mobile phone number, email address, date of birth, and RFC (Mexican federal taxpayer ID).

All personal data listed above is necessary and will be used to fulfill the purposes stated in this privacy notice.

For the purposes stated in this notice, we may collect your personal data directly from you — in person or through electronic means such as email — through a legal representative you have authorized, or when we obtain information from other sources permitted by law.

How can you exercise your ARCO rights and revoke your consent?

ARCO rights refer to the rights to access, rectify, cancel, and object. You therefore have the right to access the personal data we hold about you and the details of how it is processed, to rectify or modify it if inaccurate, to request its cancellation when you consider it excessive or unnecessary for the purposes that justified its collection, or to object to its processing for specific purposes. You may also revoke any consent you have given RU42 for the processing of your data.

The mechanism we have implemented for you to exercise your ARCO rights and/or revoke your consent is by email: send a request addressed to RU42 to the email account listed at the top of this notice, and we will send you, through the same channel, a request form with instructions to complete. Your request must include, at minimum: full name, phone number (where we can reach you if needed), and address; a scanned copy of your official ID, or — if you are not the data subject — a letter of authorization or documents proving you are the subject's legal representative; the right you wish to exercise (access, rectify, cancel, object, or the express revocation of your consent to the processing of your personal data); and any other information or documentation that helps us locate your personal data.

A representative will respond to you by email within no more than 20 business days.

Who do we share your information with?

Your personal data may be transferred to the Secretaría de Hacienda y Crédito Público (SHCP) through the Servicio de Administración Tributaria (SAT) — Mexico's federal tax authority. We commit to not transferring your personal information to third parties without your consent, except for the exceptions set out in article 37 of the Law, and to carry out any such transfer under the terms established by that law.

Changes to this privacy notice

We reserve the right to make changes or updates to this privacy notice at any time, in response to legislative or judicial developments, internal policy changes, new requirements for providing our services or products, and market practices.

Any such changes will be available at our offices. Date of the last update to this privacy notice: April 10, 2021.

Rights-protection procedure

If you believe your right to the protection of personal data has been violated, you may approach INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales — Mexico's national transparency and data-protection institute) to pursue a rights-protection procedure. For more information, visit the institute's website: home.inai.org.mx

Consent to the processing of your data

If you do not agree with this notice, please let us know in writing, addressed to: RESPUESTA UNIVERSAL 42 S DE RL DE CV.