Privacy Notice

Last updated: February 2026

I. Data Controller

CAPAFIN Consultoría Financiera S.A. de C.V. (hereinafter, "CAPAFIN"), residing in Mexico City, is responsible for processing your personal data, in strict compliance with the Federal Law on Protection of Personal Data Held by Private Parties.

II. Personal Data We Collect

To provide our strategic and financial consulting services, we collect the following data:

  • Identification data (name, official ID, Tax ID).
  • Contact data (email, phone, address).
  • Financial and patrimonial information relevant to consulting projects.
  • Employment and professional data.

III. Purposes of Processing

The personal data we collect from you will be used for the following necessary purposes:

  1. Provide the contracted financial and strategic advisory services.
  2. Perform risk analysis and due diligence.
  3. Maintain direct communication regarding the status of your projects.
  4. Comply with legal obligations before financial and fiscal authorities.

IV. Data Transfer

CAPAFIN may transfer your personal data to national or foreign third parties when strictly necessary for the fulfillment of consulting services, for external audits, or when required by a competent authority. In all cases, we ensure that third parties maintain security levels equivalent to ours.

V. ARCO Rights

You have the right to know what personal data we hold about you (Access), request correction of your information (Rectification), have it deleted from our records (Cancellation), or oppose its use for specific purposes (Opposition).

To exercise these rights, you must submit a written request via email to: privacidad@capafin.com

VI. Security Measures

CAPAFIN has adopted and maintains administrative, technical, and physical security measures necessary and within its reach to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

VII. Use of Tracking Technologies

Our internet portal uses cookies and other technologies through which it is possible to monitor your behavior as a user to provide you with a better service and experience when browsing our page. The personal data obtained is technical and does not allow direct identification of the holder.

VIII. Consent

By providing your personal data physically, electronically, or by any other means, you confirm that you have read this Privacy Notice and grant your consent for your data to be processed as described herein.

IX. Changes to the Privacy Notice

CAPAFIN reserves the right to make modifications or updates to this Privacy Notice at any time, to address legislative developments, internal policies, or new requirements for the provision of our services.

X. Jurisdiction

This Privacy Notice and the processing of your personal data are governed by the Federal Law on Protection of Personal Data Held by Private Parties and other applicable laws and regulations of the United Mexican States.