Privacy Notice

COMPREHENSIVE PRIVACY NOTICE

Last updated: July 14, 2026.

Embrotex, S.A. de C.V. recognizes the importance of protecting the privacy and personal data of its customers, prospects, suppliers, representatives, business contacts, and website users.

The purpose of this Privacy Notice is to clearly inform you about the personal data we collect, the purposes for which it will be used, the parties with whom it may be shared, and the means available to exercise your rights regarding its processing.

Personal data will be processed in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties, its implementing regulations, and other applicable provisions.

1. IDENTITY AND ADDRESS OF THE DATA CONTROLLER

Embrotex, S.A. de C.V., hereinafter “Embrotex,” with its registered office at 216 Juan Sánchez Azcona, Colonia Regina, Monterrey, Nuevo León, Mexico, ZIP Code 64290, is responsible for determining how the collected personal data will be processed.

Contact information:

• Phone: +52 81 8331 8388.
• General email: contacto@embrotex.com.mx.
• Email for privacy-related matters: contacto@embrotex.com.mx.
• Website: https://www.embrotex.com
• Website: https://www.embrotex.com.mx
• Website: https://www.embrotex.promo

For the purposes of this Privacy Notice, the department responsible for handling requests related to personal data will be Embrotex’s Marketing Department, which can be contacted via email at contacto@embrotex.com.mx.

2. PERSONS TO WHOM THIS NOTICE APPLIES

This Privacy Notice applies to the processing of personal data of:

• Prospects and customers.
• People who request information or quotes.
• Representatives, employees, or contacts of clients and prospects.
• Suppliers and their representatives.
• Visitors and users of our websites and social media platforms.
• People who contact Embrotex via email, phone, instant messaging, social media, or digital forms.
• Attendees of events, exhibitions, promotions, or activities organized by Embrotex.
• Individuals whose information appears in files, photographs, designs, documents, or materials submitted by our clients or prospective clients.

3. WAYS WE COLLECT PERSONAL DATA

Embrotex may collect personal data:

1. a) Directly from the data subject, when they contact us, request a quote, provide information via a form, place an order, enter into a business transaction, participate in a survey, attend an event, or provide documents or files.
2. b) Through electronic means, such as our websites, forms, email, messaging tools, social media, videoconferencing platforms, customer management systems, or online services.
3. c) Through authorized third parties, such as the company or organization for which the data subject works, representatives, distributors, suppliers, business contacts, or individuals who request a project on behalf of others.
4. d) Through publicly available sources or sources permitted by applicable law, such as business directories, corporate websites, public records, and professional networks, provided that the processing is consistent with the disclosed purposes.
5. e) Through tracking technologies, such as cookies, tags, pixels, server logs, and analytics tools, as described in this Notice.

4. PERSONAL INFORMATION WE MAY COLLECT

Depending on the relationship with the data subject and the product or service requested, Embrotex may collect some of the following categories of data:

4.1 Identification Information

• First and last name.
• Handwritten or electronic signature.
• Position or title.
• Username or account identifiers.
• A copy of an official identification document, only when necessary for a specific transaction or procedure.
• CURP.

4.2 Contact Information

• Residential, business, tax, or shipping address.
• Landline phone.
• Cell phone.
• Email.
• Contact information via messaging apps.
• Website.
• Professional social media profiles or accounts.
• Preferred methods of contact.

4.3 Employment and Business Data

• The company, institution, or organization where you work.
• Position, title, department, or area.
• Work address.
• Work phone number and email address.
• Business activity or line of business.
• Company anniversary date.
• Information about the individuals authorized to request, approve, receive, or follow up on a quote or order.

4.4 Tax and Billing Information

• Federal Taxpayer Registry.
• Business name or corporate name.
• Tax System.
• Tax Address.
• Tax ID number.
• Certificate of Tax Status.
• Information required to issue tax receipts.
• Use of the CFDI.
• Billing email address.
• Data related to purchase orders, item numbers, contracts, or supplier accounts.

4.5 Financial and Balance Sheet Data

When necessary to process payments, refunds, credits, or business transactions, we may collect:

• Bank account information.
• Interbank CLABE.
• Banking institution.
• Payment references.
• Deposit or transfer receipts.
• Data related to credit terms and collections.
• Information about orders, purchases, payments, and account balances.

Embrotex will not store complete credit card information when payment is processed directly by a financial institution or specialized platform, unless it is strictly necessary and legally permitted.

4.6 Business and Customer Service Information

• History of requests, quotes, and orders.
• Products and services of interest.
• Quantities requested.
• Terms and Conditions.
• Budgets.
• Required dates.
• Communication History.
• Comments, feedback, and preferences.
• Information regarding deliveries, clarifications, returns, complaints, warranties, and after-sales support.
• Responses to satisfaction surveys.

4.7 Information Related to the Proposed Project

To analyze and provide quotes for customized products, Embrotex may collect:

• Type of project, product, or service required.
• Quantities, measurements, sizes, styles, colors, and materials.
• Personalization Techniques.
• Location and size of logos, text, images, or graphic elements.
• Delivery or production dates.
• Approximate budget.
• Production Instructions.
• Visual references.
• Descriptions of the required work.
• Technical Notes.
• Information needed to prepare samples, tests, renderings, or proposals.
• Any other specifications provided for the purpose of analyzing, quoting, producing, or delivering the project.

4.8 Files, Images, and Digital Materials

The head of the department may provide:

• Logos.
• Designs.
• Illustrations.
• Photographs.
• Images.
• Sketches.
• Fonts.
• Vector files.
• Text documents.
• Spreadsheets.
• Presentations.
• Catalogs.
• Identity Manuals.
• Graphic samples.
• Lists of names.
• Databases or lists of people.
• Photographs of uniforms, clothing, or products.
• Visual references.
• Production files.
• Other materials related to the project.

The files provided may contain names, photographs, job titles, signatures, contact information, or other personal data belonging to the data subject or third parties.

The contractor must refrain from submitting personal information that is not necessary for the bid or the execution of the project.

4.9 Data Derived from the Use of Websites and Electronic Media

We will be able to automatically collect:

• IP address.
• Browser type.
• Operating system.
• Device type.
• Digital identifiers.
• Date and time of access.
• Pages visited.
• Web Browsing
• Site of origin.
• Forms viewed or submitted.
• Interaction with ads, emails, or content.
• Approximate geographic location based on the IP address.
• Technical data related to the operation and security of the site.

4.10 Recordings and Images

Where applicable, Embrotex may collect:

• Call recordings, with prior notice to the account holder.
• Images captured by video surveillance systems installed at our facilities.
• Photos or videos taken during events.

5. SENSITIVE PERSONAL INFORMATION

Embrotex does not intentionally request sensitive personal data for the routine preparation of quotes or the marketing of its products.

Sensitive data is defined as data that may affect a person’s most intimate sphere or whose misuse may lead to discrimination or pose a serious risk, such as information regarding health, racial or ethnic origin, religious beliefs, political opinions, union membership, genetic information, sex life, or sexual orientation.

The data subject must avoid including sensitive data in files, photographs, documents, designs, or descriptions sent to Embrotex, unless such data is strictly necessary for the project and there is a valid legal basis for its processing.

If it is necessary to process sensitive personal data, Embrotex will, when legally required, request the data subject’s express consent and implement enhanced security measures.

6. PERSONAL INFORMATION OF THIRD PARTIES

When a person provides Embrotex with personal data, names, photographs, images, listings, documents, or information pertaining to third parties, that person represents that they have the necessary authorization, power of attorney, or legal basis to provide such information and that they have informed said third parties of the corresponding processing.

This may include, among other cases:

• Names that will be printed, engraved, or embroidered on clothing and/or promotional items.
• Photographs of employees or members of an organization.
• Information needed to make name tags, uniforms, or identification badges.
• Size charts.
• Delivery Addresses.
• Information on individuals authorized to receive orders.
• Contact information for administrative, accounting, or purchasing staff.

Embrotex will process this information solely for purposes related to the request, quote, customization, production, delivery, or follow-up of the project, unless another applicable legal basis exists.

The statement made by the data subject does not relieve Embrotex of its obligations as the data controller.

7. DATA ON CHILDREN AND ADOLESCENTS

Embrotex's products and services are not directly targeted at children or adolescents, so we do not intentionally collect their personal information.

When a project requires the use of names, photographs, images, measurements, or other information pertaining to minors, the person providing such information must have the authorization of the person exercising parental authority, guardianship, or legal representation, as applicable.

Embrotex may request additional documentation or statements when necessary to verify such authorization.

8. PRIMARY PURPOSES OF THE PROCESSING

Personal data will be used for the following purposes necessary to establish, develop, and maintain the relationship with the data subject:

8.1 Service and Quote

• Identify and contact the applicant.
• Receive and respond to requests for information.
• Understand the project's needs and characteristics.
• Analyze the technical, operational, and commercial feasibility of a request.
• Prepare and send quotes.
• Request additional information or files.
• Develop proposals, renderings, samples, digital mockups, or prototypes.
• Track quotes.
• Provide information on availability, prices, production lead times, and terms and conditions.
• Forward the request to the appropriate department or advisor.

8.2 Contracting, Production, and Delivery

• Record and manage orders.
• Validate designs, measurements, colors, materials, quantities, and techniques.
• Prepare production orders.
• Customize products.
• Prepare production files.
• Coordinate internal processes or those involving specialized vendors.
• Provide an update on the order status.
• Manage inventory, deliveries, and shipments.
• Deliver products to the specified address.
• Confirm receipt of products.
• Handle exchanges, inquiries, warranties, complaints, or returns.
• Provide after-sales service.

8.3 Management of the Business Relationship

• Create and manage records for customers, prospects, and suppliers.
• Handle necessary business communications.
• Prepare contracts, agreements, purchase orders, and related documents.
• Verify identities and powers of attorney when necessary.
• Manage commercial terms, credit, and collections.
• Process payments, advance payments, returns, and refunds.
• Maintain accounting and administrative records.
• Track accounts receivable and payment obligations.
• Keep records of authorizations, approvals, and communications.

8.4 Billing and Legal Compliance

• Issue tax receipts.
• Verify tax information.
• Comply with accounting, tax, commercial, and administrative obligations.
• Comply with requests from the relevant authorities.
• To exercise or defend rights in administrative, judicial, or extrajudicial proceedings.
• Prevent illegal transactions, fraud, or noncompliance.
• To fulfill the obligations arising from contracts and legal relationships.

8.5 Safety and Operation

• To protect the safety of people, facilities, systems, and information.
• Control physical and digital access.
• To prevent security incidents, fraud, abuse, or unauthorized use.
• Investigate failures, complaints, or incidents.
• To ensure the continuity and proper functioning of our systems and websites.
• Prepare backups and technical records.
• Detect automated, malicious, or activity that violates our Terms of Use.

The primary purposes are necessary to fulfill the request or maintain the legal and business relationship. Refusal to provide certain information may prevent Embrotex from preparing a quote, processing an order, issuing an invoice, manufacturing, or delivering the requested products.

9. SECONDARY OR MARKETING PURPOSES

When authorized by the data subject or when there is an applicable legal basis, Embrotex may use your contact information, business information, and interactions with our media to:

• Send advertisements, promotions, and special offers.
• Send catalogs and product updates.
• Communicate product launches, campaigns, and sales seasons.
• Invite people to events, exhibitions, demonstrations, or activities.
• Send newsletters.
• Conduct campaigns via email, phone, messaging, or social media.
• Conduct satisfaction surveys.
• Request feedback or testimonials.
• Develop customer profiles and market segments.
• Analyze the effectiveness of campaigns.
• Track opens, clicks, and engagement with communications.
• Conduct statistical, market, and commercial behavior studies.
• Display ads related to products or services that might be of interest.
• Create advertising audiences or track conversions, provided the user has accepted the relevant technologies.

These purposes are not necessary for requesting a quote or purchasing products.

The data subject may refuse or object to these purposes:

• By checking the appropriate box on our forms.
• By using the unsubscribe link included in our emails.
• By sending a request to contacto@embrotex.com.mx.
• Requesting to be added to the internal advertising opt-out list.

Refusal to consent to the processing of personal data for marketing purposes will not affect the handling of quotes, orders, warranties, billing, or communications necessary for the business relationship.

10. USE OF DESIGNS, IMAGES, AND PRODUCTS IN A PORTFOLIO

Any files, logos, designs, photographs, or other materials submitted to request a quote or place an order will be used exclusively to analyze, quote, prepare, customize, produce, deliver, or follow up on the requested project.

Submitting a design or file for a quote or production does not, in and of itself, constitute authorization for Embrotex to publish the design, brand, client name, or photographs of the finished product on its social media, website, catalogs, presentations, exhibitions, advertisements, or portfolio.

When Embrotex wishes to use such materials for promotional purposes, it will request additional authorization in writing or via an electronic medium that allows for the retention of evidence of the authorization, unless the material has already been publicly disclosed by its owner and there is a valid legal basis for the intended use.

The portfolio authorization may specify:

• Authorized materials.
• The media outlets in which they may be published.
• If the customer can be identified.
• The duration or scope of the authorization.
• The possibility of revoking it, without retroactive effect with respect to legitimate uses that have already taken place.

Consent to the processing of personal data is independent of intellectual property rights, industrial property rights, image rights, trademarks, trade names, copyrights, and any other rights that may apply to the materials.

11. INTELLECTUAL PROPERTY RIGHTS TO THE MATERIALS PROVIDED

The person providing logos, trademarks, photographs, characters, designs, illustrations, text, fonts, images, or other materials hereby declares that:

• Is the holder of the relevant rights, or
• It has the necessary licenses, permits, or authorizations to request its reproduction, modification, adaptation, or incorporation into the required products.

Embrotex may request proof of such authorizations and may reject projects when there are reasonable grounds to believe that the rights of third parties have been infringed or that there has been a legal violation.

This section does not imply that Embrotex acquires ownership of the files or materials submitted by the customer.

12. CONSENT

When consent is required, it may be obtained in writing, electronically, through checkboxes on forms, digital communications, express statements, or any other mechanism that allows the data subject’s intent to be demonstrated.

Consent will not be required in the cases provided for by applicable law, including when the processing:

• It is necessary to fulfill obligations arising from a legal relationship.
• It must be provided for by law.
• It is necessary to exercise a right or fulfill an obligation.
• It must correspond to data contained in permitted publicly accessible sources.
• It falls under some other legal exception.

Consent to receive marketing communications will be separate from the acceptance of a quote or the purchase of products.

13. TRANSFERS OF PERSONAL DATA

Embrotex may transfer personal data to domestic or foreign third parties when necessary to fulfill the purposes described and when such transfer is permitted by applicable law.

The data may be shared with:

13.1 Courier, Transportation, and Logistics Companies

To schedule, track, and make deliveries, the following may be shared:

• Recipient's name.
• Company.
• Delivery address.
• Phone.
• Email.
• Location references.
• Information strictly necessary for the order.

13.2 Production and Customization Providers

When a project requires the involvement of workshops, manufacturers, printers, embroiderers, engravers, distributors, or other specialized suppliers, the following may be shared:

• Production files.
• Designs.
• Logos.
• Measurements.
• Colors.
• Quantities.
• Technical Specifications.
• Information that is strictly necessary for manufacturing the product.

Embrotex will ensure that these suppliers receive only the necessary information and are subject to confidentiality and security obligations.

13.3 Government Authorities and Public Entities

Data may be transferred when required by a competent authority or when necessary to:

• To comply with legal obligations.
• Respond to requests.
• Participate in administrative or judicial proceedings.
• To protect the rights of Embrotex, the rights holder, or third parties.
• To prevent or investigate unlawful acts.

13.4 Advisors and Professional Service Providers

The data may be shared with legal counsel, tax advisors, accountants, auditors, insurance companies, or other professionals when necessary for the exercise or defense of rights.

14. RESPONSIBLE PARTIES AND TECHNOLOGY PROVIDERS

Embrotex may engage individuals or legal entities that process personal data on behalf of and under the instructions of Embrotex, referred to as data processors.

These providers may offer the following services:

• Web hosting.
• Email.
• Cloud storage.
• Backups.
• Customer Management or CRM.
• Digital forms.
• Marketing automation.
• Sending emails.
• Messaging.
• Payment processing.
• Billing.
• Web analytics.
• Computer Security.
• Technical Support.
• Document Management.
• Advertising and campaign measurement.

Embrotex's vendors may include: Google Workspace, Brevo, HubSpot, Salesforce, Power BI, Bluehost, GoDaddy, Cloudflare, Meta, Google Analytics, Google Ads, and WhatsApp/Meta.

Before publishing this Notice, Embrotex must confirm which services you use and review their terms, storage locations, features, and data protection mechanisms.

Those responsible must handle the information in accordance with Embrotex’s instructions, maintain confidentiality, implement security measures, and refrain from using it for their own unauthorized purposes.

Some suppliers may process or store information outside of Mexico. In such cases, Embrotex will take reasonable contractual and administrative measures to ensure that the processing is carried out in accordance with applicable provisions.

15. COOKIES AND TRACKING TECHNOLOGIES

Embrotex websites may use cookies, tags, pixels, local storage, server logs, and similar technologies.

These technologies can be used to:

• To enable the site to function.
• Remember preferences.
• Ensure safety.
• Prevent fraud or automated activity.
• Analyze traffic and performance.
• Identify errors.
• Find out which sections are viewed most often.
• Measure the effectiveness of forms and campaigns.
• Analyze opens and clicks in communications.
• Customize content.
• Track conversions.
• Display or evaluate advertisements.

The technologies used can be classified as follows:

Essential Cookies

They are essential for the operation, security, and delivery of the requested services. Generally, they cannot be disabled through the consent system without affecting the site's functionality.

Preference Cookies

They allow the system to remember the options selected by the user.

Analytics Cookies

They allow us to understand, either in aggregate or on an individual basis, how the site is used and to evaluate its performance.

Advertising Cookies

They allow you to measure campaigns, create audiences, and display ads related to users' interests or interactions.

When legally required, analytical or advertising cookies will be enabled only after obtaining the user's consent.

Users can manage their preferences by:

• The cookie panel or banner available on the site.
• Your browser settings.
• The opt-out tools offered by each provider.

Disabling certain technologies may affect some of the site's features.

16. RETENTION, BLOCKING, AND DELETION

Personal data will be retained only for as long as necessary to fulfill the stated purposes, address responsibilities arising from the relationship, and comply with legal, tax, accounting, contractual, or administrative obligations.

As general guidelines:

• Rejected applications and quotes may be retained for 24 months after the last interaction.
• Files for projects that were not accepted may be retained for 6 months.
• Records of orders placed may be retained for the duration of the business relationship and for an additional 24 months to facilitate restocking, clarifications, or subsequent orders.
• Tax and accounting records shall be retained for the periods required by applicable regulations.
• The records necessary to address warranties, claims, or disputes will be retained for as long as liabilities may arise.
• Marketing data will be retained until the data subject requests to be removed, objects to the processing, or it is determined that the data is no longer necessary.
• Data included in opt-out lists may be retained for as long as necessary to comply with the data subject's decision not to receive advertising.
• Backups will be retained in accordance with the backup and security cycles established by Embrotex.

Once the applicable retention periods have expired, the data will be blocked and subsequently deleted, destroyed, anonymized, or de-identified in a secure manner, unless there is a legal obligation to retain it.

Data cancellation may not inmediately proceed when its retention is necessary to comply a legal obligation, attend to a contractual relationship, exercise rights, respond to a claim or fall in any other circumstance permitted by law.

17. SAFETY MEASURES

Embrotex will implement reasonable administrative, technical, and physical measures to protect personal data against:

• Damage.
• Loss.
• Disruption.
• Destruction.
• Misuse.
• Unauthorized access.
• Unauthorized disclosure.
• Theft.
• Processing that is inconsistent with the stated purposes.

These measures may include:

• Access controls.
• Passwords and Authentication.
• Permission Restrictions.
• Data backup.
• Device and Network Protection.
• Privacy Policies.
• Staff training.
• Contracts with suppliers.
• Incident Management.
• Secure file deletion.
• Periodic review of access points.

No transmission or storage system can guarantee absolute security. However, Embrotex will address any incidents in accordance with its internal procedures and applicable legal obligations.

If an infringement occurs that significantly affects the economic or moral rights of the rights holders, Embrotex will notify them in accordance with applicable law.

18. CONFIDENTIALITY

Employees, suppliers, and contractors who have access to personal data must maintain its confidentiality, even after their relationship with Embrotex has ended.

Access to the data will be limited to those who need to know it in order to perform their duties or provide the corresponding service.

19. ARCO RIGHTS

The data subject or their legal representative may exercise at anytime the following rights: 

• Access: Find out what personal data Embrotex retains, how it is used, and the conditions under which it is processed.
• Correction: Request the correction or update of incomplete, outdated, or inaccurate information.
• Deletion: Request that your data be deleted if you believe it is not being processed in accordance with the law or is no longer necessary.
• Right to Object: Request that your personal data not be processed for certain purposes on legitimate grounds.

To exercise any of these rights, you must submit a request to:

Email: contacto@embrotex.com.mx
Department in charge: Marketing Department
Address for submitting applications: Juan Sánchez Azcona No. 216, Colonia Regina, Monterrey, Nuevo León, Mexico, ZIP Code 64290.
In-person office hours: Monday through Friday from 8:00 a.m. to 6:00 p.m.

The application must include:

1. Full name of the account holder.
2. A means of communicating the response.
3. Data or elements that make it possible to locate the information.
4. A clear description of the right you wish to exercise.
5. Description of the personal data involved.
6. Documentation verifying the account holder's identity.
7. If applicable, documentation proving legal representation.
8. Any information that will help process the request.

For requests for correction, please specify the required changes and provide documentation supporting the correction.

Embrotex will notify the data subject of its decision within the applicable legal timeframe. If the request is granted, it will take effect within the timeframe established by law, beginning on the date the response is communicated.

Deadlines may be extended only once when there is a valid reason, in accordance with the applicable provisions.

The response will be sent via the method specified in the request. Access may be provided through hard copies, electronic documents, direct access, or other appropriate means.

The exercise of ARCO rights will be free of charge, except for costs permitted by law related to reproduction, mailing, or delivery.

20. WITHDRAWAL OF CONSENT

When processing is based on consent, the data subject may withdraw that consent at any time, without retroactive effect.

To request revocation, please send an email to contacto@embrotex.com.mx, indicating:

• Full name.
• Contact Information.
• The processing for which you wish to withdraw your consent.
• Information that will help us locate your data.
• Documentation to verify your identity.

The revocation may not be valid or may not take effect immediately if Embrotex needs to continue processing the data to fulfill legal, contractual, or other obligations arising from a legal relationship.

21. RESTRICTIONS ON USE OR DISCLOSURE

The data subject may request that Embrotex restrict the use or disclosure of their personal data by:

• A request sent to contacto@embrotex.com.mx
• The unsubscribe link included in promotional emails.
• The settings available on the corresponding form or platform.
• Your registration on Embrotex's internal advertising exclusion list.

Opting out of advertising will not prevent Embrotex from sending necessary communications related to quotes, orders, payments, billing, deliveries, warranties, security, or legal compliance.

The account holder may also register their phone number with the Public Registry to Prevent Advertising (REPEP), administered by the Federal Consumer Protection Agency, in order to avoid receiving calls or text messages for advertising or marketing purposes. Information on registration, inquiries, cancellation, and filing complaints is available on the official REPEP website.

Registration in this registry does not replace the direct request that the data subject may submit to Embrotex to restrict the use of their personal data or to stop receiving promotional communications.

22. AUTOMATED DECISIONS AND PROFILING

Embrotex may use automated rules to:

• Assign requests to an advisor.
• Classify propsects according to the product of interest.
• Segment communications.
• Identify the source of a request.
• Measure interactions with campaigns.
• Prioritize sales follow-ups.
• Recommend related products.

These activities will not, on their own, produce adverse legal efects for the the holder nor will they substitute the decisions that require human evaluation.

The account holder may request general information about these activities and object to personalized marketing by emailing contacto@embrotex.com.mx or through the corresponding preferences panel.

23. SOCIAL MEDIA AND THIRD-PARTY SERVICES

Interaction with Embrotex's social media accounts is also subject to each platform's terms of service and privacy notices.

Embrotex may access the information that users make public or share through these platforms, in accordance with their privacy settings.

Embrotex websites may contain links, buttons, or third-party content. Embrotex does not control the processing carried out directly by these third parties; therefore, we recommend that you review their privacy notices.

24. CHANGES TO THE PRIVACY NOTICE

Embrotex may modify or update this Privacy Notice as a result of:

• Legislative or regulatory reforms.
• New guidelines from the authorities.
• Changes to products, services, or processes.
• Adoption of new technologies.
• Changes in suppliers.
• Changes to the purposes of processing.
• Internal security or privacy practices.

The amendments will be published in:

https://www.embrotex.com/privacidad/

When changes require obtaining consent again, Embrotex will request it through the appropriate channel.

The account holder is advised to review the Privacy Notice periodically.

25. COMPETENT AUTHORITY

If the data subject believes that his or her right to personal data protection has been violated, he or she may file a complaint with the competent authority responsible for the protection of personal data held by private individuals, in accordance with applicable law.

26. ACCEPTANCE OF THE NOTICE

The publication of this Notice allows the data subject to understand the conditions under which their personal data will be processed.

When consent is required for a specific purpose, Embrotex will use checkboxes, statements, signatures, electronic records, or other appropriate mechanisms to obtain it.

General acceptance of this Notice shall not be construed as an unlimited authorization to use the data for purposes other than those stated herein.

Monterrey, Nuevo León, July 14, 2026.