PRIVACY NOTICE FOR CLIENTS, CLIENT REPRESENTATIVES, USERS AND PROSPECTIVE CLIENTS OF MOVTECH CAPITAL, S.A.P.I. DE C.V.

I. Introduction.

At MOVTECH Capital, S.A.P.I. de C.V. (hereinafter referred to as "MOVTECH") we are convinced that our clients and users are our primary asset, which is why we protect them through the use, application and maintenance of high technical, physical and administrative security measures.

As our client and/or user, your personal data (hereinafter referred to as "Personal Data") will be protected and treated confidentially, as well as the personal data that you may provide us regarding your beneficiaries, references, authorized persons, and legal representatives.

II. Applicable Legislation.

The Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and the Guidelines for Privacy Notices (hereinafter collectively referred to as "Personal Data Legislation"), as well as any other law, regulation, circular, or decree applicable to MOVTECH regarding the protection and/or processing of personal data.

III. Purpose of the Privacy Notice.

This Privacy Notice aims to inform you about the type of personal data that MOVTECH collects, the purposes for processing your personal data, the transfers we may carry out, and the options available to you to exercise your rights of access, rectification, cancellation and/or opposition as provided in the Personal Data Legislation.

IV. Identity and Address of the Data Controller.

For the purposes of this Privacy Notice, MOVTECH designates as its address: Cerrada de Miguel Noreña number 10 – 1, Floor 2, colonia San José Insurgentes, alcaldía Benito Juárez, C.P. 03900, Mexico City, registered with the Federal Taxpayer Registry under the code MOV211022AT4, telephone [55-53370900] and email address contacto@movtechcapital.com, (hereinafter referred to as the "Controller") is the Controller responsible for obtaining, disclosing, storing, using, managing, leveraging, transferring or disposing of personal data (hereinafter referred to as "Processing").

V. Personal Data Processed.

MOVTECH will collect Personal Data for Processing, necessary to fulfill the adequate provision of its services, whether personally, directly through its executives, officers, employees, promoters, or indirectly through its advisors or commission agents, using mechanisms in remote or local means of electronic, optical or other technology communication, such as through our web portal www.movtechcapital.com, email contacto@movtechcapital.com, by telephone at [55-53-370999], which allow for the automatic and simultaneous collection of Personal Data, including the personal and commercial references provided by the data owner (hereinafter referred to as the "Owner"), regardless of the personal process followed with all our clients.

The Personal Data subject to Processing are as follows: full name, address, home and cell phone numbers, marital status, gender, country of origin, nationality, place and date of birth, age, valid official identification (voter ID card or passport), federal taxpayer registry (RFC), unique population registry code (CURP), advanced electronic signature number (FIEL), email address, and physical characteristics such as photographs of the data holder and their residence.

All Personal Data collected will be processed under strict security measures, always ensuring confidentiality.

VI. Processing of Sensitive Personal Data.

The provision of services and products offered by MOVTECH does not require the Processing of Sensitive Personal Data, understood as those that "...affect the most intimate sphere of their owner, or whose improper use may give rise to discrimination or entail a serious risk for them. In particular, those that may reveal aspects such as racial or ethnic origin, current and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions, and sexual preference" are considered sensitive.

VII. Purposes of Data Processing.

The Personal Data that MOVTECH collects from you will be handled confidentially, limiting its use to identification, operation, administration, and documentation of contracting processes, and may be transferred among the entities listed in this Privacy Notice, as well as to third parties with whom the Controller enters into or will enter into a legal relationship, with optimal security levels, information confidentiality clauses, and personal data protection. For the foregoing reasons, and upon reading this Privacy Notice, you grant your consent to the Controller to collect and use your personal data for the purposes indicated above.

Additionally, the Personal Data that MOVTECH collects from you may be used by MOVTECH to conduct investigations and take necessary actions, in order to verify directly or through contracted third parties, government agencies, autonomous bodies or federal and local authorities, the veracity and authenticity of the data and information provided, which includes validating and verifying the authenticity of your information through various lawful means available including consultation of portals belonging to Federal and/or State Public Administration agencies and entities that are publicly available.

Additionally, MOVTECH may use the Personal Data collected from the Owner for the following purposes:

• Fulfill obligations arising from the legal relationship between the Owner and MOVTECH.
• Provide MOVTECH services.
• Verify the Owner's identity using their personal data.
• Verify their identity and personal data before authorities.
• Contact them to inform about any aspect related to their contracted services, as well as modifications to terms and conditions, modalities, packages, prices, payment conditions, billing, service levels, offers, improvements, features and functionalities.
• Comply with legal obligations applicable to MOVTECH's commercial activities.
• Carry out billing, collection activities and/or process payments through electronic, optical or any other technology means.
• Evaluate their behavior and credit capacity through the creation of credit profiles, in order to determine their eligibility, risk level or applicable conditions for acquiring MOVTECH's and/or third-party products or services.
• Provide in-person, phone or virtual technical support, as well as conduct quality surveys.
• Identify them as owner and their personal references to validate their identities and provide legal certainty to the existing relationship.
• Improve products and services through incident analysis.
• Maintain and improve physical and technological security systems.
• Prepare reports, predictions, surveys, research and analysis in relation to the use and quality of contracted services.
• Address and follow up on investigations, clarifications within our purview, information requests, complaints and/or claims, as well as those related to the identification, detection, prevention and combating of conduct that could contravene applicable regulations and/or the services we offer.
• Carry out processes for security purposes of the Controller, the Owner and/or to safeguard third-party rights, as well as identification, prevention and containment of unlawful conduct such as fraud, identity theft or any other conduct contrary to law.
• Carry out all activities related to portability in accordance with applicable legal provisions.
• Comply with obligations established in the Federal Consumer Protection Law, security and justice laws, among other laws, as well as mandates from competent authorities.
• Maintain the security of electronic communications networks and services, detect failures or technical errors in the transmission of electronic communications, as well as any processing necessary for the correct provision of MOVTECH's services or any other applicable sectoral regulations.
• Implement control mechanisms for the detection and prevention of events and thereby identify and stop possible unlawful conduct in MOVTECH's applications and the technological infrastructure used for the provision of our services, in compliance with applicable regulations.

VIII. Transfer of Personal Data.

MOVTECH may transfer your Personal Data without requiring your consent to the following third parties for the following purposes:

1. To the following authorities to comply with legal obligations, as well as to fulfill the primary purposes informed in this Privacy Notice: (a) federal, state or municipal public agencies and entities; (b) the Tax Administration Service; (c) National Population Registry (RENAPO); (d) National Electoral Institute (INE); and (e) competent authorities and/or third parties in legally provided cases.

2. Affiliates, subsidiaries and entities of the same corporate group to which MOVTECH belongs that operate under the same internal processes and policies regarding personal data protection, based on the provisions of Personal Data Legislation, for the following purposes:

• Carry out actions aimed at preventing unlawful activities, including anti-money laundering and terrorism financing prevention conduct, in compliance with applicable legislation.
• Contact you to offer services and/or products that may be of interest to you or that are complementary to the services and/or products you have contracted with MOVTECH.
• Facilitate contracting processes for other products and/or services that you request from other entities in the same corporate group to which MOVTECH belongs.

3. When it is necessary to transfer your Personal Data to safeguard a public interest or for the administration of justice.

4. When the transfer is necessary by virtue of a contract entered into in the interest of the Owner, by the Controller and a third party, or is necessary for the provision of medical or healthcare services.

5. When the transfer is necessary for the recognition, exercise or defense of a right in judicial proceedings.

6. When the transfer is necessary for the maintenance of the legal relationship between the Controller and the owner.

For the foregoing reasons, and upon reading this Privacy Notice, you grant your consent to the Controller to collect and use your personal data for the purposes indicated above.

MOVTECH commits to ensuring that all legal protection principles regarding the transfer of your Personal Data are fulfilled and expresses its commitment to ensure that at all times, by MOVTECH and the companies in the group to which MOVTECH belongs, and by our business partners, this Privacy Notice and the purposes to which the Owner subjected their processing are respected.

IX. ARCO Rights.

You may exercise the rights conferred by the Personal Data Legislation, and may exercise your rights of access, rectification, cancellation and opposition (hereinafter referred to as "ARCO Rights"), as well as revoke your consent.

The exercise of the aforementioned rights may be asserted by you by sending a request via email addressed to contacto@movtechcapital.com, or in writing, which must be addressed to the address indicated for this purpose in this Privacy Notice. All requests submitted to MOVTECH, regardless of the means used by the owners, must:

• Include the name and handwritten signature of the Owner, as well as an address or other means to communicate the response to their request.
• Attach official documents proving the identity of the Owner.
• Include a clear and precise description of the Personal Data regarding which they will exercise the rights conferred by the Personal Data Legislation.
• Include any element or document that facilitates the location of the personal data in question.

MOVTECH designates contacto@movtechcapital.com as the contact means to handle and process Owner requests for the exercise of ARCO Rights referred to in Personal Data Legislation (Access, Rectification, Cancellation and Opposition), or disclosure of data and revocation of consent.

X. Modifications to the Privacy Notice.

MOVTECH reserves the right to change, modify, supplement and/or alter this Privacy Notice at any time, arising from new legal requirements; from our own needs based on the products or services we offer; from our privacy practices; from changes in our business model, or for other reasons.

We commit to keeping you informed through our website www.movtechcapital.com.

Last update date: May 1, 2026