Users (as defined below) are informed that the following Privacy Notice applies to them by simply using or accessing any of the pages, web and mobile applications, software, and applications in general that make up the Portal of www.waipy.com (hereinafter, jointly and indistinctly, the "Portal"), so we will understand that you accept and agree to be bound by its compliance. If you do not agree with the Privacy Notice and/or the Terms and Conditions available to you, you must refrain from accessing or using the Portal.

The User, understood as the person who uses or accesses, through computer equipment and/or any communication equipment or device, the Portal (hereinafter the “User”), fully and unreservedly accepts each and every one of the provisions included in this Privacy Notice.

CONTROLLER OF YOUR PERSONAL DATA. For WAIPY (hereinafter the “Company”) the security of Users is our priority, so we protect your personal data through the use, application and maintenance of high technical, physical and administrative security measures.

As a User, you have the opportunity to choose from a wide range of products and services through our Portal, knowing that your personal data will be protected and treated confidentially. We inform you that the CONTROLLER of collecting and processing and/or using the personal data that the User provides through the Portal is the Company, as well as its subsidiaries, associates, holding companies and affiliates.

CONTROLLER'S ADDRESS. For the purposes of this privacy notice, the Company individually designates its address as Calzada San Bartolo Naucalpan 254, Col. Argentina Poniente, C.P. 11230 CDMX.

PERSONAL DATA THAT MAY BE COLLECTED. The personal data that the Company may collect from the User when using the Portal and/or contracting our services and products are the following:

1. Name, address, phone number, email, and IP address.
2. Financial data: Card number, name, expiration date and security code.

PURPOSES OF PROCESSING YOUR PERSONAL DATA. The personal data collected by the Company will be used to address the following purposes:

1. To provide and operate services and product delivery. To provide our users with ongoing customer assistance and technical support. To be able to contact our visitors and users with general and personalized service-related notices and promotional messages. To create aggregated statistical data and other aggregated or inferred non-personal information, which we or our business partners may use to provide and improve our respective services. To carry out checks to assess that your credit or debit card is not cataloged as fraudulent and thus avoid possible fraud. To comply with regulatory obligations issued by competent authorities, as well as to meet their requirements. To comply with our obligations regarding merchandise delivery, including processing, order information, delivery and order status.
2. To integrate files, databases and systems necessary to carry out the corresponding operations and services; (ii) To claim the delivery of prizes and/or promotions; (iii) To carry out internal analyses;
3. Additionally, your personal data may be used for the following secondary purposes: (i) Marketing, advertising and commercial prospecting; (ii) To offer you, where appropriate, other products and services of the Company or any of its affiliates, subsidiaries, holding companies, associates, commission agents or companies; (iii) To send you promotions for other goods, services and/or products; (iv) To perform statistical analysis, generation of information models and/or behavioral profiles (current and predictive) and, (v) To participate in surveys, raffles and promotions.

OPTIONS AND MEANS TO LIMIT THE USE OR DISCLOSURE OF DATA. The Company has implemented administrative, technical and physical security measures to protect your personal data, which we also require our contracted service providers to comply with. You may limit the use or disclosure of your personal data by sending an email to ventas@grupobtn.com, indicating your full name in the body of the email and which data you wish not to be disclosed. If your request proceeds, you will be registered in the exclusion list.

MEANS TO EXERCISE RIGHTS OF ACCESS, RECTIFICATION, CANCELLATION OR OPPOSITION (ARCO RIGHTS). You can send an email to ventas@grupobtn.com, at any time, to exercise your Rights of Access, Rectification, Cancellation or Opposition (“ARCO Rights”). To exercise ARCO Rights, you (or your legal representative) must submit the request, identifying yourself with the following documentation:

1. User or holder's name.
2. User or holder's address or other means to communicate the response to your request.
3. Documents proving your identity (IFE/INE or passport) and, where applicable, documents proving the legal representation of the applicant.
4. A description of the information/data over which you are trying to exercise your ARCO rights and the rights you would like to exercise.

If one or more of the aforementioned documents are not included, and/or the documents have errors or omissions, the Company will notify you within 3 business days of receiving the request and will ask for the missing documents and/or relevant corrections; you will have 5 business days from that notification to provide the updated information, otherwise, the request will be deemed not submitted.

TRANSFER OF PERSONAL DATA. The Company may disclose your personal data to those third parties who, by virtue of the services and products offered, need to know them to fully comply with them.

Likewise, the Company may disclose your information to the competent authorities in terms of applicable legislation; any transfer of your personal data without consent will be carried out in accordance with Article 37 of the LFPDPPP.

WEB BEACONS. The Company may or may not use tracking technologies such as web beacons, similar to cookies, to collect data about your visits to the Portal; these are small electronic images embedded in web content or email messages, which are not normally visible to Users and allow us to generate almost personalized content to offer you a better experience when you use our Portal.

If you do not agree with any of the conditions established herein, the User may always change their browser settings.

MODIFICATIONS TO THE PRIVACY NOTICE. This privacy notice may undergo modifications, changes or updates derived, among other things, from new legal requirements; the Company's own needs, due to the products or services we offer; due to our privacy practices; due to changes in our business model, or for other reasons.

Any modification to this privacy notice will be notified to you through any of the following means: a written communication sent to your address; by the email you specify; a message to your mobile phone; a message disseminated through the Portal or any electronic means you use to carry out operations; or, in widely circulated newspapers at the Company's registered office.