Privacy Notice

Date of last update:March 4, 2026

In compliance with theFederal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP)and its Regulations, we inform you of this Privacy Notice.

Responsible for the Protection of Your Personal Data

RDEL Consulting & Advisory(hereinafter "RDEL", "we" or "the Organization") is responsible for the processing of your personal data. For any communication related to this Privacy Notice or to exercise your rights, we provide you with the following means:

Email for personal data inquiries: legal@rdel-cya.com
Phone: +52 33 1842 3435
Website: www.rdel-cya.com

Personal Data We Collect and Purposes of Processing

For the purposes described below, RDEL may collect and process the following categories of personal data:

A. Identification and Contact Data:Full name, address, phone number, email, handwritten and electronic signature.

B. Employment and Professional Data:Position, company where you work, professional experience, references.

C. Tax and Financial Data:Federal Taxpayer Registry (RFC), Unique Population Registry Code (CURP), tax address, banking information for payments and invoicing.

D. Platform User Data:User identifiers, passwords (encrypted), IP addresses, activity logs, and preferences in the use of our platforms.

E. Sensitive Personal Data:In the context of consulting projects in health, biotechnology, or others, we may handle sensitive personal data (such as health data). For this, we will request your express and written consent, specifically informing you about such purposes.

Primary Purposes (Necessary)

This data will be used for the following purposes that are necessary for the existence, maintenance, and compliance of the legal relationship with you:

Provision of Services:To provide the contracted consulting, advisory, and technological solutions services, including the preparation of studies, analyses, diagnostics, and deliverables.
Contact and Communication:To address your requests, quotes, questions, comments, complaints, or suggestions.
Billing and Collection:To prepare and send tax receipts (CFDI), process payments, manage collections, and keep our accounting and tax records updated.
Regulatory Compliance:To comply with applicable legal and regulatory obligations, as well as to respond to requests from competent authorities.
Account Management:To manage your registration, user account, and profile on our digital platforms, as well as to verify your identity.

Secondary Purposes (Not Necessary)

Additionally, and not necessary for the legal relationship, we will use your personal data for the following purposes that allow us to offer you better service:

Marketing and Advertising:To send you promotional information, newsletters, invitations to events, webinars, or workshops related to our business, science, and technology services.
Continuous Improvement:To conduct satisfaction surveys, market studies, and statistical analyses to evaluate and improve the quality of our services and the customer experience.
Business Profiles:To create profiles about your interests and preferences to personalize our offers and communications.

If you do not wish for your personal data to be processed for these secondary purposes, you can object at any time by sending an email toprivacidad@rdel-cya.com. Your refusal to accept these purposes will not be a reason to deny you the contracted services.

Transfers of Personal Data

We inform you that your personal datamay be transferred and sharedwith the following entities and for the following purposes:

Recipient of the Transfer	Purpose	Requires Consent
Tax and administrative authorities	Compliance with legal obligations (billing, for example).	No (Art. 37 LFPDPPP).
Banking institutions and payment processors	To process payments and collections.	Yes (implicit upon contracting).
Consultants, external advisors, or strategic allies	To collaborate on multidisciplinary projects that require their specific participation. The client will be informed in each case.	Yes (it must be informed and collected in your case).
Subsidiaries, affiliates, or companies related to RDEL	Internal administrative purposes, billing consolidation, or service improvement.	Yes, but you can object.
Providers of technological services (cloud computing, email marketing, etc.)	For the technical operation of our platforms and communications. These providers act as processors and cannot use your data for their own purposes.	Yes (as stated in this Notice).

Any transfer that requires your consent will be promptly informed to you, and you may express your refusal for such transfer.

ARCO Rights (Access, Rectification, Cancellation, and Opposition)

You have the right to know what personal data we have about you, for what purposes we use it, and the conditions of its use (Access); as well as to request the correction of your personal information in case it is outdated, inaccurate, or incomplete (Rectification); to have it deleted from our records or databases when you believe it is not being used in accordance with the principles, duties, and obligations provided by law (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition).

These rights are known as ARCO rightsARCO.

To exercise any of your ARCO rights, you must submit a written request via email tolegal@rdel-cya.com. The request must contain and accompany the following:

Your full name and address or another means to communicate the response to your request.
The documents that prove your identity (copy of a valid official identification: INE, passport) or, if applicable, the legal representation of the person making the request on your behalf.
A clear and precise description of the personal data for which you seek to exercise any of the ARCO rights.
Any other element or document that facilitates the location of your personal data.

RDEL will respond to your request within a maximum period of20 (twenty) business days, counted from the date of receipt of the request, informing you of its validity. If it is valid, it will be effective within the15 (fifteen) business daysfollowing the date on which the response is communicated.

Revocation of Consent

You can revoke the consent that, if applicable, you have granted us for the processing of your personal data at any time, without retroactive effects. The procedure for revoking consent will be the same as that established for exercising the ARCO rights.

Limitation of the Use or Disclosure of Your Data

You can limit the use or disclosure of your personal data by requesting your registration in RDEL's internal exclusion list. To do this, you must send your request by email tolegal@rdel-cya.com. Once registered, your data will not be processed for marketing, advertising, or commercial prospecting purposes.

Use of Cookies and Tracking Technologies

Our website and platforms may use cookies, web beacons, and other tracking technologies to enhance your browsing experience, gather statistical information about site usage, and remember your preferences. Cookies are text files that are automatically downloaded and stored on your computer's hard drive.

You can disable or delete cookies at any time through your internet browser settings. However, this may affect the functionality and your experience on our website.

Changes to the Privacy Notice

RDEL reserves the right to modify, update, or supplement this Privacy Notice at any time. Any modifications will be published on our website:www.rdel-cya.com/privacy. We recommend reviewing this page periodically to stay informed of the most recent versions. The date of the last update is indicated at the beginning of this document.

RDEL Consulting & Advisory | Business + Science & Technology

Phone: +52 33 1842 3435

Email: legal@rdel-cya.com

Website:www.rdel-cya.com