In compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (the “Law”), its regulations, and applicable guidelines, we inform you of the following:

SUMIMAX MASTER COMMERCE, S.A. de C.V. (hereinafter “Only Digital”), located in Mexico City, will be responsible for collecting your personal data, as well as for the use and protection of such data and those collected by its parent companies, subsidiaries, or affiliates, or by third parties contracted to provide services on behalf of Only Digital, in accordance with this privacy notice (the “Privacy Notice”).

Personal Data Collected

Due to your existing or future business relationship with Only Digital, you may provide us with some of the following personal data:

• Identification and contact data: Full name and email address.

Only Digital does NOT collect data considered sensitive, which requires a special level of protection due to the risk that improper handling may pose to individuals’ privacy and rights.

Purposes of Personal Data Processing

Personal data will be used for the following primary purposes:

• Identity verification: To confirm users’ identities to prevent fraud and ensure transactions are conducted securely.
• Regulatory compliance: To ensure compliance with local and international regulations, such as anti-money laundering (AML) laws and know your customer (KYC) requirements.
• Transactions: To facilitate the purchase, sale, and transfer of the services offered by Only Digital, ensuring that transactions are processed efficiently and securely.
• Customer service: To provide support to users, resolve issues, and respond to inquiries.
• Marketing and communication: To send relevant information about service updates, promotions, and other related communications, provided that user consent is obtained.
• Analysis and improvements: To analyze user behavior and site usage to enhance the services provided, identify areas for improvement, and develop new features.
• Prevention of illegal activities: To monitor transactions and user activities to detect and prevent suspicious or illegal activities.

Additionally, Only Digital may use your personal data for the following secondary purposes:

• Statistical purposes.
• Inviting you to participate in Only Digital’s events, training, and promotions.
• Advertising purposes.

Collection of Personal Data

We may collect your personal data in various ways: when you provide it to us directly or when we obtain information through other sources permitted by the Law, always adhering to the purposes outlined in the Privacy Notice

Protection of Minors’ Data

Only Digital will NOT collect personal data directly from individuals under 18 years old. Only individuals over 18 years of age may give consent for the collection of data. We recommend that parents/guardians regularly review and monitor their children’s use of email and other online activities to ensure they do not share identifiable personal information without prior consent. At any time, you may request the removal of any personal data of your children by sending a request to the following email address: administración@only-digital.com.

Transfer of Personal Data

Your personal data may be transferred to controlling companies, subsidiaries, affiliates, or any other entities belonging to Only Digital, both within Mexico and abroad; to third parties, whether domestic or international, for the fulfillment of the aforementioned purposes, or when such data communication is provided for by a Law or Treaty, or when required by the competent authority.

We will endeavor to ensure that these third parties maintain appropriate security measures to protect your personal data and use it solely for the purposes for which it was collected and in accordance with this Privacy Notice. We will not disclose or transfer your data to unrelated third parties, except in the cases mentioned above and as provided by Law.

Security Measures

We will implement the necessary technical, administrative, and physical security measures to ensure the integrity of your personal data and to prevent its damage, loss, alteration, destruction, or unauthorized use, access, or processing. Only authorized personnel, who have met confidentiality requirements, will be allowed to handle your data.

Authorized personnel are prohibited from allowing unauthorized access to your personal data and from using it for purposes other than those established in this Privacy Notice. The confidentiality obligation remains even after the relationship with Only Digital has ended.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They are used to enhance your experience on the site, remember your preferences, and provide analytical data about your behavior on the site.

Types of Cookies We Use:

• Essential Cookies: Necessary for the basic functioning of the website. Without these cookies, some parts of the site would not work properly.
• Performance Cookies: Collect information about how visitors use the site, such as the pages they visit most frequently. This data helps improve the site’s functionality and performance.
• Functionality Cookies: Allow the website to remember your choices (such as your username, language, or region) and provide enhanced, more personalized features.
• Advertising Cookies: Used to display ads that are relevant to you based on your interests. They also limit the number of times you see an ad and help measure the effectiveness of advertising campaigns.

You can control and manage cookies in various ways:

• Browser Settings: You can set your browser to accept or reject cookies or to alert you when a cookie is sent. Check your browser’s instructions for more details.
• Cookie Management Tools: Some websites provide specific tools to manage cookies directly from the site.

If you choose to disable cookies, some site functionalities may be affected, which could result in a less optimized experience. For example, you might not be able to access certain areas of the site or some of the preferences you previously saved might not be remembered.

Rights of the Data Subject

You have the right to access your personal data that we hold and the details of its processing, as well as to rectify it if it is inaccurate or incomplete, cancel it when you believe it is no longer required for any of the purposes outlined in this Privacy Notice, or if it is being used for unauthorized purposes, and to oppose its processing for specific purposes or limit its use or disclosure.

To exercise these rights, you need to submit a request to the Personal Data Department at the following email address: administración@only-digital.com, including:

• Name of the Data Subject and the means by which you wish to receive the response to your request.
• Documents proving identity (such as a government-issued ID with photo, passport, military ID, or driver’s license), scanned, and in the case of a legal entity, documents proving the legal representation of the Data Subject (via a public deed showing the powers to carry out the act).
• A clear and precise description of the personal data for which you seek to exercise any of the rights.
• Any other element or document that facilitates the location of the personal data.

The response to your request will be provided, at your choice, via email. Only Digital will have a period of twenty business days from the date the request is received or from the date the Data Subject fulfills the information request, to notify you whether the request is granted. If granted, it will be made effective within the fifteen days following the date of the response. The timeframes may be extended once for an equal period when justified.

For further details on the requirements for requests, their admissibility, or forms, you may contact the Personal Data Department directly at the company’s address or at the email address: administración@only-digital.com.

Revocation of Consent

At any time, you have the right to revoke consent for the processing of your personal data. To do so, you must submit your request following the procedure and requirements outlined in the previous sections.

Modifications to the Privacy Notice

Only Digital reserves the right to modify this Privacy Notice at any time to comply with legislative updates, jurisprudence, internal policies, new service requirements, or any other reason. Any modifications, as well as the updated document, will be available on the platforms or locations where it is used.

Applicable Legislation

This Privacy Notice and the handling of your personal data by Only Digital are governed by the current and applicable legislation in the United Mexican States. Any disputes arising from