COMPREHENSIVE PRIVACY NOTICE

I. PERSONAL DATA COLLECTED

WEBALO may collect the following types of personal data:

a) Identification and contact data

• Full name.
• Company name or legal name (if applicable).
• Email address.
• Telephone number (mobile and/or landline).
• Tax or billing address.

b) Billing and transactional data

• Tax ID (RFC).
• Tax address.
• Data necessary for invoice issuance.
• Information related to contracted services, selected packages, amounts, and payment dates.

c) Site usage data

• IP address.
• Device identifiers.
• Browser type and operating system.
• Dates and times of access to the Site.
• Pages visited and actions taken within the Site.

In general, WEBALO does not collect sensitive personal data. In the exceptional case that data of this nature is required, the express consent of the Data Subject will be requested in accordance with the law.

II. PURPOSES OF PROCESSING

The personal data collected will be used for the following primary purposes (necessary for the legal relationship with the Data Subject):

1. Provide the design and development services of digital products (mobile applications, web, and other Services) offered by WEBALO.
2. Handle information requests, quotes, clarifications, or technical support.
3. Manage the contracting process, package configuration, custom services, and project tracking.
4. Billing and collections, preparation of tax receipts, and accounting records.
5. Client account management, files, and databases for internal control.
6. Compliance with legal and contractual obligations, including responding to requests from competent authorities.

Additionally, WEBALO may process personal data for the following secondary purposes (not necessary for the legal relationship):

1. Sending commercial information, newsletters, promotions, launches of new services, or package updates.
2. Improving the user experience on the Site, including statistical and navigation analysis.
3. Satisfaction surveys, market studies, and internal analysis on the quality of Services.
4. Invitation to events, webinars, or activities related to design and development services of digital products.

If the Data Subject does not wish their data to be used for secondary purposes, they may express this from this moment by sending an email to: info@webalo.com.mx, indicating their full name and the phrase "I do not wish to receive commercial information / secondary purposes".

Refusal to use their data for these secondary purposes does not condition the provision of the contracted Services.

III. TRANSFERS OF PERSONAL DATA

WEBALO may share your personal data only in the following cases:

Service providers acting as data processors that support WEBALO in:

• Payment processing.
• Hosting services, cloud storage, and database administration.
• Technical support, communication tools, and project management.
• Accounting, legal, or administrative services.

In these cases, such third parties will process personal data in accordance with WEBALO's instructions and subject to the corresponding confidentiality.

Competent authorities, when legally justified, in compliance with laws, resolutions, or official requirements.

WEBALO does not sell or rent the Data Subject's personal data to third parties for commercial purposes.

The above transfers that do not require consent are made in accordance with Articles 10 and 37 of the Law, and other applicable provisions.

IV. USE OF COOKIES AND SIMILAR TECHNOLOGIES

The Site may use cookies, web beacons, and similar technologies to:

• Facilitate navigation and use of the Site.
• Remember Data Subject preferences.
• Obtain statistics on usage, visited sections, and time spent.
• Improve content and user experience.

The Data Subject may disable the use of cookies from their browser settings. However, some Site functionalities may be limited.

V. SECURITY MEASURES

WEBALO has implemented administrative, technical, and physical security measures to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

Notwithstanding the above, the Data Subject acknowledges that no security system is absolutely infallible and that the use of electronic means carries certain inherent risks.

VI. ARCO RIGHTS (ACCESS, RECTIFICATION, CANCELLATION, AND OPPOSITION)

The Data Subject has the right to:

• Access their personal data processed by WEBALO.
• Rectify them when they are inaccurate or incomplete.
• Cancel them when they consider they are not required for the stated purposes, are no longer necessary for the fulfillment of a contract, or have been used improperly.
• Oppose processing for specific purposes or request that their use or disclosure be limited.

Likewise, the Data Subject may revoke the consent granted for the processing of their personal data, without retroactive effects, as long as it is not prevented by a legal provision or a current contractual relationship.

6.1 Procedure to exercise ARCO rights

To exercise any of these rights, the Data Subject may submit a written request to the email: info@webalo.com.mx, addressed to the personal data area, indicating at least the following:

1. Full name of the Data Subject and, if applicable, their legal representative.
2. Contact information (email and/or phone) to communicate the response.
3. Copy of a valid official identification (INE, passport, or equivalent document); in the case of a representative, a document accrediting the representation.
4. Clear and precise description of the personal data for which an ARCO right is sought to be exercised.
5. The right to be exercised (Access, Rectification, Cancellation, or Opposition) and description of the request.
6. Any element or document that facilitates the location of the personal data.

WEBALO will respond to the request within a maximum period of 20 business days, counted from the date the complete request is received. If appropriate, it will be made effective within the following 15 business days from the date the response is communicated.

The deadlines may be extended only once for an equal period, when there are justified causes, which will be communicated to the Data Subject.

VII. LIMITATION OF USE OR DISCLOSURE OF YOUR DATA

In addition to exercising ARCO rights, the Data Subject may limit the use or disclosure of their personal data for secondary purposes by:

• Sending an email to info@webalo.com.mx, indicating their wish to limit the use of their data for commercial or promotional purposes.

WEBALO will register the corresponding request in its internal exclusion lists.

VIII. RETENTION OF PERSONAL DATA

Personal data will be retained for as long as necessary to:

• Comply with the purposes described in this Privacy Notice.
• Comply with applicable legal, tax, or contractual obligations.
• Address possible liabilities arising from the processing.

Once the retention period concludes, the data will be blocked and subsequently deleted or anonymized securely.

IX. MODIFICATIONS TO THE PRIVACY NOTICE

WEBALO reserves the right to make modifications or updates to this Privacy Notice at any time, derived from:

• Legislative or regulatory changes.
• Changes in WEBALO's services or business models.
• New requirements for the provision of Services.

Modifications will be available on the Site webalo.com.mx in the section corresponding to the Privacy Notice, indicating the date of last update.

Continued use of the Site or contracting of Services after the publication of modifications will imply acceptance of such updates.

X. CONTACT

For any questions or inquiries related to this Privacy Notice or the processing of your personal data, the Data Subject may contact WEBALO through:

• Email: info@webalo.com.mx
• Address: Avenida Insurgentes Sur No. 605, Floor 8, Suite 802, Colonia Nápoles, Alcaldía Benito Juárez, C.P. 03810, Mexico City.
• Website: webalo.com.mx