PRIVACY NOTICE

In accordance with the provisions of the Federal Law on Protection of Personal Data Held by Individuals hereinafter referred to as "the Law", this Privacy Notice is issued in the following terms: RESPONSIBLE FOR PERSONAL DATA: For the purposes of this Privacy Notice P & M INCORPORATED S DE RL DE CV, (hereinafter “THE COMPANY”) with address located at Delfín 13B, La Cruz de Huanacaxtle Nayarit. CP 63734 is responsible for the collection, disclosure, storage, use, management, use, transfer and / or disposition of the personal data that it collects from its Clients (hereinafter the "Owners"/ ”Clients”). PERSONAL DATA COLLECTED: The personal data that the Responsible party collects from the Owners/Clients are, among others, but not limited to, the following: Name, private address, email, age, date of birth, sex, marital status, nationality, telephone number, occupation, RFC , current employment data, copy of official photo identification. Your personal data is collected personally, via email or by delivering the documents that prove the aforementioned data. Sensitive data policy: The Responsible by policy does not request any information that under the Law is understood as sensitive data, such as: religion, sexual preferences, political opinions, among others. The Company supports and encourages diversity and therefore prohibits any discriminatory act or the request for any information that could imply a discriminatory act. In the event that you provide sensitive data, The Company will treat and safeguard it in terms of the Law. PURPOSE OF THE PROCESSING OF PERSONAL DATA: The data we collect is for the purpose of (i) drawing up a contract for the provision of services between the Responsible and the Client to establish the terms and conditions on the promotion of the property owned by the Client (ii) to the preparation of lease contracts, purchase-sale promises, purchase-sale, transfer, investment projects on the properties managed by the Responsible (iii) to carry out any management that allows confirming the legal situation of the property managed by the Responsible (iv ) to coordinate appointments with Prospects at the address of the property owned by the Client and managed by the Responsible (v) to exchange information and proposals between the Prospect and the Client related to the property managed by the Responsible (vi) to investigate credit integrity and of the Client in light of the Domain Extinction Law (vii) in order to close all types of real estate transactions between the Prospect and the Client. In the same way, the personal data collected may also be used to meet legal requirements of competent authorities. THE COMPANY is not responsible for the veracity or accuracy of the data that you have provided them, nor has it verified them, but only receives, records and preserves them. Likewise, you declare and confirm that you have the express consent of those people of whom you also provide personal information, such as, for example, spouse, common-law wife, economic dependents, relatives, professional references, etc. Exceptions. It should be noted that in accordance with the Law there are cases in which your consent is not necessary for the processing of your personal data, and therefore the absence of the same or its refusal in your case, does not prevent or will prevent the Company from treating them (your personal data) in terms of the Law and other applicable regulations. OPTIONS AND MEANS THAT THE CONTROLLER OFFERS HOLDERS TO LIMIT THE USE OR DISCLOSURE OF PERSONAL DATA. The personal data of the Holders will be treated under the strictest confidentiality, taking care of the administrative, physical and technical security measures that the Responsible implements in its internal security policies and procedures, avoiding the possible illegal disclosure of data and limiting its use to what is established in this Privacy Notice. MEANS TO EXERCISE THE RIGHTS OF THE HOLDER. At any time you or your duly accredited legal representative, may exercise the rights of Access, Rectification when you consider that they are erroneous or inaccurate, Cancellation in case you consider that the data is not treated adequately and Opposition in case you do not want to that your data is processed for specific purposes. The exercise of one of them does not preclude the exercise of the other and none is prerequisite for the exercise of another. To exercise your ARCO rights, you must submit your request at our address located at Delfín 13B, La Cruz de Huanacaxtle Nayarit. CP 63734 , or send it to our personal data department at maria@philoslacruzrealestate.com, with attention to the data protection department. The request must contain the following information: (i) Name of the owner, (ii) address and email address to notify you of the response to your request, (iii) a clear and precise description of the data with respect to which you are seeking to exercise the corresponding right, (iv) the object of the request, (v) any element that facilitates the location of the data, and a copy of your identification must be attached, and, where appropriate, the document by which the legal representation is accredited. The response period for your request will be 20 business days from the day the request for access, rectification, cancellation and corresponding opposition was received. The response will be communicated within the aforementioned period to the email address you provided in your request or by sending a letter to the address provided in the same. Once said notification is received, you will have a period of 15 business days to make it effective if appropriate. At any time, you may revoke the consent you have given us for the processing of your personal data, in such a way that we stop using them. To do this, you must submit a request in the terms mentioned for the exercise of ARCO rights. The procedure to follow will be the same as that provided for the exercise of ARCO rights. If your request is appropriate, your data will no longer be processed by P & M INCORPORATED S DE RL DE CV. DATA TRANSFER 1. Your personal data may be transferred to national or foreign third parties if necessary for the fulfillment of the obligations contracted due to the relationship with the person in charge, in terms of section VII of article 37 of the Law. ___ Yes I consent to the transfer. ____ I do not consent to the transfer. It is important to inform you that any third party that receives your personal data due to transfers made by will have the same obligations and responsibilities as us as the person in charge of your data, and that this Privacy Notice will be communicated to said third party. CHANGES TO THE PRIVACY NOTICE Any change to this Privacy Notice will be informed through the following means: By email that we personally send you. And through announcements in the visible place of the operative area of the Responsible. In the same way, the Holders are informed that the Privacy Notice may be modified at any time in order to attend to new legislation, as well as modification of internal policies of THE COMPANY. If the purposes for which your personal data are processed are modified, if necessary, your consent will be requested again, either express or implied, depending on the particular case. CONSENT OF THE OWNER/CLIENT The Owner/Client declares that (i) this Notice has been made known to him by the Responsible and (ii) has read, understood and agreed to the terms set forth in this Notice, for which he grants his consent for the processing of his Personal Data by signing in accordance with this Privacy Notice with the following data: