PRIVACY NOTICE DISCLOSURE

Pursuant to what is set forth in the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (hereinafter referred to as “the Law "), we would like to inform you the following:

1.- INDIVIDUAL OR ENTITY IN CHARGE OF THE PERSONAL DATA

HOUSE AND BEAUTY CARE MEXICO, S.A. DE C.V., (hereinafter referred to as "H&BCM"), having as its address for the purposes of the present Privacy Notice Disclosure that located at Calle Jesús del Monte 37, Second Floor, Jesús del Monte, Huixquilucan Estado de Mexico, Zip Code 52764, will be the entity in charge of the personal data provided to the same by the customers or any individual (hereinafter referred to as the “Holder” or “Holder´s”).


2.- PERSONAL DATA REQUIRED FROM THE HOLDER

For the purposes referred to in the present Privacy Notice Disclosure, H&BCM may collect personal data from the Holder, such as: i) name (official ID with photograph), ii) personal address and tax residence, iii) landline phone and mobile number, iv) Federal Taxpayers’ Registry (RFC, in Spanish), v) Individual Population Registration Code (CURP, in Spanish), vi) credit or debit card information (card number, expiration date) and vii) bank account number; hereinafter and jointly referred to as “Personal Data”. And in any of the following manners: i) when the Holder personally or directly provides them; ii) when H&BCM indirectly obtains them; iii) when the Holder uses H&BCM ’s website or online services; or iv) when such data are obtained by H&BCM through sources allowed by the legislation.

Personal Data Holder shall ensure that the data, personally or directly provided to H&BCM, is full and accurate. The former shall also provide H&BCM with notice of any modifications of the same in order to comply with the obligation of keeping the information updated.


3.- PURPOSES TO COLLECT PERSONAL DATA

Information on Personal Data collected by H&BCM from the Holder, shall be used: i) for the purposes of selling products offered by H&BCM ; ii) to comply with the contracts entered into between H&BCM and the Holder; iii) to identify the Holder; iv) to update the Holder’s data; v) to generate invoices. Such requirements are needed in order to comply with the obligations resulting from the legal relationship between H&BCM and the Holder.

H&BCM shall furthermore use the Holder’s information in order to: i) offer and promote goods and products or to perform trade research activities. Such purposes are not necessarily required to comply with the obligations resulting from the legal relationship between H&BCM and the Holder. Therefore, if the Holder should not agree that H&BCM uses its Personal Data for such purposes, the former shall express its opposition according to what is established in section five (5) of this Privacy Notice Disclosure. If the Holder should not express its opposition, it shall be understood that he/she provides H&BCM its consent.


4.- TIMEFRAMES, REFERRALS, AND TRANSFERS

Timeframes to manage the Holder’s Personal Data shall depend on the legal relationship between the Holder and H&BCM, as well as on the obligations required by the legislation in force, the relevant authorities, and H&BCM ’s internal policies.

The information delivered to H&BCM shall be kept and protected by the H&BCM, pursuant to the legislation in force and H&BCM ’s internal policies, in order to keep such information as confidential in nature.

Pursuant to what is established by Law, H&BCM shall provide access to the Holder’s Personal Data (by means of referrals) to those individuals acting as Data Controllers1, such as H&BCM ’s business partners or service suppliers that have a legal relationship with the former and that, as a result of such a legal relationship, need to know the information and commit to keep the same strictly confidential and reserved, and who shall state they know the terms and conditions of the present Privacy Notice Disclosure and commit to comply with the same.

If Personal Data under protection should be required by any authority or if it should be delivered to the latter, pursuant to the legislation in force, such data shall be available and its transfer shall not require the consent from the Holder, under article 37.


5.- RIGHTS OF PERSONAL DATA ACCESS, CORRECTION, CANCELLATION, OPPOSITON, RENEWAL, AND LIMITATION.

Information holders have the right to require the access, correction, revocation, cancellation, or opposition, as well as limitation of use or disclosure of their data, by means of:

a.- A written application submitted to the Department of Personal Data of H&BCM to the following address: Jesús del Monte 37, Second Floor, Colonia Jesús del Monte, Huixquilucan Estado de Mexico, Zip Code. 52764 from 10:00 to 14:00 hours, in business days; or b.- An application sent to the electronic mail atencionaclientes@houseandbeautycare.com

H&BCM shall provide an answer to the Holder’s application, provided exceptions included in the Law do not apply, and the applicant complies with what is set forth in the Ley Federal de Protección de Datos Personales en Posesión de los Particulares, article 29, which establishes the requirements for the applications submitted by the Holders.

For H&BCM to process the Holder´s application, regarding access, correction, revocation, cancellation, opposition, and/or limitation of use or disclosure of its data, the Holder shall attach the following information and documentation to its application:

i. The Holder´s full name, as well as his/her address and any other means, necessary for H&BCM to be able to provide and notify the answer to such application.

ii. The documents proving the applicant’s identity or the Holder’s legal representatives’ status (Holder or legal representative´s official ID, as well as the corresponding power of attorney).

iii. An accurate and precise description of the Personal Data requested to access, correct, revoke, cancel, oppose, or limit the use or disclosure; as well as any other information or document that may help to locate the relevant Personal Data.

H&BCM shall provide an answer to the Holder’s application regarding the access, correction, revocation, cancellation, opposition, and/or limitation of use or disclosure of its data, according to the terms established by Law, that is, within the twenty (20) days following the reception of the Holder’s application. Such a term may be extended by H&BCM pursuant to what is set forth in article 32 of the Law.

Information access obligation shall be deemed complied by H&BCM if, in case of being requested by the Holder, such Personal Data is made available to the latter at H&BCM ’s address during the term of 15 (fifteen) business days, following the date on which the Holder was provided with the answer to its application, by any of the forms established in article 33 of the Law.


6.- MODIFICATIONS TO THE PRIVACY NOTICE DISCLOSURE

In case H&BCM requires to use Holder’s Personal Data for purposes other than the ones agreed upon, and according to the legal relationship with the Holder and in the present Privacy Notice Disclosure, or if the same requires from the Holder Personal Data other than those stated in the present Privacy Notice Disclosure, the Holder shall be notified in writing, by phone, electronically, or by means of any other visual, audio, or optical means, or any other allowed by the technology currently or in the future, explaining the new uses that are pretended for such an information, in order to obtain its consent under the Law. With the present Privacy Notice Disclosure, the information Holders are duly informed about the data being collected from them and for what purposes, as well as about the fact that such a Privacy Notice Disclosure may be looked up at all times at H&BCM ’s website www.houseandbeautycare.com

H&BCM reserves its right to modify this Privacy Notice Disclosure to adapt the same to the latest jurisprudences or legislative innovations, as well as to trade practices. In such cases, the relevant changes shall be posted on the website www.houseandbeautycare.com

This Privacy Notice Disclosure, as well as general Law compliance, by H&BCM, shall be ruled by the legislation in force and applicable in the Mexican United States. Any controversies resulting from such an application shall be settled by the Federal Institute for Information Access and Data Protection (IFAI, in Spanish) or before the relevant Mexico City/Federal District’s Courts.

Latest update: July 7th, 2022.

I hereby agree and authorize that my Personal Data are handled, pursuant to the terms and conditions in the present Privacy Notice Disclosure.

(Name and signature)

1Article 3 of the Ley Federal de Protección de Datos Personales en Posesión de los Particulares establishes that the Data Controller is the individual or entity that individually or jointly handles personal data on behalf of the Individual or Entity in Charge of such data.