Legal document

Privacy Notice

In force since 21 October 2026 · Version 2.0

Website www.kycevo.com

Kycevo Technologies, S. de R.L. de C.V. (hereinafter, «KYCEVO»), pursuant to Articles 14, 15 and 16 of the Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on March 20, 2025 (the «Law»), hereby makes this Privacy Notice available to you, which applies exclusively to the personal data collected through the website https://www.kycevo.com (the «Site»).

Personal data obtained by KYCEVO through means other than the Site, such as the execution or performance of agreements, shall be governed by the privacy notice made available to you in each case.

1. Identity and address of the data controller

KYCEVO, with address at Senda de la Inspiración 20, interior 10, Milenio III, Querétaro, Querétaro, Zip Code 76060, is the data controller responsible for the processing of your personal data. For any matter related to this Notice, you may contact our Personal Data Protection Department at privacy@kycevo.com.

2. Personal data we collect

Through the Site, KYCEVO collects only the following data:

Contact form: name, company or organization, title or position, email address, telephone number, business unit of interest and, as the case may be, any additional information you choose to provide to us.
Server logs: IP address, date and time of access, requested page, server response code and browser type, which are generated automatically when you visit the Site.
Browsing data, only if you allow it: pages visited, length of the visit, referring site, device and browser type, language and approximate location (country and city), collected through Google Analytics cookies. This data is not associated with the data you provide in the contact form.

KYCEVO does not collect sensitive, financial or property-related personal data through the Site; accordingly, we ask that you do not include such data in your message. The Site is not directed to minors.

3. Purposes of the processing

Primary purposes. These are necessary to address your request:

To address and respond to the requests for information you submit through the Site.
To contact you in order to follow up on your request and, as the case may be, to prepare and submit a proposal or quotation to you.
To maintain the security and proper operation of the Site, and to prevent misuse.

Secondary purpose. This is not necessary to address your request, but it allows us to provide you with better service:

To send you information about KYCEVO's services, events and news.
To compile statistics on the use of the Site in order to improve its content and operation, when you allow it in the cookie notice.

If you do not wish your data to be processed for the secondary purpose, you may so state at any time by sending an email to privacy@kycevo.com. For usage statistics, it is enough not to allow them in the cookie notice, or to withdraw your permission at any time through «Cookie settings», at the bottom of every page of the Site. Your refusal shall not be grounds for failing to address your request.

4. Cookies and tracking technologies

The Site uses cookies that are necessary for its operation, which protect the contact form and remember your choice about cookies, and, only if you allow it, Google Analytics cookies to obtain usage statistics. Until you allow it, Google's code is not loaded into your browser and those cookies are not created. You may withdraw your permission at any time through «Cookie settings», at the bottom of every page of the Site. The details of each cookie, its purpose and its duration are set out in the Cookie Policy, published at https://www.kycevo.com/cookie-policy.

The Site does not use advertising cookies or web beacons. The server logs referred to in Section 2 are used exclusively for the security and operation of the Site and are not associated with the data you provide in the contact form.

5. Transfers and service providers

KYCEVO does not sell your personal data or transfer it to third parties, except in the cases set forth in Article 36 of the Law that do not require your consent, such as a request from a competent authority.

KYCEVO relies on web hosting and email service providers and, if you allow usage statistics, on Google LLC as the provider of the Google Analytics service. These providers process the data solely on behalf of KYCEVO, in accordance with its instructions and subject to confidentiality and security obligations, without using it for their own purposes. Some of these providers may have their servers located outside Mexico.

6. Retention

Contact form data shall be retained for up to 12 months from the last contact, unless a business relationship is commenced, in which case its processing shall be governed by the privacy notice applicable to such relationship. Server logs are retained for 14 days and Google Analytics browsing data for 2 months. Upon expiration of these periods, the data shall be securely deleted.

7. Security

KYCEVO maintains administrative, technical and physical security measures to protect your personal data against damage, loss, alteration, destruction or unauthorized use, access or processing. In the event of a security breach that significantly affects your property or moral rights, KYCEVO shall notify you immediately.

8. ARCO rights

You may access, rectify or cancel your personal data, or object to its processing (ARCO rights), by submitting a request to privacy@kycevo.com containing:

Your name and the email address or physical address at which you wish to receive the response.
A copy of an official identification document or, as the case may be, the documents evidencing the identity and authority of your legal representative.
A clear description of the right you wish to exercise and of the data to which your request relates.
Any other information that may facilitate the location of your data.

KYCEVO shall notify you of its determination by email within a maximum period of 20 days from receipt of your request and, if the request is granted, shall give effect to it within the following 15 days. These periods may be extended once for an equal period when justified. The exercise of ARCO rights is free of charge, except for any reproduction or delivery costs that may apply under the Law.

If you consider that your request was not addressed in accordance with the Law, you may initiate the rights protection proceeding before the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).

You may revoke your consent or request that the use or disclosure of your personal data be limited by sending an email to privacy@kycevo.com. In the latter case, KYCEVO shall register you in its internal exclusion list in order to stop sending you commercial information. Revocation shall not have retroactive effect.

10. Changes to the Privacy Notice

Any amendment to this Notice shall be published at https://www.kycevo.com/aviso-de-privacidad. In the case of substantial changes, such as new purposes or transfers, you shall also be notified by email if we have your contact details.

By submitting the contact form and checking the acceptance box, you acknowledge that you have read this Privacy Notice and consent to the processing of your personal data under the terms described herein.

Last updated: [PENDING: publication date].