Privacy notice.

IIdentity and address of the data controller

REGENE GLOBAL, SOCIEDAD ANÓNIMA DE CAPITAL VARIABLE (hereinafter "Regene Global" or the "Controller"), with its address at Av. Lateral Periférico Norte number 33, Colonia El Vigía, Zapopan, Jalisco, Mexico, is responsible for processing the personal data you provide to us, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (hereinafter "LFPDPPP") and other applicable regulations.

IIPersonal data we collect

For the purposes described in this Notice, Regene Global will collect the following categories of personal data from you:

A) Identification and contact data

• Full name and/or company or business name
• Federal Taxpayer Registry number (RFC)
• Tax identification data and/or proof of tax address
• Email address
• Phone number(s)

B) Financial and asset data

• Bank or payment account information for managing business transactions
• Data for issuing digital tax invoices (CFDI)

Regene Global does NOT collect personal data of special or sensitive categories (health data, racial origin, religious beliefs, biometric data, etc.).

IIIPurposes of processing

Your personal data will be processed for the following purposes:

A) Primary purposes (necessary for the business relationship)

• To confirm, manage and follow up on orders placed by distributors and customers.
• Issuing tax receipts, invoicing and collections management.
• Fulfilling the obligations arising from the contract or business relationship between the parties.
• Handling requests, clarifications and after-sales services.

B) Secondary purposes (marketing and commercial communications)

• Sending information, promotions, product news and commercial communications from Regene Global.
• Conducting satisfaction surveys and market research.

If you do not want your personal data to be processed for the secondary purposes described above, you may express your refusal by sending an email to: contacto@regeneglobal.com, with the subject line "Objection to secondary purposes". Refusing processing for secondary purposes will not affect your business relationship with Regene Global.

IVTransfers of personal data

Regene Global does not transfer your personal data to domestic or foreign third parties, except for transfers required by law, ordered by a competent authority, or essential to carry out the legal relationship between Regene Global and you, in accordance with article 37 of the LFPDPPP.

Should transfers requiring your consent take place in the future, Regene Global will notify you in advance through an update to this Privacy Notice.

VARCO rights and how to exercise them

You have the right to Access, Rectify, Cancel or Object to (ARCO rights) the processing of your personal data, as well as to revoke at any time the consent you have granted for such processing, to the extent legally applicable.

To exercise your ARCO rights or revoke your consent, you must send a request to the email address: contacto@regeneglobal.com, with the subject line "ARCO Request" or "Revocation of Consent", including the following information:

• Full name of the data subject and a copy of a valid official ID.
• A clear and precise description of the personal data for which you wish to exercise any ARCO right.
• Any other information that helps locate your personal data.

The response time will be twenty (20) business days from receipt of the complete request, as provided by the LFPDPPP.

VIUse of cookies and tracking technologies

The Regene Global website may use cookies and similar technologies to improve the browsing experience, analyze traffic and personalize content. You can set your browser to disable these technologies; however, this may affect the website's functionality. For more information on the use of cookies, see our Cookie Policy available on the website.

VIIChanges to this privacy notice

Regene Global reserves the right to update or modify this Privacy Notice at any time. Any changes will be communicated through the official Regene Global website, so we recommend checking it periodically. The date of the last update is shown at the bottom of this document.

VIIICompetent authority

If you believe that your right to the protection of personal data has been violated by any action or omission on our part, or that there has been an alleged violation of the provisions of the LFPDPPP, you may file the corresponding complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), through its website www.inai.org.mx.