Comprehensive Privacy Notice

I. Identity and domicile of the responsible party

PROVIF, with trade name PROVIF, domiciled at Blvd. de Las Americas 374, Anexa 20 de Noviembre, Tijuana, Baja California, Mexico, C.P. 22100, is responsible for the processing of your personal data in accordance with this Privacy Notice.

You can contact us through:

• Email: online@provif.com
• Phone / WhatsApp: +52 479 103 9562
• Website: www.provif.com

II. Personal data we collect

For the purposes described in this Privacy Notice, PROVIF collects the following categories of personal data:

Identification data:

• Full name
• Date of birth (when provided)
• Email address
• Phone number and/or WhatsApp

Contact data:

• Shipping address
• Billing address
• Postal code
• City and state

Patrimonial/financial data:

• Payment method used (card type, last 4 digits)
• Billing data (RFC, company name, tax regime, fiscal postal code)

PROVIF does not store full credit or debit card numbers. Payment processing is done through certified platforms.

Data collected automatically:

• IP address
• Browser and device type
• Operating system
• Pages visited within provif.com
• Date and time of access
• Data collected through cookies and web beacons (see section X)

III. Sensitive personal data

PROVIF collects personal data considered sensitive only in the context of the Nutritional Clinic services, and only when you provide them directly during a consultation:

• Weight, height, and body composition
• Information about eating and physical activity habits
• Health history relevant to the design of a nutritional plan (food allergies, intolerances, metabolic conditions declared by the patient)

This data is collected with your express consent at the time of scheduling and attending your nutritional consultation. It is used exclusively for the elaboration of your personalized nutritional plan and treated with strict confidentiality.

For purchases in the online store, PROVIF does not collect sensitive data.

We inform you that, in accordance with Article 9 of the LFPDPPP, your express written consent is required for the processing of sensitive data. By providing this information to our nutritionists, you express your consent for its processing according to the described purposes.

IV. Purposes of the processing

Your personal data will be processed for the following purposes:

Primary purposes (necessary for the provision of the service):

• Create and manage your customer account on provif.com
• Process, track, and complete your product orders
• Coordinate the shipment of your products through YoloEnvío and its associated couriers (FedEx, DHL, Estafeta, UPS, Redpack)
• Send purchase confirmations, tracking guides, and notifications about your order status
• Manage return, exchange, or claim requests
• Provide the nutritional consultation service and elaborate personalized nutritional plans (Nutritional Clinic)
• Issue invoices and comply with tax obligations
• Address your questions, complaints, and customer service requests
• Prevent fraud and ensure transaction security

Secondary purposes (not necessary for the provision of the service):

• Send information about promotions, offers, discounts, and PROVIF news by email or WhatsApp
• Make personalized product recommendations based on your purchase history
• Send satisfaction surveys about acquired products or services
• Prepare internal statistics and market analysis to improve our products and services

If you do not wish your data to be processed for secondary purposes, you can express your refusal from this moment by sending an email to online@provif.com with the subject "Refusal secondary purposes", indicating your full name and the purposes you oppose. Your refusal will not be a reason to deny you the provision of our services or the sale of products.

V. Transfers of personal data

PROVIF may transfer your personal data to the following third parties, for the indicated purposes:

*Transfers marked with "No" do not require your consent according to the exceptions provided in Article 37 of the LFPDPPP (transfers necessary for the fulfillment of the legal relationship, required by law, or necessary by contract).

PROVIF does not sell, rent, or trade your personal data to third parties for advertising or marketing purposes.

VI. ARCO Rights

You have the right to Access your personal data, Rectify them if they are inaccurate, request their Cancellation, or Oppose their processing (ARCO rights). The exercise of these rights is free of charge.

To exercise your ARCO rights, send a request with the following information:

• Full name of the owner
• Email or address to receive the response
• Copy of valid official identification (INE, passport, or professional license) to prove your identity
• Clear description of the right you wish to exercise and the personal data involved
• Any document that facilitates the location of your personal data

Means to submit your request:

• Email: online@provif.com with the subject "ARCO Request"
• Domicile: Blvd. de Las Americas 374, Anexa 20 de Noviembre, Tijuana, B.C., Mexico

Response times:

• PROVIF will communicate the determination regarding your request within a maximum period of 20 business days from the receipt of the complete request
• If the request is approved, it will be effective within 15 business days following the response
• The periods may be extended once for an equal period, when justified by the circumstances of the case

If your request is appropriate, the data will be delivered in simple copies, electronic documents, or any other means that PROVIF makes available to you.

VII. Revocation of consent

At any time you can revoke the consent you have given us for the processing of your personal data, as long as a legal provision does not prevent it.

To revoke your consent, follow the same procedure described in the ARCO Rights section, indicating in the subject "Revocation of consent" and clearly specifying for what purposes you revoke your consent.

You should consider that revoking consent for primary purposes may prevent PROVIF from continuing to provide the service (for example, if you revoke the use of your address, we will not be able to send you orders).

PROVIF will respond to your revocation request within a maximum period of 20 business days.

VIII. Limitation of the use or disclosure of data

If you wish to limit the use or disclosure of your personal data, you can:

• Send an email to online@provif.com with the subject "Data limitation", indicating your full name and what use you wish to limit
• To stop receiving promotional communications, follow the "Unsubscribe" link included in our emails, or send a WhatsApp message to +52 479 103 9562 with the word "BAJA"
• Register in the Public Registry to Avoid Advertising (REPEP) of PROFECO: repep.profeco.gob.mx

IX. Modifications to the Privacy Notice

PROVIF reserves the right to modify this Privacy Notice at any time. Modifications will be available through:

• Publication of the updated version on this page: provif.com/aviso-de-privacidad/
• Email notification when the changes are significant

We recommend periodically reviewing this notice to be aware of any changes. The date of the last update is indicated at the end of the document.

X. Use of cookies and web beacons

provif.com uses cookies and web beacons to collect personal data automatically. These technologies allow us to improve your browsing experience and analyze site usage behavior.

Cookies used:

Web beacons: We use web beacons (also known as tracking pixels) in emails to measure the open rate and on the website to collect usage statistics.

How to disable cookies and web beacons:

You can disable cookies from your browser settings. Below are instructions according to the browser:

• Google Chrome: Settings > Privacy and security > Cookies and other site data
• Mozilla Firefox: Options > Privacy and security > Cookies and site data
• Safari: Preferences > Privacy > Manage website data
• Microsoft Edge: Settings > Cookies and site permissions > Cookies and stored data

Keep in mind that disabling essential cookies may affect the operation of the website, including the shopping cart.

XI. Consent

By providing your personal data through provif.com — whether creating an account, making a purchase, or scheduling a nutritional consultation — you state that:

• You have read and understand this Privacy Notice
• You accept the terms and conditions of the processing of your personal data described here
• You grant your consent for the processing of your data according to the indicated purposes
• In case of providing sensitive data (Nutritional Clinic), you grant your express consent for its processing

If you do not agree with the terms of this notice, we ask you not to provide your personal data.

XII. Contact and complaints to the INAI

For any questions, comments, or requests related to this Privacy Notice or the processing of your personal data, contact us:

• Responsible: PROVIF Data Protection Area
• Email: online@provif.com
• Phone / WhatsApp: +52 479 103 9562
• Domicile: Blvd. de Las Americas 374, Anexa 20 de Noviembre, 22100 Tijuana, B.C., Mexico

If you believe that your right to personal data protection has been violated by any conduct of PROVIF, you can file your disagreement or complaint with the INAI (National Institute of Transparency, Access to Information, and Protection of Personal Data):

• Website: www.inai.org.mx
• Phone: 800 835 4324 (INAI Tel)
• Email: atencion@inai.org.mx