In order to comply with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, its applicable Regulations and Guidelines (the “ Law ”), MYS WELLNESS AND HOME GOODS, its controllers, affiliates and/or subsidiaries, and/or its related parties (“ Mys ”), with address at Sófocles No. 219, Col. Los Morales, Secc. Alameda, Miguel Hidalgo, Mexico City, Mexico, CP 11530, (the “ Address ”), email address: https://myswellness.cm/ (the “ Site ”) and other present and future platforms owned by you, and with contact email: info@myswellness.com (the “ Email ”) and telephone number: + 52 56 3815 5501 (the “ Phone Number ”), puts this at your disposal:

NOTICE OF PRIVACY

In order to provide legitimate, controlled and informed processing of your personal data, which you currently provide us or in the future and which are in our databases, or which have been collected by cookies, or any other web tracking technology, as well as to guarantee your privacy and your right to informative self-determination when providing us with said data, Mys being responsible for the use and protection of your personal data which will be treated based on the principles of legality, consent, information, quality, purpose, loyalty , proportionality and responsibility provided for in the Law.

USE OF INFORMATION

The information that you provide us through access, registration and creation of a User profile on the Site and/or on the Platform, and/or email, and/or filling out physical or electronic forms or surveys, in real time or history, will be processed and ordered, to generate data indicators, which Mys can use to make decisions relevant to your business. All information collected will be used for statistical purposes, in a generic and non-personalized manner, and is associated with the growth, maintenance and administration of Mys , respecting your privacy at all times. These uses include our internal operations and administration, communication with you and fulfilling requests for services and/or products provided by Mys , as well as to improve, develop, perfect and provide the Mys services, through its parts. related companies, affiliates, or authorized suppliers and/or business partners, establishing appropriate measures in order to limit the use of the information collected from you, only for legal and authorized purposes in accordance with this Notice, as well as with due confidentiality measures. and security.

 

Mys may also collect your Internet Protocol (IP) address to help diagnose problems with the Mys server and to administer the Site and Platform. An IP address is a number that is assigned to your computer when you use the Internet. Your IP address is also used to help identify you within a particular session and to gather general demographic information. Mys may use “push” technology through the application that Mys uses to send notifications with prior authorization from the User. This means of communication does not have any type of access to other functions or information of the equipment with which it connects to the Site. The information may include the URL they came from (whether or not on the Site), which URL they next access (whether or not on the Site), what browser they are using, as well as the pages visited, the searches performed, the posts, business preferences, messages, etc.

 

USE OF COOKIES

Mys informs you that, through the use of cookies and similar technologies, it seeks to guarantee the best possible experience on the Site and/or the Platform, by providing you with personalized information, remembering your service and marketing preferences and helping you obtain the appropriate information. If you require more information regarding the use of cookies and similar technologies, Mys makes the Cookie Use Policy available to you.

1. PERSONAL DATA REQUESTED

Mys , and/or its controlling companies and/or affiliated and/or subsidiary companies and/or related parties (the “ Related Third Parties ”) and/or those third parties that, due to the commercial relationship with Mys, have contracted the use of the Platform to complement your business proposal and have the need to process and/or use your personal data (the “ User ”), requests and obtains personal data in general, as well as personal data considered sensitive by Law (hereinafter “ Data General Personal Data ” and “ Sensitive Personal Data ”, respectively; and collectively referred to as the “ Personal Data ”) of the persons described hereinafter.

Sensitive Personal Data may be requested by electronic or physical means, with the understanding that all information provided in physical form will be considered and treated as if it had been provided and authorized on the Site and/or the Platform, and for which it will be governed. for the present document.

In all cases, the collection of Personal Data by Mys is carried out in good faith and for the purposes set forth herein; For this reason, it is presumed that the data provided by its owners is true and complete, which is why it is the responsibility of the owner who provides it.

The Personal Data that will be collected from the Users, responsible for the application, selection, acquisition and administration processes of the services provided on the Site and/or the Platform (the “ Services ”) as well as the information that is collected by Mys through the use of the Platform, consist of personal information that is included or may be included in formats, lists, databases or other physical and/or electronic media, as appropriate, so that Mys can provide the Services and consolidate the catalog of procedures and services carried out by the User through the Platform.

1. USERS OF THE PLATFORM. The Personal Data that will be collected from Users who use the Platform are necessary to document the commercial and legal relationship that exists or may exist with each of them. The Personal Data that you will voluntarily and freely provide to Mys , consists of information that is included or may be included in contracts, letters, forms, lists, databases or other physical and/or electronic media, as appropriate, so that Mys, can document the relationship between the parties, the use and selection process that it carries out or is going to carry out of the Modules that make up the Platform Services; as well as to fully comply with the internal policies, procedures and other legal obligations applicable to Mys .

The Personal Data that will be requested from Users for their registration as a User on the Platform are the following:

• Full name;
• Phone;
• Home; and
• Email.

The Personal Data that will be requested from Therapists for their registration as a Therapist on the Platform are the following:

• Full name;
• Official identification;
• Phone;
• Address and proof of this;
• Professional background;
• Academic or educational background and educational certificate;
• Photography;
• Email;
• Bank account; and
• Key to the Federal Taxpayer Registry.

2. PURPOSES OF THE PROCESSING OF PERSONAL DATA

The Personal Data provided to Mys through the Platform will be used as mentioned above, with the purpose of:

1. Carry out data processing that allows creating a record of the Users, Therapists and the Service Modules that you use, administer or manage through the Platform;
2. That the User and the Therapists can manage, operate, administer and monitor the business relationship; and
3. Process bank details to make payment for services and/or any business procedure, through the payment engines provided by the platform.

Once the purposes of the processing of your Personal Data have been met, and when there is no legal provision that establishes otherwise, Mys will proceed to the cancellation, elimination and/or destruction of the Personal Data received, in the terms established by the Law.

The treatment that the User and the payment engines arranged by the User will be subject to the terms and conditions of the User Privacy Notice as well as those contained on the website of the third party that performs the payment engine services.

3. TRANSFER

TRANSFER OF PERSONAL DATA AND INFORMATION. The Personal Data referred to in this Notice may be transferred to: (i) Related third parties and/or commercial allies, with the purpose of enhancing the value proposition of Mys . as well as offer you, based on your needs, other products and services; (ii) Judicial authorities, Mexican and foreign, with the purpose of complying with the Law, legislation, notifications, requirements or judicial letters; (iii) To internet service providers on which the Mys technological infrastructure is mounted; and/or (iv) To providers of technical support services of the Platform. In the event of any transfer of your Personal Data, in which your express consent is required, we will inform you in order to collect it.

In all cases, Mys will communicate this Privacy Notice to these third parties and will ensure, through the signing of agreements and/or the adoption of other binding documents, that said third parties maintain the administrative, technical and physical security measures necessary to safeguard your Personal Data, as well as that said third parties only use your Personal Data for the purposes for which they were collected. Likewise, both the User and the person responsible for collecting the Personal Data and Mys that facilitates the collection and processing of the same through the Platform, as well as any other person related to Mys who has access to the information contained in this Privacy Notice, They will be obliged to protect it under the same security and confidentiality standards, and not to reveal it or misuse it, or otherwise they will be responsible in accordance with the applicable laws.

Notwithstanding the above, Mys will not transfer your Personal Data to third parties not related to Mys , except in the cases mentioned above and those provided for in the Law, without your prior consent.

4. MEANS AND PROCEDURES FOR THE EXERCISE OF ARCO RIGHTS

You, as the owner of the Personal Data provided to Mys , may request at any time to exercise your rights of access, rectification, cancellation or opposition (the “ ARCO Rights ”) to the processing of your Personal Data, consisting of: (i ) access your Personal Data and the details of its processing; (ii) rectify your Personal Data if it is inaccurate or incomplete; (iii) cancel your Personal Data when you consider that they are not required for any of the purposes indicated in this Privacy Notice, they are being used for non-consensual purposes or your contractual or service or other relationship with Mys has ended; and (iv) oppose the processing of your Personal Data for specific purposes.

For this purpose, you must follow the process of submitting your request in writing to Mys , or send your request to Email, as applicable, which must contain, at a minimum, the following information: (a) Your full name and address, or other suitable means to communicate the response to your request; (b) Documents that prove your identity or, where applicable, that of your legal representative; (c) The clear and precise description of the Personal Data with respect to which one seeks to exercise any of the aforementioned rights; and (d) Any other element or information that facilitates the location of the Personal Data, as well as any other document required by current regulations at the time of submitting the request. You may also request more information from the Email about the procedure to exercise your ARCO Rights.

The response to your request will be made known to you by Mys in the terms and deadlines established in the Law. However, you can obtain more information about the status of your request and the response period thereof, by contacting Mys or by sending your request to Email, where you can also address any clarification or doubt you may have regarding the processing of your Personal Data and the exercise of your ARCO Rights.

5. REVOCATION OF CONSENT; LIMITATION OF USE AND DISCLOSURE OF PERSONAL DATA

You may also revoke, at any time, the consent you have given to Mys for the processing of your Personal Data, as well as request that the use and disclosure thereof be limited, as long as it is not prevented by a legal provision. For this purpose, you must submit your request in writing to Mys , or send your request to Email, as applicable. Said request must meet the same requirements mentioned in Section 4. above.

The response to your request will be made known to you by Mys in the terms and deadlines established in the Law. However, you can obtain more information about the status of your request and the response period thereof, by contacting Mys or by sending your request to the Email, where you can also answer any clarification or doubt you may have regarding the treatment and these rights that correspond to you with respect to your Personal Data.

In the event that your Personal Data had been sent prior to the date of revocation of consent, and continue to be processed by those in charge of Mys , the latter will inform the latter of said revocation, so that they can proceed to do what is appropriate.

 

6. CHANGES TO THE PRIVACY NOTICE

Mys reserves the right to modify and/or update this Privacy Notice, in any or all of its parts, at its sole discretion, in which case it will communicate it here through its Site and/or the Platform; and, depending on the particular case of each owner, through its internal networks, or through a notice that will be placed in the usual means (physical or electronic) of communication of Mys and in a visible place at the Address, or through a written notice to your email, as legally required.

7. DIGITAL, ELECTRONIC OR ONLINE FORM

The Parties agree that the way to perfect the agreement of wills between them may be in Digital, Electronic or Online format, where it will be enough to express their will through acceptance, as well as provide personal data, on the Website itself. Mys, without requiring a signature on any document.

First broadcast date: [July 30, 2023].

Last update date: [February 12, 2024].