Privacy Notice

In compliance with the provisions of the Federal Law on the Protection of Personal Data Held by Private Parties (the “Data Protection Law”), its corresponding Regulations, and for the purpose of guaranteeing the privacy, proper handling of personal information and the right to informational self-determination of the users of the website https://www.venturelex.mx (the “Website”), as well as of our clients and all those persons who voluntarily share their personal data with us, “VLA Consultores Legales México”, S.C. (hereinafter “Venture Lex”), hereby informs you of and makes available to you this privacy notice (the “Privacy Notice”).

1. ABOUT US

Venture Lex is the party responsible for the processing of the personal data (“Personal Data”) that is provided to it for the purposes described below, with registered office at Avenida Paseo de la Reforma 231, PH, Cuauhtémoc, Colonia Renacimiento, C.P. 06500, Mexico City.

1. SCOPE AND PERSONAL DATA COLLECTED

This Privacy Notice applies to any user, prospective client, client, supplier and recipient of related services (jointly referred to as “users”), whose related information shall be processed in accordance with the principles of lawfulness, consent, quality, purpose, information, proportionality, fairness and accountability, whereby Venture Lex undertakes to ensure transparency and the security of your Personal Data.

The Personal Data that Venture Lex collects for the provision of its services includes its use, storage and, where applicable, disclosure. Since the Personal Data is provided directly by its data subject, such data shall be deemed to comply with the principle of quality, unless the data subject states otherwise and evidences it, or if Venture Lex has objective evidence to the contrary. Venture Lex may carry out the necessary investigations and actions, either by means of third parties, authorities or government agencies, to verify the accuracy of the data provided.

Consent shall not be required for the processing of Personal Data whenever any of the situations set forth in Article 10 of the Data Protection Law is met. Likewise, please be informed that our Website uses first party and third-party cookies, which allow us to optimize performance and increase the reach of our services.

The Personal Data that we may collect includes the following:

• Name
• Contact address and/or Client’s address and/or address of any officer or employee of the Client
• Company and position held therein
• Email address
• Telephone number
• Tax information
• Information related to the business or company, or to specific matters.

In the case of job applicants at Venture Lex, the additional data that will be collected are the following:

• Date of birth
• Level of education and academic records
• Languages and evidence of proficiency
• Curriculum data and professional experience

In the event that Venture Lex collects sensitive Personal Data, the express prior consent of the data subject shall be requested, in order for such data to be used for the purposes herein established.

III. OBTAINING YOUR PERSONAL DATA

We obtain your Personal Data through various sources, including:

• Interactions through digital environments, such as our Website or electronic communications.
• Correspondence, business cards or job applications.
• Telephone communications, email communications or specific forms.

1. PURPOSES OF THE PROCESSING OF PERSONAL DATA

Primary purposes:

• To establish contact with you in order to respond to your inquiries.
• To handle requests for information regarding our legal services.
• To propose a legal strategy and fees for the matter consulted.
• To provide and follow up on the contracted legal services.
• To keep information up to date arising from the legal relationship and, consequently, from the processing of Personal Data.
• To perform administrative tasks, including invoicing, clarifications and collection management.
• In connection with any dispute or legal proceeding.
• To respond to requests made by any competent authority.
• To comply with applicable laws, regulations and legal provisions.
• To notify you of changes or updates to this Privacy Notice.

Secondary purposes:

• To send information that may be of interest, including news, communications or advertising related to our services.
• To invite you to participate in conferences, seminars and cultural, social or academic events.
• To send newsletters, legal updates, publications and articles.
• To generate statistics and internal analyses to improve our services and tailor them to the needs of our clients.

If you do not wish your Personal Data to be processed for the aforementioned secondary purposes, you may so indicate by sending an email to contacto@venturelex.mx.

1. EXERCISE OF ARCO RIGHTS

You have the right to Access, Rectify, Cancel or Object to the processing of your Personal Data (the “ARCO Rights”). For the proper management of the Personal Data shared by the users, Venture Lex has appointed a personal data manager (hereinafter, the “Privacy Officer”).

To exercise your ARCO Rights, you must submit a written request to contacto@venturelex.mx, which must include the following information:

1. Full name and address or email address to receive notifications.
2. A copy of an official identification (voter’s card, passport, professional license, etc.) or, where appropriate, documents evidencing the legal representation of the applicant.
3. A clear and precise description of the Personal Data with respect to which you seek to exercise any ARCO Right.
4. Any additional information that facilitates the location of the Personal Data.
5. An indication of the ARCO Right you wish to exercise and the reasons supporting your request.

Venture Lex will respond to your request within a maximum period of 20 business days. If the request is deemed admissible, it will be enforced within 15 business days following the response. Should further information be required to process your request, you will be duly notified via the same email address from which you submitted your request.

1. REVOCATION OF CONSENT AND LIMITATION OF USE

You may revoke your consent to the processing of your Personal Data or request the limitation of its use and disclosure. To do so, you must send a request to contacto@venturelex.mx, stating the reasons and the nature of your request. If admissible, you will be included in an exclusion list and a certificate will be issued to you either electronically or physically, as you may request.

It is important to note that, in certain cases, it may not be possible to comply with your request or to immediately cease the use of your Personal Data, since we may be legally required to continue processing it. Likewise, you should consider that, for certain purposes, revocation of your consent may result in the impossibility of continuing the legal relationship you have with Venture Lex.

VII. SECURITY MEASURES

Venture Lex has implemented various security measures of a technical, administrative and physical nature to safeguard the Personal Data of its users. Such measures include file encryption, encryption of data in transit, protection of data between data centers, access controls and security filters such as authentications, retention policies, compliance tools and internal audits, scanning for detection of computer viruses and monitoring of suspicious activity.

VIII. TRANSFER OF YOUR PERSONAL DATA

Your Personal Data will not be shared with third parties, except in the cases permitted by the Data Protection Law. However, it may be shared with:

• Partners, associates and employees of Venture Lex.
• Providers of technological or legal services acting in accordance with our instructions and privacy policies.
• Notaries public and public brokers, when strictly necessary.
• Financial or tax authorities or institutions, in compliance with applicable legal provisions.

To ensure the protection of the Personal Data shared by users, Venture Lex has implemented physical, technical and administrative security measures to minimize information alterations and to prevent loss and misuse of any of the Personal Data shared.

For any communication or information shared with third parties, Venture Lex verifies that such third parties comply with all necessary security measures and requirements to guarantee the proper handling of the Personal Data. Any breach by such third parties of the provisions of the Data Protection Law and its Regulations shall be their sole responsibility.

Notwithstanding the foregoing, it is important to note that no data transmission over the internet is completely secure, and therefore Venture Lex cannot guarantee that the processing of your Personal Data will be free from damage, loss, alteration, destruction or unauthorized access. Access to and processing of your Personal Data will be safeguarded with due care and will be restricted solely to personnel duly authorized by Venture Lex, who shall have complied with the relevant confidentiality requirements. Such personnel are prohibited from allowing access to unauthorized people and from using Personal Data for purposes other than those established herein. The confidentiality obligation of the people involved in the processing of your Personal Data shall remain in effect even after termination of their legal relationship with Venture Lex.

1. CHANGES TO THE PRIVACY NOTICE

This Privacy Notice may undergo modifications as a result of changes in applicable legislation, adjustments to our internal policies or business needs. Any change will be reported through our Website and/or by electronic notifications.

We recommend visiting our Website periodically to stay informed about updates to this Privacy Notice.

1. JURISDICTION

This Privacy Notice is governed by the laws in force in Mexico. For any controversy related hereto, you expressly agree to submit to the competent courts of Mexico City, waiving any other jurisdiction that may otherwise apply.

If you believe that your right to the protection of Personal Data has been violated by any action of our employees or by our practices, you are entitled to file a complaint or claim with the National Institute for Transparency, Access to Information and Protection of Personal Data (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales, INAI), or any authority that may succeed it. For further information, you may visit its official website at www.inai.org.mx.

For any question or comment related to this Privacy Notice, please contact us at contacto@venturelex.mx.

Last update of this Privacy Notice: December 2025