The personal data we collect from you will be used for the following purposes, which are necessary for the service you request:

• To follow up on your interest.
• To manage your registration as a prospective client.
• To comply with obligations arising from a contractual relationship.

Additionally, we will use your personal information for the following secondary purposes, which are not necessary for the service requested but which allow us to provide you with better service:

• To carry out satisfaction surveys and service quality evaluations.
• To carry out satisfaction surveys and service quality evaluations.
• To analyze commercial behavior.
• To establish direct communication.
  For marketing or advertising purposes.
• For commercial prospecting.

If you do not wish your personal data to be used for these secondary purposes, you may indicate so below:

I do not consent that my personal data be used for the following purposes:

1. To carry out satisfaction surveys and service quality evaluations.
2. To carry out satisfaction surveys and service quality evaluations.
3. To analyze commercial behavior.
4. To establish direct communication.
5. For marketing or advertising purposes.
6. For commercial prospecting.

Refusing consent for your personal data to be used for these secondary purposes will not be a reason for us to deny you
the services or products you request or contract with us.

In order to carry out the purposes described in this privacy notice, we will use the following personal data:

• Identification data.
• Contact data.
• Employment data.
• Academic data.
• Asset and/or financial data.

You have the right to know what personal data we have about you, for what purpose we use it, and the conditions of the use we give it (Access). You also have the right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); to have it erased from our records or databases when you consider that it is not being used properly (Cancellation); and to object to the use of your personal data for specific purposes (Opposition). These rights are known as ARCO rights. ARCO rights.

To exercise any of the ARCO rights, you must submit the corresponding request through the following means:

Email

1. What means can the data subject (or representative) use to prove identity?
   Email (attaching a copy of an official ID).
2. What information/documentation must the request contain?
   Full name of the data subject
   Address or email for notifications
   Valid official identification (INE, passport, or military service card)
   Clear description of which ARCO right you wish to exercise (access, rectification, cancellation, or opposition)
   Documents proving legal representation, if applicable.
3. In how many days will we answer your request?
   Within 20 business days from receipt of the complete request.
4. By which means will we communicate the response to your request?
   Email
5. In what formats can the personal data be reproduced?
   Digital copy (PDF) via email, or printed copy delivered to your address
   by prior appointment if requested.
6. What forms or systems do we provide to facilitate the exercise of ARCO rights?
   hola@laherenciasantacruz.com
7. For more information on the procedure, you may contact:
   hola@laherenciasantacruz.com

1. Name: Customer Service / Data Protection Department.
2. Address: Calle General Manuel Márquez de León, Colonia Centro, La Paz, Delegación/ Municipality of La Paz,
   Zip Code: 23000, Baja California Sur, Mexico
3. Email hola@laherenciasantacruz.com

You may revoke the consent you have given us for the processing of your personal data. However, please note that in certain cases we may not be able to fulfill your request or immediately stop the use of your data, since due to a legal obligation we might need to continue processing your data. Likewise, revoking your consent for certain purposes may imply that we can no longer provide the service you requested, or the termination of our relationship.

To revoke your consent, you must submit your request via email to:
Email

Below is the procedure and requirements for revoking consent:

1. What means can the data subject (or representative) use to prove identity?
   Email (attaching a copy of an official ID).
2. What information/documentation must the request contain?
   Full name of the data subject. Address or email for notifications. Valid official ID. Clear description of the purpose from which you wish to revoke consent (access, rectification, cancellation, or opposition),
   Documents proving legal representation, if applicable.
3. In how many days will we answer your request?
   Within 20 business days from receipt of the complete request.
4. By which means will we communicate the response to your request?
   Email
5. For more information on the procedure, you may contact:
   Email

In order for you to limit the use or disclosure of your personal information, we offer the following means:

Email hola@laherenciasantacruz.com

In addition, we inform you that we have the following exclusion lists in which you may register so that your personal data is not processed for certain purposes:

• Exclusion List Name: Listado de Exclusión de Marketing.
• Purposes to which it applies: To avoid sending advertising or promotional information by any means.

You may also register in:
The Public Registry to Avoid Advertising — for more information, consult the website of PROFECO (Mexico).

We inform you that on our website we use cookies, web beacons, or other technologies through which it is possible to monitor your behavior as an Internet user, as well as to provide you with a better service and experience while navigating our site. The personal data we collect through these technologies will be used for the following purposes:

• To improve the user experience on the website, by customizing content according to your language, browser, and operating system. To determine the user’s approximate location in order to offer relevant information about the real estate development closest to their region. To analyze browsing behavior, including pages visited, searches made, date and time of access, in order to optimize the content and structure of the website. For statistical and usage-analysis purposes, which allow us to evaluate the performance of our digital campaigns and interaction with the published content.

The personal data we obtain from these technologies are the following:

• User’s preferred language.
• Region in which the user is located.
• User’s browser type.
• User’s operating system.
  Date and time of the start and end of a user session.
• Web pages visited by the user.
• Searches performed by the user.
  
  We also inform you that your personal information will be shared with the following entities for the following purposes:
  
  
• META: Advertising purposes.
• GOOGLE: Advertising purposes.
  
  These technologies may be disabled by performing the following steps: The data subject may disable cookies and similar technologies in their web browser settings (Chrome, Safari, Firefox, Edge, etc.) and delete existing cookies. Keep in mind that by disabling these technologies, some functionalities of the website may be limited.

This privacy notice may undergo modifications, changes, or updates resulting from new legal requirements; our own needs derived from the products or services we offer; our privacy practices; changes in our business model; or other causes.

We commit to keeping you informed about changes to this privacy notice
via our website.

The procedure for notifying changes or updates to this privacy notice is as follows:
A notice of changes will be published on the Privacy Notice page.

I consent to my personal data being processed in accordance with the terms and conditions stated in this privacy notice.

Last updated: 07/15/2025