Notice of Privacy

Legal Paradox, SC (“Legal Paradox®”), in compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter the “Data Law”) and its Regulations, informs you of the present privacy notice (the "Privacy Notice") so it is understood that you (the "User") have reviewed, read and accepted the terms of this, so you give your consent for the treatment (the "Treatment" ) of your personal data (the “Personal Data”) by Legal Paradox® in accordance with the provisions herein.

This Privacy Notice applies to the website www.legalparadox.com , as well as to the sites, applications and tools related to our services (hereinafter the "Applications").

This Notice applies to clients or users of our services or simply anyone who uses the Applications together with any Terms and Conditions, Cookies Policies or Terms of Use issued by Legal Paradox®. Legal Paradox® reserves the right to issue additional policies related to related parties such as employees, suppliers, business partners, subsidiaries, affiliates, among others.

You, as the Owner of your Personal Data, voluntarily decide to use our services through the Applications, therefore you express your free and informed consent regarding this Privacy Notice when creating your Account or using any of our services, content, programs, promotions, or any other way by which you can access our services through the Applications.

If you do not accept this Privacy Notice, the provision of services by Legal Paradox® will be suspended.

I. Responsible for the personal data collected and contact information.

Legal Paradox® with address at Volcán 150, piso 5, Colonia Lomas de Chapultepec, CP 11910, is responsible for the personal data collected. Legal Paradox® will be in charge of collecting, handling, processing, treating and keeping the Personal Data of individuals.

Bere Velazquez, is the person you can contact in relation to the processing of your personal data, through email: contacto@legalparadox.com

II. Essential terms

• Databases: The ordered set of personal data referring to an identified or identifiable person.

• Blocking: The identification and conservation of personal data once the purpose for which they were collected has been fulfilled, with the sole purpose of determining possible responsibilities in relation to their treatment, until the legal or contractual limitation period of these. During said period, personal data may not be processed and after this, it will be canceled in the corresponding database.

• Consent: Manifestation of the will of the owner of the data by means of which the treatment of these is carried out.

• Account: It is understood as the access to the Applications created by the User on the site: www.legalparadox.com

• Personal data: Any information concerning an identified or identifiable natural person.

• Sensitive personal data: Those personal data that affect the most intimate sphere of the owner, or whose misuse may give rise to discrimination or entail a serious risk for it. In particular, those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union affiliation, political opinions, sexual preference are considered sensitive.

• Source of public access: Those databases whose consultation can be carried out by anyone, with no further requirement than, where appropriate, the payment of a consideration, in accordance with the provisions of the Regulations of this Law.

• Owner: The natural person to whom the personal data correspond.

• Treatment: The obtaining, use, disclosure or storage of personal data, by any means. The use includes any action of access, handling, use, transfer or disposition of personal data.

• Transfer: Any communication of data made to a person other than the person responsible or in charge of the treatment.

III. Personal data collected.

In order to integrate the files of Legal Paradox® Users and access the Applications, you must provide Legal Paradox® with the following information (the “Personal Data Collected”):

General personal data

The next information:

i) Paternal surname, maternal surname and name (s), or, in the case of a foreigner, the corresponding full surnames and name (s);

ii) Date of birth;

iii) Country of birth;

iv) Country of nationality;

v) Address in the place of residence, composed of the following information: name of the street, avenue or thoroughfare in question, duly specified; exterior number and, where appropriate, interior number; colony or urbanization; territorial demarcation, municipality or similar political demarcation that corresponds, if applicable; corresponding city or town, federative entity, state, province, department or similar political demarcation, if applicable; postal code and country;

vi) Telephone number (s), including the long distance code and, where appropriate, an extension, when they have one;

vii) Email, if applicable;

viii) Unique Population Registry Code and the code of the Federal Taxpayers Registry, when it has them, and

ix) Data of the identification with which it was identified, consisting of: name of the identification; authority that issues it, and its number.

x) Data collected by tracking mechanisms.

Additionally, in the case of people who have their place of residence abroad and at the same time have domicile in national territory where they can receive correspondence addressed to them, the data relating to said domicile, with the same elements as those contemplated in numeral vi ) above.

The following documents:

i) Identification;

ii) Proof of the Unique Population Registration Code, issued by the Ministry of the Interior or Tax Identification Card issued by the SAT;

iii) Proof of address;

Financial and patrimonial personal data

Activity, occupation, profession, activity or line of business to which the Client or User is engaged.

Sensitive personal data

Legal Paradox® does NOT collect sensitive personal data.

IV. Purpose of the Personal Data Collected

The Personal Data Collected will be used by the Company to:

Primary purpose

These purposes are essential, since they give rise to and are necessary for the legal relationship between you and the Company.

Evaluation management. The Personal Data Collected that make up your personal file, will be used to attend prospecting, validation, detection and handling of fraud activities.

Operation management. Once the Evaluation Management has concluded, it will be determined if the User is capable of carrying out operations with Legal Paradox® (the “Operations”). In this context, the Personal Data Collected will be sent to the corresponding legal vehicle. For the purposes of the foregoing, it will be understood that the User granted a free mandate in favor of the Company (the “Mandate”) for Legal Paradox® to send the data, so said referral will be in compliance with the Mandate.

Operations Management. In the event that the User enters into Operations with Legal Paradox®, the Personal Data Collected may be used for contracts, carry out maintenance procedures for Operations, fulfillment of obligations, assign or dispose, partially or totally, rights over the contracts entered into, as well as manage the contractual relationship with the User, including the Transfer of the Personal Data Collected to Financial Entities through which the User's Operations are carried out, including all those transfers that the applicable regulatory framework requires.

For the purposes of the provisions of the Regulation of the Data Law, the User is informed that the treatment of the Personal Data Collected can be carried out as part of a decision-making process without involving the assessment of a natural person in which even artificial intelligence intervenes.

V. Secondary purposes and Mechanisms to express refusal.

Secondary purposes

These purposes are different from those indicated in the Primary Purpose section above, so you may deny or revoke your consent, as well as oppose their treatment in relation to secondary purposes, in terms of the procedure described in section IV , Access to ARCO Rights next.

Additionally, the Personal Data Collected will be used by Legal Paradox® for the following secondary purposes: (i) marketing, advertising and commercial prospecting; (ii) send Users information and documentation related to promotions, offers, advertising and information of a marketing and advertising nature, respect for products or services; (iii) to perform statistical analysis, to generate information models and / or profiles of current and predictive behavior; (iv) to participate in surveys and promotions.

SAW. Access to ARCO rights.

Revocation of consent, limitation of use or disclosure of the Personal Data Collected and exercise of the rights of access, rectification, cancellation or opposition (ARCO).

You, or your legal representative, may at any time: revoke your consent for the treatment or use of your Personal Data by Legal Paradox®, limit its use or disclosure, as well as access them, rectify them in case they are inaccurate or incomplete, cancel them and oppose their treatment in their entirety or for certain purposes. For such purposes, you must contact Bere Velazquez, by email: contacto@legalparadox.com

To revoke your consent for the treatment or use of your Personal Data by Legal Paradox®, limit its use or disclosure, as well as access them, rectify them in case they are inaccurate or incomplete, cancel them and oppose their treatment in your in whole or for certain purposes, you must, through the request, state expressly and in detail: (i) that you wish to revoke your consent for the treatment or use of your personal data; (ii) indicate the way in which you want to limit the use or disclosure of personal data; (iii) indicate the way in which they wish to access or rectify their personal data; (iv) indicate that they wish to cancel their Personal Data; and / or (v) indicate that they wish to oppose the processing of their Personal Data.

Likewise, you can cancel your Personal Data, the cancellation will give rise to a blocking period which will proceed to the deletion of the data. Legal Paradox® may keep them exclusively for the purposes of the responsibilities arising from the treatment. Once canceled, the owner will be notified.

To exercise the ARCO rights described above, you must submit your request in terms of the ARCO rights exercise request format that you can find on the website www.legalparadox.com or in terms of the Data Law.

VII. Use of cookies, web beacons and the like

When you interact with the website www.legalparadox.com or with the Applications, we may collect server logs, which may include information such as the IP address of the device, the dates and times of access, the characteristics of the application or the pages visited. , application crashes and other system activity, the type of browser, and the third-party site or service you were using prior to interacting with our Services.

This may include technical data from advertising and analytics partners such as Google, from public databases, identity verification partners, resellers and channel partners, joint marketing partners, and social media platforms.

VIII. Procedure for communicating changes to the Privacy Notice.

Any changes made to this Privacy Notice will be notified and will also be publicly available on the website www.legalparadox.com .

IX. Transfer of the Personal Data Collected.

The Personal Data Collected will not be transferred to third parties except to fulfill the purposes described below, so that in terms of article 37, sections IV, V and VII of the Data Law, no consent is required for its case, make such transfers:

Third parties: In compliance with the primary purposes.

Service providers: In compliance with the primary purposes.

Authorities: In compliance with applicable laws.

X. Conservation

Legal Paradox® will keep the information for as long as it is necessary to achieve the purposes for which the treatment was initiated. The retention periods are determined according to the type of registration, the nature of the activity, the applicable legal or regulatory obligations and the corresponding contractual obligations.

The usual conservation period is 5 years, but if the Personal Data is collected under a contract, it is kept 6 years after the termination of the contract to combat and defend any claim made against Legal Paradox®.

Legal Paradox® may keep the Personal Data for a longer time as long as it is strictly necessary to protect the interests of the company or our clients or is required by court order issued by a competent authority.

XI. Security measures

In accordance with article 19 of the LFPDPPP, at Legal Paradox® we established physical, technical and administrative security measures to protect the Personal Data of our clients against damage, loss, alteration, destruction or unauthorized use, access or treatment of the themselves.

At Legal Paradox® we secure the databases related to the services and we maintain strict control and confidentiality of the Personal Data Collected, which are provided by our clients.

Legal Paradox® limits access to the Personal Data Collected only to employees, agents, suppliers, contractors or third parties who have a need to know them in order to properly perform their services. The aforementioned subjects will process the Personal Data under the instructions of Legal Paradox® and are subject to the obligation of confidentiality and compliance with the regulations on personal data.

XII. Account Association

There are occasions where there may be a Transfer of Personal Data by virtue of an association or account connection, in these cases your consent will always be necessary for such transfer. The transfer of Personal Data will be reciprocal, we will acquire personal data from said associated account and they will acquire data from our platform, the foregoing always in accordance with the privacy policies of the associated account and our privacy policies.

Some types of account associations that may exist are account association with social networks (eg Facebook, Twitter, LinkedIn, Instagram, Whatsapp, etc.) or event sites such as Eventbrite.

XIII. Contact

You can contact us for any questions, clarification or exercise of your rights to the email established for this purpose: contacto@legalparadox.com

I grant my consent for the treatment made by Legal Paradox® of my Personal Data Collected for the purposes described in this Notice, expressly and particularly, regarding my financial and property data.

Last update of this Notice: November 2020