This PRIVACY NOTICE is issued and delivered in accordance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Federal Law on the Protection of Personal Data Held by Private Parties) (hereinafter "THE LAW"), and applies to our website (www.paycash.com) (hereinafter the "WEBSITE"), as well as to all our online content, whether text, graphics, videos, images, information and any other material ("CONTENT"), under the following terms:

I. PARTY RESPONSIBLE FOR PERSONAL DATA USE AND PROTECTION: RED EFECTIVA, S.A. DE C.V. (hereinafter "DATA CONTROLLER"), located on Blvd. Antonio L. Rodríguez #3058, Edificio Plaza Delphi, Suite 201-A, Colonia Santa María, Monterrey, N.L., C.P. 64650, undertakes to collect and protect your information.

II. DATA HOLDER: A) Any individual or legal entity who holds the data, hires services, lends and/or makes goods available to the DATA CONTROLLER in order to fulfill the contractual obligations arising from the DATA CONTROLLER’s business activity. B) The individuals working for the DATA CONTROLLER, whether directly or through any Company that provides personnel services. C) Individuals who, for whatever reason, deposit, provide, or in any way make available to the DATA CONTROLLER data classified as personal data, under Section V, Article 3 of the LAW, in order to use the WEBSITE or open up an account with the DATA CONTROLLER, or to use those services provided by the DATA CONTROLLER.

III. PERSONAL DATA PROCESSING: The DATA CONTROLLER may request and/or collect, through the WEBSITE and other media, PERSONAL DATA (as defined below) from the HOLDERS for commercial use, disclosure, and/or storage by any means. The DATA CONTROLLER and/or any third party involved in any stage of the PERSONAL DATA PROCESSING shall maintain the confidentiality thereof, in accordance with the United Mexican States (Mexico) legal provisions.

III. DATA COLLECTED BY THE DATA CONTROLLER: The personal data (hereinafter, "PERSONAL DATA") collected by the DATA CONTROLLER from the HOLDERS will be the following: From the HOLDERS mentioned in subparagraph II.A) above: •Founding Act. •Federal Taxpayer’s Registry. •Power of attorney in case of acting as the Legal Representative. •Official Identification (passport / voter credential / driver's license). •Proof of residence of the current customer, not older than two months. •Bank account, CLABE code, and name of the bank. •E-mail address; home, office, and cell phone numbers of the HOLDER and its directors, managers, and employees. From the HOLDERS mentioned in subparagraphs II.B) and II.C) above: •Full name, Unique Population Registry Code (CURP), age, nationality, marital status, address, Federal Taxpayer’s Registry, education level, profession or activity, spouse or cohabitant’s name, parents’ name. •Official Identification (passport / voter credential / driver's license). • Proof of residence of the current customer, not older than two months. •E-mail address; home, office, and cell phone numbers. •Curriculum Vitae. •Employment application.

IV. DATA THAT WILL NOT BE COLLECTED OR REQUESTED BY THE DATA CONTROLLER: The PERSONAL DATA that the DATA CONTROLLER shall not collect or request for any reason whatsoever from any of the HOLDERS mentioned in this document are: sexual preferences; social, political or religious opinions and ideologies; affiliation to groups, clubs or associations of any kind; ethnicity; social status, or any other information tending to discriminate against the HOLDERS.

V. PURPOSE OF DATA PROCESSING AND RETENTION PERIOD: For HOLDERS mentioned in subparagraph A), section III hereof, the DATA CONTROLLER will exclusively use the PERSONAL DATA collected and referred to in order to establish, formalize and comply with the legal and contractual obligations agreed by the HOLDER and the DATA CONTROLLER. For HOLDERS mentioned in subparagraphs B) and C), section III hereof, the DATA CONTROLLER will exclusively use the PERSONAL DATA collected and referred to in order to carry through recruitment and personnel selection processes to fill several job vacancies available at the time; as well as to keep a personnel file of those employees already working and those selected for the advertised position, for the sole purpose of complying with the legal provisions of the Federal Labor Law. In both cases, the DATA CONTROLLER will protect the information collected throughout the contractual relationship and up to 10 years after its termination, unless the competent authority or the applicable legal provisions mandate or establish a longer term.

VI. DATA USE OR DISCLOSURE RESTRICTION: The HOLDER may restrict the use or disclosure of its PERSONAL DATA whenever it so decides, as long as such is not necessary in order to comply with the contractual obligations between the HOLDER and the DATA CONTROLLER. For such purpose, the HOLDER will only send an E-mail to privacidad@redefectiva.com explaining its request to the DATA CONTROLLER’s Personal Data Department, specifying what information it wants to restrict and the reasons to do so.

VII. MEANS FOR HOLDERS TO EXERCISE THEIR RIGHT TO ACCESS, RECTIFY, CANCEL, AND CHALLENGE THEIR PERSONAL DATA: In accordance with the provisions of The LAW, the HOLDER may request access to, rectification, cancellation, and challenge of their PERSONAL DATA, by submitting a request to the DATA CONTROLLER’s Personal Data Department via an e-mail to privacidad@redefectiva.com, which must include the following: •The name of the HOLDER; its address or any other means of receiving the response to its request. •Documents that prove the identity of the HOLDER or, when appropriate, of its legal representative. •A clear and precise description of the personal data in respect of which the aforementioned rights will be exercised. •Any other item or document that facilitates the location of the personal data. The DATA CONTROLLER's Personal Data Department will respond within a maximum of 20 business days following the receipt of the request. This term may be extended once for the same period if circumstances warrant it. The response will be sent to the HOLDER by e-mail.

VIII. PERSONAL DATA TRANSFERS: The DATA CONTROLLER will only share the HOLDER’s data to the holding, subsidiary or affiliated companies under the joint control of the DATA CONTROLLER, or to a parent company or any other association within the DATA CONTROLLER’s group that operates under the same internal processes and policies, or to suppliers, sponsors, advertisers, contractors and/or business partners for purposes of bank data verification, credit recharge, awards payment, advertising, promotions, and notifications related to the WEBSITE or the service. Third parties receiving data related to the Users' Personal Data are bound to comply with the provisions established in this Privacy Notice, as well as with the Terms and Conditions of the WEBSITE, and with the United Mexican States legislation. The foregoing applies when such a transfer is necessary by virtue of a contract entered or to be entered into in the interest of the HOLDER by the DATA CONTROLLER and a third party. Therefore, for absolutely no reason or circumstance, the DATA CONTROLLER will disclose or publish the HOLDERS' data to people outside this means of communication or any other, except when ordered by the Competent Authority in the exercise of its legal powers.

IX. USE OF COOKIES: The DATA CONTROLLER will use several technologies to collect and store information when the HOLDER uses our WEBSITE or CONTENT. These may include sending one or more cookies or anonymous identifiers to the HOLDER’s device. Cookies are small text files that are stored in the browser of HOLDER’s computer or mobile device when it visits a website or uses an application.
The DATA CONTROLLER may use cookies (or clear gifs, web beacons, or similar devices, including devices operating in the mobile environment) to collect information from users for purposes such as following up on visits and measuring visitors’ patterns.
When users revisit our WEBSITE, the cookie allows it to identify them. The DATA CONTROLLER uses "persistent cookies" to save users' login data for future logins to our WEBSITE. We use "session id cookies" to better understand how users interact with our website, applications, or content, and to monitor aggregate usage and web traffic routing. Most browsers automatically accept cookies, but they allow users to disable cookies through their browser's "options" or "settings" menu. Please note that disabling cookies may interfere with the functionality of our WEBSITE or CONTENT.
This data is not personally identifiable, and it is used only to enhance CONTENT and improve the users' experience. Cookies are not used to retrieve from the users' computer or device PII or any other information not related to the CONTENT or their interaction with it. The DATA CONTROLLER reserves the right to disclose or use this information in aggregate form, for any purpose, at its sole discretion. Third-party advertisers who place advertisements on the WEBSITE may also use their own cookies.
Users can stop or restrict the storage of cookies on their computers or remove them from their browsers by adjusting their web browser settings. Please bear in mind that this may cause some features of the Service to malfunction. Also, please note that cookie-based opt-outs are not effective on mobile applications. However, on many mobile devices app users can opt-out of certain mobile tracking activities through their device settings.

X. KEEPING THE HOLDER’S PERSONAL DATA SAFE: The DATA CONTROLLER has implemented reasonable security practices to protect your personal data against unauthorized access, use, modification, destruction, or disclosure. However, no method of transmission or storage is entirely safe, so the DATA CONTROLLER cannot guarantee total data security. It is the HOLDER’s responsibility to protect the data residing on their mobile device. We recommend data encryption and the use of passwords to block their mobile device in the event of loss or theft.

XI. PROCEDURE AND MEANS BY WHICH HOLDERS WILL BE NOTIFIED OF CHANGES TO THE PRIVACY NOTICE: This Privacy Notice may be updated from time to time. If the DATA CONTROLLER makes any material change in it, HOLDERS will be informed through electronic, optical, sound or visual media, or any other technology, 15 (fifteen) days before such changes take effect. Unless otherwise provided by law, the continued use by the HOLDER of our WEBSITE implies its acceptance and consent with the updated Privacy Notice.