Integral Privacy Notice

FINIVA V FINANCIERA, S.A.P.I. DE C.V., SOFOM, E.N.R. (hereinafter FINIVA), with address at: Corporativo Diamante Santa Fe, Vasco de Quiroga 3900, Floor 10, Colonia Santa Fe, CP 05348, Cuajimalpa de Morelos Borough, Mexico City, Mexico, and in compliance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and other applicable provisions, makes known this Privacy Notice. FINIVA is responsible for the use, treatment and protection of your personal data.

For the provision of our financial services, FINIVA will collect, manage, use and process the following personal data of the Client (hereinafter the Holder):

  1. Identification and Contact Data: such as name, address, telephone, email, Unique Population Registry Code (CURP), Federal Taxpayer Registry (RFC), signature, age, marital status, gender, date and place of birth, nationality, among others;
  2. Labor Data: employer's name or company where they work, position, seniority, income, employee number, payroll deductions, among others;
  3. Patrimonial and Financial Data: such as credit history, bank accounts, CLABE interbank account, perceptions, deductions, personal references, among others; and
  4. Sensitive Data (when applicable): health status, union affiliation, to the extent strictly necessary for the evaluation, analysis and granting of the requested credit.

Likewise, in its case, FINIVA will collect the full name and telephone of the persons designated by the Holder as personal references, for which the Holder states that they have the authorization of said persons (their personal references) to be able to provide said data to FINIVA, in order for it to confirm the information that the Holder has provided to it. The Holder releases FINIVA from responsibility for the processing of their personal references' data, which they ratify with their signature in this notice.

The personal data we collect will be used for the following purposes:

I. Primary Purposes (necessary): The primary purposes that give rise to and are necessary to maintain and comply with the legal relationship between FINIVA and the Holder, are the following: A) Analyze, originate and formalize the credit requested by the Holder either electronically or physically; B) Carry out the procedures related to the credit that FINIVA grants to the Holder (hereinafter the Credit), as well as integrate the corresponding file; C) Verify the Holder's identification data, including the official identification presented by the Holder with respect to the information that exists in the respective official records, such as the National Electoral Institute (INE), among others; D) Confirm the Holder's biometric information, such as fingerprints and/or facial recognition in its case, in order to comply with the regulations governing the granting of credits that the Holder requires; E) Carry out consultations to credit information societies about the Holder's credit history; F) Administer, control, identify and operate the contracted Credit; G) Evaluate the Holder's contingency or payment possibility, analyzing their financial and patrimonial data, as well as the numerical and qualitative information with which the credit solvency and payment capacity of the Holder can be determined; H) Carry out acts or activities aimed at preventing and/or detecting illicit acts carried out to the detriment of the Holder or FINIVA; I) Obtain or contract insurance on behalf of the Holder and/or FINIVA, that are related to the Credit; J) Carry out reviews and/or clarifications, as well as attend to and resolve claims and complaints of the Holder related to the granted Credit; K) Comply with the obligations contracted by the Holder and by FINIVA derived from the Credit granted to them; L) Inform the Holder about modifications or new products related to the granted Credit; M) Carry out administrative, extrajudicial and/or judicial collection of the Credit given to the Holder; N) Administer, alienate, assign, transmit, discount, encumber or in any way negotiate, the credit rights in favor of FINIVA and to the charge of the Holder, and/or of the Credit contracted by the Holder, carried out by or with the participation of FINIVA and/or of any title holder, creditor, owner, successor, including suppliers, investors, third parties, related parties, with participation and/or interest in the mentioned acts, with the data transfer made in accordance with this privacy notice; Ñ) Carry out external and internal audits; and O) Comply with the laws, provisions and other legal and regulatory obligations applicable to FINIVA.

The Holder's personal data may be transferred by FINIVA, either within the national territory or outside it, without the Holder's authorization, to the following persons: 1) To third parties, as well as to the controlling company or to the subsidiaries, affiliates or companies of the same group of FINIVA, to carry out the primary purposes established above, when FINIVA requires their support to originate, operate, administer and/or collect the Credit; 2) To the INE, to verify and validate the veracity of the data and documents provided by the Holder regarding their identity, as well as their biometric data; 3) To the Holder's employer or boss, so that they can make the payroll deductions related to the Credit payment; 4) To third parties that are technological service providers of FINIVA with the purpose of identifying and confirming the Holder's identity through their biometric data; 5) To third parties that provide any product or service related or connected to the Credit; 6) To insurers for the contracting of insurance related to the Credit; 7) To third parties that are involved, in their case, in FINIVA's merger, spin-off or sale processes; 8) To the successors and/or beneficiaries of the Credit rights; 9) To third parties when the transfer is mandatory, necessary or convenient in relation to the Credit rights; 10) To any administrative or judicial authority, for the purpose of complying with an applicable legal provision or a judicial or administrative request; 11) In the other cases established by LFPDPPP and other applicable provisions.

II. Secondary Purposes (optional): The secondary or optional purposes that are not necessary to maintain and comply with the legal relationship between FINIVA and the Holder, are the following: A) Offer additional products and/or services, related or not to the Credit, through advertising, promotion, or marketing to the Holder, by physical or electronic means, of the goods, products and/or services that are offered by FINIVA or a third party; B) Send surveys or forms for measuring the quality or satisfaction of the service, or for statistical purposes, or for studying consumption habits, that are prepared by FINIVA or third parties in relation to the Credit and/or the Holder; and C) Offer courses and training material in financial education matters.

III. ARCO Rights and Revocation of consent: The Holder has the right to Access, Rectify, Cancel or Oppose the processing of their personal data (ARCO Rights), as well as to Revoke at any time the consent granted to FINIVA to collect, manage, use and process their personal data. If the Holder wishes to exercise their ARCO Rights or wishes to Revoke their consent given to FINIVA, they may send a request to the Personal Data Protection Unit of FINIVA, located at the address: Corporativo Diamante Santa Fe, Vasco de Quiroga 3900, Floor 10, Colonia Santa Fe, CP 05348, Cuajimalpa de Morelos Borough, Mexico City, Mexico, or by email to the address: aclaraciones@finiva.mx with the Holder's name and contact details. The attention hours are from Monday to Friday from 9 to 18:00 hours. The procedures for exercising their ARCO Rights, or for the revocation of their consent will be made known to them through the aforementioned means once their request is received. To know the procedure for exercising their ARCO Rights, or for the revocation of their consent, the Holder must consult the website www.finiva.mx, ARCO Rights section.

In order to limit the use and disclosure of your personal data, the Holder may register in the Public Registry of Users referred to in the Law on Protection and Defense of the Financial Services User (REUS). This registry allows the Holder to restrict promotional calls or emails to their telephone or email addresses, to maintain their privacy. The Holder may register in the REUS using the means established on the CONDUSEF's website. Likewise, and for the same purpose, the Holder may register in the Public Registry to Avoid Advertising (REPEP) available on the Federal Consumer Prosecutor's Office (PROFECO) website.

The Holder is informed that this Privacy Notice is available for consultation on FINIVA's website www.finiva.mx (the Website). Likewise, it is communicated that modifications or updates made at any time to the Privacy Notice will be made known on the Website, in order to have the current version of this Notice available.

IV. Use of cookies and similar technologies: The Holder has the right to Access, Rectify, Cancel or Oppose the processing of their personal data (ARCO Rights), as well as to Revoke at any time the consent granted to FINIVA to collect, manage, use and process their personal data. If the Holder wishes to exercise their ARCO Rights or wishes to Revoke their consent given to FINIVA, they may send a request to the Personal Data Protection Unit of FINIVA, located at the address: Corporativo Diamante Santa Fe, Vasco de Quiroga 3900, Floor 10, Colonia Santa Fe, CP 05348, Cuajimalpa de Morelos Borough, Mexico City, Mexico, or by email to the address: aclaraciones@finiva.mx with the Holder's name and contact details. The attention hours are from Monday to Friday from 9 to 18:00 hours. The procedures for exercising their ARCO Rights, or for the revocation of their consent will be made known to them through the aforementioned means once their request is received. To know the procedure for exercising their ARCO Rights, or for the revocation of their consent, the Holder must consult the website www.finiva.mx, ARCO Rights section.

V. Competent Authority INAI: In case the Holder believes that their right to the protection of their personal data has been violated by any act or omission on the part of FINIVA, or presumes some violation of the provisions foreseen in the LFPDPPP and other applicable provisions, they may file their complaint or complaint before the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI). We suggest entering the official website of INAI itself www.inai.org.mx. for more information.

The Holder declares that they have read this Privacy Notice and know the use that FINIVA will give to their personal data that it collects, within which are contained the identification data, contact data, financial and patrimonial data, labor data and sensitive data; for which they consent and freely authorize the use and treatment that FINIVA will give to their personal data in accordance with what is established in this Privacy Notice. The use, handling and/or processing of personal data will be subject to the express or tacit consent and/or authorization granted by the Holder, except for the exceptions provided by the LFPDPPP. In accordance with article 8 of the cited Law, the Holder consents or authorizes the processing of their personal data tacitly, when they do not manifest any opposition to the Privacy Notice that has been made available to them on FINIVA's Website or in the FINIVA application that the Holder downloads on their Mobile Phone; and expressly, when they sign this Privacy Notice by electronic, optical or any other technology means that leaves no room for doubt or is undeniable.

VI. Changes to the privacy notice: FINIVA may modify this Privacy Notice at any time. The modifications will be available on its website: www.finiva.mx and in our offices located at the address mentioned in this Notice. Last update: November 24, 2025.