Privacy Notice

One Contact, S.A. de C.V., with address at Juanita Llaguno 115, Colonia Los Treviño, C.P. 66150, Ciudad Santa Catarina, Nuevo León, México, is responsible for the processing of your personal data as provided by the Law and this Privacy Notice.

Personal data:

Any information concerning an identified or identifiable natural person.

Sensitive data:

Data that affects the most intimate sphere of the subject, or whose improper use could give rise to discrimination.

Data subject:

The natural person to whom the personal data belongs.

Controller:

The natural or legal person that decides on the processing of personal data.

Processor:

The person who processes personal data on behalf of the controller.

The personal data we collect may include, but is not limited to:

• Identification data: name, address, email, phone number (landline and/or mobile), date of birth, CURP, RFC.
• Contact and location data.
• Employment data: position, employer, industry.
• Data about contracted products or services.
• Service history, complaints, requests, or comments received through official channels.
• Call recordings, voice messages, and chat or digital interaction logs.
• Financial or asset data, when necessary for billing, collection, or payment reconciliation.

a) Primary or Necessary Purposes

• Establishing and maintaining a legal, commercial, or contractual relationship.
• Following up on service, technical support, or sales requests.
• Building client or prospect files.
• Verifying the identity of the Data Subject and validating provided information.
• Performing administrative, accounting, and billing management.
• Complying with legal, tax, or contractual obligations.
• Contacting the Data Subject for data confirmation or satisfaction surveys.

b) Secondary or Non-Necessary Purposes

• Sending promotions, commercial offers, and informational newsletters.
• Conducting service surveys or market studies.
• Building consumption profiles or contact preferences.

Consent for these purposes may be obtained through physical or electronic means, voice recordings, or any automated mechanism (checkbox, web forms, etc.). The Data Subject may object to secondary purposes by sending an email to the address indicated in the ARCO rights section.

OneContact may transfer your personal data to:

• Clients or commercial partners with whom it maintains legal relationships, provided that processing is necessary to fulfill the purpose of the contracted service.
• Administrative, tax, or judicial authorities that require it by law.

We will not transfer data to third parties without your consent, except for the exceptions provided in Articles 10 and 37 of the Law.

OneContact's Data Protection Office is responsible for handling requests related to this notice and can be reached by email at legal@onecontact.com.mx.

The Data Subject may exercise their rights of Access, Rectification, Cancellation, and Opposition (ARCO) by sending a written request accompanied by:

• Full name.
• Description of the right they wish to exercise.
• Preferred means of receiving the response.
• Copy of an official ID.

Once the complete request is received, a response will be provided within no more than 20 business days. Personal data will be retained only for the time necessary to fulfill the described purposes and in accordance with applicable legal periods. Thereafter, it will be securely blocked or deleted.

The Data Subject may limit the use of their data by sending a request to the same contact email, or by registering on our exclusion list. They may also register with the Public Registry to Avoid Advertising of PROFECO.

OneContact adopts administrative, technical, and physical security measures to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

Cookies or web beacons may be used on our portals or systems for authentication, service improvement, statistical analysis, or personalization of the user experience. The use of these technologies can be disabled through your browser settings.

OneContact may modify this Privacy Notice at any time. Changes will be available on our official website or communicated directly to the Data Subject through the provided contact information.

If you believe your right to data protection has been violated by any conduct of our employees or our actions, you may file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). For more information visit www.inai.org.mx.