Oro Nacional S.A. de C.V.

1. Data Controller

Oro Nacional S.A. de C.V., with its address at [add tax or main address], is responsible for the processing, use and protection of the personal data provided by its customers, in compliance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

2. Personal Data We Collect

Oro Nacional collects the following personal data, directly or indirectly, through its website, social media, or during the purchase process:

• Full name
• Shipping and billing address
• Contact phone number
• Email address
• RFC (Mexican tax ID, if an invoice is required)
• Payment information (processed by third parties using security protocols)
• Purchase history and preferences

No sensitive data (such as health status, religion, sexual orientation, etc.) is requested or stored.

3. Purposes of Data Processing

The data subject may refuse the use of their data for secondary purposes by sending an email to hola@oronacional.com with the subject "Cancellation of secondary data use".

4. Transfer of Personal Data

Oro Nacional does not sell, rent or transfer personal data to third parties. It is shared only with:

• Courier companies (to deliver products).
• Payment platforms (to process transactions).
• Tax or judicial authorities, when legally required.

All third parties are subject to confidentiality and data protection clauses in accordance with Mexican law.

5. ARCO Rights (Access, Rectification, Cancellation and Objection)

The data subject has the right to:

• Access their personal data.
• Rectify incorrect information.
• Cancel their data when they consider it is no longer required.
• Object to the use of their data for specific purposes.

To exercise these rights, the data subject must send a written request to hola@oronacional.com, including:

• Full name and means of contact.
• A clear description of the right they wish to exercise.
• A copy of a valid official ID.

The response period will be a maximum of 15 business days from receipt of the request.

7. Protection of Information

Oro Nacional applies administrative, technical and physical security measures to protect personal data against damage, loss, alteration or unauthorized access.

8. Changes to the Privacy Policy

Oro Nacional may modify this policy to comply with legal updates or internal improvements.

Any change will be announced on the website www.oronacional.com, in the "Privacy Policy" section.

9. Governing Law and Jurisdiction

This Privacy Policy is governed by Mexican law, in particular by the Federal Law on the Protection of Personal Data Held by Private Parties.

Any dispute will be resolved before the competent courts of the City of Guadalajara, Jalisco, Mexico.