PRIVACY NOTICE

NTS PUBLICIDAD, S.A. DE C.V. is a variable capital corporation duly constituted under the laws of the United Mexican States, whose main corporate purpose is the provision of comprehensive advertising services, strategic communication, digital design, and audiovisual materials production, among other services related to marketing and corporate image management.

For any matter related to the protection of your personal data, you may contact our Privacy Officer through the following means of contact:

• Email: proyectos@brandlift.com.mx

• Address: ARQUÍMIDES 130 PISO 5 OFICINA B COLONIA POLANCO V SECCIÓN CP 11560 MIGUEL HIDALGO CIUDAD DE MÉXICO

• Website: brandlift.com.mx

When using our website or contracting our digital advertising, graphic design, and digital packaging services, we collect necessary information to operate commercially:

• Commercial contact information: name or business name, email, information of the company or project you represent.

• Transactional information: data necessary to process payments and issue tax receipts in accordance with Mexican law.

• Project information: technical specifications, provided materials (images, texts, logos), creative briefing, design preferences.

• Navigation data: technical information that your browser automatically sends when visiting our site, including IP address, device type, visited pages, and browsing time.

The personal information that Brand lift collects will be used responsibly, confidentially, and in accordance with the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility established in the applicable legislation.

Said information will be used to fulfill the following primary and secondary purposes:

a) Primary Purposes (necessary for the legal relationship):

• Operation and execution of services: Process requests, prepare quotes, conclude contracts, plan and develop advertising strategies, provide contracted design, production, and digital marketing services, communicate project progress, deliver final materials or files, and monitor the correct execution of the agreed services.

• Administrative management and compliance with legal and tax obligations: Issue digital tax receipts, address requirements of the Tax Administration Service (SAT) and other competent authorities, as well as maintain accounting, administrative, and contractual records necessary for the company's operation.

• Customer service: Contact users and clients to resolve doubts, address support requests, claims, or clarifications, and ensure satisfaction with the provided services.

b) Secondary Purposes (improvement and communication):

• Optimization and development of services: Analyze behavior patterns and website use, identify consumption trends, evaluate satisfaction levels, improve the user experience, and drive innovation and efficiency in our creative and operational processes.

• Commercial communication and marketing: Send information about new services, promotions, campaigns, events, collaborations, or materials of interest related to Brand lift's activities, always within the framework of respectful, non-invasive communication aligned with the holder's interests.

• Institutional and reputational relationship: Disseminate corporate materials or project portfolios in which we have participated, with prior consent from the holder, for promotion, positioning, or professional reference purposes.

The holder of the personal data may express their refusal to the processing of their data for secondary purposes, such as those related to commercial or promotional communications, without this affecting the continuity or quality of the main contracted service.

Brand lift may share, transfer, or allow access to certain personal data only when it is strictly necessary to fulfill the purposes established in this Privacy Notice, or when required by a legal provision or a competent authority.

Said communication of data will be carried out under the highest standards of confidentiality, security, and control, observing at all times the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, and the Privacy Notice Guidelines issued by the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

Personal data may only be shared in the following cases:

a) Technology and operational support providers: Companies in charge of providing web hosting services, servers, digital platforms, payment processing, customer relationship management (CRM) systems, email, cloud design or editing tools, as well as other technological solutions necessary for the proper operation of the services offered by Brand lift.

b) External collaborators and professional allies: Third parties involved in the direct execution of contracted projects, such as illustrators, programmers, photographers, designers, editors, community managers, digital strategists, and other specialists who intervene in the provision of advertising or visual communication services. These collaborators will only receive the essential information to carry out their activities, remaining subject to contractual obligations of confidentiality and personal data protection.

c) Competent authorities: Government agencies, administrative or judicial entities that request information in the exercise of their legal powers or due to a judicial mandate or duly founded and motivated requirement.

In all cases, Brand lift will adopt the legal, technical, and administrative measures necessary to ensure that any third party with access to personal data maintains its confidentiality, uses it only for authorized purposes, and deletes or returns it once the relationship that motivated its processing is concluded.

In compliance with current legislation on personal data protection, Brand lift guarantees all holders the full exercise of their Rights of Access, Rectification, Cancellation, and Opposition (ARCO), as well as the possibility to revoke their previously granted consent for the processing of their personal information at any time.

These rights allow the holder:

• Access: Know at all times what personal data Brand lift holds, its origin, the purposes of the treatment, and the conditions under which it is used or shared.

• Rectification: Request the correction or update of personal data when it is inaccurate, incomplete, or outdated.

• Cancellation: Request the deletion of their personal data from records or databases when considering that it is not being used in accordance with applicable legal principles and duties, or when the legal relationship with the Company has concluded.

• Opposition: Express refusal to the use or processing of their data for specific purposes, provided there is a legitimate cause justifying it.

Likewise, the holder may revoke their consent for the processing of their personal data at any time, without retroactive effects, in accordance with the provisions of Article 8 of the Federal Law on Protection of Personal Data Held by Private Parties.

Procedure for exercising rights:

The exercise of any of these rights must be carried out through a written request sent to the contact means indicated in the Responsible Party section, including, at a minimum, the following information:

1. Full name of the holder and, if applicable, their legal representative;

2. Means to receive the response (email or physical address);

3. Simple copy of an official valid identification or document accrediting the applicant's legal representation;

4. Clear and precise description of the right you wish to exercise and the personal data over which you request to exercise it; and

5. Additional documents or evidence, if necessary to identify the information subject to the exercise of rights.

Brand lift will acknowledge receipt of the request and respond to the holder within a maximum period of twenty (20) business days counted from the complete reception of the corresponding documentation. If appropriate, the execution of the requested measure will be carried out within the fifteen (15) business days following the date the favorable response is communicated.

If the request is incomplete or contains errors, the Company may require the holder to provide the necessary additional information within the five (5) business days following the receipt of the request, with the periods starting over once the holder addresses the requirements.

NTS PUBLICIDAD, S.A. DE C.V. recognizes the importance of safeguarding the personal information entrusted to it, and has therefore implemented administrative, technical, and physical security measures aimed at preventing damage, loss, alteration, destruction, or unauthorized use, access, disclosure, or processing of personal data.

These measures are applied according to industry standards and best practices, and are proportional to the type of data processed, the level of risk, and the nature of the operations the Company performs. Such actions include, but are not limited to:

• Internal administrative controls that restrict access to personal data solely to authorized personnel, who are bound by contractual commitments of confidentiality and information protection.

• Technological security protocols, such as data encryption, strong passwords, firewalls, regular backups, antivirus systems, and constant monitoring of servers and computer networks.

• Physical safeguarding measures, which include the secure storage of files, documents, and equipment, as well as access control to facilities where personal data is managed.

• Continuous staff training regarding the responsible handling of confidential information and compliance with applicable data protection regulations.

Likewise, Brand lift will retain personal data only for as long as necessary to fulfill the purposes of the processing, contractual obligations, and applicable legal or regulatory provisions. Once these periods conclude, the information will be blocked and subsequently securely deleted, according to the internal procedures established by the Company.

Brand lift maintains a permanent commitment to improving its security policies, reviewing and updating them periodically to guarantee the integrity, availability, and confidentiality of the personal information of all its holders.

This site uses cookies and similar technologies to improve your browsing experience and analyze site use. You can configure your browser to reject cookies, although this may limit some functionalities.

This notice may be modified. The updated version will always be available on our website with the date of the last revision.