SUKABUMI STONE MEXICO which hereinafter will be represented as "The Company" is responsible for collecting your personal data, the use that is given to them as well as their protection.

We collect your personal data directly when you provide it to us by various means, such as:

Your personal data will be used for the following purposes:

For the purposes indicated in this privacy notice, we may collect your personal data such as:

We inform you that in order to comply with the purposes set forth in this privacy notice, sensitive personal data will NOT be collected and processed, such as those that refer to basic financial information. The Company may also collect your IP (Internet Protocol) address to help diagnose problems with our server, and to administer the Page. An IP address is a number that is assigned to your computer when you use the Internet. Your IP address is also used to help identify you within a particular session and to gather general demographic information. The information may include the URL from which they come (whether or not they are on our Website), which URLs they access next (whether or not they are on our Website), what browser they are using, as well as the pages visited, the searches carried out , publications, purchases or sales, messages, etc.

COOKIES

The User of the Company's Internet Page knows and accepts that the Company may use a tracking system through the use of cookies (the "Cookies"). Cookies are data files that are stored on the hard drive of a user's computer equipment or electronic communications device when browsing an Internet site, which allows the exchange of status information between said site and the user's browser. Status information may reveal means of session identification, authentication or user preferences, as well as any data stored by the browser regarding the website. Cookies are used in order to know the interests, behavior and demographics of those who visit or are visitors to the Website and thus, better understand their needs and interests and give them a better service or provide related information. We also offer certain features that are only available through the use of Cookies. We will also use the information obtained through Cookies to analyze the pages browsed by the visitor or User, the searches carried out, improve our commercial and promotional initiatives, display advertising or promotions, banners of interest, improve our offer of content and articles, personalize such content, presentation and services. Cookies are also used so that the User does not have to enter their password as frequently during a browsing session, also to record and corroborate the records, the User's activity and other concepts and commercial agreements, always with the objective of installing Cookies, the benefit of the User who receives them and will not be used for other purposes outside the Company. It is established that the installation, permanence and existence of Cookies in the User's or visitor's computer depends on their exclusive will and can be removed from their computer whenever they wish. To know how to remove Cookies from the system, it is necessary to review the Help section of the browser. Also, Cookies or other similar systems installed by third parties can be found on certain pages of our Site. The Company does not control the use of Cookies by third parties. The company also uses Web Beacons at the time the user is using the Page, Web beacons are visible or hidden images inserted within a Web site, which is used to monitor user behavior in these media. In the event that the Company uses cookies, Web beacons or related technologies, the user will be informed of this situation through a message or legend that will appear in their field of vision when browsing the page.

PURPOSES OF TREATMENT

Personal Information is collected and stored for purposes of identification and certainty of the User of the Company's Website (www.sukabumistone.com), in addition, they are used for the purposes of location, collection, contact, behavior and demographics of the users. Users, improve our commercial and promotional initiatives (marketing), send information or messages about new products and/or services as well as any other information, display advertising or promotions, of interest to our Users, with the above, the Company can provide a service efficient to the user. The purposes are necessary for the fulfillment of the obligations and the relationship with the owner, that is, that the Company provides an efficient service to the User, this being the main obligation and that gave rise to the Legal Relationship between the Company and the User. The collection of information allows the Company to offer services and functionalities that are better suited to the needs of the User. It also allows the Company to send the User by different means and channels (including mail, SMS, etc.) offers of products and services that may be of interest to the User. It also allows the Company to use as means of communication and send the User by different means and channels (including conventional mail or electronic mail, SMS, MSM, electronic notifications) offers of products and services that may be of interest to the User, in addition to fulfill its obligations by these means. The Company reserves the right to request any proof and/or additional data in order to corroborate the personal data of each User, as well as to temporarily or permanently suspend those Users whose data could not be confirmed. The User acknowledges that the account or User Registration is personal, unique and non-transferable, and it is forbidden for the same User to register or have more than one account. In the event that the Company detects different accounts that contain matching or related data, it may cancel, suspend or disable them. The User will be responsible for all the operations carried out in his account, since access to it is restricted to the entry and use of his personal password, of exclusive knowledge of the User. In the event that the account is suspended, the Company will store the User's personal data, to the effect that the User and the Company will continue to be subject to what is stated in this Privacy Notice. In the event that the User's information at the time of registration is wrong or incomplete, making it impossible to verify and identify the User, the Company will have the right to immediately suspend the provision of the Services through the Website. , without the need for prior notice, the User being responsible at all times for the losses and damages ultimately suffered.

DATA TRANSFER

The Holder expressly authorizes the Company to keep the information provided by the Holder in its registry, also authorizes the Company to provide constant information about the aforementioned registry to (i) authorities that request it as permitted by current legislation and ( ii) to its strategic, commercial or technical associates in order to offer better conditions for Promotions and/or User content. In addition, the User expressly allows the Company to collect information to monitor traffic, with the intention of identifying user groups and profiles, as well as for advertising targeting purposes. Data Transfers are for lawful purposes and in accordance with the provisions of the Law on Protection of Personal Data Held by Private Parties. The recipients of the information to be transferred are strategic, commercial or technical associates, which is only used for the purpose of advertising and development of the Website. The Company declares that it will not transfer any type of information of the Owner to national or foreign Third Parties, otherwise, the Owner will be informed by publishing a new Privacy Notice. The foregoing in accordance with the provisions of article 36 of the Regulations of the Law on Protection of Personal Data Held by Private Parties.

TRANSFER IN SPECIAL CIRCUMSTANCES

If there is a sale, merger, consolidation, change in corporate control, transfer of substantial assets, reorganization or liquidation of the Company then we may transfer, or assign the information collected on this Site to one or more relevant parties, in addition to being obligated to issue a new Privacy Notice updated to the internal changes suffered.

SUBMISSION OF DATA

The Company declares that it can communicate Personal Data of the Holder with the Manager, inside or outside the national territory in terms of the provisions of the law or the Regulation. The person in charge is a natural or legal person, public or private, outside the organization of the Company, who alone or jointly with others, processes personal data on behalf of the Company, as a consequence of the existence of a legal relationship that links him with the Company. itself and delimits the scope of its action for the provision of a service. This remission of data is to comply with the purposes specified in the treatment, which are directly related to the fulfillment of the objects and contractual or non-contractual relations with the Company. The processing of data in this referral is subject to the following terms agreed between the company and the person in charge:

I. Only treat personal data in accordance with the instructions of the Company; II. Refrain from processing personal data for purposes other than those instructed by the Company; III. Implement security measures in accordance with the Law, the Regulations and other applicable provisions; IV. Maintain confidentiality regarding the personal data processed; V. Deleting the personal data subject to treatment once the legal relationship with the Company has been completed or by instructions of the Company, as long as there is no legal provision that requires the conservation of personal data, and VI. Refrain from transferring personal data

LIMITATION OF USE OR DISCLOSURE OF PERSONAL DATA

In order for the Holder to exercise his right to limit the use or disclosure of personal data, but with the intention of continuing to use the services provided by the Company, the user must express it in writing to the following email ecomm@sukabumistone.com, said letter must contain the following: The name of the owner and email address where the response is received. Addressed to the Company. Customer registration or account with the Company to prove your identity or the relationship you have with the Company. The clear and precise description of the data that you want to limit its use or disclosure. The Company will have a period of 20 business days to answer and, where appropriate, execute the limitation of use, in said response, it will give the resolution and the possibility of carrying out what is requested in the Writing, without prejudice to the possibility of exercising its other Rights.

CONFIDENTIALITY OF INFORMATION

The data of the Holders will be provided only by the Company in the forms established in this Privacy Notice. The Company will do everything in its power to protect the privacy of the information. It may happen that by virtue of court orders, or legal regulations, the Company is compelled to disclose information to the authorities or third parties under certain circumstances, or in cases where third parties may intercept or access certain information or data transmissions. in which case the Company will not be responsible for the information that is revealed. In these cases, the Company will notify the Holder about this situation. We do not assume any obligation to keep confidential any other information that the Holder provides through bulletins and online chats (chats), as well as the information obtained through cookies, information that has not been directly delivered to the Company. It should be clarified that the Holder's information is NOT sold, given away, facilitated or rented to any third party. If the user does not want their data to be shared, they can decide NOT to use a certain service or NOT to participate in some promotions or contests. The Company will take all possible measures to maintain the confidentiality and security described above, but will not be liable for damages that may arise from the violation of these measures by third parties that use public networks or the Internet, altering the systems of security to obtain access to the information of the Holders. The security violations that occur in any phase of the treatment that significantly affect the patrimonial or moral rights of the Holders, will be reported immediately by the Company to the Holder, so that the latter can take the corresponding measures to defend Your rights.

SECURITY AND STORAGE

The Company has implemented various security techniques to protect the data provided by the Owner, against unauthorized access by visitors to the Website or the Company's Database, whether inside or outside the Company. One of the factors that protects the security of the data is that our system has implemented an SSL security lock, which makes it impossible for a person outside the relationship between the Owner and the Company to access or acquire the data in a illegal. It is necessary to keep in mind that perfect security does not exist on the Internet. Therefore, the Company is not responsible for illegal interceptions or violation of its systems or databases by unauthorized persons. Likewise, it is not responsible for the improper use of the information obtained by these means. At the time of hiring a service or buying a product online, bank details will be requested for which we promise to offer security and confidentiality of the data provided to us, for this, we have a secure server, in such a way that the information that sent to us, it is transmitted encrypted to ensure its protection. Once the data is received, we will do everything possible to safeguard the information on our server.

DATABASES

The Company's Database, where the information collected is stored, will keep the Information provided by the Owner saved and protected, despite the fact that they are modified, updated, or even canceled for any reason. The foregoing for the purpose of maintaining a History of the Owner and protecting their legal interests. The conservation of information indicated in this paragraph may be erased or eliminated in its entirety by exercising the ARCO Rights.

CUSTOMER SERVICE OR COMPANY ATTENTION

The Company makes available to the Holder an email in which he can clarify any doubts regarding the use of Personal Data, means to exercise rights in relation to personal data, etc. The email is ecomm@sukabumistone.com

MODIFICATIONS TO THE PRIVACY NOTICE

The Company, as well as the Holder, acknowledge that this Privacy Notice is of unlimited validity. However, the company will try to keep this Notice updated. The Company may modify the Privacy and Confidentiality Notice at any time without prior notice. Due to the foregoing, the Company recommends that the Holder re-read this document regularly, so that he is always kept informed of any possible changes. The alterations or modifications to this Privacy Notice will become effective immediately after their publication on the Company's Website. Once the modifications have been made, it will be presumed that the Owner who continues to use the Company's Internet Page, request its services, or carry out the acts that gave rise to the relationship with the company, will have full knowledge, will have read and consented to the Notice. of Privacy reformed. The Reforms to the Privacy Notice may be made known to the Owner through a notice on the Company Page, email, by telephone or in writing.

EMAILS

The Company may send emails to the User in order to provide better service:

• After User Registration, notifying you of your account details
• With reminders of the services we offer (especially those that you have not yet used or have not used in a considerable time)
• To send information about the Products you have ordered
• As part of a Newsletter
• Product Promotions Email
• To offer related services

However, in every email we send we will always offer the ability to request that we stop sending you future emails.

PUBLIC RECORDS

The Public Registry of Consumers, Users and other related matters, indicated in relative provisions such as that of the Consumer or that of Protection and Defense of the User of Financial Services, will continue in force and will be governed in accordance with what is established by the laws in question and the provisions applicable that derive from them, together with the rights that they consign.

CONSENT

The Holder declares that by using the page, the provision of their Personal Data and having an account or User Registration, or the direct realization of contractual or non-contractual origin with the Company, they have already read this notice and consent to the provisions of the same. The Holder consents to this Privacy Notice, in accordance with the Law on Protection of Personal Data Held by Private Parties, not opposing the Privacy Notice. No data will be processed until five days after they have been provided by the user and he has not expressed his refusal.

REVOCATION OF CONSENT

Consent may be revoked at any time without retroactive effects being attributed to it. To revoke consent, the Holder must send a Request, which must be in writing with the following requirements:

• The name of the owner and address or other means to communicate the response to your request.
• Documents proving identity (copy of voting card, for example) or, if applicable, the legal representation of the holder. Identifications must be Official.
• The clear and precise description of the link you have with the Company.
• Provide documentation to support your request.
• That the letter is addressed to the Company.
• Verify that the relationship you have with the Company has ended.

The Company will issue a response in which it will confirm the revocation of consent, or where appropriate, will indicate the reasoning depending on the specific case, with the company having 15 days to issue this response. The deadlines will be counted from the moment in which the mail enters our server, the Company issuing the respective Acknowledgment of Receipt of Request. Any Request subsequent to the one mentioned in the previous paragraph will have the same effect as an initial Request, the Holder and the Company being obliged to the same terms indicated above. The Request will not be valid if the above is omitted.

INTERNAL PRIVACY AREA

The owner may exercise their rights and make the inquiries indicated in this document, as well as in the law, through the Company's Privacy area. The Requests indicated in this document and in the Law, must be addressed to the Company The user has the right to access, rectify and cancel their personal data, as well as to oppose their treatment or revoke the consent that for such order has granted us, through the procedures that we have implemented. To learn about these procedures, the requirements and deadlines, you can contact our personal data department at the email ecomm@sukabumistone.com If you wish to stop receiving promotional messages from us, you can request it through email ecomm@sukabumistone.com The User will have to use the multi referred email ecomm@sukabumistone.com to contact the Privacy area. Personal Data Protection Authority. For any questions or additional information, as well as to exercise different types of rights and procedures in addition to those indicated herein, the User can contact the Federal Institute for Access to Information and Protection of Personal Data "IFAI" at Telephone 01 800 835 4324 (free of charge) through the website www.ifai.org.mx