Legal Document

Privacy Policy

Effective Date: April 23, 2025

Advanced Composites Mexicana, S.A. de C.V.

Contents

1. Identity of responsible party 2. Personal data collected 3. Purposes of processing 4. Cookies 5. Limiting use & ARCO rights 6. Data transfers 7. Data security 8. Changes to this notice 9. Contact

ARCO Rights & Privacy

privacidad@advcmp.com

Privacy Notice for Customers, Suppliers and Users

Official Website of Advanced Composites Mexicana, S.A. de C.V.

At ACPMEX.com, we value the privacy of our customers, suppliers and website users and we are committed to protecting their personal information. This Privacy Notice outlines how we collect and process the personal data you provide as our customer, supplier, or when accessing or using our website.

By visiting ACPMEX.com or providing data via e-mail, you accept this privacy notice and consent to the processing of your personal data in accordance with its terms.

Identity and address of the responsible party

In strict compliance with the provisions of article 16, paragraph I of the Federal Law on the Protection of Personal Data in the Possession of Private Parties, this Privacy Notice is made available to you and you are informed that the entity responsible for the processing of your personal data is:

Advanced Composites Mexicana, S.A. de C.V.

AV. JAPÓN, N. 306, SAN FRANCISCO INDUSTRIAL PARK
POSTAL CODE 20304, SAN FRANCISCO DE LOS ROMO, AGS., MEXICO

The processing includes the collection, use, disclosure, storage, access, management, exploitation, transfer or disposal of your personal data.

Personal data that will be subject to processing

We obtain personal data from customers, suppliers and website users when they choose to provide it directly through our website or e-mail, for example to contact mailboxes or to register as suppliers. Your personal data is not used for other purposes, unless we obtain your consent, or unless required or permitted by applicable law and/or applicable regulations.

⚠️ ACP-M does not request or process sensitive personal information from customers, suppliers or website users.

From Customers

We collect personal data when you request our services, register as a new customer, enter into contracts or provide information for invoicing:

Name, corporate name or trade name

Tax domicile

Federal Taxpayer Registry (RFC), including proof of tax status

E-mail address

Delivery address for products

Phone number and mobile phone number

Information regarding financing requests

Banking or commercial references

For foreign customers: W9 form

From Suppliers

We collect personal data when you register as a supplier, offer products and/or services, enter into contracts or provide banking information for payment processing:

Name, corporate name or trade name

Tax domicile

Federal Taxpayer Registry (RFC), including proof of tax status and compliance opinion

E-mail address

Phone number and mobile phone number

Payment information (bank accounts, interbank CLABE, SWIFT code, bank statement)

Employer registration number with the IMSS, including compliance opinion

Registration of Providers of Specialized Services (REPSE)

For foreign suppliers: W9 form

From Website Users

ACP-M may request personal identification information (name, address, phone number, e-mail, education background and business or personal resume). We may also automatically collect non-personal information including: IP address, browser type, operating system, referring URL and browsing patterns.

Purposes of the processing of personal data

We collect personal data voluntarily provided by customers, suppliers and website users, thereby obtaining their consent through this Privacy Notice for the following purposes:

Customers

To register you as a customer and identify you in any type of legal or business relationship

To provide, process and fulfill your orders, send order confirmations, offer customer support and tailor our services to your preferences

To issue the corresponding invoices supporting the services provided

To manage the paying process for the services provided

To conduct credit assessments

To draft the necessary contracts and agreements and manage the reciprocal fulfillment of contractual obligations

To inform you about changes or new products related to what you have requested or acquired

In the case of a legal representative, to verify their identity and confirm they possess the necessary authority to act on behalf of the legal entity

Suppliers

Evaluation and selection of suppliers

To register suppliers and identify them in any type of legal business relationship

To process the corresponding payments

To draft the necessary contracts and agreements and manage contractual obligations

Private bidding processes

To analyze commercial, financial, quality, safety and responsibility aspects regarding the offered products or services

To request services, products, quotes and pre-contractual activities

In the case of a legal representative, to verify their identity and confirm authority to act on behalf of the legal entity

Website Users

Communication: to send important updates, newsletters, promotional offers and relevant information. You can opt-out at any time by following the instructions in the messages.

Security and fraud prevention: to detect and prevent fraudulent activities, unauthorized access, and other security risks

To provide information about employment opportunities

Website improvement: to analyze user trends, track user preferences, and enhance the functionality and performance of our website

Advertising and analytics: to deliver targeted advertisements, measure the effectiveness of advertising campaigns, and gather demographic information about our user base

Cookies and similar technologies

We use cookies and similar technologies to enhance your browsing experience, personalize content, and analyze user behavior. Cookies are small text files stored on your device when you visit our website.

You can manage your cookie preferences through your browser settings. However, please note that disabling cookies may affect the functionality of certain features on our website.

Managing Cookies

To manage or disable cookies, access your browser settings (Chrome: Settings → Privacy → Cookies; Firefox: Options → Privacy & Security; Safari: Preferences → Privacy).

Options and means to limit use — ARCO rights

The use of your data is limited to a legal aspect of a professional relationship; therefore, no disclosure will be made beyond what is established in this notice. Personal data will be collected and processed under security measures, always ensuring its confidentiality.

At any time, you may choose to limit the use or disclosure of your personal data or revoke your consent for its processing.

Means to exercise ARCO rights (Access, Rectification, Cancellation, Opposition)

Send an email to privacidad@advcmp.com clearly stating your request purpose and including:

Name of the holder of the personal data and an e-mail address for receiving the response

A copy of a document verifying your identity or legal representation

A clear and precise description of the data for which you wish to exercise any ARCO right

Any information that facilitates the location of your personal data

In case of requesting a rectification, specify the modifications to be made and provide supporting documentation

Response Timeframes

A response will be provided within no more than 20 business days. If the request is resolved as appropriate, the response will be effective within a maximum period of 15 business days.

ARCO Rights & Privacy Contact

privacidad@advcmp.com

Data transfer

By accepting this Notice, you expressly authorize ACP-M to transfer your personal data to third parties inside and outside the Mexican Republic, exclusively for the aforementioned purposes. The third party will be informed of this Privacy Notice and the purposes for which the data is processed, so that the third party assumes the obligations as responsible for the personal data transferred.

Your data may be transferred to the following individuals or entities:

Local or foreign companies affiliated, subsidiaries or branches of ACP-M that operate under the same internal policies and personal data protection processes, in order to comply with our internal regulations

Contractors or service providers with whom we have established legal agreements, so that these third parties can complement or assist in the legal relationship we maintain with you

Third parties who need to process your information on behalf of ACP-M (such as lawyers, auditors, accountants or system administrators)

External third parties when required by a court order, law, or government authority

Any third party to whom you have given us authorization to transfer your data

Transfers of personal data will be carried out in accordance with the provisions of the applicable privacy legislation in Mexico, particularly the Federal Law on the Protection of Personal Data in the Possession of Private Parties (LFPDPPP) and its Regulations.

Data security

ACP-M has implemented administrative, technical and physical security measures to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration and destruction. Access to your personal data is restricted to authorized personnel only, who are required to keep such information confidential.

While we strive to protect your personal data, we cannot guarantee the absolute security of information transmitted through our website. We encourage you to take precautions to protect your personal information while using the Internet.

Security Certifications

Advanced Composites Mexicana is certified under IATF 16949:2016, ISO 9001:2015, and ISO 14001:2015 — quality and environmental standards that include data handling and operational security requirements. We are also a C-TPAT member.

Changes to this Privacy Notice

ACP-M reserves the right to update or modify this Privacy Notice at any time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Notice periodically to stay informed about how we are protecting the personal information we collect.

Your continued use of our website following the posting of any amendments to this Privacy Notice will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Notice.

If you disagree with the modifications made to this Privacy Notice, you may express your refusal or opposition by sending an email to privacidad@advcmp.com.

Contact

If you have any questions, concerns or comments regarding this Privacy Notice or the personal data practices of Advanced Composites Mexicana, S.A. de C.V., please contact us:

Privacy & Data Protection

privacidad@advcmp.com

Registered Address

Advanced Composites Mexicana, S.A. de C.V.
AV. JAPÓN, N. 306, SAN FRANCISCO INDUSTRIAL PARK
CP 20304, SAN FRANCISCO DE LOS ROMO, AGS., MEXICO
(+52) 449 925 4010

Questions about your privacy or personal data?

Contact our Data Protection team — we will respond within 20 business days.

Email Privacy Team Contact Us