A. Identity of the Responsible

WOR Capital, S.A. de C.V., domiciled at Av. Eugenio Garza Sada #3820 Torre Micropolis piso 8 Col. Mas Palomas, Monterrey, Nuevo Leon, Mexico. C.P.64860 is a company committed to protect your privacy. Our Data Protection Officer is located at the same address, you can contact him at the following e-mail address: datospersonales@wor.mx This Privacy Notice applies to the following websites belonging to WOR Capital: www.wor.mx

B. Personal Data

For the purposes indicated in this Privacy Notice, WOR may collect your personal data in several ways: when the information is provided directly by you; when you visit WOR's websites; when you use the services offered by WOR online and when we obtain information through other means other than those indicated above and that are permitted by applicable laws. Identification data: name(s), surname(s), address, home, mobile and/or work telephone number, marital status, signature, e-mail, gender, age, date of birth, user name and password. 2. Financial Data: cardholder's name, credit card number, expiration date (in case of online transactions). Billing Data: name or company name, RFC, fiscal address 4. Preferences Data: Related to the offices, services required and/or reason and preferences of office services.

C. Sensitive Personal Data

Sensitive personal data are considered to be those personal data that affect the most intimate sphere of their owner, or whose improper use may give rise to discrimination or entail a serious risk for the owner. In particular, are considered sensitive those that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union membership, political opinions, sexual preferences. In case of staying in any of our offices, the sensitive personal data that we will ask you to provide will be those related to health or different abilities, which will be used only to provide you with a better service and meet your specific needs.

D. Purpose and Processing of Personal Information

Purposes that give rise to the legal relationship and are necessary for the provision of service: 1. The personal information you provide will be used by WOR to provide the office services you request: Private offices, boardroom reservations, access membership, cowork membership, virtual office membership, event organization and meet ups. WOR may use the personal information you provide to us to provide you with better service and, where appropriate, to offer you the best service option for your office needs. Purposes that do not give rise to a legal relationship and are not necessary for the provision of service: 1. We may also use the information to offer you promotions and office services, send you promotions, special services, newsletters, surveys, prize drawings and other online contests.

E. Limitation on Use or Disclosure of Personal Information

At any time you can express your refusal to the processing of the purposes that do not give rise to the legal relationship or are not necessary for the provision of the service, or the revocation of the consent you have given us to the processing of your personal data, by means of a request that must be submitted in writing to the Personal Data Department at the following address: Av. Eugenio Garza Sada #3820 Torre Micropolis piso 8 Col. Mas Palomas, Monterrey, Nuevo Leon, Mexico. C.P.64860 from 9:00 a.m. to 2:00 p.m. from Monday to Friday or by e-mail to datospersonales@wor.mx. Such request must contain at least the following: (i) Name of the Personal Data Holder; (ii) E-mail address to receive notifications; (iii) Documents proving identity or, if applicable, legal representation of the holder; (iv) Clear and precise description of the personal data in respect of which the right is sought to be exercised and the right to be exercised; (v) Any other element or document that facilitates the location of the personal data. In the event that the request does not meet any of the aforementioned requirements, the Personal Data Department may require you within 5 days of receipt of the request to provide the elements or documents necessary to process it. You will have 10 days to comply with the requirement, in case of not responding within such term, the corresponding request will be considered as not submitted. The terms of attention will be of maximum 20 days counted from the date on which the request is received to communicate the determination adopted, in order that, if it is appropriate, to make it effective within 15 days following the issuance of the response. In order to protect your confidentiality, Posadas will send the response to your request to the e-mail address you have provided for such purpose and will keep it available to the applicant at the address indicated in the preceding paragraph.

F. Exercise of the Rights of Access, Rectification, Cancellation and Opposition.

The access, rectification, cancellation or opposition with respect to the information you provide to WOR indicated in the Federal Law for the Protection of Personal Data in Possession of Individuals, you may do so by submitting a request to WOR, in terms of the provisions of paragraph E. above, which will be answered in the terms indicated therein.

G. Control and Security of Personal Information.

WOR is committed to take the necessary measures to protect the information collected, using security technologies and procedures to control access, use or disclosure of your personal information without authorization, for example, by storing the personal information provided on servers with restricted access.

H. Changes to this Privacy Notice.

WOR may at any time update this privacy notice. In the event of substantial changes to this notice, we will communicate them through our web pages indicated in section A of this Privacy Notice. Therefore, we encourage you to periodically visit this privacy notice to be aware of any updates. I acknowledge and accept the terms and conditions set forth in this Privacy Notice, and otherwise I will inform WOR in terms of the provisions of paragraphs E. and F. of this Privacy Notice. In case of any disagreement or complaint about the treatment of your personal data, you can address to the Federal Institute of Access to Information and Data Protection. Date of last update: August 25, 2022