Comprehensive Privacy Notice

Controller: We hereby inform you that the personal data requested is collected by HAIFU MÉXICO S.A. DE C.V., with registered address at Juan Vázquez de Mella Number 481, Suite 304, Colonia Polanco, Miguel Hidalgo Borough, C.P. 11510, Mexico City, and email address contacto@haifu.mx. HAIFU MÉXICO S.A. DE C.V. is responsible for the use, processing, and protection of your personal data and hereby makes this Privacy Notice available to you.

HAIFU MÉXICO S.A. DE C.V. has implemented administrative, technical, and physical security measures to protect your personal data under the highest security standards, ensuring at all times the strictest confidentiality and privacy, in accordance with its internal policies and procedures and in full compliance with the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and the applicable Privacy Notice Guidelines.

‍
1. Purpose of Data Processing
The personal data we collect from you will be used for the following purposes, which are necessary to provide the services you request:
1. Issuing invoices for medical services
2. Compliance with tax and fiscal obligations
3. Processing payments made by credit or debit card
4. Ensuring the protection and safety of clients, patients, suppliers, employees, and our facilities through video surveillance systems
5. Addressing any inquiries, questions, clarifications, or complaints from our clients

Additionally, we may use your personal information for the following purposes, which are not essential for the services requested but allow us to provide you with improved service and communication:
A. To understand patients’ or clients’ opinions and experiences regarding the services provided, as well as to gather feedback for the development of new products and services.
B. For communication and contact purposes with our clients and patients.
C. To send you personalized offers and information about our services.

If you do not wish for your personal data to be processed for these additional purposes, you may express your decision at any time by contacting us via email at mauricio@haifu.mx or directly at our offices located at the address indicated above, through our Internal Data Protection Officer.

Your refusal to allow the use of your personal data for these additional purposes will not be grounds for denying you the services and products we offer.
‍

2. Personal Data Processed
The personal data collected may be obtained directly and in person at the facilities of HAIFU MÉXICO S.A. de C.V., through electronic means, or through other lawful sources permitted by applicable regulations.

For the purposes described in this Privacy Notice, we may process the following personal data: full name, age, date of birth, Federal Taxpayer Registry (RFC) number, occupation or profession, official identification (such as INE or other government-issued ID), email address, handwritten signature, biometric information such as fingerprints, retina or iris scans, facial or voice patterns, hand measurements for identity authentication purposes, telephone number, and credit or debit card numbers.

Additionally, we may collect further information necessary to assess the feasibility of fulfilling obligations arising from commercial relationships or to evaluate payment or service capacity.
‍

3. Sensitive Personal Data
For certain treatments offered as part of our services, we may be required to collect Sensitive Personal Data, specifically information related to your current and future health condition, as well as genetic information, for the purposes described above.HAIFU MÉXICO S.A. DE C.V. is committed to the proper handling of your personal data in accordance with applicable laws, principles of good faith, public order, and the provisions set forth in this Privacy Notice.
‍

4. Personal Data Derived from Video Surveillance Recordings
HAIFU MÉXICO S.A. DE C.V. shall be responsible for the handling and protection of personal data derived from video surveillance recordings obtained through cameras installed within the facilities of HAIFU MÉXICO.

Video surveillance (V-S) is defined as the use of fixed or mobile video cameras, with or without audio, through closed-circuit television systems involving the placement of one or more cameras within the premises occupied by HAIFU MÉXICO, limited to the supervision and monitoring of such spaces and the individuals present within them.

Video surveillance is one of the most effective means of ensuring the safety and security of individuals and facilities. Therefore, regardless of the type of system used, HAIFU MÉXICO shall comply with all applicable data protection obligations, including the principles of lawfulness, fairness, proportionality, data quality, accountability, purpose limitation, confidentiality, and security, as well as those specifically related to the duty to inform and the issuance of this Privacy Notice.

Processing of Personal Data Through Video Surveillance
We are responsible for the personal data obtained through video surveillance within our facilities. Images that identify individuals are considered personal data.There are two types of video surveillance systems:
- Real-time monitoring without recording.
- Systems that store images on recording devices.

Considering that images which identify individuals or make them identifiable constitute personal data, and that the processing of personal data includes any activity carried out in relation to such data — including collection, use, disclosure, storage, access, handling, utilization, transfer, and disposal — video surveillance therefore constitutes the processing of personal data of individuals whose images are, among other actions, collected, stored, consulted, or transferred.

5. Transfer of Personal Data
In accordance with Article 37 of the Federal Law on the Protection of Personal Data Held by Private Parties, when HAIFU MÉXICO S.A. DE C.V. intends to transfer personal data to national or foreign third parties, it shall communicate to such parties the contents of this Privacy Notice and the purposes to which the data subject has consented.

When the transfer is necessary for the maintenance or fulfillment of obligations undertaken by HAIFU MÉXICO S.A. DE C.V., such as the provision of ablative treatments using focused ultrasound technology, the consent of the data subject shall not be required, as permitted by applicable law.

Furthermore, we inform you that third parties receiving personal data assume the same obligations and responsibilities undertaken by HAIFU MÉXICO S.A. DE C.V. under this Privacy Notice, as well as compliance with the data protection principles established by law.

6. ARCO Rights
You, or your duly authorized legal representative, may initiate the procedure to exercise your rights of Access, Rectification, Cancellation, and Opposition regarding the processing of your personal data, collectively known as ARCO Rights.You may do so by visiting the address indicated above and contacting our Internal Data Protection Officer to complete the corresponding request form, or by submitting a written request to our email address: mauricio@haifu.mx.Such request must include, at a minimum:

A. Your name and address, or another means to communicate our response to your request within a period not exceeding 20 business days.
B. Documents proving your identity or, where applicable, your legal representation.
C. A clear and precise description of the personal data with respect to which you seek to exercise any of the ARCO Rights.
D. Any other information that facilitates the location of the personal data. Additionally, you are hereby informed that you have the right to initiate a Data Protection Procedure before the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) within 15 days following the date on which you receive our response, or after the expiration of the 20-day period counted from the date your request to exercise your rights was received.
‍

7. Revocation of Consent
You may revoke the consent that you have granted for the processing of your personal data, provided that no ongoing relationship exists between HAIFU MÉXICO S.A. DE C.V. and the data subject in connection with accounts or services.Please note that we may not be able to fulfill your request in all cases or discontinue the processing of your personal data immediately, as we may be required to continue processing certain information to comply with legal obligations.

Procedure for Revocation
A request to revoke consent must be submitted in writing at the address indicated above to our Internal Data Protection Officer and must include the following:
a) The full name of the Data Subject and, where applicable, their legal representative, address, and telephone number. An official identification document must be attached to verify the identity of the data subject and, if applicable, their representative, as well as proof of address if necessary, in order to ensure the security and certainty of the data subject’s identity.
b) A clear and precise explanation of the reason for the decision to revoke consent for the use and processing of personal data.
c) The address or email to which the response to the request should be communicated.

A period of 20 business days, counted from the date the request is submitted by the data subject, shall be granted to communicate the response to such request. Additionally, a period of 15 business days shall be provided to implement the corresponding right exercised by the data subject, including the procedures for suspension and, where applicable, cancellation of the personal data relating to the data subject contained in our databases.



8. Measures to Limit the Use or Disclosure of Personal Data
We hereby inform you that HAIFU MÉXICO S.A. DE C.V. will not sell, lease, or otherwise transfer your personal data, nor share, transmit, or disclose it to third parties for marketing purposes related to goods or services without your prior consent.The data subject may express their refusal to continue receiving advertisements or promotional communications from the data controller by contacting us via email at mauricio@haifu.mx, or directly at our address through our Internal Data Protection Officer.



9. Amendments to the Privacy Notice
This Privacy Notice may be subject to modifications, changes, or updates arising from new legal requirements; from our own operational needs related to the products or services we offer; from changes in our privacy practices; from modifications to our business model; or for other reasons.In any case, any amendments to this Privacy Notice will be made available to you through our website at www.haifu.mx.

Last updated: April 2025