Privacy notice

Last updated: October 17, 2026

This notice is issued under the Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on March 20, 2025 (hereinafter, the “Law”), to inform you how we process the personal data you provide through this website.

01Identity and address of the data controller

Carlos Didier Santiago Vázquez, an individual with business activity operating commercially under the “Grupo SANVAR” brand (hereinafter, “SANVAR” or the “Controller”), is responsible for processing the personal data you provide through this website.

02Personal data we collect

SANVAR collects only the data needed to handle your request. We obtain it directly from you or automatically while you browse the site.

Sensitive data. SANVAR does not collect sensitive personal data (such as health status, ethnic origin, religious beliefs or political opinions). Please do not include them in your messages.

Financial data. The website does not request banking, financial or asset data.

03Purposes of processing

Primary purposes (do not require your consent)

They are necessary to handle your request and, where applicable, for the legal relationship established with you, under article 9, section IV, of the Law:

1. Respond to your requests for information, questions and comments.
2. Prepare and send you quotes and service proposals.
3. Schedule inspection, diagnostic or survey visits at your property or condominium.
4. Provide and follow up on the services you hire: construction, remodeling and interior design, climate control (HVAC/R), technical maintenance, pool resurfacing, maintenance plans and condominium management.
5. Handle clarifications, warranties and complaints related to our services.
6. Comply with legal obligations and respond to requests from competent authorities.

Secondary purposes (require your consent)

They are not necessary to handle your request, but they let us serve you better:

1. Send you information about promotions, new services, content and SANVAR news.
2. Conduct satisfaction surveys and evaluate the quality of our service.
3. Produce statistics and reports on website use in order to improve it.

How to opt out of secondary purposes. You may opt out at any time by emailing contacto@gruposanvar.com.mx with the subject “Opt-out of secondary purposes”. Opting out will not prevent us from handling your request or providing our services.

04Use of cookies and tracking technologies

This site uses cookies and similar technologies: small files stored in your browser so the site works properly and so we can understand how it is used.

Data obtained through these technologies is processed in aggregate and for statistical purposes.

Google Analytics. We use Google Analytics 4, by Google LLC, to understand how many people visit the site and how they use it. This tool sets the _ga and _ga_9CLBVEWD90 cookies, which last up to two years, and collects data such as the pages visited, time on site, referring site, device and browser type, and approximate geographic location. Google Analytics 4 does not store your full IP address. The information is sent to Google servers that may be located outside Mexico, including the United States, and Google handles it under its own policies:

• Google Privacy Policy
• How Google uses information from sites that use its services
• Google Analytics Opt-out Browser Add-on

How to disable them. You can block or delete cookies in your browser settings (Chrome, Safari, Edge, Firefox or others), or prevent Google Analytics measurement with the opt-out add-on listed above. If you disable essential cookies, some site features may not work properly.

05Transfers and processors

SANVAR does not sell, rent or trade your personal data.

Transfers. Your data may be transferred without your consent only in the cases set out in article 36 of the Law, including:

• To the company that operates the Condominium Management division under the SANVAR brand, when your request concerns that service, as necessary for a contract entered into or to be entered into in your interest (section IV).
• To competent authorities, when legally required or necessary for the prosecution or administration of justice (sections I and V).
• When necessary for the recognition, exercise or defense of a right in judicial proceedings (section VI).

In all cases, SANVAR will provide the recipient with this privacy notice and the purposes to which you limited the processing, and the recipient will assume the same obligations as the Controller.

Processors. To operate the site and communicate with you, we rely on providers that process data on SANVAR's behalf and under its instructions, such as web hosting, email, messaging (WhatsApp) and web analytics (Google Analytics, by Google LLC) services. These providers may not use your data for their own purposes.

06Options to limit the use or disclosure of your data

In addition to your ARCO rights (section 7), you can limit the use of your data through these means:

• Email: ask contacto@gruposanvar.com.mx, with the subject “Limitation of use”, to stop sending you promotional communications or surveys.
• WhatsApp: reply “BAJA” (unsubscribe) to any promotional message or block our number.
• Browser: disable analytics cookies in your settings or install the Google Analytics opt-out add-on.

SANVAR will record your request on an internal exclusion list so your data is not used for those purposes.

07ARCO rights and withdrawal of consent

You or your legal representative may at any time exercise your rights of Access, Rectification, Cancellation and Opposition (ARCO), and withdraw the consent you have given us. Withdrawal will not have retroactive effect.

How to submit your request

Send an email to contacto@gruposanvar.com.mx with the subject “ARCO rights request”, addressed to SANVAR's Personal Data Department, or deliver it in writing at our address. Your request must include:

1. Your name and an email or address to receive the response.
2. A copy of valid official ID; if a representative acts on your behalf, also the document proving their authority and their ID.
3. A clear description of the data on which you wish to exercise the right (except in the case of access).
4. The right you wish to exercise or what you are requesting.
5. Any document that helps locate your data. For rectification, state the changes and attach supporting documentation.

Deadlines and response

• SANVAR will notify you of its decision within a maximum of 20 business days from receipt of your request.
• If the request is granted, it will take effect within 15 business days after the response.
• Both deadlines may be extended once for an equal period when circumstances justify it.
• The response will be sent through the same channel in which we received the request. For access requests, data will be delivered as an electronic document or a plain copy.
• Exercising these rights is free of charge; only reproduction or shipping costs may be charged, where applicable.

Cancellation may not apply in the cases set out in article 25 of the Law, for example when the data is needed to fulfill a current contract or a legal obligation.

08Data security and retention

SANVAR maintains administrative, technical and physical security measures to protect your data against damage, loss, alteration, destruction or unauthorized use, access or processing. All personnel involved in processing are bound by confidentiality, even after their relationship with SANVAR ends.

If a security breach significantly affects your property or moral rights, we will inform you immediately so you can take the appropriate measures.

We will keep your data only as long as necessary to fulfill the purposes of this notice and applicable legal obligations. After that period, it will be blocked and then deleted.

09Changes to the privacy notice

This notice may change due to legal changes or changes in our services or privacy practices. Any change will be published at gruposanvar.com.mx/aviso-de-privacidad, with the last-updated date at the top of the document. If a change involves a new purpose that requires your consent, we will ask for it before processing your data for that purpose.

10Competent authority and consent

If you believe your right to personal data protection has been violated, you may contact the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), the authority responsible for overseeing compliance with the Law.

By providing your data through the contact form or WhatsApp, you acknowledge that you have read this privacy notice. Unless you object, you will be deemed to consent to the processing of your data under the terms described here, including the transfers listed in section 5.