Last updated: September 7, 2026

In compliance with applicable personal data protection laws, Arquitectura Diseño y Construcción ZyZ, S.A. de C.V. (hereinafter, “Z&Z,” “we,” “us,” or the “Controller”) makes this Privacy Notice available to data subjects to inform them about the collection, use, storage, processing, transfer, and protection of personal data collected through the website zymanyzyman.com (the “Site”), as well as through other means of contact with Z&Z.

1. Identity and Address of the Controller

The entity responsible for processing your personal data is:

Arquitectura Diseño y Construcción ZyZ, S.A. de C.V.
Address: Avenida Parque de Granada No. 35, Parques de la Herradura, 52786, State of Mexico, Mexico
Email: info@zyman-zyman.com
Phone: +55 5290 1888
Website: zymanyzyman.com

2. Personal Data We May Collect

Z&Z may collect personal data directly from the data subject through the Site, contact forms, email, telephone, business or professional communications, and other means permitted by applicable law.

Depending on your relationship with Z&Z, we may process the following categories of data:

• Identification data, such as first and last name.

• Contact information, such as email address, telephone number, and address.

• Professional information, such as company, job title, profession, or information related to your professional activity.

• Information voluntarily provided through forms, emails, telephone calls, or other means of communication.

• Information related to requests for information, quotations, projects, services, or business relationships.

• Billing and tax information when necessary for a contractual or commercial relationship.

• Technical and browsing information, such as IP address, browser, device, operating system, pages visited, and interactions with the Site.

• Any other personal data voluntarily provided by the data subject that is necessary to respond to their request or maintain a relationship with Z&Z.

3. Sensitive Personal Data

As a general rule, Z&Z does not request or intend to collect sensitive personal data through the Site.

We recommend that you do not provide information relating to your health, racial or ethnic origin, religious or philosophical beliefs, political opinions, genetic or biometric information, or other data considered sensitive under applicable law, unless strictly necessary and an appropriate mechanism for its processing is in place.

If, exceptionally, it becomes necessary to process sensitive personal data, Z&Z will adopt the appropriate measures and obtain any consent required under applicable law.

4. Primary Purposes of Processing

Z&Z may process the personal data collected for purposes necessary to establish, maintain, and fulfill the corresponding legal, professional, or commercial relationship, including:

• Identifying and contacting individuals interested in Z&Z.

• Responding to inquiries, requests, comments, and communications.

• Responding to requests submitted through the Site's contact form.

• Providing information about our services.

• Preparing and sending proposals, quotations, or requested information.

• Evaluating potential projects and business relationships.

• Providing contracted services.

• Managing projects and maintaining communications with clients, suppliers, and collaborators.

• Managing contractual and commercial relationships.

• Processing payments, billing, and administrative or tax obligations, where applicable.

• Maintaining internal records relating to clients, suppliers, projects, and operations.

• Providing support and follow-up.

• Fulfilling contractual obligations.

• Complying with applicable legal, tax, administrative, and regulatory obligations.

• Protecting the security and integrity of the Site, our systems, operations, and users.

• Preventing and detecting potential fraud, abuse, or unlawful activities.

These purposes are necessary for the establishment, maintenance, and fulfillment of the corresponding relationship between the data subject and Z&Z.

5. Secondary Purposes

Where applicable, Z&Z may also use certain personal data for purposes that are not essential to the primary relationship, such as:

• Sending commercial or promotional communications.

• Providing information about new services, projects, news, or activities of Z&Z.

• Conducting satisfaction surveys.

• Preparing statistics and analyses regarding our services.

• Improving the user experience and our communication channels.

• Conducting marketing and promotional activities.

Where applicable law requires consent for these activities, Z&Z will obtain such consent before carrying out the corresponding processing.

The data subject may request at any time that their personal data no longer be used for these secondary purposes by writing to info@zyman-zyman.com.

Refusal to allow processing for secondary purposes will not constitute grounds for denying any services, products, or relationships that the data subject maintains with Z&Z.

6. Data Collected Automatically

When accessing the Site, certain technical data may be collected automatically through cookies, server logs, and similar technologies.

This information may include IP address, device type, browser, operating system, date and time of access, pages visited, approximate browsing duration, referring URL, and information regarding interactions performed on the Site.

The processing of information through cookies and similar technologies is described in greater detail in our Cookie Policy.

7. Consent

Where required by applicable law, Z&Z will request the data subject's consent to process their personal data.

In circumstances where the law permits processing without consent—for example, when processing is necessary to fulfill obligations arising from a legal relationship or falls within one of the exceptions provided by law—Z&Z may carry out such processing in accordance with the applicable provisions.

8. Transfers of Personal Data

Z&Z may disclose or transfer personal data to third parties when necessary to fulfill the purposes described in this Privacy Notice and always in accordance with applicable law.

Such third parties may include, where necessary:

• Technology and web hosting providers.

• Administrative and professional service providers.

• Providers involved in the operation of projects or services.

• Legal, tax, accounting, or financial advisors.

• Administrative, judicial, tax, or regulatory authorities where there is a legal obligation or valid request.

• Third parties necessary for the fulfillment of contractual obligations.

Where a transfer requires the data subject's consent under applicable law, Z&Z will obtain such consent in advance.

Where data is processed by service providers acting on behalf of Z&Z, appropriate contractual and security measures will be established, as applicable.

9. ARCO Rights

In accordance with applicable Mexican law, data subjects may exercise their rights of Access, Rectification, Cancellation, and Objection (ARCO Rights) with respect to their personal data.

Access: The right to know what personal data Z&Z holds and the general conditions under which it is processed.

Rectification: The right to request the correction or updating of personal data when it is inaccurate, incomplete, or outdated.

Cancellation: The right to request, where legally appropriate, that personal data be deleted from our records or systems.

Objection: The right to request that personal data not be processed for certain purposes where legally applicable.

10. Procedure for Exercising ARCO Rights

To exercise any ARCO Right, the data subject may submit a request to:

Email: info@zyman-zyman.com

Where applicable, the request must include:

1. The name of the data subject.

2. Information sufficient to verify their identity and, where applicable, the legal representation of another person.

3. A means through which the response may be communicated.

4. A clear description of the right the data subject wishes to exercise and the personal data related to the request.

5. Any information or documentation that may facilitate the identification or location of the personal data.

6. In the case of rectification requests, the information to be corrected and, where applicable, documentation supporting the requested modification.

Z&Z will respond to requests in accordance with the requirements and within the timeframes established by applicable Mexican law.

The exercise of a right may be subject to legally established exceptions and limitations.

11. Withdrawal of Consent

Where the processing of personal data is based on consent, the data subject may request the withdrawal of such consent by sending a communication to info@zyman-zyman.com.

Withdrawal of consent will not have retroactive effect and may be subject to the limitations established under applicable law.

There may also be circumstances in which Z&Z may continue processing certain data following a withdrawal request where a legal or contractual obligation or another legal basis permits or requires the data to be retained.

12. Limitation on the Use or Disclosure of Personal Data

The data subject may request that the use or disclosure of their personal data be limited by submitting a request to info@zyman-zyman.com.

Z&Z will process such requests in accordance with applicable law and the nature of the relationship with the data subject.

13. Retention of Personal Data

Z&Z will retain personal data for as long as reasonably necessary to fulfill the purposes for which it was collected, maintain the corresponding relationship, and comply with applicable legal, contractual, tax, administrative, or regulatory obligations.

Once the data is no longer necessary and the applicable statutory retention periods have expired, it will be deleted, blocked, anonymized, or otherwise handled in accordance with applicable legal provisions.

14. Security of Personal Data

Z&Z will adopt reasonable and appropriate administrative, technical, and physical measures to protect personal data against damage, loss, alteration, destruction, unauthorized use, access, disclosure, or processing.

However, no electronic transmission or storage system can guarantee absolute security. Z&Z will maintain security measures proportionate to the nature of the data processed and the risks associated with its processing.

15. Minors

The Site and Z&Z's services are not specifically directed at minors.

Z&Z does not intend to knowingly collect personal data from minors without the corresponding authorization from their parents, guardians, or legal representatives where such authorization is required.

If Z&Z becomes aware that personal data from a minor has been provided without the corresponding authorization, it will take the appropriate measures in accordance with applicable law.

16. Third-Party Links and Services

The Site may contain links, content, tools, or services provided by third parties.

Z&Z does not necessarily control the privacy practices of such third parties. When users leave the Site or use external services, the processing of their data may be subject to the privacy notices and policies of the relevant third party.

We recommend reviewing the privacy policies of external services before providing them with personal information.

17. Cookies and Similar Technologies

The Site may use cookies and similar technologies to enable its operation, maintain security, remember preferences, analyze use of the Site, and, where applicable, conduct measurement or marketing activities.

Users may obtain detailed information about the categories of cookies used, their purposes, and the mechanisms available to manage them by consulting our Cookie Policy.

18. Changes to the Privacy Notice

Z&Z reserves the right to modify or update this Privacy Notice when necessary due to legal, regulatory, operational, technological, commercial, or service-related changes.

Any relevant changes will be communicated through the Site or by other means deemed appropriate in accordance with applicable law.

The current version will be available at zymanyzyman.com, indicating the date of its latest update.

19. Contact

For any questions, comments, or requests regarding this Privacy Notice or the processing of your personal data, you may contact:

Arquitectura Diseño y Construcción ZyZ, S.A. de C.V.
Avenida Parque de Granada No. 35, Parques de la Herradura, 52786, State of Mexico, Mexico
Email: info@zyman-zyman.com
Phone: +55 5290 1888
Website: zymanyzyman.com

20. Applicable Law

This Privacy Notice and the processing of personal data carried out by Z&Z will be governed, as applicable, by the laws and regulations of the United Mexican States (Mexico), including the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), its implementing regulations, and all other applicable personal data protection regulations.