This Privacy Policy explains how SERDAN GROUP, LLC AND GPO SERDAN (“the Company,” “we,” “us,” or “our”) collect, use, disclose, and protect personal information. By accessing our website or using our services, you consent to the practices described in this Privacy Policy.

1. Data Controller

The Company, is responsible for the collection, use, and protection of your personal information.

2. Personal Information We Collect

We may collect personal information directly from you, through our website, online services, or through legally permitted third‑party sources. The categories of personal information we may collect include:

• Corporate Name (for legal entities)
• Full Name (for individuals)
• Physical Address
• Legal Representative / General Director Name
• Company Contact Name
• Business Industry
• Company Logo
• Products or Services Offered
• Landline and/or Mobile Phone Numbers
• Email Addresses
• Social Media Identifiers (Facebook, X/Twitter, LinkedIn)
• Tax Identification Number (RFC)
• Bank Account Number and Related Banking Information

We do not collect or process sensitive personal information.

3. How We Use Your Information

We use your personal information for the following business purposes:

• Providing the products and services you request
• Communicating updates, changes, or new related products or services
• Displaying you as a client in marketing materials
• Conducting internal studies to understand consumption habits
• Performing periodic evaluations of our products and services
• Improving service quality
• Fulfilling contractual obligations

If you do not object to the processing of your data as described, we will assume your consent.

4. Data Processing, Security, and Retention

We implement administrative, technical, and physical safeguards consistent with 2026 industry standards to protect your information from unauthorized access, disclosure, alteration, or destruction.

Your data will be processed only for the purposes described and retained only for as long as necessary to fulfill those purposes.

In the event of a contractual breach, related information may be retained for up to 72 months from the date of the breach. After this period, the information will be permanently deleted.

5. Your Rights (Access, Correction, Deletion, Objection, Revocation)

Subject to applicable law, you have the right to:

• Access the personal information we hold
• Correct inaccurate or incomplete information
• Delete your information when it is no longer necessary
• Object to specific types of processing
• Revoke your consent at any time

To exercise these rights, please submit a written request to our Personal Data Protection Department:

Address: 8 Dominion Dr. Bldg. 100 Unit 101, San Antonio, Tx 78257 Phone: (210) 317-8343 Email: contact@serdangroup.com

Please confirm receipt of your email by phone.

Your request must include:

1. Full name, address, and email
2. Proof of identity (INE for individuals; Notarial Instrument + INE for legal representatives)
3. Clear description of the right you wish to exercise
4. Any information that helps locate your data

We will respond within 20 business days after acknowledgment of receipt.

6. Data Sharing and Transfers

We do not sell, share, or transfer your personal information to third parties for advertising or marketing purposes.

If a transfer becomes necessary, we will notify you in advance and request your consent, except where permitted by law.

7. Changes to This Privacy Policy

We may update this Privacy Policy at any time. Updates will be made available through:

• A posted notice at our facilities
• Our website: www.serdangroup.com
• The most recent email address you have provided

8. Complaints and Regulatory Contact (Updated for 2026)

If you believe your personal data rights have been violated, you may file a complaint with the INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales), the current regulatory authority in Mexico.

For U.S. residents seeking general privacy information, you may consult the Federal Trade Commission (FTC).