Privacy Notice

In accordance with the provisions established in the Federal Law for the Protection of Personal Data in Possession of Individuals (the "Law"), and other related provisions, we hereby inform you about the characteristics and purposes of the treatment that will be given to your personal data held by Canopia Carbon Sociedad Anónima Promotora de Inversión de Capital Variable, hereinafter the COMPANY or CANOPIA, indistinctly.

IDENTITY AND ADDRESS OF THE PERSON RESPONSIBLE

Canopia Carbon is a company incorporated under the Laws of the United Mexican States, hereinafter referred to as CANOPIA, is located at: Calle Londres 61, Oficina A 1510, Col. Juárez, C.P. 06600, Alcaldía Cuauhtémoc, Mexico City, Mexico, and e-mail: contacto@canopiacarbon.com, informs you of the Personal Data Protection Policy, in compliance with the Federal Law for the Protection of Personal Data in Possession of Individuals, and informs you that your personal data, including sensitive data, which have been currently collected or will be collected in the future, will be processed and/or used by the COMPANY, by CANOPIA's collaborators and/or by those third parties who, due to the nature of their work or functions, have the need to process and/or use your personal data.‍

PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA

The personal data that CANOPIA obtains, stores and uses are provided voluntarily by you for the following purposes as appropriate:

• Process your registration or respond to your inquiry.
• Integrate a database of candidate profiles for available vacancies.
• Add it to our database so that we can contact you in the future.
• To inform you about specific services, activities or events that we believe may be of interest to you.
• Enter into negotiations for the development of joint projects.
• To offer information about the services provided by Canopia Carbon, as well as for the development of these.
• Contractual formalization of the agreements adopted.
• To provide information and continuous updating about our activities and, in general, about the company.
• Process your registration or respond to inquiries.
• Integrate a database of candidate profiles for available vacancies.
• Add it to our database so that we can contact you in the future.
• Evaluate the quality of our services
• Any purpose analogous or compatible with the above.

In addition, we will use your personal information for the following purposes to enable us to better serve you:

1. Maintain an updated record of customers, suppliers and other persons interested in the work and services of our COMPANY.
2. Inform our customers (current and potential) and friends of different news, communications or notices of opportunity of the COMPANY, to promote, train and train on the activities of CANOPIA related to our corporate purpose;
3. Send invitations to participate in projects, events and/or training that CANOPIA considers of interest;
4. Send notifications regarding changes to this Privacy Notice or its Cookie Usage Policy.‍

In case you do not want your personal data to be processed for these additional purposes, you can contact us to delete them. ‍

PERSONAL DATA WE COLLECT AND USE ABOUT YOU

‍Personaldata collected from you may include, but is not limited to:

Full name, address, place and date of birth, marital status and occupation, e-mail address, telephone number, financial and property data such as bank accounts, credits, among others, information related to the legal requirements of projects, and official proof of identity and the information provided, as well as CURP and RFC.

The information you provide must be truthful and complete. Therefore, you are responsible for the veracity of the data provided and in no case shall the COMPANY be liable in this regard.

The information provided either directly on our Web portal www.canopiacarbon.com or by e-mail, will be subject to the provisions of this Privacy Notice.‍

SENSITIVE PERSONAL DATA THAT WE WILL USE‍

In order to fulfill the above-mentioned purposes, we may collect your sensitive personal data in different ways. We usually collect your data when you provide it to us directly (through our employees, collaborators, or our website). Occasionally, we collect your data indirectly, through other sources permitted by law.

COLLECTION OF YOUR DATA

Personally

‍Whenthe holders of personal data come to our offices, when they participate in informative events and fill out the corresponding forms to access our services, for their participation in events of different kinds or explicit requests to be part of our databases.

Directly

‍Holdersprovide us with their personal data via email, telephone, instant messaging digital services (WhatsApp), short message services (SMS), social networks (Facebook, Instagram, among others) or through capturing their data on our website or on our digital forms.‍

Indirectly

‍Aperson other than the owner of the personal data provides us with the owner's data. For example, when a representative of the organization where the user works shares with us the data of those who will be accessing the services that Canopia Carbon offers. ‍

INSTANCES IN WHICH WE MAY SHARE YOUR PERSONAL INFORMATION‍

The COMPANY does not make transfers of Personal Data, except for those provided for in Article 37 of the Federal Law for the Protection of Personal Data in Possession of Private Parties.

We will not transfer data without your consent.

‍YOU CANACCESS, RECTIFY, CANCEL OR OPPOSE THE USE OF YOUR PERSONAL DATA‍.

As the owner of the personal information, you have the right to know what personal information we have about you, what we use it for, as well as the conditions of the use we make of it (Access). Likewise, it is your right to request the correction of your personal information in case it is outdated, inaccurate or incomplete (Rectification); that we remove it from our records or databases when you consider that it is not being used in accordance with the principles, duties and obligations set forth in the regulations (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition). These rights are known as ARCO Rights.

The owner of the personal data may exercise his/her ARCO Rights, which are enshrined in the Federal Law for the Protection of Personal Data in Possession of Individuals, by submitting a written request to our address, located at Calle Londres 61, Oficina A 1510, Col. Juárez, C.P. 06600, Alcaldía Cuauhtémoc, Mexico City, Mexico; or by sending your request to the e-mail address contacto@canopiacarbon.com.

In order to be able to respond to your request, the letter must satisfy all the requirements stipulated in the Federal Law for the Protection of Personal Data in Possession of Individuals, such as:

• The name of the owner, address, telephone number or e-mail to communicate the response to your request.
• Documents proving identity or, if applicable, legal representation of the holder.
• Clear and precise description of the Personal Data with respect to which you are seeking to exercise any of the aforementioned rights (in case of modification, you must indicate the modifications to be made and provide the documentation supporting your request).
• Any other document or element that facilitates the location of personal data.

In order to exercise these rights, the documents must be presented physically at the address indicated above or sent via the aforementioned e-mail address.

‍TOREVOKE YOUR CONSENT TO THE USE OF YOUR PERSONAL DATA‍

You may revoke the consent, if any, you have given us for the processing of your personal data. However, it is important to note that not in all cases we will be able to fulfill your request or terminate the use immediately, since it is possible that due to a legal obligation we may need to continue processing your personal data. Also, you should consider that, for certain purposes, the revocation of your consent will mean that we can no longer provide the service you requested, or the conclusion of your relationship with us.

To revoke your consent you must submit a written request to our address, located at Calle Londres, Número 61, Oficina A 1510, Col. Juárez, C.P. 06600, Alcaldía Cuauhtémoc, Mexico City, Mexico. If you are located in another state or if you prefer, you can make your request by sending the letter to the e-mail address contacto@canopiacarbon.com, including in the subject line the title Request for revocation of consent. It is important to mention that all the requirements mentioned above must be included, as well as a document that proves your identity (e.g. copy of ID (INE) or Passport).

The procedure and requirements for revocation of consent are as follows:

• Once we receive your request to exercise your ARCO rights duly integrated and with the legal requirements in force, you will receive a reply from us within a period not exceeding 20 business days.
• If applicable, it will be effective within 15 business days after we communicate our response to you.
• If you are dissatisfied with the notified response, you will have a period of 20 business days to contact us, indicating your disagreement or concern, in order to resolve the situation.
• If you do not respond to our reply within the time limit, CANOPIA understands in good faith that you agree with our response.
  

MECHANISMS TO LIMIT THE USE OR DISCLOSURE OF YOUR PERSONAL INFORMATION

In order for you to limit the use and disclosure of your personal information, we offer you the following means:

Your registration in the Public Registry to Avoid Advertising, which is in charge of the Federal Consumer Protection Agency, so that your personal data will not be used to receive advertising or promotions of goods or services companies. For more information about this registration, you can consult the PROFECO's website(https://www.gob.mx/profeco), or contact CANOPIA's Communication & Marketing area directly at contacto@canopiacarbon.com.‍

USE OF TRACKING TECHNOLOGIES ON OUR WEBSITE

We inform youthat on our website we use cookies, web beacons or other technologies, through which it is possible to monitor your behavior as an Internet user, as well as to provide you with a better service and user experience when browsing our website.

The personal data we obtain from these tracking technologies are, for example, the following: browsing hours, time spent browsing our website, sections consulted, and Internet pages accessed prior to ours.

We also inform you that your personal data obtained through these technologies will be shared with persons, companies, organizations or authorities other than us, for the following purposes and with your prior authorization, according to section 6 of this notice.

These technologies may be disabled by following the process established in the Cookie Usage Policy and Cookie Management Notice, both available on our website.

MODIFICATIONS TO THE PRIVACY NOTICE‍.

This Privacy Notice may be modified, changed or updated as a result of new legal requirements; our own needs for the services we offer; our privacy practices; changes in our operating model, or for other reasons.

We commit to keep you informed about the changes that this Privacy Notice may undergo, when significant changes are made to it, as well as when your consent is required, within 60 business days from the date of modification. The updated version of the Privacy Notice will be available on our website: www.canopiacarbon.com.‍

COMPLAINTS AND DENUNCIATIONS FOR IMPROPER PROCESSING OF PERSONAL DATA‍.

If you believe that your right to the protection of personal data has been violated by any conduct of our employees, employees in charge or our actions or responses, and you assume that in the processing of your personal data there is any violation of the provisions of the Law, you may file a complaint or complaint with the National Institute for Transparency, Access to Information and Protection of Personal Data ("INAI"), for more information visithttps://home.inai.org.mx/.‍

EXPRESS CONSENT AND SECURITY MEASURES TO PROTECT YOUR PERSONAL INFORMATION‍

We inform you that your personal data and sensitive personal data will be safeguarded under strict administrative, technical and physical security measures, which have been implemented in order to protect your personal data against damage, loss, alteration, destruction or unauthorized use or access or treatment.

The CANOPIA website may connect to certain links to other Web pages belonging to third parties, over which the company has no control. In these cases, CANOPIA assumes no responsibility or liability for the privacy policies of the information contained in those pages.

This Privacy Statement is subject to Canopia Carbon's Privacy Policy, which constitutes a legal agreement between you and CANOPIA.

By browsing the COMPANY's website, you signify that you have read, understood and agree to the terms set forth above.‍

CONTACT INFORMATION ‍

If you have any questions or comments regarding this Privacy Notice, as well as to exercise your rights, we provide you with our contact information:

• Canopia Carbon S.A.P.I. de C.V.
• Address: Calle Londres 61, Oficina A 1510, Col. Juárez, C.P. 06600, Alcaldía Cuauhtémoc, Mexico City, Mexico.
• E-mail: contacto@canopiacarbon.com