COMPREHENSIVE PRIVACY NOTICE

Ramírez Esteves · Intellectual Property
Last updated: October 10, 2026.

1. Data controller and contact

César Armando Ramírez Esteves, operating under the trade name Ramírez Esteves, with an address at Blvd. Puerta de Hierro 5153, Col. Puerta de Hierro, Corporativo Andares Paseo, 2nd Floor, Zapopan, Jalisco, Mexico, is responsible for processing your personal data.

For privacy matters and the exercise of your rights, contact César Armando Ramírez Esteves at info@ramirezesteves.com.mx.

2. Data we process

We may receive data directly from you, from your representative or from documents provided to handle your matter, through the website, email, WhatsApp and in the course of providing services.

Depending on the service requested, we process identification and contact data, such as your name, address, telephone number and email address; professional and representation data, such as your company, position and powers of attorney; information about trademarks and other intellectual property rights connected with individuals; and the documentation needed to assess, manage and follow up on your matter.

Where the service requires it, we may receive official identification documents, Mexican tax identification numbers (RFC), tax, invoicing, financial or asset-related data, such as banking information for payments and documentation of ownership of rights. We do not request sensitive personal data for an initial enquiry. Please avoid sending it if it is unnecessary. If a matter requires sensitive personal data, its categories and purposes will be specified beforehand and the applicable consent will be obtained.

Where express consent is required for financial or asset-related data, it will be obtained through a specific mechanism, subject to statutory exceptions. Processing sensitive personal data that requires such consent will be subject to express written consent. This notice does not replace those mechanisms.

3. Necessary purposes

We use relevant data to:

• Respond to enquiries, identify your needs and prepare quotations.
• Verify identity and representation, assess acceptance of an engagement and formalise the professional relationship.
• Provide legal advice and services; prepare, file and follow up on intellectual property applications and proceedings.
• Coordinate services with correspondents in Mexico or abroad, including the United States, where the matter requires it.
• Communicate about the status of your matter, create and administer files, issue invoices and manage payments.
• Comply with legal obligations, respond to requests from competent authorities and exercise or defend rights.

Only data that is adequate, relevant and necessary for the service and applicable obligations will be processed.

4. Secondary purposes and limitations on use

As an additional and optional use, we may use your contact data to send legal updates, publications, invitations and information or promotions concerning services by email or WhatsApp. You may reject these uses from the first contact or subsequently by writing “I do not wish to receive advertising” to info@ramirezesteves.com.mx, or by replying to the message received. Your refusal will not affect the services requested. If the notice was not provided directly when the data was collected, you may express your refusal within five business days after becoming aware of it, without prejudice to doing so later.

You may request limitations on the use or disclosure of your data through the privacy email address, specifying the uses you wish to restrict. The request will be handled in accordance with legal obligations and the applicable processing.

5. Correspondents and other transfers

We may disclose strictly necessary data to legal correspondents in Mexico or abroad, including the United States, to analyse, file, manage and follow up on the matters entrusted to us. Data may also be disclosed to administrative or judicial authorities where necessary for a proceeding or where a legal obligation exists.

Where a transfer applies, we will communicate the notice and applicable purposes to the recipient. Transfers falling within an exception under Article 36 of Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties, such as those necessary to fulfil the legal relationship or a contract in the data subject’s interest, may take place without additional consent. The exception must be verified in each case.

If a transfer requires consent, before making it we will identify the recipient or category of recipients, the country and the purpose, and obtain your decision through a specific mechanism: I accept / I do not accept the described transfer. Simply reading this notice does not constitute acceptance of every transfer.

Providers processing data exclusively on behalf of and under the instructions of the controller will be subject to the applicable obligations for processors. This relationship must be distinguished from transfers to independent controllers.

6. Website, measurement and third-party services

The website uses technologies necessary for its operation. A Google Ads tag has been identified for measuring interactions with advertisements and clicks to WhatsApp. These technologies may process online identifiers, browser and device data, and browsing and interaction information.

You can manage or block cookies through your browser settings and use Google’s privacy options. Blocking certain technologies may affect functionality or measurement. Browser options allow you to block or delete cookies, including third-party cookies. You can also manage ad personalisation at https://myadcenter.google.com/. See Google’s policy at https://policies.google.com/privacy and WhatsApp’s policy at https://www.whatsapp.com/legal/privacy-policy.

When you choose WhatsApp, communication takes place through that service, which also processes data under its own terms and notice. The firm’s processing of messages received is subject to this notice.

The landing page loads an image hosted by an external image service; this connection may disclose technical information, such as your IP address and browser data, to the provider.

7. ARCO rights

You may request access to your data; rectification where it is inaccurate or incomplete; cancellation where applicable; or opposition to processing on legitimate grounds.

Send your request to the privacy email address and include:

• Your name and a means of receiving the response.
• Documentation establishing your identity and, where applicable, representation.
• The right you wish to exercise and a clear description of the data involved, unless you are requesting general access to your data.
• Information that helps locate the data. For rectification, specify the changes and provide supporting documentation.

The decision will be communicated within twenty business days after receipt of the request. If applicable, it will be implemented within fifteen business days after that communication. Each period may be extended once for an equal period where the circumstances justify it, with the reasons communicated.

Access may be provided through electronic copies or another legally permissible and agreed means. Exercising these rights is free of charge, without prejudice to reproduction, copying or delivery costs and other circumstances provided for by law. Any legally justified refusal will state its grounds and be communicated.

8. Withdrawal of consent

You may request withdrawal of consent through the privacy email address, establishing your identity and specifying the processing concerned. Withdrawal does not have retroactive effect. Some processing may continue where a legal obligation or basis permits it. We will inform you if withdrawal prevents continuation of a requested activity or service.

For withdrawal and limitations on use or disclosure, we will communicate the decision within twenty business days and, if applicable, implement it within the following fifteen business days. Advertising opt-out requests will be handled within no more than five business days. Where appropriate, we will retain the minimum information needed to respect that preference.

9. Retention and security

Data will be retained for the time necessary for the stated purposes and to comply with applicable obligations and liabilities. Where appropriate, it will be blocked and subsequently deleted, taking into account statutory periods and the defence of rights.

Processing is subject to administrative, technical and physical measures appropriate to the nature of the data and the risks, as well as confidentiality duties. No means of transmission or storage offers absolute security.

People involved in processing must maintain confidentiality. Security breaches that significantly affect financial or non-financial rights will be communicated to affected individuals in accordance with applicable legislation.

10. Changes and competent authority

Changes will be published on this notice’s page at ramirezesteves.com.mx, with the updated date. If a change requires new consent or specific information, that obligation will be addressed before the relevant processing.

If you consider your rights to have been infringed, you may contact the Secretaría Anticorrupción y Buen Gobierno, the competent authority under current legislation, through the applicable legal procedure.