NOTICE OF PRIVACY.

OREGIN S.A.P.I. DE CV, (“OREGIN”) with address at Av Bonampak S/N MZ 1 LT 1 SM

6 Malecon Americas Piso 5 CP 77503 is a company committed to the protection of

personal data to which access is made due to the operation of OREGIN, therefore, in

our commitment to make a legitimate, controlled and informed use, we guarantee the

privacy and the right to informative self-determination of the people who own them.

Making this document available to you, in accordance with the provisions of the Federal

Law on Protection of Personal Data Held by Private Parties and its respective

Regulations.

a) Responsibility

OREGIN is responsible for the use and protection of personal data that you, as the

owner of the same, provide directly or through optical, sound, visual electronic means,

by any other technology or other sources permitted by applicable legislation used by

OREGIN ”.

Due to the foregoing, and in compliance with said regulations, this Privacy Notice is

made available to you in order that you are the Owner of the personal data (hereinafter

You / Owner / User), since you are empowered to exercise your right to informative

self-determination and thereby grant their consent for their treatment.

b) Treatment

OREGIN does not sell, lend or rent and/or provide any identification data of its Users to

third parties, except those determined by a competent jurisdictional authority. The

information is processed through our personal data department and corresponding legal

area for the verification and secure protection of the information. OREGIN does not use

the information of its clients for any activity or reason that has not been previously

informed and consented to in this Privacy Notice.

By accessing or visiting the OREGIN platform and/or website, you accept this Privacy

Notice as indicated below, and acknowledge that you have fully understood the terms of

obtaining, using, disclosing and storing your personal data. This document applies to

OREGIN, its directors, officials, employees, collaborators, allies, suppliers and Users of

the OREGIN web pages, platforms, technological applications directly related to

OREGIN.

1. PURPOSE AND INFORMATION COLLECTED.

You acknowledge that your personal data may be collected by OREGIN through

electronic means, due to the nature of its business, however, this form of collection will

be lawful, since you acknowledge that they will only be requested at the time in which

which is intended to formalize a relationship with OREGIN, that is, when access to a

product or service offered by it is requested through a registration.

Due to the foregoing, the Holder declares to know the scope of this Privacy Notice and

declares to grant his full consent to carry out the processing of personal data that would

have been provided and / or those that for any of the purposes established in the

present provide in the future.

OREGIN collects your personal data at the following times:

a) When submitting an application to be a user of a product or service and formalizing

their contract.

b) When making a registration in the OREGIN digital media.

c) By contacting OREGIN through the means of communication established as official.

The personal data that we collect will depend on the classification of the product offering

by the third-party, as well as the purposes of said interaction, for which, by way of

example, it may be the following data and documents:

a) Full name

b) Email address

c) Phone number

d) Official identification (passport, driver's license, valid voter ID, professional ID.)

e) Proof of address (utility bill, eg water, gas, electricity, bank statement) in the

name of the user and issued in the last three months

f) Proof of tax situation issued by the local authority for the current fiscal year.

2. USE OF DATA COLLECTED.

OREGIN uses the personal data collected for all or some of the following purposes that

are necessary to carry out the specific purposes of the products or services offered, and

for which the relationship with the Holder arises.

Primary Purposes:

a) Compliance with the contractual relationship derived from the request and/or

contracting of products or services with OREGIN.

b) Provide information about products and services.

c) Verify, confirm and validate the identity of the Holder, confidential information and

financial situation for the purposes of fraud prevention, money laundering prevention

and operational security policies.

d) Continuous communication, attention to the User and maintenance of the services

and/or products;

e) Compliance with what is required by any federal, state or municipal authority in

accordance with current legal provisions;

f) Manage internal operations, including technical service, data analysis and testing.

g) Regarding any change and/or update to be implemented.

The refusal to use your personal data for these purposes may be a reason for OREGIN

to deny the contracting of services and products and the use of its electronic means.

3. THIRD PARTIES ORIGIN

OREGIN has the possibility of associating with companies or third parties that help us to

carry out the functions or functionalities, which will serve to improve our operation, so

that your personal information may be provided to third parties with whom we work,

which will treat your personal data only on behalf of OREGIN.

4. TRANSFER

We may share your personal information with our affiliates and/or affiliated entities for

purposes related to our operations and businesses, whether national or international,

without the consent of the Holder and in the other cases provided for in article 37 of the

LFPDPPP.

Likewise, we may transfer personal data to service providers for the fulfillment of agreed

contractual obligations, in order to provide the appropriate service with the best quality.

The Holder accepts that their personal data may be transferred in the terms described

in the LFPDPPP, its Regulations and this Privacy Notice, for which OREGIN grants

them a confidential nature, for which all the legal principles of protection around the

transfer of the personal data of the Holder.

Information about legal disclosures:

The transfer and disclosure of your personal information may be possible if there is a

need to comply with legal obligations. We will only share this information in good faith if

required by a government authority.

Requested proper documentation from government and/or jurisdictional authorities that

may be investigating the matter to verify/enforce our User Agreement and any additional

policies. If an emergency requires us to provide information.

5. INFORMATION RECEIVED FROM THIRD PARTIES.

Third parties may provide your information to OREGIN. If you are a customer of another

website and agree to receive information about OREGIN, that company or website may

provide us with your personal information so that we can provide you with the

information you requested. If you participate in the use of a third-party application (such

as any social media platform, such as Facebook, Twitter, Instagram, LinkedIn, etc.), you

allow us to receive your information as a follower or connection.

In order to provide the best service to our customers, we may collect information that is

not strictly personal data, derived from the nature of these, the tracking data that we can

obtain, including the following: navigation time, time of use, consulted sections, type of

connection, the above to improve your experience with us. We may tailor our content for

you and provide you with opportunities that may be of interest to you.

6. OMISSION OF PROMOTIONS.

If you do not wish to receive promotions, offers, newsletters, emails and/or any other

type of communication from OREGIN S.A.P.I. DE C.V., request to be removed by the

following methods:

a) Email us at (support@oregin.io)

b) Unsubscribe via the option in emails and newsletters.

c) All requests to remove or unsubscribe will be processed within 30 days of receipt

of the request.

d) Please note that we are required by federal law to send transactional emails from

our website and we cannot remove you or unsubscribe you from those

transactional emails.

In order for you to be able to limit the use and disclosure of your personal information,

you can proceed to register it in the Public Registry to Avoid Publicity, which is in charge

of the Federal Consumer Protection Office, so that your personal data is not used to

receive advertising or promotions from companies of goods or services.

7. USE OF COOKIES AND SIMILAR TECHNOLOGIES.

Websites use cookies to understand and respond to user activities. Sites you visit store

them in your web browser's cache or in temporary files. Most websites, web applications

and mobile applications use cookies to improve and personalize your user experience.

At OREGIN we use cookies to personalize content and ads, to provide social media

features, and to analyze our traffic. We may also share information about how you use

our site with our social media, advertising and analytics partners to help improve your

experience. We will never sell your information of any kind. Cookies are stored

separately from personally identifiable information used in account verification, which is

not shared with anyone. By continuing to use our website, you agree to our use of

cookies, however disabling cookies may limit your use of some features of the Website.

8. ELIGIBILITY

We do not intentionally collect or store any information or data from anyone under the

age of 18. In the event that information is collected for a user under 18 years of age, we

will not use their personal data without first receiving the consent of the minor's parents

or legal guardian. We will also do our best to delete any information that may have been

collected.

9. ARC RIGHTS

The Holder or the duly accredited legal representative of this, at any time may limit the

use or disclosure of their personal data; as well as exercise, when appropriate, the

rights of Access, Rectification, Cancellation or Opposition (ARCO Rights)

a) Access: Know the personal data collected, what they are used for and the

conditions of use;

b) Rectification: Request the correction of personal information in case it is

outdated, inaccurate or incomplete;

c) Cancellation: Request that said information be removed from the records or

databases when it is considered that it is not being used properly;

d) Opposition: Oppose for legitimate reasons the use of your personal data for

specific purposes.

In all cases, the revocation of consent will not have retroactive effects, that is, it will not

affect the legality of the processing based on your consent before its withdrawal.

For the exercise of any of the ARCO rights, the Holder or its legal representative, in the

established terms, must submit a request in writing and sent by mail (*) with the

following information and documentation:

a) Name, address and email of the Holder to communicate the answer.

b) The documents that prove the identity of the Holder and / or the personality of its

legal representative.

c) The clear and precise description of the personal data regarding the right to

exercise.

d) Any other element or document that facilitates the location of your personal data.

e) In case of rectification, you must indicate the modifications to be made and

provide the documentation that supports your request.

OREGIN will have a maximum period of 20 (twenty) days counted from the request, to

report on the origin. If it is appropriate, it will be effective within 15 (fifteen) days

following the date on which the response is communicated. The aforementioned terms

may be extended only once for an equal period, as long as OREGIN so justifies it due to

the circumstances of the case.

OREGIN will not be obliged to give access, rectify, cancel or grant opposition to the

personal data of the Holder in the cases established in article 34 of the LFPDPPP.

The Holder has the right to initiate a Procedure for the Protection of Rights before the

National Institute of Transparency, Access to Information and Protection of Personal

Data within, or after the conclusion of the period of 20 (twenty) business days counted

from the date receipt of your request and you would not have received any response.

The Holder expresses his consent that at the moment that the Holder or his

representative makes the revocation and / or cancellation of the use of his personal

data, there is the possibility that OREGIN will not be able to continue providing its

services.

10. SECURITY OF PERSONAL INFORMATION.

OREGIN has implemented physical, technical, and administrative security measures in

accordance with applicable regulations to protect the Holder's personal information from

loss, theft, theft, misuse, or unauthorized access, alteration, destruction, and disclosure,

which makes them sufficiently robust so that your personal information will be protected

under strict confidentiality, to reasonably prevent its improper use or disclosure.

In the event that a security breach occurs regarding the Holder's personal data that

affects his legal sphere, OREGIN will notify him of the situation, as well as take the

pertinent measures to defend the Holder's rights.

11. REVOCATION OF CONSENT

The Holder may revoke his consent for the processing of his personal data, without

retroactive effects, in all those cases in which said revocation does not imply the

impossibility of fulfilling obligations derived from a legal relationship in force between the

Holder and OREGIN or when it is about purposes not necessary. The procedure for the

revocation of consent, where appropriate, will be the same as that established for the

exercise of ARCO rights.

12. OTHER SITES AND ADVERTISING.

The OREGIN website may have links to other sites that are not owned or operated by

OREGIN, these links may come from advertisements and/or sponsors.

However, OREGIN does not endorse, control, or recommend these sites or their offered

services or products. Nor is it responsible for its content, practices or privacy policies.

13.- CUSTOMERS ABROAD.

Using our site and providing us with your personal information means that you agree

that OREGIN has the right to collect, transfer, process and maintain your data anywhere

in the world.

OREGIN is based in Mexico, the privacy laws and user agreements that we provide still

apply to our international clients through international treaties and/or reforms and

regulations inside and outside the Mexican Republic.

This applies even though laws and regulations may be different from ours in the country

where you reside.

14. MODIFICATIONS.

This privacy notice may be modified, changed or updated. Therefore, we promise to

keep you informed of updates to this notice through our site, where you can consult and

identify the history of the current privacy notice.

15. ADDITIONAL INFORMATION.

OREGIN recommends that you keep a note of your account password in a safe place.

We recommend that you do not share your password or the personal information you

upload to your account with us with anyone else.

To keep your information secure, please remember to log out of your account and close

your browser once you have finished visiting our site. This will help keep your account

and personal information safe from anyone with whom you may share a computer.

16. APPLICABLE LIABILITY.

The information published on this website is for consultation and reference only, so it is

published without speculative intentions. Users of this site are responsible for observing

the laws and regulations in force in the country in which the user is located when

carrying out an operation with OREGIN.

17. CONTACT DETAILS.

For any questions you can contact us in the

following ways

Email: support@oregin.io

Website: www.oregin.io

Date of elaboration or update: 01/21/2022