Comprehensive Privacy Notice — Fabian The Realtor

1. Controller of your personal data

FABIAN RAMIREZ LOPEZ, who operates under the trade name "Fabian The Realtor" (hereinafter, "the Controller"), with an address at Nemesio Diez 8ª, Centro, C.P. 37700, San Miguel de Allende, Guanajuato, Mexico, is responsible for processing the personal data you provide through the website https://fabiantherealtor.com, its forms, WhatsApp, email, telephone, social media or in person.

This notice is issued in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on March 20, 2025 (the "Law"), and other applicable provisions.

Contact for personal data matters: [email protected] · Telephone: 4151523197.

2. Personal data we process

Depending on the service you request, we process the following categories of data:

• Identification and contact: full name, email address, telephone number, country and city of residence, nationality and preferred language.

• Property search: property type, area, budget, timelines and any other preferences you share with us.

• Property owners and sellers: property data and documents, such as location, deed, property tax statement and photographs.

• Purchase, sale or rental transactions: official identification, RFC, CURP, proof of address, marital status and, when required by legislation on preventing transactions involving funds of illicit origin, the information specified by that legislation.

• Asset or financial data: payment method, source of funds, credit prequalification or approval and bank details necessary for the transaction.

• Browsing: IP address, device and browser type, pages visited and properties viewed or saved (see section 7).

Sensitive data. The Controller does not request or process sensitive personal data. Please do not include it in forms or messages.

Asset or financial data. Processing this data requires your express consent, which will be obtained in writing, electronically or through the corresponding acceptance checkbox before you provide it.

Minors. This website is not intended for minors, and we do not intentionally collect their data.

3. Purposes of processing

Primary purposes. These are necessary to address your request or fulfill our legal relationship with you and do not require additional consent:

1. Respond to your requests for information and contact you through your chosen channel.

2. Provide real estate advisory services: searching, selecting, viewing, valuing, promoting, negotiating and closing property purchase, sale or rental transactions.

3. Promote and publish the property you entrust to us, including through the local multiple listing service (MLS).

4. Compile the transaction file and coordinate the transaction with notaries, financial institutions, appraisers and other participants.

5. Comply with legal, tax and anti-money laundering obligations and respond to requests from authorities.

6. Maintain the security and operation of the website.

Secondary purposes. These are not necessary for the service and require your consent:

1. Send you newsletters, market reports, new property listings and content about San Miguel de Allende.

2. Send you event invitations and promotional communications.

3. Produce website usage statistics and analyses to improve the service and personalize suggested properties.

4. Show you advertising on third-party platforms.

5. Request and publish your testimonial, with your prior authorization in each case.

How to decline secondary purposes. You may check or leave unchecked the corresponding checkbox when submitting a form, use the "unsubscribe" link in any email, or write to [email protected]. Declining does not affect the services you request. If we collect your data indirectly, you have five business days to express your refusal before we use it for these purposes.

4. Transfers and processors

Your data may be shared, within and outside Mexico, with the following third parties:

For transfers requiring consent, you may withhold it through the channels described in section 3.

We also use providers that process data on behalf of the Controller, such as web hosting, CRM, email, messaging and analytics providers. These providers act as processors, may be located outside Mexico, and are required to maintain confidentiality and use the data solely in accordance with our instructions.

5. ARCO rights and withdrawal of consent

You have the right to access your data, rectify it if it is inaccurate or incomplete, cancel it when you consider it unnecessary for the stated purposes, and object to its processing for specific purposes, including automated processing that significantly affects you. You may also withdraw the consent you have given us at any time.

To exercise these rights, send a request to [email protected] containing:

1. Your name and an email or postal address at which we can communicate our response.

2. A copy of a document proving your identity or, where applicable, your legal representation.

3. A clear description of the data and the right you wish to exercise.

4. Any information that helps locate your data and, for rectification, the document supporting the change.

If the request is incomplete, we will ask you for the missing information. We will communicate our determination within a maximum of 20 business days after receiving the request and, if applicable, implement it within the following 15 business days. These periods may be extended once for an equal period when justified by the circumstances.

Exercising these rights is free of charge; only shipping or reproduction costs may be charged. Cancellation or withdrawal may not take effect immediately when there is a legal or contractual obligation to retain the data.

6. How to limit the use or disclosure of your data

In addition to the rights above, you may:

• Unsubscribe from our communications using the link included in each email, or by replying "BAJA" on WhatsApp.

• Request inclusion in our internal exclusion list by writing to [email protected].

• Register with the Public Registry to Avoid Advertising (REPEP) of the Federal Consumer Protection Agency.

• Configure or reject non-essential cookies, as described in the following section.

7. Cookies and tracking technologies

This website uses cookies, pixels and similar technologies that automatically collect data while you browse: IP address, device and browser type, pages and properties viewed, visit source and session duration.

You may accept or reject non-essential cookies in the website banner, or disable them through your browser settings. Some features may not work correctly if you do so.

Providers of these technologies: Google Analytics (Google LLC).

8. Retention and security

We retain your data only for as long as necessary for the purposes described and for the periods required by applicable laws; afterward, it is blocked and deleted. We apply administrative, technical and physical security measures to protect it against damage, loss, alteration, destruction or unauthorized access. If a breach occurs that significantly affects your rights, we will inform you.

9. Changes to this notice

This notice may be amended due to changes in the law, our services or our privacy practices. The current version will always be available at https://fabiantherealtor.com/aviso-de-privacidad, with its update date. If a change involves new purposes requiring your consent, we will request it.

10. Authority

If you believe your right to personal data protection has been violated, you may contact the Ministry of Anti-Corruption and Good Governance, the competent authority under the Law.

11. Consent

By providing your data through any of the channels described, you acknowledge that this notice has been made available to you. For asset or financial data and secondary purposes, your consent is obtained as described in sections 2 and 3.

Last updated: October 3, 2026.