Privacy Notice

1. Identity and address of the Data Controller

CATENA Logística, S.A. de C.V. ("CATENA"), operating out of León, Guanajuato,

Mexico, is responsible for processing your personal data in compliance with Mexico's

Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP)

and its Regulations.

For any questions about how we handle your personal data, you can reach us

at comercial@catenalogistica.com or by phone at +52 (442) 688-5340.

2. Personal data we collect

For the purposes described in this notice, we may collect the following personal data:

● Identification and contact information (name, job title, company, email address,

phone number, mailing address).

● Billing and tax information (tax ID / RFC, company name, tax address).

● Official identification and signature, when required to contract our services.

● Banking details necessary to process payments and collections related to our

business relationship.

CATENA does not collect sensitive personal data as part of its regular operations.

3. How we use your information

We use the personal data we collect for the following purposes, which are necessary

to provide the service you're requesting:

● Identifying you and managing our business relationship (clients, suppliers, consultants).

● Preparing quotes, contracts, invoices, and other documentation related to our

rail logistics and freight transportation services.

● Complying with applicable tax, legal, and regulatory obligations, including those

related to anti-money laundering.

● Fulfilling due diligence (KYC) requirements requested by our business partners.

We may also use your information for marketing, advertising, or business

development purposes. If you'd rather we didn't, just let us know at any time using the

contact details above.

4. Sharing your data

We may share your personal data with government authorities when legally required to

do so, and with our business partners solely for due diligence and compliance purposes

tied to our existing contractual relationship. CATENA does not sell or rent personal data

to third parties.

5. Your privacy rights (access, correction, deletion, objection)

You have the right to access, correct, or delete your personal data, to object to how we

process it, and to withdraw any consent you've previously given us. To exercise any

of these rights, send a request to comercial@catenalogistica.com including: your

full name, a clear description of the right you'd like to exercise, and documentation

confirming your identity. We will respond within 20 business days.

6. Cookies and similar technologies

If our website uses cookies or other tracking technologies, this will be disclosed specifically

on the site itself.

7. Changes to this notice

We reserve the right to update this Privacy Notice. Any changes will be posted on our

website www.catenalogistica.com or communicated directly through the contact information

we have on file.

Last updated: August 2026

Approved by: General Management — CATENA Logística, S.A. de C.V.