Version 0.6 | Last updated: September 23, 2026

This notice explains how Avanza Solar collects, uses, retains, shares and deletes personal data obtained through its website, WhatsApp and the WAB automated assistant, and how individuals may exercise their rights.

1 Identity and address of the controller

Luis Miguel Macias Delgado, an individual operating commercially under the name Avanza Solar, is responsible for the processing of personal data described in this notice.

Address: Libramiento Chapala-Ajijic 399, Coto Luna, Unit 15, Chapala, Jalisco 45922, Mexico.

Privacy contact: info@avanzasolar.mx

Website: https://www.avanzasolar.mx

2 Personal data processed

Depending on the inquiry, service or project stage, Avanza Solar may process the following categories of data:

• Identification and contact data, such as name, telephone number, WhatsApp identifier, email address and locality.

• Property, electricity service and project data, such as location, service address when necessary, property type, electricity use, rate, service characteristics, loads, energy needs and contact preferences.

• Documents and files provided to analyze, quote, carry out or follow up on a project or procedure, including complete electricity bills, photographs, voice notes and technical data. A bill may display the account holder's name, service address, service or RPU number, meter, rate, billing periods, consumption history, amounts, balance and other identifiers.

• Conversation content, including requests, messages, automated or human responses and attachments.

• Technical and operational data, such as message identifiers, date and time, delivery or read status, sender identifier, processing attempts, errors and records needed to prevent duplicates, maintain continuity and protect the service.

• Assistance and follow-up data, such as inquiry type, stage, pending information and transfer to authorized personnel.

• Data needed to locate a record and proportionately verify identity when privacy rights are exercised.

Before requesting a complete bill or another document containing amounts, balances or comparable economic information, Avanza Solar will explain the purpose and request an express, recordable confirmation where required. WAB does not request passwords, PINs, authentication codes or complete payment card or bank account information.

3 Sensitive personal data and minors

Avanza Solar does not request or require sensitive personal data for ordinary assistance through WAB. Individuals should not send health information, racial or ethnic origin, genetic information, religious, philosophical or moral beliefs, political opinions, sexual preference, biometric data or other intimate information that is not necessary for the requested assistance.

If unsolicited sensitive information is received incidentally, WAB and personnel will not request further details or use it to qualify, quote or conduct commercial follow-up. Access and processing will be restricted, and Avanza Solar will seek to delete or de-identify it as soon as reasonably possible, unless a legal obligation or a specifically disclosed and authorized legitimate purpose requires otherwise.

WAB is not directed to minors. If a conversation is identified as involving a minor, automation will be limited and an adult responsible person may be requested where necessary.

4 Primary purposes

Personal data will be processed for the following necessary purposes:

• Receive, identify and respond to inquiries submitted through the website or WhatsApp.

• Provide information about solar energy solutions, services and projects.

• Analyze consumption, electricity service, properties and needs to provide guidance, design or prepare quotations.

• Prepare and follow up on requested quotations, visits, services, projects, warranties, CFE procedures and commercial relationships.

• Maintain continuity, prevent duplicate responses and determine when authorized personnel should intervene.

• Maintain the security, integrity, traceability and technical operation of the channel.

• Handle privacy requests, questions, complaints and legal obligations.

5 Secondary purposes

Only after a prior, specific and recordable opt-in may contact data be used for promotions, news or commercial follow-up that is not necessary to answer the initial inquiry. Refusal will not affect the requested assistance. An individual may withdraw this opt-in or request that messages stop by writing to info@avanzasolar.mx or replying STOP, UNSUBSCRIBE or an equivalent instruction.

6 Automation and human assistance

WAB may analyze messages, retrieve authorized information, generate responses and determine whether a conversation should be transferred to authorized personnel. Artificial intelligence services may be used for this purpose.

WAB does not enter into contracts, establish final prices or independently make decisions that produce legal effects or significantly affect an individual. Quotations, commitments and decisions requiring review will be confirmed by authorized personnel.

Transferring a conversation to a person does not expand the data that may be requested or the authorized purposes. Commercial, technical and administrative personnel are subject to the same necessity, confidentiality and data minimization limits that apply to WAB.

An individual may request human assistance at any time, subject to available scope and service hours.

7 Technology providers and processing outside Mexico

Avanza Solar uses providers to operate its website and WhatsApp channel. They may process data on behalf of Avanza Solar or under their applicable terms:

• Meta Platforms and WhatsApp, to receive, send and manage messages.

• Wix, for hosting, backend functions, databases and operational records.

• OpenAI, for the automated processing needed to generate WAB responses.

• Technical or professional providers needed to operate, protect or maintain the service, subject to confidentiality and data protection obligations.

Some providers may process information using infrastructure located outside Mexico. Avanza Solar will seek to transmit only the information needed for the purposes described, document the applicable conditions and process valid requests across the relevant systems and providers. Data may be disclosed to competent authorities where there is a legal obligation or a duly supported request.

Avanza Solar does not sell personal data.

8 Retention and deletion

WAB conversations and technical or operational records under Avanza Solar's control may be retained for up to 180 days from creation for continuity, security, traceability and assistance. They will then be deleted or de-identified unless they must be added to a record or a documented legal reason requires longer retention.

Bills, photographs and other documents will be retained only while needed for the relevant inquiry, quotation, service, project or procedure. If the relationship continues, necessary information may be added to the applicable record and retained for the relevant legal, contractual, tax or administrative periods.

Unsolicited sensitive information will be restricted and Avanza Solar will seek to delete or de-identify it as soon as reasonably possible. Providers may apply their own technical retention periods under their terms.

Where cancellation applies, data may remain blocked only for the period needed to address liabilities arising from the processing before deletion.

9 Security and confidentiality

Avanza Solar maintains reasonable administrative, technical and physical measures to reduce the risk of loss, alteration, destruction, unauthorized use, access or processing. Access is limited to personnel and providers who need it for the purposes described and who must maintain confidentiality.

No system can guarantee absolute security. If a breach significantly affects an individual's rights, the notifications required by applicable law will be made.

10 Data protection rights

An individual may request access to, correction or deletion of personal data, or object to its processing. An individual may also request restrictions on use or disclosure and, where applicable, withdraw consent. Luis Miguel Macias Delgado is the person designated to handle these requests.

A request must be sent to info@avanzasolar.mx with the subject Data Rights or Data Deletion and include:

• The individual's name and a means of receiving notices.

• Sufficient information to verify identity and, where applicable, legal representation.

• A clear description of the data involved and the right being exercised.

• The telephone number associated with WhatsApp or other information that allows the data to be located.

• Any additional information that may facilitate the search.

Avanza Solar will communicate its decision within the applicable legal period, currently up to twenty business days after receiving a complete request. If approved, the measure will be implemented within the following fifteen business days. These periods may be extended once where justified by the circumstances and permitted by applicable law.

11 Data deletion request

To request deletion of information associated with the website, WhatsApp or WAB, the individual must:

1.  Email info@avanzasolar.mx with the subject WAB Data Deletion.

2.  Provide a name, the telephone number linked to WhatsApp and a description of the information to be deleted.

3.  Respond, when necessary, to a reasonable identity verification intended to prevent unauthorized deletion of another person's information.

When the request is valid, data that can be located in systems under Avanza Solar's control will be deleted or de-identified and the result will be communicated. Certain information may remain blocked where necessary to comply with legal, contractual, tax or security obligations or to address claims and liabilities.

12 Withdrawal and restriction

An individual may withdraw consent or restrict the use or disclosure of personal data through the same email address and procedure described for data protection rights. Withdrawal is not retroactive and may not apply when processing is necessary to comply with a legal obligation or an existing legal relationship.

13 Changes to this notice

Changes to this notice will be published at https://www.avanzasolar.mx/aviso-de-privacidad. The version available at that address will state its last update date. Where a change requires new consent, it will be requested before the new purpose is applied.

14 Applicable law

This notice is governed by the laws in force in the United Mexican States, including the Federal Law on Protection of Personal Data Held by Private Parties and other applicable provisions. Individuals retain the right to contact the competent Mexican data protection authority.