Privacy Policy (Business)

This document contains the manner in which we will process the Personal Data we obtain, in compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, and the Guidelines for the Privacy Notice (the "Privacy Notice").

Pier 5, S.A. de C.V. ("The Company") is a company incorporated under the laws of the United Mexican States ("Mexico"), and will be the party responsible for the processing of Personal Data. Any individual (the "Data Subject"), acting on behalf of a legal entity, from whom data that identifies or makes them identifiable is obtained ("Personal Data"), shall be the owner of such Personal Data. For purposes hereof, the Data Subject shall be the person who is a client of The Company under its Business product.

For purposes of this Privacy Notice, our address is located at Paseo de la Reforma 296, piso 14, suite 1400, Colonia Juárez, Alcaldía Cuauhtémoc, C.P. 06600, Ciudad de México, México, and our electronic address is business.support@arqfinance.com, or through the chat feature on the Platform, during business hours from 9:00 to 17:00 (GMT-6 / Mexico City), Monday through Friday.

The Company will operate through the website https://business.arqfinance.com, its subdomains, the mobile application, and all current or future web pages and platforms owned by The Company (the "Platform").

1. Personal Data We Collect

The Company may collect the following identification and contact Personal Data for processing:

  • First surname, second surname, and given name(s);

  • Gender;

  • Marital status;

  • Date of birth;

  • Country and/or state of birth;

  • Nationality;

  • Address;

  • Occupation, business activity, or trade;

  • Signature;

  • Biometric data such as the fingerprint or face of the Data Subject;

  • Geolocation of the mobile device from which transactions are carried out in accordance with the Platform Terms and Conditions ("Business");

  • Phone number; and

  • Email address.

The Company may request the following financial data for processing:

  • Account number and Standardized Bank Code (CLABE).

The Company may request documents containing Personal Data, such as: (i) official identification; (ii) unique population registration record or equivalent; (iii) proof of address; (iv) tax status certificate or equivalent; (v) documents proving the legal existence of a legal entity; (vi) documents proving representation of a person; (vii) documents proving marital status; and (viii) bank statements.

The Company will not request sensitive data. The Company will not request data from minors; its products and services are intended solely for adults. Any data obtained from minors will be recorded for security purposes and denial of service.

Notwithstanding the foregoing, The Company may, if necessary, notify the Data Subject to provide additional Personal Data.

2. Purposes of Processing

a. Primary Purposes

The Company will use the Data Subject's data for the following purposes:

  • Registration and contact.

  • Providing information, guidance, and assistance regarding its products and services.

  • Maintaining continuity of any contracted product or service.

  • Enabling the sound and improved development of business on the Platform.

  • Processing settlement of ordered transactions.

  • Complying with applicable regulations.

  • Ensuring security in transactions intended to be carried out.

  • Customer service.

b. Secondary Purposes

In addition to the purposes listed above, The Company will process data for:

  • Sending information about offers, promotions, discounts, and newsletters.

  • Detection and prevention of crimes.

  • Analysis and statistics.

  • Quality and satisfaction surveys.

3. Transfer of Data

a. Transfers and Parties

In order to provide better service, The Company may transfer the collected Personal Data to its suppliers related to the contracted service, and for the processing of transaction orders to be carried out, in accordance with the Platform Terms and Conditions ("Business").

Additionally, the Data Subject is hereby informed that The Company will transfer Personal Data to the relevant authorities that require it, namely the Ministry of Finance and Public Credit (Secretaria de Hacienda y Credito Publico) and the Financial Intelligence Unit (Unidad de Inteligencia Financiera), for the purposes of prevention and detection of transactions involving proceeds of illicit origin.

Solely for the purposes set forth herein, The Company may transfer Personal Data to its parent companies, affiliates, subsidiaries, and related companies.

If the Data Subject objects to the transfer of their Personal Data under the terms stated above, they must send an email to business.support@arqfinance.com, with the subject line "Transfer Objection", requesting the revocation of consent and indicating the reasons and terms of the objection. Once the email is sent, we will respond within 20 (twenty) calendar days from the date we received it.

The Company reserves the right to deny a commercial relationship to persons who object to the transfer of their Personal Data, whenever such data is necessary or related to the delivery or provision of the relevant products and services.

4. ARCO Rights

a. ARCO

The Company hereby informs the Data Subject of their rights with respect to their Personal Data:

  • Access: To know what data The Company holds, for what purposes it is used, and how it is processed.

  • Rectification: To request correction of their data if it is outdated, inaccurate, or incomplete.

  • Cancellation: To delete or suppress their data, after blocking it, by The Company or any third party to whom it has been transferred.

  • Opposition: To disagree with the processing of their data.

The Company reserves the right to deny or cease delivering or providing its products and services to persons who cancel or object to the processing of their Personal Data, whenever such data is necessary in accordance with the stated purposes.

b. Exercise of Rights

If the Data Subject intends to exercise any of these rights, they must send an email to business.support@arqfinance.com, with the subject line "ARCO", requesting what is appropriate to their right, specifying the data in question, and indicating the reasons and terms of the right to be exercised.

To exercise their rights, the Data Subject must demonstrate within the email: (i) that they are the owner or representative of the owner of the data in question, stating their full name and attaching a valid official identification; (ii) a clear and precise description of the data in question; (iii) the right they intend to exercise and the desired effects; (iv) evidence or documents that allow for better identification of the data; and (v) a statement of the reasons motivating the exercise of their right.

Once the email is sent, we will respond within 20 (twenty) calendar days from the date we received it. If additional information is needed, The Company will notify the Data Subject, who will have 5 (five) calendar days to fulfill any requirements. Once satisfied, The Company will have 15 (fifteen) days to carry out the corresponding actions and provide proof thereof.

Valid official identifications and documents proving representation shall be those indicated by the Fiscal Miscellaneous Resolution in effect at the time of the last update of this Privacy Notice.

5. Cookies and Beacons

The Company may use cookies or beacons to manage Personal Data or the interactivity of the Platform in order to provide better service.

At this time, The Company does not use cookies or beacons to process Personal Data. If applicable, The Company will allow the Data Subject to manage them and will update this Privacy Notice accordingly.

6. Security

The security of the Data Subject's Personal Data is very important to The Company, and we have implemented the necessary technical and administrative measures to best fulfill the obligations under our responsibility.

The Company will refrain from hiring or transferring Personal Data to parties that do not have an adequate level of compliance in this area, or that do not commit to achieving it and to protecting and safeguarding all information.

The Company may pseudonymize Personal Data to fulfill some of the purposes set forth in the processing. On occasion, we will retain Personal Data even after the exercise of ARCO rights in order to comply with applicable and current legislation.

The Company shall not be liable for damages caused by the fault or negligence of the Data Subject.

7. Miscellaneous

a. Acceptance

The Data Subject expressly acknowledges that, by registering on the Platform, they accept and agree to the processing of their Personal Data in accordance with this Privacy Notice.

b. Modifications

The Company reserves the right to make any modifications or, if applicable, to add new provisions or replace this Privacy Notice by publishing the updated privacy notice on the Platform. Any modification, addition, or replacement will take effect upon publication.

c. Availability

This Privacy Notice will always be available for the Data Subject's consultation on the Platform, at its offices, and at establishments where Personal Data is processed.

d. Headings and Titles

The headings of this Privacy Notice have been inserted solely for ease of reference and do not affect the meaning or interpretation of this Privacy Notice.

8. Applicable Law and Jurisdiction

The Company carries out its activities in the territory of Mexico, as well as where its jurisdiction is applicable, and does not guarantee that the content is appropriate or available for use in other jurisdictions.

If the Data Subject contacts The Company from a location outside the territory of Mexico, they do so at their own risk and are responsible for being aware of their rights under the laws applicable in Mexico.

This Privacy Notice and any activity related to the processing of the Data Subject's data are governed by the applicable laws of Mexico City, Mexico, without applying conflict of law principles to other legal systems, except where a special legal provision requires otherwise.

In the event of any dispute or claim arising from the interpretation of the Privacy Notice or the processing of their data, the Data Subject agrees to submit to the jurisdiction of the competent courts based in Mexico City, Mexico, expressly waiving any other jurisdiction that may apply by reason of their status, nationality, domicile, or any other factor.

The Data Subject, in the event of considering a breach, shall have the right to approach the National Institute for Transparency, Access to Information, and Personal Data Protection at https://home.inai.org.mx/.

Last updated: May 22, 2026