Privacy Notice

Personal data we collect

Depending on how you interact with us (visiting the website, requesting information, or a purchase or investment process), we may collect the following categories of data:

Identification and contact data

Full name, phone number, email address, and country and city of residence.

Data for purchase and investment processes

Applicable to those interested in Retail Spaces, Operating Participation Points or Investment Packages: official ID, Mexican tax ID (RFC), address, billing details, financial or asset information needed to formalize contracts, and, where applicable, documentation required to comply with anti-money-laundering (AML) obligations.

Browsing data

IP address, browser type, pages visited, time on site and traffic source, collected through cookies and similar technologies (see section 6).

We do not collect sensitive personal data as part of our regular processes.

Purposes of processing

Primary purposes (necessary for our relationship with you)

• — To respond to requests for information about Point Tulum and its investment products
• — To provide commercial follow-up through our sales team
• — To prepare, formalize and follow up on purchase or participation agreements
• — To comply with legal, tax and regulatory obligations applicable to the project
• — To contact you via WhatsApp, email or phone regarding your purchase or investment process

Secondary purposes (these require your consent; you may decline without affecting the primary relationship)

• — Sending informational, promotional or project-update content
• — Invitations to events, launches or activities related to Point Tulum
• — Statistical purposes and improvement of our digital channels

If you do not want your data processed for secondary purposes, you can tell us by emailing Ventas@flamengodesarrollos.com with the subject line "No secondary purposes."

Data transfers

Your personal data may be shared with:

• — Service providers that support the project's operation (legal advisors, notaries, trustees, CRM and marketing platforms), solely for the purposes described here
• — Competent authorities, when legally required

We do not sell, rent or share your personal data with third parties for purposes other than those stated here, unless you expressly consent.

ARCO rights

You have the right to Access, Rectify, Cancel or Oppose (ARCO rights) the processing of your personal data, and to revoke your consent at any time.

To exercise these rights, send a request to Ventas@flamengodesarrollos.com that includes:

• — Your full name and contact details
• — A document proving your identity
• — A clear description of the right you wish to exercise
• — Any document that helps us locate your data

We will respond within a maximum of 20 business days, as established by law.

Use of cookies and tracking technologies

Our website uses cookies and similar technologies to improve your browsing experience, analyze site usage and personalize advertising on platforms such as Meta Ads, Google Ads and TikTok Ads. You can disable cookies in your browser settings; this may limit some site features.

Changes to this Privacy Notice

Point Tulum reserves the right to update this Privacy Notice at any time due to changes in legislation, our internal practices or the project itself. Any changes will be published on this page, with the date of the latest update.

Contact

For questions about this Privacy Notice or the processing of your personal data, you can contact us at:

• Email: Ventas@flamengodesarrollos.com
• — Address: Torre Avalanz, Batallón de San Patricio No. 109, Floor 10, Valle Oriente, ZIP 66278, San Pedro Garza García, Nuevo León, Mexico