Privacy Policy

1. Purposes for the Processing of Personal Data.

The personal data we collect will be used for the following purposes, which are necessary for the provision of our products and/or services:

• Create and manage User accounts on the platform.
• Manage reservations for Tourism Services.
• Process payments and issue tax receipts and invoices.
• Facilitate communication between Users and Service Providers.
• Provide customer support and assistance.
• Comply with legal and regulatory obligations.
  Additionally, we will use your personal information for the following secondary purposes, which are not necessary for the requested service, but which enable and facilitate providing you with better service and attention:
• Advertising notices.
• Commercial surveys.
• Sending commercial and advertising information via email, mobile phone communications and other electronic means.
• Sending offers, promotions, marketing materials or special events that may be of interest to the User.
• Informing Users about updates to Services.
• Improving commercial processes.
• Marketing and advertising activities.
• Offering extensions, upgrades or improvements to contracted services.
• Commercial prospecting activities.
• Conducting satisfaction surveys.
• Analyzing platform usage patterns in order to improve services.

Personal data may be collected through the Website, WhatsApp, electronic forms, or by any other electronic, telephone or similar means.

2. Transfer of Information.

Please be informed that your personal data may be transferred, both within and outside the national territory of Mexico, to third parties related to the operation, execution and fulfillment of the services offered by EV Epic Villas, whenever such transfer is necessary to fulfill the purposes of the requested service.

Such transfers may be made to:

• Tourism Service Providers or accommodations contracted by the User.
• Payment processors.
• Technology service providers and information hosting providers.
• Competent authorities when required by law.
• Technology service providers and digital infrastructure providers, including cloud hosting, information storage and data processing services.
• Electronic payment processing and management service providers.
• Cybersecurity, fraud prevention and identity verification service providers.
• Platforms or providers that facilitate communication between users and tourism service providers.
• Data analytics, web analytics and user experience improvement service providers.

In all cases, contractual and administrative measures shall be implemented to ensure the protection of personal data.

All transfers shall be carried out in accordance with Articles 36 and 37 of the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), and through contractual, administrative and legal mechanisms that ensure an adequate level of protection, confidentiality and security in the processing of your personal data.

3. Data Retention Period.

EV Epic Villas shall retain personal data for: (i) the period necessary to carry out the relevant activity or provide the applicable products and/or services; (ii) any retention period required under applicable law; or (iii) until the expiration of any period during which litigation, claims, audits, investigations or legal proceedings involving your personal data may arise.

When personal data is no longer necessary or relevant for the purposes described herein, it shall be securely deleted, destroyed or anonymized, as applicable and in accordance with applicable legal requirements.

4. Security Measures to Protect Your Personal Information.

The personal information provided by the User shall be treated under the highest standards of confidentiality and shall be protected through physical, technical and administrative security measures reasonably designed to prevent damage, loss, alteration, destruction, unauthorized use, access or disclosure.

Such measures have been implemented by EV Epic Villas in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), its Regulations, and other applicable legal provisions.

EV Epic Villas maintains an internal privacy policy, as well as ongoing training programs for its employees and collaborators regarding the proper processing and safeguarding of personal data.

Access to personal information is restricted exclusively to authorized personnel, based on previously established access profiles and under principles of necessity and proportionality. Likewise, the website through which personal information is collected is protected by an SSL (HTTPS) security certificate, which ensures that data transmissions are encrypted and carried out through secure communication channels.

5. Personal Data Collected.

For the fulfillment of the purposes described in this Privacy Notice, EV Epic Villas may collect and process personal data that is necessary, relevant and proportionate to its relationship with the User.

Such personal data may include, without limitation:

Identification Data:

• Full name.
• Nationality.
• Date of birth.
• Official identification document.

Contact Information:

• Email address.
• Telephone number.
• Address.

Billing Information:

• Federal Taxpayer Registry (Registro Federal de Contribuyentes – RFC).
• Tax address.
• Information necessary for the issuance of tax receipts and invoices.

Payment Information:

• Credit card or debit card information.
• Bank account information.
• Transaction history.

Reservation or Travel Information:

• Dates of stay.
• Number of guests.
• Accommodation preferences.
• Reservation history.

Browsing Information:
When the User interacts with EV Epic Villas’ digital platform, the following information may be collected:

• IP address.
• Browser type.
• Operating system.
• Browsing data collected through cookies or similar technologies.

EV Epic Villas states that it does not ordinarily collect or process Sensitive Personal Data.
Should the nature of a particular service make it strictly necessary to process Sensitive Personal Data, EV Epic Villas shall obtain the Data Subject’s prior express written consent in accordance with Article 9 of the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares).

6. ARCO Rights (Access, Rectification, Cancellation and Opposition).

As the Data Subject of your personal data, you have the right to:

• Access the personal data we hold about you and learn how it is used.
• Request the rectification of your information when it is inaccurate, incomplete or outdated.
• Request the cancellation of your personal data when you believe that its processing is improper or no longer necessary.
• Object to the processing of your personal data for specific purposes.

To exercise any of these rights, you must submit a request by email to the following contact:

Administrative Department

Email: info@epicvillas.com

Your request must include your full name, a clear description of the right you wish to exercise and, where applicable, documentation evidencing your identity or legal representation.

EV Epic Villas shall respond to your request within ten (10) calendar days following its receipt.

7. Revocation of Consent.

At any time, you may request the limitation of the use or disclosure of your personal data or revoke the consent granted for its processing.

However, you should be aware that, in certain cases, we may not be able to immediately comply with your request, as we may be legally required to continue processing certain personal data.

Likewise, the revocation of your consent may result in the inability to continue providing the requested services or maintaining the contractual relationship established with you.

The Data Subject may revoke the consent granted for the processing of personal data by submitting a request to the email address indicated in the preceding section.

8. Amendments to the Privacy Notice.

This Privacy Notice may be updated as a result of changes in legal requirements, internal policies or operational needs.

Any amendment or update shall be published on our Website at https://www.epicvillas.com or communicated through the email address provided by you.

9. Information Protection and Security.

EV Epic Villas implements technical, administrative and physical security measures designed to protect your personal data against damage, loss, alteration, destruction or unauthorized access.

10. Collection of Information.

As a User of the Website, you are not required to provide personal information in order to browse the Website.

This Website only collects information that is specifically and voluntarily provided by Clients.

11. Use of Cookies and Tracking Technologies.

EV Epic Villas’ digital platform may use cookies, web beacons and similar technologies for the following purposes:

• To remember User preferences.
• To analyze traffic on the Website.
• To improve the browsing experience.

Users may disable these technologies through their browser settings.

Last Updated: March 9, 2026

SIMPLIFIED PRIVACY NOTICE
LUEMER S.A. DE C.V. is responsible for the processing of personal data collected through its digital platform.
Personal data will be primarily used to:
Create and manage user accounts
Manage reservations for tourism services
Process payments
Provide customer support
Your data may be shared with tourism service providers, payment processors, and technology providers necessary for the operation of the platform.
You may consult the Comprehensive Privacy Notice and learn about the procedure to exercise your ARCO rights at:
https://www.epicvillas.com/privacy-policy/