Privacy Notice

In accordance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties, Estral Energy S. de R.L. de C.V. provides the following privacy notice.

Estral Energy S. de R.L. de C.V. is responsible for the use and protection of your personal data. Accordingly, and in compliance with the legal obligations established in the Federal Law on the Protection of Personal Data Held by Private Parties, this document informs data subjects of the information collected from them and the purposes for which it will be used.

In addition, we inform you that Estral Energy S. de R.L. de C.V. is located at:

Purposes of the data

The personal data we collect from you will be used for the following purposes: registration as a customer in Estral’s internal system; inquiry and registration of credit information with the national credit bureau; and compliance with quarterly REPSE filings—all necessary to carry out our operation and/or relationship with you, to execute any type of contract or agreement, and to fulfill the services and/or orders you request:

Name or business name, address, phone, purchasing contact, account statements, credit bureau status.

Personal data we use

To carry out the purposes described in this privacy notice, we will use the following personal data:

• Tax ID / RFC (proof of tax status)
• Articles of incorporation (legal entities)
• Government ID / INE (for individuals and, for legal entities, the legal representative’s)
• Proof of address
• Bank account statement
• Email address
• CFDI use (tax receipt)
• Payment method
• Payment form
• Authorization to query the national credit bureau
• Documents required under REPSE legislation (if providing specialized services)

Data transfer

We also inform you that your personal data will be shared with the following authorities, companies, organizations, or persons other than us:

• Credit Bureau
• IMSS (REPSE)
• INFONAVIT (REPSE)

Your information will be shared solely for the purposes described below:

Exchange of information with the credit bureau (credit history inquiry and behavior reporting).

The exchange of information with IMSS and INFONAVIT would occur through the quarterly filings to comply with REPSE legislation.

How we collect your data

For the purposes stated in this privacy notice, we may collect your personal data in various ways: when you provide it to us directly; when you visit our website or use our online services; and when we obtain information from other sources permitted by law. We collect your personal data directly when you provide it to us by various means, such as when you contact us or give us information so that we can provide a service. The data obtained this way may include, among others: your name, email address, country and city, tax data and documents, pages visited within our site, and information to improve your experience on our site such as screen resolution, browser, and operating system used.

ARCO Rights

At all times you have the right to know what personal data we hold about you, what we use it for, and the conditions of that use (Access). You also have the right to request the correction of your personal information if it is out of date, inaccurate, or incomplete (Rectification); the right to have your information removed from our records or databases when you believe it is not being used properly (Cancellation); and the right to object to the use of your personal data for specific purposes (Objection). These are known as ARCO rights.

To exercise any of the ARCO rights, the corresponding request must be submitted in writing, by sending a letter or free-format request to the following address:

The above will also serve to learn the procedure and requirements for exercising ARCO rights. However, the request to exercise these rights must contain the following information:

• Name
• Address
• Phone
• Email
• Signature

In any case, the response to the request will be given within 15 business days and communicated via the email provided for that purpose.

Personal Data Department

The contact details of the personal data department, which is in charge of processing ARCO rights requests, are as follows:

Revocation of consent

Please note that you may revoke your consent to the use of your personal data at any time. Likewise, you may revoke the consent you may have given us to process your personal data; however, you should consider that for certain purposes the revocation of your consent may mean that we can no longer provide the service you requested, or the termination of your relationship with us.

To revoke the consent you grant hereby, or to limit its disclosure, the corresponding request must be submitted in writing, by sending a letter or free-format request to the following address:

You may also request information about the procedure and requirements for revoking consent, as well as limiting the use and disclosure of your personal information; however, these requests must contain the following information:

• Name
• Address
• Phone
• Email
• Signature

The response to the request to revoke or limit the disclosure of your data will be given within no more than 15 business days and communicated via the email provided for this purpose.

Changes to the privacy notice

Estral Energy S. de R.L. de C.V. is committed to keeping you informed about any changes to this privacy notice; however, you may request information about whether it has changed via the following email address: juridico@estral.com.mx

Last updated: March 3, 2024.