PRIVACY POLICY – CIP (Center for Innovation and Prototyping)

Effective Date: December 5, 2025

CIP (Center for Innovation and Prototyping), including its affiliates, subsidiaries, and related operating entities (“CIP,” “we,” “us,” or “our”), is committed to protecting the privacy and integrity of personal information. This Privacy Policy explains how CIP collects, uses, stores, shares, transfers, and protects personal data in all regions where we operate, including Mexico, the United States, the European Union, and other international jurisdictions.

By accessing our website, communicating with CIP, or using any of our engineering, automation, integration, or manufacturing services, you acknowledge and agree to the terms set forth in this Privacy Policy.


1. SCOPE OF THIS POLICY

This Privacy Policy applies to all persons who:

• Visit CIP’s websites or digital platforms

• Communicate with us electronically or in person

• Request quotes, proposals, engineering services, or automation solutions

• Participate in projects, evaluations, testing, or product integrations

• Provide information through forms, email, or business interactions

This Policy covers all personal data collected globally.


2. INFORMATION WE COLLECT

CIP may collect the following categories of information:

2.1 Information you provide voluntarily

• Name, job title, company information

• Email address, phone number, and communication preferences

• Technical documentation, RFQs, project data, blueprints, specifications

• Billing and payment information (if applicable)

• Login credentials if accessing restricted systems

2.2 Information collected automatically

When interacting with our website, CIP may collect:

• IP address and approximate geolocation

• Browser type, device identifiers, operating system

• Referral URLs, session duration, pages visited, and navigation patterns

• Cookies, analytics tags, and similar tracking tools

2.3 Information from third parties

We may receive personal or business-related information from:

• Suppliers, engineering partners, integrators, or subcontractors

• Public databases or professional directories

• Government records for compliance purposes

• Third-party analytics or Customer Relationship Management (CRM) tools


3. HOW WE USE YOUR INFORMATION

CIP processes personal data for legitimate business and operational purposes, including:

• Responding to technical inquiries, RFQs, proposals, and service requests

• Designing, developing, and delivering automation projects

• Assessing feasibility, design, integration, and quality assurance

• Administering contracts, service agreements, and compliance obligations

• Sending operational notices, service updates, or technical alerts

• Improving our website, analytics, and user experience

• Preventing fraud, cybersecurity threats, and unauthorized activities

• Complying with global regulatory requirements

CIP Does NOT sell personal information


4. LEGAL BASIS FOR PROCESSING (GDPR)

For residents of the European Economic Area (EEA) and the United Kingdom, CIP processes personal data based on:

• Consent

• Contractual necessity

• Compliance with legal obligations

• Legitimate interests, including engineering operations, security, analytics, and customer service


5. SHARING AND DISCLOSURE OF INFORMATION

CIP may disclose personal data to:

5.1 Service providers

Including IT hosting, cloud storage, analytics providers, automation partners, engineering subcontractors, and security providers.

5.2 Business partners

When collaboration is necessary to meet project requirements or design specifications.

5.3 Legal and regulatory authorities

When required to comply with the law, enforce agreements, or protect the rights of CIP.

5.4 Corporate transactions

In cases of mergers, acquisitions, reorganizations, asset transfers, or due diligence activities.

All third parties must handle data confidentially and solely for authorized purposes.


6. INTERNATIONAL DATA TRANSFER

Personal data may be transferred to jurisdictions outside of your country, including Mexico, the United States, and the European Union.

CIP ensures appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs) in accordance with the GDPR

• Data processing agreements

• Security frameworks that comply with international standards


7. DATA SECURITY

CIP applies administrative, technical, and physical controls to protect personal information, including:

• Data encryption in transit

• Restricted access to confidential information

• Network and infrastructure monitoring

• Secure storage and controlled access environments

Although CIP implements robust measures, no system can guarantee absolute protection.


8. DATA RETENTION

We retain personal data only for:

• The time necessary to complete engineering services or projects

• Compliance with legal, financial, or regulatory obligations

• Maintaining client relationships or fulfilling warranties

When data retention is no longer necessary, it will be securely deleted or anonymized.


9. YOUR PRIVACY RIGHTS

Depending on your location, you may exercise:

9.1 México (LFPDPPP)

• ARCO Rights: Access, Rectification, Cancellation, and Opposition

• Withdrawal of consent

9.2 European Union / United Kingdom (GDPR)

• Access, correction, deletion, restriction, and objection

• Data portability

• Right not to be subject to automated decision-making

9.3 United States (including CCPA/CPRA)

• Right to know what information is collected

• Right to request deletion

• Right to know how it is shared or disclosed

• Right to opt-out of sale or sharing (CIP does not sell data)

• Right to non-discrimination

9.4 How to exercise your rights

Requests may be submitted using the contact information in Section 14. CIP may require identity verification.


10. COOKIES AND TRACKING TECHNOLOGIES

CIP uses cookies and analytical tools to:

• Improve website functionality

• Analyze usage patterns

• Optimize navigation and user experience

You can manage cookie preferences from your browser. Some features may not operate correctly if they are disabled.


11. “DO NOT TRACK” DISCLOSURE

CIP does not respond to “Do Not Track” (DNT) signals, as no uniform standard exists.

However, users can manage tracking preferences through browser settings.


12. CHILDREN’S PRIVACY

CIP does not intentionally collect information from children under 16 years of age.

If such information is detected, it will be deleted upon verification.


13. LINKS TO EXTERNAL SITES

Our site may include links to third-party sites. CIP is not responsible for the content, privacy practices, or security of those external sites.


14. CONTACT INFORMATION

To exercise your privacy rights, submit a request, or ask questions about this Policy:

CIP –Center for Innovation and Prototyping

Hermosillo, Sonora, México

Email: sales@cipsonora.com


15. CHANGES TO THIS PRIVACY POLICY

CIP may update this Policy periodically. Any modifications will be published on this page with a revised effective date.

Continued use of our website or services constitutes acceptance of the changes.


16. CONTACT INFORMATION (Duplicate in original)

If you have questions about this Privacy Policy or wish to exercise your data rights, please submit a request or contact:

CIP –Center for Innovation and Prototyping

Hermosillo, Sonora, México

Email: sales@cipsonora.com