Privacy Notice / Aviso de Privacidad

Vault Global Solutions (Vault) is operated by VETERAN GLOBAL SOLUTIONS MX, S.A.S. de C.V., a company organized under the laws of Mexico.

For personal data that Vault determines the purposes and means of processing, VETERAN GLOBAL SOLUTIONS MX, S.A.S. de C.V. acts as the data controller (Controller).

Registered address: Calle Melchor Ocampo, Lote 21, Colonia Lomas de San Antonio, San Antonio de las Minas, Ensenada, Baja California, C.P. 22766, Mexico.

Website: https://vaultglobalsolutions.com

Privacy contact: info@vaultglobalsolutions.net

This Privacy Notice describes the personal data processing activities for which Vault is responsible in connection with its Website, inquiries, and services.

Independent financial-service providers may act as separate data controllers for activities they independently determine and administer. Their processing practices are addressed in their respective privacy notices.

Depending on your interaction with Vault, we may process the following categories of information:

Contact and identification information: Name, email address, telephone number, country or location information, and details voluntarily provided through contact or inquiry forms.

Business information: Company name, professional role, business contact information, and details submitted in connection with business inquiries or partnership requests.

Membership and account information: Information necessary to administer membership enrollment, account access, customer communications, and related contractual records, where those activities are operated by Vault.

Transaction administration information: Limited transaction references, payment status, invoicing information, or service-related records when necessary for Vault's own contractual, accounting, support, or compliance responsibilities.

Technical and usage information: IP address, browser and device characteristics, page interactions, language preferences, security logs, and information obtained through cookies or similar technologies, to the extent those technologies are used.

Correspondence: Information included in customer-support requests, complaints, and communications with Vault.

The categories actually collected depend on the functionality used.

Vault does not represent that it independently collects, controls, or stores all identification records, banking credentials, card details, digital asset keys, or other information processed by independent service providers.

Where sensitive personal data is collected directly by Vault, the applicable purpose and consent requirements will be separately disclosed as required by law.

Vault processes applicable personal data for purposes associated with legitimate Website and platform operations, including: responding to questions, requests, and business inquiries; communicating about services requested by the individual; managing Website security and preventing unauthorized or fraudulent activity; maintaining relevant customer and contractual records; administering membership-related processes where Vault is responsible; providing support and resolving complaints; maintaining records required by applicable legal, accounting, or regulatory obligations; and operating, troubleshooting, and improving Website functionality.

Where implemented and permitted, Vault may also process contact information for promotional communications or nonessential analytics. Those purposes will be distinguished from processing necessary to provide a requested service, and applicable choices and consent requirements will be respected.

Certain services accessible through Vault may be delivered by independent financial institutions, payment service providers, card program participants, digital asset service providers, or other specialized third parties.

Those providers may collect and process personal information directly for identity verification, eligibility assessment, payment execution, transaction monitoring, security, and other purposes under their own legal responsibilities.

Vault's Privacy Notice does not replace the privacy notices of such providers.

Where Vault shares personal data with a provider, the disclosure must have an appropriate legal basis, serve a disclosed purpose, and comply with applicable consent and transfer requirements.

Vault may engage technology, hosting, communications, security, support, and other operational service providers to perform services on its behalf.

Such providers must be subject to appropriate confidentiality, security, and data-processing obligations.

Where personal data is transferred internationally or disclosed to another controller, Vault will comply with applicable Mexican legal requirements and relevant protections.

Information will not be disclosed for unrelated commercial purposes without an appropriate legal basis or required authorization.

Vault will maintain appropriate administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, alteration, disclosure, loss, and misuse.

Security measures will be assessed in light of the nature and sensitivity of the information processed and the risks associated with the relevant activities.

No electronic transmission or information system is completely free from risk.

Where a security incident triggers a legal notification obligation, Vault will provide the required notice in accordance with applicable law.

Vault will retain personal data only for the period reasonably necessary to fulfill the purposes described in this Notice or to comply with applicable legal, contractual, accounting, security, or dispute-resolution obligations.

Where continued retention is no longer justified, information will be deleted, anonymized, or otherwise handled in accordance with applicable law.

Retention periods may differ according to the category of information and applicable requirements.

Under applicable Mexican data protection law, individuals may exercise their rights of:

Access: Learn whether and how their personal information is processed.

Rectification: Request correction of inaccurate or incomplete information.

Cancellation: Request cancellation of personal information where legally appropriate.

Opposition: Object to certain processing activities as permitted by law.

These are commonly referred to as ARCO rights.

Individuals may also request information about mechanisms for withdrawing consent or limiting the use or disclosure of their information, where applicable.

Requests may be submitted to Vault using its designated privacy contact:

Privacy email: info@vaultglobalsolutions.net

A request should identify the individual, explain the right being exercised, and provide sufficient information to locate the relevant records and verify identity or authorized representation.

Vault will evaluate and respond to requests within the periods and procedures established by applicable law.

The exercise of rights is subject to legally recognized exceptions, including circumstances where information must be retained to satisfy an applicable obligation.

When Vault sends promotional electronic communications, recipients will be provided with an appropriate method for requesting that such communications cease.

Withdrawal from optional marketing communications will not, by itself, prevent necessary service, security, legal, or transactional communications.

Vault uses browser language-preference storage and makes third-party font requests as described in its separate Cookie Notice.

The Cookie Notice explains applicable categories, purposes, browser controls, and any available preference-management mechanisms.

Where these technologies process identifiable personal information, the applicable data protection obligations also apply.

Vault may revise this Privacy Notice to reflect changes in its services, information practices, or legal requirements.

Updated versions will be made available through the Website.

Where additional notice or consent is legally required, Vault will take the necessary steps before applying the relevant change.

Nothing in this Privacy Notice limits rights provided by mandatory applicable data protection legislation.

Individuals may pursue available procedures before the competent authority in accordance with applicable law.