Privacy Policy and Data Protection

HH INTEGRA RH, S.C. · Version 1.0 · effective July 20, 2026

This is a courtesy translation of the official Spanish document. In case of any discrepancy, the Spanish version prevails.

1. Our commitment to privacy

At HHintegra we recognize the importance of protecting the personal and confidential information of our customers, users and employees.

Our platform has been designed to facilitate the comprehensive management and administration of human capital, so we process information related to employees, candidates, suppliers and representatives of our customers. Consequently, we have implemented administrative, technical and organizational measures aimed at safeguarding the confidentiality, integrity and availability of the information in our custody.

HHintegra is committed to using personal data only for the purposes authorized by our customers and in accordance with applicable personal data protection law.

2. Data controller

HH INTEGRA RH, S.C. (hereinafter, "HHintegra") is responsible for the processing of the personal data obtained through the technology platform and the services related to human resources administration.

3. Information we collect

To provide our services we may collect, store and process information provided directly by our customers or users, including:

Identification data

  • Full name
  • Date of birth
  • CURP
  • RFC
  • Employee number
  • Electronic signature or digitized handwritten signature
  • Photographs

Contact data

  • Email address
  • Telephone number
  • Address

Employment data

  • Job title
  • Area or department
  • Employment history
  • Performance evaluations
  • Training
  • Attendance
  • Vacation
  • Incidents
  • Contractual information

Financial and salary data

  • Salaries
  • Compensation
  • Benefits
  • Bank information for payment disbursement
  • Deductions and earnings

Technical information

When the user uses the platform, we may collect:

  • IP address
  • Browser type
  • Operating system
  • Device used
  • Date and time of access
  • Activity logs within the platform

4. Purposes of data processing

The information collected will be used for the following purposes:

Primary purposes

  • Manage user accounts
  • Manage digital personnel files
  • Control incidents, vacations, leave and absences
  • Manage performance evaluations
  • Facilitate recruitment and selection processes
  • Generate operational and administrative reports
  • Provide technical support
  • Ensure information security
  • Comply with legal, labor and tax obligations

Secondary purposes

  • Generate aggregated and anonymous statistics
  • Conduct satisfaction surveys
  • Improve platform features
  • Inform about updates, improvements or new services

Users may request that the use of their data for secondary purposes be limited where applicable.

5. Legal basis and authorization

Personal data will be processed only when there is a legal basis allowing it, including:

  • Consent of the data subject
  • Contractual relationship with our customers
  • Compliance with legal obligations
  • Legitimate interest related to the operation of the contracted services

Our customers are responsible for having the corresponding authorizations and privacy notices regarding the personal data of their employees that is entered into the platform.

6. Confidentiality of information

HHintegra recognizes that much of the information managed within the platform is confidential in nature.

Therefore:

  • We do not use our customers' information for purposes other than those authorized
  • We do not sell personal information or databases
  • All of our personnel are subject to confidentiality obligations
  • Access to information is limited according to profiles, roles and operational needs

7. Transfer of information

HHintegra may share information only in the following cases:

Service providers

With technology providers that take part in:

  • Hosting services
  • Cloud infrastructure
  • Information backup
  • IT security
  • Payment processing

These providers will be contractually bound to keep the information confidential.

Legal requirements

When there is a legal obligation, a court order or a requirement issued by a competent authority.

Corporate transactions

In the event of a merger, acquisition, reorganization or sale of the company's assets, taking the necessary measures to ensure the continued protection of the data.

8. Use of cookies and similar technologies

The platform may use cookies, session identifiers and similar technologies to:

  • Keep sessions active
  • Improve the user experience
  • Analyze how the platform works
  • Identify security incidents
  • Generate usage statistics.

Users may configure their browser to limit or block such technologies, bearing in mind that some features may be affected.

9. Information security

HHintegra implements reasonable security measures appropriate to the nature of the information processed, including:

  • Encryption of sensitive information
  • Secure connections (SSL/TLS)
  • Role-based access controls
  • User authentication
  • Access monitoring
  • Backups
  • Vulnerability management
  • Internal security and confidentiality policies

However, no technology system is absolutely infallible; therefore, although we implement robust controls, we cannot guarantee absolute security against external events or unlawful acts of third parties.

10. ARCO rights

Data subjects may exercise the rights of:

  • Access
  • Rectification
  • Cancellation
  • Opposition

They may also revoke their consent when legally appropriate. Requests must be sent to the email address designated by HHintegra for privacy matters.

11. Retention of information

The information will be kept for the time necessary to comply with:

  • The purposes described
  • Contractual obligations
  • Legal and tax requirements
  • Backup, audit and security needs

Once those periods have ended, the information will be deleted or anonymized in accordance with the applicable internal procedures.

12. Minors

The platform is not directed at minors. If a customer registers information related to minors for permitted labor or legal reasons, it will be the customer's responsibility to have the corresponding authorizations.

13. Changes to this policy

HHintegra may update this Privacy Policy when necessary to:

  • Comply with regulatory changes
  • Incorporate new features
  • Improve security processes
  • Adapt to new operational needs

Changes will be published within the platform or communicated through the channels established for the relationship with our customers.

14. Contact

For any questions about this Privacy Policy or the processing of personal data, users may contact HHintegra through the official support channels established by the company.