Comprehensive Privacy Notice

I. Identity and Address of the Controller

This Comprehensive Privacy Notice is issued by AYUDA Y SERVICIO ASOCIACION CIVIL, in compliance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and the Privacy Notice Guidelines issued by INAI. By registering, purchasing a ticket, or attending the FEARLESS CONGRESS 2026 event, you acknowledge having read, understood, and accepted the processing of your personal data under the terms described herein.

• Name / Legal entity: AYUDA Y SERVICIO ASOCIACION CIVIL
• RFC: ASE8707065B7
• Address: Guadalajara, Jalisco, Mexico
• Email: finance@fearlessmasculinity.com
• Website: https://fearlessmasculinity.com

Hereinafter referred to as "the Controller".

II. Personal Data Collected

The Controller collects the following categories of personal data:

2.1 Identification and contact data

• Full name
• Email address
• Phone number
• City and country of residence

2.2 Transaction data (processed by third parties)

Payment is processed by Stripe through the RegFox platform. The Controller does not store or have access to bank card data, accounts, or any financial data. Stripe has its own privacy policies available at stripe.com/privacy.

2.3 Sensitive data — Article 9 LFPDPPP

The Controller may collect, on a voluntary basis, information regarding the attendee's health status (for example, medical conditions relevant to participation in event dynamics or emergencies). Such data will be processed exclusively for safety and emergency-response purposes during the event, and will not be disclosed to third parties except by instruction of the data subject or requirement of a competent authority.

2.4 Image, voice, and likeness data (photographic, audiovisual, and intellectual-property use)

In accordance with Article 10 of the General Terms and Conditions of Participation for the event, the Controller will collect and process the following data:

• Photographic and/or video image of the attendee captured during the event.
• Attendee's voice captured in audio and/or video recordings made during the event.
• Testimonials, statements, or verbal or written contributions during dynamics and activities of the event.
• General geolocation data (city of origin) for statistical purposes.

The above is for the purposes described in Section III of this Notice. The attendee who does not wish their image or voice to be captured for promotional or outreach purposes must notify this in writing, before the start of the event, to: admin@fearlessmasculinity.com. The absence of such notification will imply the data subject's tacit consent to the processing of their image in accordance with this Notice.

III. Purposes of Processing

3.1 Primary purposes (necessary for the legal relationship)

• Management of registration, access, and attendance control for the FEARLESS CONGRESS 2026 event.
• Identity verification for access to the venue and/or livestream service.
• Sending purchase confirmations, electronic tickets, and operational event information.
• Handling requests, complaints, and clarifications related to the purchase or participation.
• Compliance with the Controller's tax, accounting, and legal obligations.
• Ensuring safety and medical emergency response during the event.

3.2 Secondary purposes (subject to additional consent)

The following purposes are not essential to the primary relationship, but allow the Controller to improve its services and maintain communication with the data subject:

• Sending communications about events, retreats, and future activities organized by the Controller or Fearless by AC.
• Statistical and attendee-profile analysis for planning future editions of the congress.
• Conducting satisfaction surveys and event impact studies.

If the data subject does not wish their data to be processed for secondary purposes, they may express this by sending an email to finance@fearlessmasculinity.com with "Objection to secondary purposes" in the subject line. Refusal will not affect participation in the event.

3.3 Purposes related to image, voice, and intellectual property

The Controller will process attendees' image, voice, and participation data for:

• Production of photographic and video content for institutional, promotional, and educational use on the Controller's digital and print media (social networks, website, event outreach materials).
• Event documentation for historical-archive and institutional-memory purposes of Fearless Congress and La Barranca — Centro Educativo, the beneficiary organization.
• Dissemination of the event's social impact to potential sponsors, institutional allies, and media.
• Production of video content for the Controller's digital platforms for formative, spiritual, and outreach purposes aligned with the event's values.

Under no circumstances will the attendee's image be used for commercial purposes, third-party advertising, or transferred to persons outside the Controller without the data subject's express consent.

IV. Transfers of Personal Data

The Controller may transfer personal data in the following cases:

• RegFox / Stripe — Registration and payment processing (no consent required; necessary for the contractual relationship).
• Competent authorities — Legal requirements, judicial or administrative orders (legal exception under Art. 37 LFPDPPP).
• Emergency medical services — Urgent care during the event (protection of the data subject's vital interests).
• La Barranca — Centro Educativo — Event impact and beneficiary reporting (aggregated statistical data, not individual).

The Controller does not commercialize or sell personal data to third parties for advertising or marketing purposes.

V. ARCO Rights and Exercise Mechanisms

In accordance with Articles 28 through 35 of the LFPDPPP, the data subject has the right to:

• Access: know what personal data the Controller holds, what it uses it for, and the conditions under which it is shared.
• Rectification: request the correction of inaccurate or incomplete personal data.
• Cancellation: request the deletion of personal data from processing, subject to legal grounds.
• Opposition: object to the processing of data for specific purposes.

To exercise any of these rights, the data subject must send a request to finance@fearlessmasculinity.com with the subject "Exercise of ARCO Rights", attaching:

• Full name and email address used to register for the event.
• A clear description of the right they wish to exercise and the reason.
• Copy of valid official identification.

The Controller will respond to the request within a maximum of 20 business days from its receipt, pursuant to Article 32 of the LFPDPPP. If the request is granted, the changes will be made within the following 15 business days.

VI. Use of Image, Voice, and Intellectual Property Rights

6.1 Capture of image and voice by the Controller

The attendee acknowledges and accepts that the Controller, through its production and photography team, will capture photographic, video, and audio images during the course of the event. This material may be used in the media and for the purposes described in Section III.3 of this Notice.

The attendee's image rights are limited under the terms of Articles 87 and 87-A of the Mexican Federal Copyright Law, and under the implied consent granted by the attendee upon entering the venue without having notified their objection in accordance with the procedure established herein.

6.2 Procedure for objecting to image use

The attendee who does not wish their image, voice, or testimony to be captured and used for promotional or institutional purposes must:

• Send an email to admin@fearlessmasculinity.com with the subject: "Objection to image use — FEARLESS 2026".
• Include their full name, ticket number, and a brief description of the objection.
• Submit such notification before the start of the first day of the event (April 17, 2026, 1:30 p.m.).

The Controller will take reasonable measures to respect such objection. However, at mass events, it is not possible to guarantee the complete exclusion of the data subject in wide-angle or group footage.

6.3 Intellectual property of content generated by the event

All content produced, presented, or exhibited during the event — including lectures, dynamics, talks, audiovisual material, music, presentations, and any other material — is the exclusive property of the Controller and/or the corresponding speakers or artists, protected by the Federal Copyright Law (LFDA) and other applicable legislation.

Attendees are strictly prohibited from recording, photographing for distribution, transmitting, reproducing, or commercializing, in whole or in part, such content, without the Controller's prior written authorization. Violation will entitle the Controller to pursue the corresponding civil and criminal actions under Articles 231 and 232 of the LFDA.

6.4 Content generated by the attendee

In the event that the attendee shares on social networks photographs or videos of a personal nature (not of conference content), such material will be understood to have been generated under their own responsibility. The attendee must obtain the consent of persons appearing in such materials, in accordance with the provisions of the LFPDPPP.

VII. Security Measures

The Controller has implemented administrative, technical, and physical security measures to protect personal data against damage, loss, alteration, destruction, unauthorized access, or unlawful use, in accordance with Article 19 of the LFPDPPP and best-practice data-protection standards. Third-party platforms (RegFox and Stripe) hold PCI DSS security certifications for the handling of financial information.

VIII. Retention Periods

Personal data will be retained for the following periods:

• Registration and transaction data: up to 5 years after the event, for tax and accounting obligations.
• Image and voice data for institutional/promotional purposes: indefinitely, unless the data subject exercises ARCO rights, provided there is no legal retention obligation.
• Medical emergency data: 1 year after the event, unless legally required otherwise.
• Data for secondary (marketing) communications: until the data subject expresses objection.

IX. Use of Cookies and Tracking Technologies

The website https://fearlessmasculinity.com and the RegFox platform use cookies and similar technologies to improve user experience, measure site performance, and manage the purchase process. The user may disable cookies through their browser settings, although this may affect the site's functionality. For more information, consult the RegFox cookie policy and your browser settings.

X. Changes to the Privacy Notice

The Controller reserves the right to update or modify this Privacy Notice at any time. Any substantial change will be notified through the official website https://fearlessmasculinity.com and/or by email to registered data subjects. The current version will always be available on the event website.

XI. Right to File Complaints with INAI

If the data subject believes that their right to personal data protection has been violated by any conduct or omission of the Controller, they may file a complaint or report with the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI), at www.inai.org.mx, or at its offices located at Insurgentes Sur 3211, Col. Insurgentes Cuicuilco, Coyoacán, Mexico City, postal code 04530.