Privacy policy

Last Updated: January 15, 2026

A. PARTY RESPONSIBLE FOR THE PROTECTION OF YOUR PERSONAL DATA

In accordance with the Federal Law on the Protection of Personal Data Held by Private Parties, its Regulations, and the Privacy Notice Guidelines (hereinafter, the “Law”), IUNOK TECH, S.A.P.I. de C.V., with its registered address at Puebla No. 277, Col. Roma Norte, Alcaldía Cuauhtémoc, C.P. 06700, Mexico City, Mexico (hereinafter, “IUNOK”), is the controller responsible for the processing of your personal data. IUNOK hereby makes this privacy notice (the “Privacy Notice”) available to visitors and buyers of the website https://iunok.com/, the mobile application “IUNOK” (collectively, the “Digital Channels”), and the IUNOK physical store.

Our objective is to ensure the legitimate, controlled, and informed processing of the personal data of visitors to our Digital Channels (“Visitors”), Visitors who create an account to purchase products or services, and individuals who visit or purchase items at our physical store (collectively, “Buyers”). We aim to guarantee your privacy and your right to informational self-determination. Your personal data will be processed at all times based on the principles of legality, consent, information, quality, purpose, loyalty, proportionality, and responsibility provided for in the Law.

B. PERSONAL DATA TO BE COLLECTED

For the purposes of this Privacy Notice, IUNOK will collect the following Personal Data:

A. From Visitors: The data collected during the use of Digital Channels consists of: (i) the IP (Internet Protocol) address of your device and the URL from which searches originate (whether on our Digital Channels or not), the subsequent URL accessed, browser type, pages visited, searches performed, posts made, commercial preferences, and messages published; and (ii) email and full name, only if you send us a query or question.

B. From Buyers and Users:

• Full name.
• Physical address.
• Email address.
• Telephone number.
• Federal Taxpayer Registry (RFC).
• Date of birth.
• Gender.
• Images, video, and voice (if visiting or purchasing at the IUNOK physical store).
• Information required for online payments.
• IP address and browsing behavior (as described for Visitors).

Sensitive Personal Data: IUNOK will collect the following Sensitive Personal Data from Buyers:

• 3D Facial Scan.
• Visual health data and medical prescriptions.

TrueDepth API Disclosure: The 3D facial scan is obtained using Apple’s TrueDepth API technology. This allows the capture of facial biometric information exclusively for product personalization, the creation of digital avatars, and the optimization of the user experience.

IUNOK does not use information obtained through the TrueDepth API for biometric identification related to security, authentication, surveillance, advertising, or any purpose other than those expressly stated in this Privacy Notice.

Data captured via the TrueDepth API is not shared with Apple or third parties (except as indicated herein) and is processed under strict technical, administrative, and physical security measures.

Data Retention: 3D Facial Scan data is stored temporarily with restricted access for production processes, recurring sales, warranty management, and legal compliance. This data will be stored for a period of up to seven (7) years, unless the data subject revokes their consent through their ARCO rights.

C. PURPOSES OF DATA PROCESSING

IUNOK processes Personal Data for the following primary purposes:

For Visitors:

• To consolidate the catalog of products and services offered via Digital Channels.
• To diagnose and resolve technical issues with Digital Channels.
• To communicate with you regarding your inquiries.
• To comply with laws, regulations, and internal policies.
• To create digital representations (avatars) and digital versions of the user's face via TrueDepth API for product fitting and visual optimization.

For Buyers:

The following purposes are necessary for the legal relationship between IUNOK and the Buyer:

• The sale, provision, and personalization of IUNOK products.
• Performing eye exams and issuing diagnoses (directly or via partners).
• Processing purchase requests, payments, and shipping.
• Managing warranties, returns, and customer service.
• Issuing tax invoices (CFDIs).
• Video surveillance in the physical store for the safety of visitors and prevention of theft.

Secondary Purposes (Marketing): If you do not object, IUNOK may use your data for:

• Advertising, promotions, and marketing.
• Analytical and statistical processes.
• Monitoring behavior to improve the browsing experience and offer personalized products.

You may opt out of these secondary purposes at any time by sending an email to the address listed in Section E.

D. DATA TRANSFERS

IUNOK may transfer Buyer data to third-party healthcare professionals for eye exams, diagnoses, and product personalization. We may also transfer data to competent authorities if required by law. These transfers do not require prior consent under the exceptions provided in the Law.

E. ARCO RIGHTS

You (or your legal representative) have the right to Access, Rectify, Cancel, or Oppose (ARCO rights) the processing of your Personal Data.

To exercise these rights, please send a written request to our Data Protection Department at: legal@iunok.com.

Your request must include: (i) full name of the data subject; (ii) address or email for the response; (iii) official ID; (iv) a clear description of the data involved and the right you wish to exercise; and (v) any other element that facilitates locating the data. We will respond within 20 business days.

F. REVOCATION OF CONSENT AND LIMITATION OF USE

You may revoke your consent for data processing at any time, provided it is not prevented by a legal obligation. To do so, follow the same procedure described in Section E. You may also register with the Public Registry to Avoid Advertising (REPECO) via PROFECO to limit the use of your data for marketing purposes.

G. USE OF TRACKING TECHNOLOGIES

Our Digital Channels use cookies and web beacons to collect your IP address (without identifying you personally).

You may disable these via your browser settings, though this may affect the functionality of our Digital Channels.

H. SECURITY MEASURES

IUNOK has implemented administrative, physical, and technical security measures to protect your data from loss, alteration, or unauthorized access. TrueDepth API information is processed securely and encrypted.

I. MODIFICATIONS

Any changes to this Privacy Notice will be published on our Digital Channels and will be available in printed form at our physical store.

J. BUYER CONSENT

In accordance with the Law, Buyers must provide express written consent for the processing of Sensitive Personal Data:

[ _ ] I consent to my Sensitive Personal Data being processed in accordance with this Privacy Notice. [ _ ] I do notconsent to my Sensitive Personal Data being processed in accordance with this Privacy Notice.

I acknowledge that if my Sensitive Personal Data cannot be processed, IUNOK may be unable to provide the products or services offered.

Name: _________________________________