COMPREHENSIVE PRIVACY NOTICE

Last updated: October 26, 2026

1. Identity and Address of the Data Controller

TRAC Worldwide, LLC., hereinafter referred to as “TRAC,” is responsible for the processing, protection, and use of the personal data it collects.

Contact addresses:

United States:
17654 Fordtran Blvd.
Industry, Texas 78944, United States.

Mexico:
Ave. Alfonso Reyes No. 2615, Suite 901,
Col. Del Paseo Residencial, ZIP Code 64920,
Monterrey, Nuevo León, Mexico.

Email address for personal data matters: info@tracww.com.

This Privacy Notice is issued in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and other applicable Mexican laws and regulations.

2. Scope

This Privacy Notice applies to the personal data of:

Users and visitors of TRAC’s website.
Individuals requesting information or quotations.
Prospective customers and business contacts.
Customers and their representatives.
Suppliers and their representatives.
Individuals who communicate with TRAC by email, telephone, digital forms, or social media.

Employee and job applicant data must be governed by separate privacy notices.

3. Personal Data Processed

Depending on the individual’s relationship with TRAC, we may process the following categories of personal data:

Identification and contact information

First and last name.
Company or organization.
Job title or position.
Email address.
Telephone number.
Address.
Signature, when required.

Business and professional information

Requests for information.
Products or services of interest.
Information included in messages and communications.
History of quotations, orders, and business relationships.
Information related to projects, agreements, or services.
Professional or employment information provided on behalf of a company.

Tax, financial, or asset-related information

When necessary for a contractual relationship, invoicing, or payment, TRAC may process:

Mexican Federal Taxpayer Registry number.
Tax status certificate.
Tax address.
Invoicing information.
Banking or payment information.
Information related to credit, collections, and contractual performance.

When required by applicable law, TRAC will obtain express consent before processing financial or asset-related personal data.

Data collected through the website

IP address.
Browser type and operating system.
Device identifiers.
Date and time of access.
Pages visited.
Referring website or address.
Information obtained through cookies and similar technologies.

TRAC does not intentionally request sensitive personal data through its website. Please do not include sensitive information in open-text message fields. If sensitive data must be processed for a legitimate purpose, TRAC will first explain the applicable purposes and obtain the corresponding express written consent.

4. How Personal Data Is Collected

TRAC may collect personal data:

Directly from the data subject.
Through website forms.
By email, telephone, or social media.
During a business or contractual relationship.
Through customers, suppliers, or business partners when authorization or another lawful basis exists.
From publicly available sources permitted by law.
Through cookies and similar technologies.

A person who provides personal data concerning a third party represents that they are authorized to disclose it to TRAC and agrees to inform the third party about this Privacy Notice.

5. Primary Purposes

TRAC will process personal data for the following necessary purposes:

Responding to messages, inquiries, and requests for information.
Preparing and following up on quotations.
Identifying and contacting prospective customers, customers, and suppliers.
Managing business and contractual relationships.
Providing products, services, and technical support.
Managing projects and providing engineering services.
Processing orders, deliveries, payments, collections, and invoices.
Managing warranties, claims, and after-sales service.
Verifying customer and supplier information.
Complying with legal, tax, accounting, and administrative obligations.
Protecting the security of TRAC’s website, systems, and facilities.
Preventing fraud, unauthorized access, and unlawful activities.
Establishing, exercising, or defending legal rights in administrative or judicial proceedings.
Retaining evidence of transactions and communications.

6. Secondary Purposes

TRAC may also use contact information to:

Send information about products, services, projects, or events.
Conduct marketing and commercial prospecting activities.
Conduct customer satisfaction surveys.
Prepare statistics and analyze website performance.
Improve its products, services, and user experience.

These purposes are not necessary for maintaining a legal or contractual relationship with TRAC.

The data subject may object to these purposes immediately or at a later time by emailing info@tracww.com with the subject line “Objection to Secondary Purposes.” Such an objection will not affect any products or services purchased from TRAC.

7. Cookies and Similar Technologies

TRAC’s website may use cookies, pixels, tags, web beacons, and similar technologies to:

Enable the website’s technical and secure operation.
Remember user preferences.
Measure visits and performance.
Understand how the website is used.
Improve website content and functionality.
Evaluate communication or advertising campaigns, when applicable.

These technologies may collect IP addresses, digital identifiers, browser and device information, pages visited, and access dates and times.

Strictly necessary cookies may operate without requiring a user selection. Users must be able to accept or reject analytics, advertising, and social media cookies through the website’s preference panel.

Users may also block or delete cookies through their browser settings. Disabling technical cookies may affect certain website features.

TRAC must make available a cookie policy or preference panel that identifies the technologies actually installed, their providers, purposes, and retention periods.

8. Data Processors

TRAC may use service providers for hosting, email, storage, information technology support, communications, analytics, invoicing, accounting, transportation, security, and other services.

These service providers will process personal data only on behalf of and under the instructions of TRAC. They will be subject to contractual confidentiality, security, and data protection obligations. Access by a data processor does not constitute a data transfer when carried out in accordance with applicable law.

Some service providers may process or store information outside Mexico, particularly in the United States. TRAC will seek to implement the corresponding contractual and security safeguards.

9. Personal Data Transfers

TRAC may transfer personal data within or outside Mexico only when necessary and permitted by applicable law, including transfers to:

Administrative, tax, judicial, or regulatory authorities, to comply with legal obligations or properly issued requests.
TRAC controlling companies, subsidiaries, affiliates, or other companies within the same corporate group that operate under equivalent data protection policies.
Customers, contractors, or business partners when necessary to perform a project, agreement, or service involving the data subject.
Financial institutions, insurers, transportation companies, customs brokers, or other parties when necessary to perform a legal or contractual relationship.
Legal advisers, accountants, or auditors when they must act independently to establish, exercise, or defend legal rights.
Purchasers, successors, or assignees in connection with a corporate reorganization, merger, acquisition, asset sale, or assignment of collection rights, within the limits permitted by law.

These transfers will be made to comply with legal obligations, perform agreements, maintain legal relationships, or protect the rights of TRAC or the data subject.

TRAC does not sell personal data.

TRAC does not currently contemplate transfers requiring the data subject’s consent. If TRAC needs to carry out a different transfer requiring consent, it will first disclose the recipient and purpose and obtain specific consent before completing the transfer.

Third-party recipients must process personal data in accordance with this Privacy Notice and assume the obligations required by applicable law.

10. ARCO Rights

The data subject may exercise the following rights at any time:

Access: To know what personal data is processed and the conditions under which it is processed.
Rectification: To request the correction of inaccurate, incomplete, or outdated data.
Cancellation: To request the deletion of personal data when legally appropriate.
Objection: To request that specific processing cease when there is a legitimate reason.

These rights are collectively referred to as “ARCO Rights” under Mexican law.

Requests must be sent to info@tracww.com with the subject line “ARCO Rights Request” and must include:

The data subject’s name.
A method for receiving notices.
Documents verifying the data subject’s identity or the authority of their legal representative.
The right being exercised and a description of the request.
A description of the personal data involved, except when exercising the right of access.
Information that may help TRAC locate the relevant personal data.

A rectification request must identify the requested changes and include supporting documentation.

TRAC will communicate its decision within no more than twenty business days after receiving the request. If the request is approved, TRAC will implement the decision within the following fifteen business days. Each period may be extended once for an equal period when justified by the circumstances.

Exercising ARCO Rights is free of charge. TRAC may only charge reproduction, copying, or delivery expenses permitted by law.

11. Withdrawal of Consent

The data subject may withdraw consent without retroactive effect, provided the processing is not necessary to comply with a legal or contractual obligation.

Requests must be sent to info@tracww.com with the subject line “Withdrawal of Consent” and must include the information necessary to verify the requester’s identity and locate the relevant processing activities.

TRAC will communicate whether the request is legally effective and, where appropriate, cease the processing within the applicable statutory periods.

12. Limiting the Use or Disclosure of Personal Data

To stop receiving promotional communications or limit other unnecessary uses of personal data, the data subject may email info@tracww.com with the subject line “Restriction on Use of Personal Data.”

TRAC will add the applicable contact information to its internal suppression list for the requested purposes.

13. Retention and Deletion

TRAC will retain personal data for as long as necessary to fulfill the disclosed purposes and while the corresponding legal or contractual relationship remains in effect.

Personal data will subsequently be blocked and retained only for applicable legal, tax, accounting, contractual, or limitation periods. Once those periods expire, the data will be securely deleted or anonymized.

14. Security and Data Breaches

TRAC maintains reasonable administrative, technical, and physical safeguards to protect personal data against damage, loss, alteration, destruction, and unauthorized access, use, or processing.

If a security breach significantly affects the financial or non-financial rights of data subjects, TRAC will notify the affected individuals in accordance with applicable law.

No system is completely infallible. Users should therefore avoid transmitting unnecessary or confidential information through open-text fields on the website.

15. Minors

TRAC’s products and services are not directed at minors. TRAC does not intentionally collect their personal data through its website.

If TRAC identifies information concerning a minor that was obtained without the required authorization, it will take reasonable measures to delete it.

16. Changes to This Privacy Notice

TRAC may amend this Privacy Notice as a result of legal or operational changes or changes to its data-processing practices.

The current version and its latest revision date will be available at www.tracww.com under the “Privacy Notice” section.

If a change introduces new purposes, sensitive personal data, or transfers requiring consent, TRAC will provide a new privacy notice and obtain the required consent before beginning the new processing.

17. Competent Authority

If a data subject believes that their personal data protection rights have been violated, they may file a data protection request with Mexico’s Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno) in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties.

18. Contact Information

For questions or comments concerning this Privacy Notice:

Personal Data Department
TRAC Worldwide, LLC.

Email: info@tracww.com
Mexico telephone: +52 81 8311 6800
Website: www.tracww.com