PRIVACY POLICY

Effective Date: 8 June 2026

SumiFin, operated by JUPITRONIC S.A DE C.V (hereinafter referred to as “SumiFin”, the “Platform”, “we”, “us”, or the “Company”), recognizes the importance of protecting the privacy and personal data of its users.

This Privacy Policy explains how we collect, use, store, protect, and share information when you use the SumiFin application or any related services.

SumiFin is a digital platform for submitting information and documents for business financing applications, primarily intended for companies related to the industrial chemical supply chain.

Important Notice:

SumiFin does not grant loans, does not make disbursements, does not approve applications, and does not manage funds.

All evaluation, approval, definition of conditions, and provision of financial services are carried out exclusively by authorized collaborating financial institutions or participating entities, according to their own internal criteria and applicable laws and regulations.

By registering, using the Platform, or submitting an application, you accept the practices described in this Privacy Policy.

INFORMATION WE COLLECT

We may collect the following information:

1.1 Personal Information

Full name

Type and number of identity document

Date of birth

Nationality

Email address

Phone number

General contact address

Purpose:

To create and manage the user account

To verify identity

To manage applications

To maintain communication with the user

1.2 Company Information

Company name

Business registration or identification information

Business activity

Business address

Operational and commercial information

Information related to purchases, inventory, and orders

Purpose:

To verify company information

To manage business applications

To facilitate the presentation of information to participating institutions

1.3 Contact Information

We may request additional contact information when necessary for application management or user support.

1.4 Bank Account Information

Where applicable, we may collect:

Bank name

Account type

Account number

Account holder name

Purpose:

To support documentary validation of the application

SumiFin does not manage funds and does not execute banking transactions.

1.5 Biometric Information

When necessary for identity verification processes, we may collect:

Facial photograph

Image of identity document

Photographs used for identity verification

Purpose:

To verify the identity of the applicant

To prevent fraud

To protect the security of the Platform

Biometric information will be handled with enhanced security measures.

1.6 Device and Usage Information

We may collect:

Device model

Operating system

IP address

Access logs

Technical information related to the use of the application

Purpose:

To improve user experience

To detect errors

To ensure the security of the Platform

To prevent fraudulent activities

PURPOSES OF DATA PROCESSING

The information collected may be used to:

Register and manage user accounts

Manage business applications

Validate information and documents

Facilitate the submission of applications to authorized collaborating financial institutions

Allow users to track the status of applications

Send service-related notifications

Provide user support

Improve the security and functionality of the Platform

Comply with legal and regulatory obligations

Data Sharing and Third-Party Services

We do not sell, rent, or trade users’ personal information.

We may use third-party technical services, such as Google Firebase, Facebook SDK, Google Analytics, or other analytics and notification tools, to support security, statistical analysis, product optimization, error monitoring, performance measurement, and application improvement.

These third-party services may process technical information, device identifiers, usage logs, app events, advertising identifiers, aggregated data, or anonymized data in accordance with their own privacy policies and applicable laws.

Click the image to view the sheet.

The third-party services used by SumiFin have their own privacy policies and data protection mechanisms. Users are encouraged to review the relevant policies to understand how each provider processes information:

Google Firebase Privacy Policy: https://firebase.google.com/support/privacy

Facebook Privacy Policy: https://www.facebook.com/policy.php

Google Analytics Privacy Policy: https://policies.google.com/privacy

Google Firebase Privacy Policy

Google Analytics Privacy Policy

RETENTION AND SECURITY OF INFORMATION

SumiFin implements reasonable technical and organizational measures to protect user information, including:

Data encryption where applicable

Access control over information

Security monitoring

Secure storage of documents

Internal data protection procedures

Backup and recovery mechanisms

Although we apply reasonable protection measures, no system is completely immune to security risks.

USER RIGHTS

In accordance with applicable laws, users may:

Know what personal data we hold

Request the update or correction of information

Request deletion of data where applicable

Withdraw authorizations previously granted

Submit inquiries or complaints related to data processing

Request information about how their personal data has been used

To exercise these rights, users may contact us through the channels indicated in this Privacy Policy.

INFORMATION OF MINORS

The Platform is intended exclusively for persons with legal capacity to act on their own behalf or on behalf of a company.

SumiFin is not directed at minors. If we identify information provided by a minor without valid authorization, we will take reasonable measures to delete it or restrict its processing.

UPDATES TO THIS POLICY

SumiFin may modify this Privacy Policy to reflect legal, regulatory, operational, or technological changes.

Updates will be published within the application or through the corresponding official channels, indicating the effective date.

Continued use of the Platform after an update constitutes acceptance of the current version, where permitted by applicable laws and regulations.

APPLICABLE LAW

This Privacy Policy shall be governed by the applicable laws of Malaysia, including, among others:

Personal Data Protection Act 2010

Financial Services Act 2013, where applicable

Islamic Financial Services Act 2013, where applicable

Consumer Protection Act 1999, where applicable

Contracts Act 1950, where applicable

Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001, where applicable

Applicable standards, guidelines, and requirements issued by Bank Negara Malaysia or other competent Malaysian authorities, where relevant

CONTACT

For inquiries, requests, or complaints related to privacy and personal data processing:

SumiFin

Operated by:

JUPITRONIC S.A DE C.V

Email:
service@sumiprovzla.com

Phone:

+6281933682369

The above channels are intended exclusively for support, data protection matters, and issues related to the Platform.