Privacy Policy

PRIVACY POLICY

Last Updated: August 1, 2026

HARI MASA S.A. DE C.V. (“HariMASA,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information that we collect and process.

HariMASA is the commercial brand under which we offer corn flour and related products. HarimasaUSA.com is our website and digital sales platform for customers, prospective customers, distributors, restaurants, businesses, and other users located in the United States.

This Privacy Policy describes how we collect, use, disclose, store, and protect personal information when you:

• Visit https://www.harimasausa.com;

• Request information or a quote;

• Purchase or inquire about our products;

• Create or use an account;

• Communicate with us by email, telephone, web form, social media, or other channels;

• Apply to become a distributor or commercial partner; or

• Otherwise interact with our products, services, website, or representatives.

By using our website or providing information to us, you acknowledge the practices described in this Privacy Policy.

1. COMPANY RESPONSIBLE FOR YOUR INFORMATION

HARI MASA S.A. DE C.V. is responsible for the personal information collected through HarimasaUSA.com and its related commercial services.

Company name:

HARI MASA S.A. DE C.V.

Business address:

Carretera a Villa de García Km 2.5

Santa Catarina, Nuevo León

C.P. 66350

Mexico

Telephone:

+52 81 2632 2700

Email:

info@harimasausa.com

Website:

https://www.harimasausa.com

Although our website serves customers in the United States, our principal business operations and administrative offices are located in Mexico. Your information may therefore be transferred to, accessed from, stored in, or processed in Mexico and in other locations where our service providers operate.

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information collected from:

• Website visitors;

• Retail and wholesale customers;

• Prospective customers;

• Restaurants, tortillerías, food service businesses, and industrial customers;

• Distributors and prospective distributors;

• Vendors, suppliers, logistics providers, and commercial partners;

• Account holders;

• Individuals requesting quotes, product information, or customer support; and

• Individuals who communicate with our sales, distribution, or customer service teams.

This Privacy Policy does not apply to third-party websites, applications, payment platforms, delivery services, or social networks that maintain their own privacy policies.

1. PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with us.

A. Information You Provide Directly

We may collect:

• First and last name;

• Business or company name;

• Job title or position;

• Email address;

• Telephone or mobile number;

• Billing address;

• Shipping or delivery address;

• City, state, ZIP Code, and country;

• Account username and login credentials;

• Product interests;

• Requested quantities;

• Quote requests;

• Order and purchase information;

• Delivery instructions;

• Distributor application information;

• Tax, resale, or business identification information;

• Communications, questions, comments, and customer service requests; and

• Any other information you voluntarily submit to us.

B. Commercial and Transaction Information

We may collect information relating to:

• Products viewed, requested, quoted, or purchased;

• Order history;

• Quantities and pricing;

• Shipping and delivery status;

• Payment status and transaction references;

• Returns, refunds, complaints, or claims;

• Customer classification;

• Assigned distributor, sales representative, or service area; and

• Commercial relationship and customer service history.

Payment transactions may be processed by third-party payment service providers. We may receive limited transaction details, such as payment confirmation, payment method category, amount, date, and transaction reference. We do not intend to store complete payment card numbers or card security codes on our own systems.

C. Information Collected Automatically

When you use our website, we or our service providers may automatically collect:

• Internet Protocol address;

• Browser type;

• Device type;

• Operating system;

• Language settings;

• Referring website;

• Pages viewed;

• Products viewed;

• Links and buttons selected;

• Date and time of access;

• Session identifiers;

• Shopping cart activity;

• Approximate geographic location derived from an IP address;

• Website performance information; and

• Security and diagnostic information.

D. Information Received from Other Sources

We may receive information from:

• Distributors and commercial partners;

• Shipping and logistics providers;

• Payment processors;

• Advertising or marketing providers;

• Analytics providers;

• Publicly available business directories;

• Social media platforms;

• Trade shows or business events;

• Referral partners; and

• Other persons or organizations authorized to provide the information.

1. SENSITIVE PERSONAL INFORMATION

Our website and ordinary commercial services are not intended to collect sensitive personal information such as Social Security numbers, precise financial account credentials, health information, biometric identifiers, racial or ethnic origin, religious beliefs, or information regarding sexual orientation.

Please do not submit sensitive personal information unless we specifically request it for a legitimate and lawful purpose.

If we need to collect sensitive personal information, we will process it only as reasonably necessary and in accordance with applicable law.

1. HOW WE USE PERSONAL INFORMATION

We may use personal information for the following purposes:

A. Providing Products and Services

• Responding to product inquiries;

• Preparing and delivering quotes;

• Processing and fulfilling orders;

• Managing customer accounts;

• Coordinating shipping, pickup, and delivery;

• Providing order confirmations and status updates;

• Processing returns, refunds, and claims;

• Providing customer service; and

• Maintaining records of transactions.

B. Sales and Distribution

• Identifying the appropriate service area;

• Assigning inquiries or customers to a sales representative, distributor, or location;

• Evaluating distributor applications;

• Managing distributor and commercial partner relationships;

• Following up on prospective sales;

• Managing wholesale, food service, retail, or industrial accounts; and

• Maintaining customer relationship management records.

C. Website Operation and Security

• Operating and maintaining the website;

• Authenticating accounts;

• Remembering shopping cart selections;

• Detecting unauthorized access;

• Preventing fraud, abuse, and security incidents;

• Troubleshooting technical issues;

• Maintaining backups;

• Monitoring website performance; and

• Protecting our customers, employees, systems, and business.

D. Business Administration

• Maintaining accounting and business records;

• Processing payments;

• Managing logistics and inventory;

• Conducting internal audits;

• Enforcing agreements and website terms;

• Establishing, exercising, or defending legal claims;

• Complying with tax, customs, export, import, and regulatory obligations; and

• Responding to lawful requests from government authorities.

E. Marketing and Analytics

Subject to applicable law and your communication preferences, we may use information to:

• Send product announcements;

• Provide offers or promotional information;

• Send newsletters;

• Invite you to business events or product presentations;

• Measure advertising and marketing performance;

• Analyze website traffic and customer interests;

• Improve products, services, and website content; and

• Personalize communications and website experiences.

You may unsubscribe from promotional emails by using the unsubscribe instructions included in the message or by contacting us at info@harimasausa.com.

Even after you opt out of promotional communications, we may continue sending non-promotional communications relating to orders, accounts, transactions, security, or customer service.

1. LEGAL AND BUSINESS GROUNDS FOR PROCESSING

Depending on the circumstances and applicable law, we process personal information:

• To provide requested products or services;

• To enter into or perform a contract;

• With your consent;

• To comply with legal obligations;

• To protect our rights and prevent fraud;

• For our legitimate and reasonable business purposes; or

• As otherwise permitted or required by applicable law.

1. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients:

A. Service Providers

We may use vendors that assist with:

• Website hosting;

• Cloud storage;

• Software development;

• Customer relationship management;

• Email and communications;

• Payment processing;

• Accounting and invoicing;

• Cybersecurity;

• Data backup;

• Website analytics;

• Advertising;

• Customer support;

• Shipping;

• Warehousing;

• Logistics; and

• Professional consulting.

These providers may access personal information only as reasonably necessary to perform services for us and are expected to protect the information appropriately.

B. Distributors, Sales Representatives, and Commercial Partners

We may disclose information to an authorized distributor, sales representative, warehouse, or commercial partner when necessary to:

• Respond to your request;

• Prepare a quote;

• Determine product availability;

• Process an order;

• Arrange delivery;

• Provide customer support; or

• Manage the commercial relationship.

C. Shipping and Logistics Providers

We may provide names, contact details, shipping addresses, delivery instructions, and order information to carriers, freight companies, warehouse operators, customs brokers, and logistics providers.

D. Payment and Financial Service Providers

We may provide transaction-related information to payment processors, banks, fraud prevention services, and financial service providers.

E. Professional Advisors

We may disclose information to attorneys, accountants, auditors, insurers, and other professional advisors where reasonably necessary.

F. Government Authorities and Legal Proceedings

We may disclose information when required by law, subpoena, court order, customs requirement, regulatory request, or other lawful legal process.

We may also disclose information when reasonably necessary to protect our rights, prevent fraud, investigate unlawful conduct, or protect the safety of individuals.

G. Business Transactions

If HariMASA is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality protections.

1. SALE, SHARING, AND TARGETED ADVERTISING

We do not sell personal information in exchange for money.

We may use analytics, advertising, social media, or similar technologies that may be considered “sharing,” “sale,” or processing for targeted advertising under certain U.S. state privacy laws.

Where required by applicable law, eligible residents may request to opt out of:

• The sale of personal information;

• The sharing of personal information for cross-context behavioral advertising;

• Targeted advertising; or

• Certain profiling activities.

Requests may be submitted using the contact information provided in the “Privacy Requests” section below.

If we do not currently engage in a regulated sale, sharing, targeted advertising, or profiling activity, we will treat the request as a preference regarding future processing where reasonably practicable.

1. COOKIES AND SIMILAR TECHNOLOGIES

We may use cookies, pixels, local storage, tags, server logs, session identifiers, and similar technologies.

These technologies may be used to:

• Keep the website functioning;

• Maintain login sessions;

• Remember shopping cart contents;

• Save user preferences;

• Protect forms and accounts;

• Detect fraud or suspicious activity;

• Measure website traffic;

• Understand how visitors use the website;

• Evaluate marketing campaigns; and

• Provide or measure advertising.

Cookies may include:

Essential Cookies

These cookies are necessary for website operation, security, account access, shopping cart functionality, and checkout.

Functional Cookies

These cookies remember preferences and improve website functionality.

Analytics Cookies

These cookies help us measure website visits, usage patterns, traffic sources, and performance.

Advertising Cookies

These cookies may be used to measure advertising, understand audience interests, or provide more relevant advertising.

You can control cookies through your browser settings and, where available, through our website cookie controls. Disabling certain cookies may affect website functions.

Where required by applicable law, we will recognize legally valid browser-based opt-out preference signals, such as Global Privacy Control, for the browser or device transmitting the signal.

1. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on:

• The duration of the customer or business relationship;

• Order, delivery, and warranty requirements;

• Accounting and tax requirements;

• Contractual obligations;

• Customs, import, and export requirements;

• Fraud prevention;

• Security needs;

• Applicable statutes of limitation;

• Dispute resolution; and

• Other legal obligations.

When information is no longer reasonably necessary, we may delete, de-identify, anonymize, or securely dispose of it.

1. DATA SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These safeguards may include:

• Access controls;

• User authentication;

• Role-based permissions;

• Secure transmission;

• System monitoring;

• Backups;

• Software updates;

• Vendor controls;

• Employee confidentiality requirements; and

• Incident response procedures.

No website, internet transmission, or electronic storage system is completely secure. We therefore cannot guarantee absolute security.

You are responsible for keeping your account credentials confidential and for notifying us if you believe your account has been accessed without authorization.

1. INTERNATIONAL DATA TRANSFERS

HARI MASA S.A. DE C.V. is located in Mexico.

When you use HarimasaUSA.com or submit information to us from the United States, your personal information may be transferred to and processed in Mexico.

Your information may also be processed in the United States or other countries where our distributors, logistics providers, technology providers, payment processors, or other service providers operate.

Privacy and data protection laws in those locations may differ from the laws of your state or country. We take reasonable steps to protect personal information in accordance with this Privacy Policy and applicable legal requirements.

1. YOUR PRIVACY CHOICES

Depending on your location and applicable law, you may have the right to:

• Confirm whether we process your personal information;

• Request access to personal information;

• Request correction of inaccurate information;

• Request deletion of personal information;

• Obtain a portable copy of certain information;

• Opt out of the sale of personal information;

• Opt out of targeted advertising;

• Opt out of certain profiling activities;

• Limit certain uses of sensitive personal information;

• Withdraw consent where processing is based on consent;

• Appeal a decision concerning a privacy request; and

• Receive equal service and pricing without unlawful discrimination for exercising privacy rights.

These rights are not absolute. We may deny or limit a request when an exception applies, including when information is needed to complete a transaction, comply with law, detect fraud, protect security, maintain records, or establish or defend legal claims.

1. PRIVACY REQUESTS

To submit a privacy request, contact us using one of the following methods:

Email:

info@harimasausa.com

Subject line:

U.S. Privacy Request

Mail:

HARI MASA S.A. DE C.V.

Attn: Privacy Request

Carretera a Villa de García Km 2.5

Santa Catarina, Nuevo León

C.P. 66350

Mexico

Telephone:

+52 81 2632 2700

Please include:

• Your full name;

• Your email address or telephone number;

• Your state of residence;

• The nature of your request;

• A description of the information or relationship involved; and

• Any information reasonably necessary to verify your identity.

We may request additional information to verify your identity and protect personal information from fraudulent requests.

An authorized agent may submit a request where permitted by law. We may require proof that the agent is authorized to act on your behalf and may also require you to verify your identity directly.

We will respond within the time required by applicable law.

1. APPEALING A PRIVACY REQUEST DECISION

If we deny your privacy request and applicable law provides a right to appeal, you may appeal by emailing info@harimasausa.com.

Use the subject line:

Privacy Request Appeal

Please include:

• Your name;

• The date of your original request;

• Our response or request reference;

• The reason you believe the decision should be reconsidered; and

• Any additional information supporting the appeal.

We will review and respond to the appeal within the period required by applicable law.

1. CALIFORNIA PRIVACY NOTICE

This section applies only to California residents and only to the extent that HARI MASA S.A. DE C.V. is subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

California residents may have the right to:

• Know the categories of personal information collected;

• Know the sources from which personal information was collected;

• Know the purposes for collecting, using, selling, or sharing personal information;

• Know the categories of third parties to whom information was disclosed;

• Request specific pieces of personal information;

• Request deletion;

• Request correction;

• Opt out of the sale or sharing of personal information;

• Limit certain uses and disclosures of sensitive personal information; and

• Exercise their rights without unlawful discrimination.

During the preceding 12 months, we may have collected the categories of personal information described in this Privacy Policy, including:

• Identifiers;

• Customer record information;

• Commercial information;

• Internet or electronic network activity;

• Approximate geolocation information;

• Professional or employment-related information;

• Communications; and

• Inferences regarding commercial interests.

We collect and use these categories for the business and commercial purposes described in this Privacy Policy.

We may disclose these categories to service providers, distributors, sales representatives, payment processors, shipping companies, technology providers, professional advisors, and government authorities.

We do not sell personal information for monetary compensation.

To submit a California privacy request, use the methods described in the “Privacy Requests” section.

1. TEXAS PRIVACY NOTICE

This section applies to Texas residents and only to the extent that HARI MASA S.A. DE C.V. is subject to the Texas Data Privacy and Security Act.

Texas residents may have the right to:

• Confirm whether we process their personal data;

• Access their personal data;

• Correct inaccuracies;

• Delete personal data;

• Obtain a portable copy of personal data;

• Opt out of the sale of personal data;

• Opt out of targeted advertising;

• Opt out of certain profiling; and

• Appeal a decision concerning a privacy request.

The categories of personal data processed, purposes of processing, categories of data disclosed, categories of recipients, and methods for exercising rights are described throughout this Privacy Policy.

To submit or appeal a Texas privacy request, use the methods described in the “Privacy Requests” and “Appealing a Privacy Request Decision” sections.

1. OTHER U.S. STATE PRIVACY RIGHTS

Residents of other states may have additional rights under their applicable state privacy laws.

Where such laws apply to us, we will process verified requests in accordance with the applicable requirements, limitations, and exceptions.

You may use the methods described in the “Privacy Requests” section regardless of your state of residence.

1. CHILDREN’S PRIVACY

HarimasaUSA.com is intended for businesses and adults seeking information about or purchasing food products.

Our website is not directed to children under 13, and we do not knowingly collect personal information online from children under 13.

If you are a parent or legal guardian and believe a child under 13 provided personal information to us, contact us at info@harimasausa.com. We will review the request and take appropriate action.

1. THIRD-PARTY LINKS AND SERVICES

Our website may contain links to third-party websites, payment providers, social media services, maps, distributors, or logistics services.

We do not control the privacy or security practices of those third parties. Their collection and use of information are governed by their own privacy notices and terms.

We encourage you to review the privacy policies of third-party services before providing personal information.

1. EMAIL AND MARKETING PREFERENCES

You may unsubscribe from promotional emails using the unsubscribe instructions included in the email or by contacting us at info@harimasausa.com.

Your opt-out request applies to marketing communications sent by us to the address identified in your request.

We may still send messages that are necessary for:

• Orders;

• Quotes;

• Deliveries;

• Customer service;

• Account administration;

• Security;

• Legal notices; or

• Existing business relationships.

1. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in:

• Our website;

• Products or services;

• Business practices;

• Technology;

• Service providers;

• Legal requirements; or

• Privacy and security practices.

When we make changes, we will post the revised Privacy Policy on this page and update the “Last Updated” date.

If required by law, we will provide additional notice or obtain consent for material changes.

1. CONTACT US

For questions, comments, or concerns about this Privacy Policy or our privacy practices, contact:

HARI MASA S.A. DE C.V.

Carretera a Villa de García Km 2.5

Santa Catarina, Nuevo León

C.P. 66350

Mexico

Telephone:

+52 81 2632 2700

Email:

info@harimasausa.com

Website:

https://www.harimasausa.com

Although this Website may be linked to other websites, we are not, directly or indirectly, implying any approval, association, sponsorship, endorsement, or affiliation with any linked website, unless specifically stated herein.

You should carefully review the legal statements and other conditions of use of any website which you access through a link from this Website. Your linking to any other off-site pages or other websites is at your own risk.

Website may use cookies to personalize and facilitate maximum navigation of the User by this site. The User may configure his / her browser to notify and reject the installation of the cookies sent by us.