AMIGO LNG S.A. DE C.V. (hereinafter the "Data Controller"), in strict compliance with the provisions of the Federal Law on Protection of Personal Data Held by Private Parties (hereinafter, the "LFPDPPP"), its Regulations, and the Privacy Notice Guidelines, with domicile at Boulevard Luis Donaldo Colosio Murrieta external number 671, internal number Nivel 9 Oficina 901, Colonia Santa Fe, Postal Code 83249, in the municipality of Hermosillo, Sonora, Mexico, informs you that it is responsible for the use, protection, and processing of your personal, corporate, patrimonial, and sensitive data. It is expressly stated that any list of data subjects, categories of data, purposes, government agencies, or third-party recipients contained in this instrument is strictly illustrative and not exhaustive. Depending on the nature of your interaction with the Data Controller, whether in the digital, physical, maritime, port, agrarian, or corporate environment, the data that may be collected and subjected to processing covers an integral ecosystem of data subjects that includes, but is not limited to, web portal users, representatives of local communities, indigenous peoples and vulnerable groups, students, interns, researchers, media, non-governmental organizations, representatives of business and industrial chambers, members of strategic alliances, local fishermen, members of fishing cooperatives, agrarian or real estate rights holders, ejido members, local residents, public notaries, shipowners, shipping agencies, captains, contractors, suppliers, customs agents, gas buyers, investors, banking institutions, candidates, employees, union delegates, family members, authorities, inspectors, and vessel crews. The categories of data that may be collected, provided that the legal, commercial, maritime, social, academic, research, or institutional relationship warrants it, include, in an illustrative manner, identification and contact data such as name, official identification, passport, seaman's book, Tax ID, CURP, email, telephone, and signature, navigation data and maritime geolocation, vessel navigation route coordinates, cargo manifests, IP address, origin geolocation, and web interaction metrics, corporate and financial data grounded in legislation for Anti-Money Laundering (AML) and anti-fraud compliance such as articles of incorporation, ultimate beneficial owners, powers of attorney, technical certifications, importers registry, bank accounts, financial statements, credit history, and tax compliance, patrimonial data such as property deeds, parcel certificates, or right-of-way and easement agreements, labor, union, and academic data, as well as Sensitive Data strictly collected for compliance with the International Ship and Port Facility Security (ISPS) Code, industrial safety, customs regulations, and respect for human rights, which may include biometric data, blood type, health status, criminal records, closed-circuit television video recordings, and ethnic origin data, all of which will be processed under the strictest confidentiality. We will use your data for strictly necessary primary purposes motivated by the viability and continuity of the Project, which include fraud and money laundering prevention through Due Diligence and Know Your Customer (KYC) protocols, financial structuring, hydrocarbon commercialization, consolidation of strategic alliances and institutional engagement, maritime traffic and exclusion zone coordination, academic and scientific engagement, the execution of the Social Impact Assessment (MISE), holding ejido assemblies, agreements with fishing cooperatives, and indigenous consultations in Guaymas and the State of Sonora, as well as the facilitation of proactive mechanisms for access to environmental information and public participation in strict alignment with the principles of the Escazú Agreement, the International Labour Organization Convention 169 on Indigenous and Tribal Peoples guaranteeing the right to free, prior and informed consent, the observance of the United Nations Guiding Principles on Business and Human Rights, the Equator Principles, and the International Finance Corporation Performance Standards for the compliance of Environmental, Social, and Governance (ESG) standards, and primarily, motivated by the unavoidable legal protection of the Project, the generation of auditable community participation metrics, digital and maritime traceability, and the formation of both public and private documentary evidence to serve as procedural proof, expert support, and material legal accreditation for the defense of the Data Controller in active or future means of constitutional control, jurisdictional or quasi-jurisdictional proceedings, administrative litigation, controversies before agrarian tribunals, labor boards or courts, or any legal proceeding initiated against third-party opposition. Furthermore, data will be used for supply chain management, security control at the waterfront, docks, and port facilities, human capital hiring, issuance of severances, employer-employee compliance, and government regulatory compliance before the competent dependencies, entities, and government authorities across all three levels of government, including, but not limited to, the Agency for Safety, Energy and Environment, SEMARNAT, CRE, SENER, INAH, ASIPONA, Port Captaincy, Secretariat of the Navy, National Customs Agency of Mexico, Tax Authority, as well as corresponding jurisdictional or administrative authorities. As secondary purposes, your data may be used to send corporate newsletters and forum invitations, to which you may object by emailing privacidad@lngalliance.com. We inform you that we use tracking technologies and cookies to collect your IP address and geolocation, which is motivated by and indispensable for conforming our social impact metrics, evidentiary documentary records, and legal defense strategies. Your data will not be commercialized under any circumstances and may only be transferred without your prior consent being duly grounded in the exceptions of Article 37 of the LFPDPPP, specifically under the assumptions of transfers necessary for the procurement or administration of justice, for the recognition, exercise, or defense of a right in a judicial process, transfers to controlling, subsidiary, or affiliated companies of the Data Controller operating under the same internal processes and policies, or when the transfer is necessary by virtue of a contract executed or to be executed in the interest of the data subject by the controller and a third party, being transferred in practice to public notaries, financial institutions for payment disbursement, Anti-Money Laundering (AML) compliance and Environmental, Social, and Governance (ESG) audits, business chambers for agreements, universities for research projects, and to corresponding government authorities, energy, environmental, port, maritime, and jurisdictional agencies to guarantee the uninterrupted viability, operability, and legal defense of the Project. To exercise your rights of Access, Rectification, Cancellation, and Opposition or to revoke your consent, you must send a formal request to privacidad@lngalliance.com accompanied by your official identification, receiving the adopted determination within a maximum period of 20 business days. Any modification to this instrument will be permanently published on the official website www.amigolng.com/privacy-notice.