In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (the “LFPDPPP”), its Regulations, and the Privacy Notice Guidelines, Church & Dwight, S. de R.L. de C.V. (“Church & Dwight”), with domicile located at Boulevard Miguel de Cervantes Saavedra, number 251, third floor, office 301, Colonia Granada, Postal Code 11520, Miguel Hidalgo, Mexico City, hereby makes this Comprehensive Privacy Notice (the “Notice”) available to any individual (consumers and contestants) whose personal data is subject to processing in connection with the commercialization and promotion of the products offered by Church & Dwight (the “Data Subject”).

Church & Dwight represents that it has adopted the necessary administrative, physical, and technical security measures to ensure the protection of the Data Subject’s personal data against any infringement on its security and/or privacy.

I. PERSONAL DATA

Church & Dwight may collect from the Data Subject (consumer or contestant) the following personal data:

Consumer: full name and email address.

Contestant: name, age, gender, date of birth, photograph, domicile, telephone number, email address, social media identification, handwritten signature, nationality, official ID number, social media username, as well as image consisting of physical features and voice.

Where Church & Dwight is required to reimburse or compensate the Data Subject (consumer) or deliver any monetary prize (contestant), additional personal data may be requested, consisting of bank account information.

If the Data Subject is a consumer who has experienced any adverse reaction to Church & Dwight’s products, additional personal data may be requested, consisting of date of birth, age, sex, weight, height, and health condition.

The personal data of the Data Subject may be collected directly from the Data Subject through telephone, email, the contact section enabled on the Church & Dwight websites (www.churchdwight.com.mx; www.oxiclean.com.mx; www.armhammer.com.mx; www.trojan.com.mx; www.sterimar.com.mx; www.batiste.com.mx; www.replens.com.mx; www.femfresh.com.mx, www.nair.com.mx; www.toppikofficial.mx; y/o www.waterpik.com.mx) or through social media platforms (Facebook, Twitter, TikTok, Instagram, YouTube, Google+, etc.).

II. PURPOSES

The personal data collected by Church & Dwight will be used for the following purposes, which are necessary to carry out and maintain the legal relationship with the Data Subject:

Consumers: to comply with obligations arising from the consumer relationship with Church & Dwight; to receive and address inquiries, complaints, comments, or suggestions regarding Church & Dwight products; to pay any reimbursement or compensation the Data Subject may be entitled to receive; and to comply with regulatory reporting obligations and/or requests from competent authorities.

Contestants: to allow entry, participation, and notification of winners in contests organized by Church & Dwight, and to deliver the prizes to which the Data Subject may be entitled. Church & Dwight may disseminate, by any means, content and images generated in connection with the contest or dynamic in which the Data Subject participates.

Use of Image: during participation in events organized by Church & Dwight, the company may collect and process the Data Subject’s image, voice, and physical characteristics through photographs, recordings, or audiovisual material (the “Content”) for use in promotional campaigns, institutional dissemination, and graphic or digital materials of the company and its affiliates, in connection with contests or events.

The processing of this data requires the Data Subject’s express consent, which may be granted by signing this Notice (to be printed and sent to datos.privacidad@churchdwight.com) or, as the case may be, by accepting the terms and conditions governing the relevant contest.

The Data Subject may at any time refuse consent for the use of their image by clicking here. In the event of refusal, participation in activities or contests where image use is required will not be possible. The Data Subject may also revoke consent at any time in accordance with the mechanisms set forth herein

Church & Dwight may also use consumer data to conduct surveys or interviews to evaluate the quality of its services and/or products.

The Data Subject (consumer) may refuse such additional processing by clicking here.

III. TECHNOLOGIES

Church & Dwight’s websites (the “Websites”) use remote or local electronic communication mechanisms, optical or other technological means that allow the automatic and simultaneous collection of personal data at the time of interaction.

The Websites use cookies to ensure proper functionality. The cookies that may be used include:

• Strictly Necessary Cookies: required for the Websites to function and cannot be disabled. They are usually configured to respond to user actions, such as setting privacy preferences, logging in, or filling forms. Blocking these cookies may impair certain functionality.

• Functional Cookies: allow the Websites to offer enhanced functionality and personalization, and may be set by Church & Dwight or third-party service providers.

• Performance Cookies: allow measurement and improvement of Website performance by counting visits and traffic sources. Information collected is aggregated and anonymous.

• Targeting Cookies: may be set by advertising partners to build profiles of user interests and display relevant ads on other sites.

Church & Dwight will inform the Data Subject about the use of cookies through a visible banner on the Websites. The Data Subject may configure or disable cookies, except for those strictly necessary for technical reasons, either through the Banner or their browser. Disabling certain cookies may limit access to Website features.

IV. CONSENT

It shall be deemed that the Data Subject has granted consent for the processing of their personal data under the terms of this Notice when: (i) expressly provided by signing this Notice; (ii) by accepting the terms and conditions governing the contest or dynamic in which they participate; or (iii) by not expressing opposition when this Notice is made available.

V. TRANSFERS

Church & Dwight may carry out domestic transfers of the personal data of the consumer Data Subject experiencing adverse reactions to Church & Dwight’s products to the Federal Commission for Protection against Sanitary Risks (COFEPRIS), to comply with regulatory obligations and/or reporting requirements, and to the companies administering prizes won by contestants.

Additionally, Church & Dwight may carry out national and international transfers of the personal data of consumer Data Subjects to holding companies, subsidiaries, or affiliates under the common control of Church & Dwight, or to a parent company or any company of the same group of Church & Dwight, without the Data Subject’s consent, for the following purposes: global management of consumer feedback and complaints, including claims related to product safety, adverse effects, medical reports, product performance or quality, legal claims, and product information requests.

Church & Dwight represents that it will not transfer the Data Subject’s personal data to third parties other than those identified in this Notice without the Data Subject’s consent, except where required by competent authorities or in cases permitted under Article 36 of the LFPDPPP.

Communications of personal data between Church & Dwight and its processors shall be considered as “assignments” under Article 2, Section IX of the LFPDPPP Regulations; therefore, Church & Dwight is not required to inform the Data Subject thereof.

VI. RIGHTS OF THE DATA SUBJECT

The Data Subject has the right to: (i) access their personal data held by Church & Dwight; (ii) be informed of the processing of such data; (iii) request rectification where the data is inaccurate or incomplete; (iv) request cancellation of their data; (v) object to the processing of their data; and (vi) revoke consent for the processing of their data.

To exercise these rights, the Data Subject must submit a written request containing the following: full name and domicile; official identification or documents evidencing representation, as applicable; a clear and precise description of the personal data with respect to which any ARCO right is sought; a description of the ARCO right being exercised or the request made; and any element facilitating the identification of the data.

If the Data Subject requests access to their personal data, Church & Dwight will comply by making the data available on site, providing simple copies, electronic files, or any other means appropriate to the Data Subject.

Requests must be submitted to Church & Dwight’s Personal Data Protection Department. Upon receipt, the Department will respond in writing within 20 (twenty) business days. The response will be sent to the domicile or email address indicated by the Data Subject.

Consumers who had granted consent for surveys or interviews may limit the use of their personal data by submitting a written request or sending an email to the Personal Data Protection Department.

In such case, the Data Subject will be included in the exclusion list titled “Limitation on Personal Data Processing,” ensuring that their personal data is no longer processed for such additional purposes.

Contact details of the Personal Data Protection Department:

Domicile: Boulevard Miguel de Cervantes Saavedra, number 251, third floor, office 301, Colonia Granada, Postal Code 11520, Miguel Hidalgo, Mexico City.

Email: datos.privacidad@churchdwight.com.

VII. AMENDMENTS AND/OR UPDATES

Church & Dwight reserves the right to amend and/or update this Notice at any time, in accordance with new legal provisions and/or internal policies. Such amendments will be available at Church & Dwight’s domicile and on its websites.

Spanish version