Privacy Statement

The data controller is the entity that decides on the processing of personal data. For this purpose, it determines the purposes or uses for which personal information will be used and the means that will be employed for such processing.

Mercado Libre is the controller of the data of visitors through its subsidiary or affiliated companies. To learn which company or companies are responsible for processing in your country of residence, please consult the Annex corresponding to that country.

Mercado Libre collects your personal information so that you may receive our newsletter and alerts from the investor website.

You provide the information yourself when registering on the site. In other cases, we collect it automatically, such as when you browse our pages and use our services.

Please note that you are not required to provide the personal information listed below; however, it is an essential requirement in order to send you our newsletter and investor site alerts. If you do not provide this information, we will not be able to offer these services.

The personal data we collect for the purposes described in this Privacy Statement include:

Information you provide directly when registering on the investor site:

• •Email address
• •Full name
• •Company name

Information about the devices or computers from which you access our site and other data automatically captured, such as browser type or version, operating system, settings, and parameters.

Internet IP address used to connect to or browse our website.

Certain information about user and visitor activity on our site, which may include the URL from which you came (whether or not it is on our website), the URL you visit next (whether or not it is on our website), pages visited, interactions with those pages, and searches performed.

Information about your location (geolocation), which may be used to identify from which locations visitors are accessing our website.

The collection and processing of your Personal Information allows us to:

Identify and contact you.

Analyze the pages you visited and the searches you performed in order to improve our content offerings.

Any use of your personal data for purposes other than those described above will be communicated to you prior to processing.

Mercado Libre will retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected.

Protecting your privacy is very important to Mercado Libre. Therefore, we do not sell or commercialize information that identifies our users or visitors. Nor do we share or otherwise transfer your Personal Information to third parties, except in the cases indicated below:

Mercado Libre may transmit and/or transfer your Personal Information to:

(i) Service Providers: third parties engaged to act on behalf of Mercado Libre and provide services in accordance with our instructions and this Privacy Statement, such as IT system providers, cloud service providers, and database providers. These Service Providers only access information strictly necessary to perform the agreed services and may not use it for purposes other than those instructed by Mercado Libre.

(ii) Mercado Libre Group: companies within our corporate group that operate under the same internal processes and policies, whether controlled, controlling, or affiliated with Mercado Libre, in order to comply with our internal regulations.

(iii) Public Authorities: administrative and judicial authorities that, in the exercise of their powers, request information, even in the absence of an executive or judicial order, for the purposes of: (a) safeguarding public interest, administering justice, recognizing, exercising, or defending rights in judicial or administrative proceedings, and/or resolving disputes; and (b) complying with applicable laws, regulations, or legal provisions, or mandates from competent authorities duly founded and justified.

If Mercado Libre decides to share your Personal Information with third parties other than those mentioned above, we will request your prior and express consent, unless there is a legal authorization or obligation that allows us to do so without such consent.

You also provide your express and informed consent for Mercado Libre to assign, transmit, or transfer your Personal Information to the recipients detailed in this Privacy Statement.

Finally, Mercado Libre shall not be responsible for the improper use of your Personal Information by any third party when such third parties directly collect and/or process your Personal Information.

Mercado Libre uses technological infrastructure, such as servers and cloud services, which may be owned or provided by third parties.

Part of this infrastructure may be located in a country different from yours.

Likewise, the recipients of the data described above may be located in countries other than yours.

Some recipient countries may not provide adequate levels of personal data protection under applicable regulations.

In such cases, Mercado Libre adopts measures to safeguard your data through contractual clauses or binding corporate rules that impose the same protection measures described in this Privacy Statement.

We will store your personal information only for as long as necessary to fulfill the purpose for which it was collected, to comply with regulatory or legal requirements, or during the statutory limitation period for potential legal or contractual liabilities.

Once this period has elapsed, the data will be deleted or anonymized so that no individual can be identified, as permitted by the regulations of each country.

Through the Investor website, Mercado Libre may include links to third-party websites. This does not imply that such sites are owned or operated by Mercado Libre.

The processing of Personal Information by the controllers of such third-party websites is not covered by this Privacy Statement. You acknowledge and accept that Mercado Libre has no control over such websites and is not responsible for their content, services, or the manner in which they process your Personal Information. Access to such websites is at your own risk.

Applicable regulations grant you certain rights regarding your Personal Information, including:

(i) access; (ii) updating; (iii) rectification; (v) deletion; (vi) withdrawal of consent; and (vii) confidentiality.

You may submit any inquiry, complaint, or request related to your Personal Information by contacting Mercado Libre at privacidad@mercadolibre.com, or through the contact details provided in the country-specific annexes below.

In certain cases, we will retain Personal Information that you have requested to be deleted in order to comply with the purposes described in this Privacy Statement or where there is a contractual or legal obligation to retain such information. Once such purpose or obligation ceases, we will delete your Personal Information.

On this investor site, we collect only essential cookies, which are necessary to recognize you when you access the platform, save your configuration preferences, and protect your account. These cookies cannot be disabled, as they are essential for the proper functioning of our site.

Mercado Libre complies with applicable regulations and industry standards regarding security measures for Personal Information.

Mercado Libre is not responsible for illegal interceptions or breaches of its systems or databases, nor for unauthorized use by third parties. Mercado Libre is also not responsible for the improper use of information obtained through such means.

If Mercado Libre makes changes to the way your Personal Information is managed, we will notify you through our usual channels, such as email.

This Privacy Statement shall be governed by the applicable laws as detailed in the country-specific annexes below. Any dispute related to the interpretation, validity, execution, or compliance with this Privacy Statement shall be resolved by the competent courts indicated in the respective country annexes.

For the purposes of this Privacy Statement, the following definitions apply:

"Data Protection Authority":

• •Argentina: Agency for Access to Public Information
• •Chile: No data protection authority
• •Colombia: Superintendence of Industry and Commerce, Personal Data Protection Office
• •Mexico: Secretariat of Anti-Corruption and Good Governance
• •Peru: General Directorate of Transparency, Access to Public Information and Personal Data Protection
• •Uruguay: Regulatory and Control Unit for Personal Data
• •Brazil: National Data Protection Authority
• •Costa Rica: Agency for the Protection of Inhabitants' Data
• •Panama: National Authority for Transparency and Access to Information
• •Peru: National Authority for Transparency and Access to Public Information

"Applicable Personal Data Protection Legislation":

Argentina: Law No. 25,326; Chile: Law No. 19,628; Colombia: Law No. 1581; Mexico: Federal Law on the Protection of Personal Data Held by Private Parties; Peru: Law No. 29,733; Uruguay: Law No. 18,331; Ecuador: Organic Law on Personal Data Protection; Brazil: Law No. 13,709.

Mercado Libre Entities

Argentina: In Argentina, the controller of your data is Mercado Libre SRL, CUIT 30-70308853-4, with registered address at Avenida Caseros 3039, 2nd Floor, Autonomous City of Buenos Aires, C1264AKK, Argentine Republic (including its subsidiaries and affiliates).

Brazil: In Brazil, the controller of your data is EBAZAR.COM.BR LTDA, registered with the CNPJ/MF under No. 03.007.331/0001-41, and MercadoPago.com Representações Ltda., registered with the CNPJ/MF under No. 10.573.521/0001-91, both with registered address at Av. das Nações Unidas, No. 3,003, Bonfim, Osasco/SP, Brazil.

Mexico: In Mexico, the controller of your data is MercadoLibre, S. de R.L. de C.V. (hereinafter, "Mercado Libre"), with registered address at Av. Insurgentes Sur 1602, 9th Floor, Suite 900, Colonia Crédito Constructor, Benito Juárez Borough, ZIP Code 03940, Mexico City, CDMX.

Uruguay: In Uruguay, the controller of your data is Deremate.com de Uruguay S.R.L., R.U.T. 21411170001, with registered address at Dr. Luis Bonavita Street 1266, 39th Floor, City of Montevideo, Uruguay.

Chile: In Chile, the controller of your data is Mercado Pago S.A., R.U.T. 76.516.950-K, with registered address at Av. Apoquindo 4800, Tower 2, 21st Floor, Las Condes, Santiago, Chile.

Costa Rica: In Costa Rica, the controller of your data is Mercado Libre Costa Rica S.R.L., located at Centro Empresarial Forum, Building C, Office 1 C 1, Pozos de Santa Ana, San José, Costa Rica.

Ecuador: In Ecuador, the controller of your data is Mercado Libre Ecuador Cia. Ltda., located at Av. Amazonas N39-61 (45-45) and Alfonso Pereyra, Centro Financiero Building, 3rd Floor, Office 315, City of Quito.

Peru: In Peru, the controller of your data is Mercado Libre Perú S.R.L., RUC No. 20462540745, with registered address at German Schreiber Gulsmanco Street No. 276, San Isidro, Lima, Peru.

Venezuela: In Venezuela, the controller of your data is MercadoLibre Venezuela S.R.L., located at Eugenio Mendoza Street and Jose Angel Lamas, Torre La Castellana Building, 8th Floor, Postal Zone 1060, Caracas, Venezuela.