Tu Portal

Now your information is:

Grouped

Access your information in an organized manner

Convenient

Accessible from anywhere, at any time

Eco-friendly

A responsible bill that reduces CO2 emissions

Immediate

Notification via email or app as soon as it is issued

User Registration

Please enter the following information

RPU(s) separated by commas (,)*

E-mail *

Email confirmation *

Name *

Last Name *

Last Second Name

UUID *

Terms and Conditions

In accordance with what is stipulated in the Code of Ethics of IBERDROLA, S.A. AND ITS GROUP OF COMPANIES in its article 20, section 3, which states: The Group owns the property and the rights of use and exploitation of the programs and computer systems, equipment, manuals, videos, projects, studies, reports, and other works and rights created, developed, perfected, or used by its professionals within the framework of their work activity or based on the Group’s computer facilities.

Professionals will respect the principle of confidentiality regarding the characteristics of the rights, licenses, programs, systems, and technological knowledge, in general, whose ownership, exploitation or use rights belong to the Group.

Any information or disclosure about the Group’s computer systems will require prior authorization from the Corporate Resources Department.

The use of the equipment, systems, and computer programs that the Group makes available for the development of their professional’s work, including the ease of access and operation on the Internet, must comply with security and efficiency criteria, excluding any use, action, or computer function that is illegal, contrary to the Group’s rules or instructions.

Professionals will not exploit, reduce, replicate, or transfer the Group’s computer systems and applications for purposes unrelated to it. Likewise, professionals will not install or use on the computer equipment provided by the Group programs or applications whose use is illegal or that may damage the systems or harm the image or interests of the Group, clients, or third parties.

Specific Conditions

1. In order to access the system via internet, the User must have a personal computer connected to Iberdrola’s internet network on the previously indicated internet page. Iberdrola does not guarantee the confidentiality of the information transmitted through this service, as it is an aggregated service. The User must comply with the technical requirements to access the service, as established from time to time by Iberdrola.

2. Access to the system is agreed upon solely for the purpose provided herein and may not be used by the User for any other purpose, nor for third parties to carry out operations and/or inquiries or to provide information to third parties. The User may not resell, transfer, or license this service, software, or in any other way authorize or allow its use by third parties, with the use of the system always being subject to the conditions arising from this document or applicable legislation.

3. It is therefore expressly established and agreed that the operations are initiated on the User’s computer equipment and under the User’s responsibility, and that such operations are processed and perfected exclusively between Iberdrola and/or the User through the transmission of data via the system. The User expressly waives any claim against Iberdrola for damages and/or losses arising from the use of their access to the system, agreeing to indemnify and hold Iberdrola harmless from any claim, damage, fine, or any other form of impairment to Iberdrola resulting from such use.

4. Iberdrola may, at its sole discretion and without prior notice, expand, reduce, or modify the number of operations and/or services contained within the service; suspend the service at any time, without prior notice to the User.

5. Iberdrola does not expressly or implicitly guarantee the displayed information in the system, as it is for information purposes only. The User may not claim changes to the information displayed that do not correspond with the information used by Iberdrola for billing purposes. Iberdrola will make its best efforts, without this being understood as an obligation, to ensure that the service is always available to the User.

6. The User must take all necessary measures to safeguard their confidentiality and reliability.

7. Once the User’s access to the system is enabled, Iberdrola will allow the User to operate as provided in the preceding clauses, with the User accepting that the service may be disconnected at any time without liability to Iberdrola.

8. To access the System, it is a condition that the User expressly accepts these terms and conditions. Either party may, at any time and without cause, terminate the service definitively by written notice three (3) days in advance of the desired termination date. The exercise of this option by either party will not generate any right to compensation in favor of the other party, especially in terms of damages and losses.

9. The User’s failure to comply with any of the obligations assumed herein will entitle Iberdrola to either: a) terminate the service immediately; or b) demand the fulfillment of the due performance, in both cases with compensation for the damages and losses caused.

10. These terms and conditions will not form part of the contract that Iberdrola has with the User, as access to the system is an added value service and, therefore, Iberdrola is not obliged to provide it under any circumstances. Notwithstanding the foregoing, the User expressly assumes the conditions stipulated herein.

Privacy Policy

Privacy Notice for Cox México Clients

Iberdrola México S.A. de C.V., (hereinafter, “COX”), in its capacity as the Data Controller of personal data processing, hereby provides you with this Comprehensive Privacy Notice, which has been prepared in accordance with the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations (LFPDPPP by its Spanish acronym), and other applicable data protection regulations.

This Privacy Notice applies to personal data collected in the context of the registration, management, and servicing of customers in Mexico, through the portal enabled for such purpose.

COX has implemented the necessary technical, administrative, and organizational measures to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or disclosure, as well as internal procedures for the prevention, management, and handling of security incidents, in compliance with applicable regulations.

Who is the Data Controller of your personal data?

Iberdrola México, S.A. de C.V. with trade name COX, website: https://grupocox.com/, phone: (+52) 55 8503 4600, address: Montes Urales 540, 11000, Mexico City, email: lfpd_mexico@grupocox.com.

Personal data subject to processing

At COX, we process various categories of personal data. For better understanding, the categories of personal data that may be collected during the process of registration, contracting, service provision, and management of the customer relationship in Mexico are outlined below:

Category   Personal Data
Identification Data   Full name, official ID or passport of legal representatives
Contact Data   Address, email, phone number
Contractual Data   Contract information, customer number, RPU, RMU or supply point (where applicable), terms of the contracted service
Financial and Billing Data   Bank details, payment information, billing data, issuance of CRP, payment history, audited financial statements
Consumición Data   Information related to energy consumption or other contracted services
Interaction Data   Communications with the customer, requests, incidents, complaints, or inquiries
Geolocation Data (where applicable)   Location of the supply point or installation
Other Data   Any other information necessary for the provision of the service or compliance with legal obligations

Sensitive Personal Data

As a rule, COX does not collect or process sensitive personal data of its clients.

However, should it exceptionally become necessary to process sensitive personal data, for example in the context of handling specific requests, incident management, or compliance with legal obligations, such processing will only be carried out when a valid legal basis exists and, where applicable, with the prior express consent of the data subject, in accordance with applicable regulations.

Likewise, COX will apply the corresponding enhanced security measures, ensuring at all times the confidentiality, integrity, and protection of this type of data.

How do we obtain your personal data?

Personal data may be obtained:

•   Directly from the data subject, through registration on the portal, contracting of services, or any other channel enabled for the client relationship.
•   Through forms, applications, or documentation provided during the onboarding, contracting, or service management process.
•   Through communications maintained via email, telephone, mobile applications, or other customer service channels.
•   From the use of the contracted services, including data generated by the consumption or use thereof.
•   Through publicly available sources or legally accessible databases, when necessary for validation processes, regulatory compliance, or verification of information.

Purposes of Personal Data Processing

The purposes of processing are those that motivate the use of your personal data. For better understanding, these purposes are classified as primary and secondary.

Primary Purposes
Primary purposes are those necessary for managing the contractual relationship, providing services, and delivering customer support. If you object to the processing of your data for these purposes, it will not be possible to enter or perform the corresponding services.

Your personal data will be processed for the following primary purposes:

Category   Purpose
Customer Registration and Onboarding   Create your profile, verify your identity, and manage your registration as a customer
Contract Management   Formalize, execute, administer, and monitor service agreements
Service Provision   Provide the contracted services, including supply, operation, and maintenance
Measurement and Consumption   Collect, manage, and analyze consumption data associated with the contracted service
Billing and Collections   Issue invoices, manage payments, direct debits, collections, and outstanding balances
Customer Support   Handle inquiries, requests, incidents, complaints, or clarifications
Administrative Management   Carry out necessary internal, accounting, tax, and administrative processes
Regulatory Compliance   Comply with legal, regulatory obligations and authority requirements
Security and Control   Ensure system security, prevent fraud, and protect information

Secondary Purposes
Your personal data may be processed for secondary purposes such as:
•   Sending informational, promotional, or commercial communications related to COX products or services.
•   Conducting satisfaction surveys, market research, or improving service quality.

If you do not wish your personal data to be processed for these secondary purposes, you may express your preference through the contact channels indicated in this Privacy Notice.

Legal Basis for Processing

The processing of your personal data is based on:

•   The execution of the contractual relationship between the data subject and the Data Controller, derived from the contracting and provision of services.
•   The implementation of pre-contractual measures at the request of the data subject during the registration and onboarding process as a customer.
•   Compliance with legal, regulatory, tax, administrative, and sector-specific obligations applicable to the Data Controller.
•   The legitimate interest of the Data Controller in managing its relationship with customers, improving service quality, ensuring the security of its systems, and preventing fraud or misuse.
•   The consent of the data subject, where required under applicable regulations, particularly for secondary purposes or specific processing activities.

Data Retention

Your personal data will be retained only for as long as necessary to fulfill the purposes described in this Privacy Notice, particularly for managing the contractual relationship, providing services, and customer support.

Additionally, the data may be retained for the period required to comply with legal, tax, regulatory, and accounting obligations, as well as to address potential claims or requests from competent authorities.

Personal data may be incorporated into the Data Controller’s internal systems and records, which will be maintained under appropriate security measures and with restricted access to authorized personnel.

Once personal data is no longer necessary for the aforementioned purposes, it will be deleted or, where applicable, blocked in accordance with applicable regulations and the Data Controller’s internal policies.

Transfers of Personal Data

Your personal data may be transferred or disclosed within the national territory in the following cases:

•   To authorized personnel of the Data Controller and relevant internal departments, when necessary for managing contractual relationship, service provision, and customer support.
•   To service providers, such as technology providers, customer service centers, billing companies, collection agencies, or other third parties supporting service operations.
•   To distributors, operators, or third parties involved in the provision of the contracted service, when necessary for its proper execution.
•   To financial institutions for the management of payments, direct debits, and billing-related operations.
•   To authorities, public bodies, or competent entities when there is a legal obligation or a duly justified and documented request.

Please note that, in general, no international transfers of your personal data are carried out. In exceptional cases where such transfers are necessary, they will be conducted in accordance with applicable legislation and with appropriate safeguards.

Any transfer of personal data will only be carried out when necessary to fulfill the purposes described in this Privacy Notice.

What are your rights?

ARCO Rights (Access, Rectification, Cancellation, and Opposition) are the legal mechanism that allows you to exercise your rights to:

•   Access your personal data held by us
•   Rectify your data when it is inaccurate, incomplete, or outdated
•   Cancel your personal data when legally applicable
•   Object to the processing of your personal data for certain purposes or situations

The exercise of these rights must be carried out in accordance with the LFPDPPP and is subject to the conditions and exceptions established therein.

Means to Exercise Your Rights

To exercise your ARCO rights, you may submit your request through the following channel:

•   By email to: lfpd_mexico@grupocox.com, indicating in the subject line: “Exercise of ARCO Rights – [right requested]”.

Procedure to Exercise Your Rights

Your request must include sufficient information to identify the data subject or, where applicable, their legal representative, as well as a clear and precise description of the right you wish to exercise.

If the information provided is insufficient or there are reasonable doubts regarding the identity of the applicant, the Data Controller may implement reasonable verification mechanisms and/or request additional information or documentation to confirm the identity of the data subject and process the request, in accordance with applicable data protection regulations.

Once the request is received, an acknowledgment of receipt will be sent, and its admissibility will be analyzed. The Data Controller will process the request within the legally established timeframes and will communicate the response through the same channel used by the applicant or any other means ensuring proper delivery.

The response will be provided within the timeframe established by the LFPDPPP, counted from the receipt of the request, unless an extension is applicable due to the complexity of the matter or the number of requests received. Such circumstances will be duly communicated to the data subject within the legal deadlines.

For any questions, clarifications, or additional information regarding the processing of your personal data or the exercise of your rights, you may contact us through the channels indicated in this Privacy Notice.

Revocation of Consent

When the processing of your personal data is based on your consent, you may revoke it at any time through the same means established for exercising your ARCO rights.

The revocation of consent will not affect the lawfulness of processing carried out prior to such revocation.

Limitation on the Use or Disclosure of Personal Data

You may request the restriction of the use or disclosure of your personal data in cases where such restriction is legally applicable and does not prevent compliance with contractual, legal, or regulatory obligations necessary for service provision.

Competent Authority

If you believe that your right to personal data protection has been violated due to any action or omission on our part, you may file a complaint with the competent authority in Mexico.

The competent authority is the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), in accordance with current legislation.

Updates

This Privacy Notice may be updated in the future because of changes to the applicable legal framework, modifications to customer service, management and relationship processes through the Customer Portal, or changes in the purposes of personal data processing.

Any updates or modifications will be made available through COX Portal.

Last Update Date: May 13, 2026