PRIVACY POLICY

Never Lost, S.A.P.I. de C.V. (hereinafter, “Never Lost,” “we,” “us,” or “the Responsible Party”), with conventional address located at Av. Patria 1201, Int. Citisa, Col. Villa Universitaria, Zapopan, Jalisco, México, C.P. 45110, phone 3335590215, email contacto@lo-co.app, is aware that as a visitor to our offices and/or Platform, and as a consumer or potential consumer of our products and/or services, you have the right to know what information we collect from you and our practices in relation to such information.

The conditions contained herein are applicable to the information that is collected on behalf of and by the Responsible Party or any of its affiliates or subsidiaries, by any means, including through any Platform operated by the Responsible Party (including the LoCo mobile application and website).

A. Personal Data

The personal data that the Responsible Party may collect directly or indirectly consists of the following: personal data considered as identification data are all those related to the identification of the person (full name, marital status, date of birth, nationality, place of birth, address, landline and/or cell phone numbers, email, company for which you work, occupation, and/or direct relatives, fingerprints, autograph signature).

In addition to the personal data mentioned above, we inform you that, to fulfill the purposes set forth in this Privacy Policy, sensitive personal data will be collected and processed, such as data that refer to the most intimate sphere of the owner, or whose misuse may give rise to discrimination or entail a serious risk to the owner. In particular, data that may reveal aspects such as racial or ethnic origin, present and future health status, genetic information, religious, philosophical and moral beliefs, union affiliation, and political opinions are considered sensitive. We commit to treating such data under the strictest security measures that guarantee its confidentiality.

We commit to treating all data obtained under the strictest security measures that guarantee its confidentiality.

B. Purposes

The main purpose for which we collect your data is to provide the services you have requested and to offer you a better service of recreation, tourism, provision of services, suggestions, guides, tours, and the other content on the Responsible Party's Platform, at www.lo-co.app, telephone 3336102072, email contacto@lo-co.app. As a visitor to our offices and/or Platform, and as a consumer or potential consumer of our products and/or services, you have the right to know what information we collect from you and our practices in relation to such information.

We also use your data to inform you of changes to our services and to evaluate the quality of the service we provide, complying with internal standards and processes that ensure the quality and safety of our Clients.

The secondary purposes for which we collect your data are: verification of the User's identity; billing and collection; informing you about new products, services, or changes to them; promotional messages; evaluating service quality; complying with obligations arising from the provision of the service; complying with applicable legislation; responding to requests for information from any authority for research, statistical, or regulatory purposes; responding to your comments related to the provision of services; sending notices and information about our services; and supporting our continuous improvement process.

C. Transfers and Managers of Personal Data

We inform you that your personal data may be transferred to third parties and may be shared with managers for their treatment within and outside the country, by persons other than the Responsible Party, who will issue the instructions for their treatment. In this sense, your information may be transferred to or shared with: (i) various professionals, technicians, and assistants, as well as other private entities in connection with subrogated customer service; (ii) loyalty program administrators; (iii) business partners of the Responsible Party, so that they may administer and operate services complementary to those of the Responsible Party; (iv) companies or third parties that jointly operate with the Responsible Party any product, service, software, or computer infrastructure that serves as a platform for operations or services; (v) third-party service providers or product vendors necessary for our operation, as well as commission agents that carry out operations or provide services in accordance with applicable legislation and our bylaws (such as data processors, marketing companies, courier companies, security companies, value transport companies, advertising agencies, and information custodians) for purposes of this Privacy Policy; (vi) professionals, advisors, or external consultants, for purposes of managing sales operations and other acts, as well as for the defense of our interests in any legal controversy arising from such operations and services (such as collection agencies, external auditors, and legal or accounting advisors); and (vii) governmental and/or judicial agencies that, by operation of law, request and/or require personal data of our Clients and/or their family members for compliance with applicable laws.

If you do not express your opposition to the transfer of your personal data, it will be understood that you have given your consent to do so.

The Responsible Party informs you that all contracts for the provision of services with third parties that involve the processing of your personal information on behalf of the Responsible Party will include a clause guaranteeing an adequate level of protection of personal data. In all cases, the handling of personal data will be carried out in compliance with the Federal Law on Protection of Personal Data Held by Private Parties (the “Law”) and its Regulations.

The information you provide must be true and complete. The veracity of the data provided is your responsibility, and the Responsible Party shall not be liable in this regard.

D. Exercise of ARCO Rights

At any time, you may exercise your ARCO rights (access, rectification, cancellation, and opposition) regarding the processing of your personal data, and you may revoke the consent granted in this document, by contacting us at contacto@lo-co.app. The procedure and requirements your request must contain, in accordance with the Law and its Regulations, are as follows:

(1) Name and address — if the address is not included, the request will be considered not received. (2) A document proving your identity or, for a representative, proof of identity and legal authority to act (a copy of valid official identification; the representative must prove the identity of the data owner, their own identity, and their power of representation by means of a public instrument, a power of attorney signed before two witnesses, or a statement made in a personal appearance by the data owner). (3) A clear and precise description of the personal data to which you wish to access, rectify, cancel, or oppose. (4) A description of other elements that facilitate locating your personal data (e.g., website, store). Supporting documents must be scanned and attached to your email so that we may verify their authenticity. To learn more about the procedure, requirements, and deadlines for exercising ARCO rights, you may contact contacto@lo-co.app to request the corresponding format.

E. Surveillance Video

We inform you that you may be recorded by Never Lost's security cameras at our physical offices. The resulting sounds and images are used to provide security for you and other visitors. Users are not recorded during the provision of services, guides, and/or tours by Never Lost's security cameras; Never Lost disclaims any responsibility in this regard, as it does not authorize, request, or establish that the provision of Services, guides, and/or tours be recorded for security purposes.

Never Lost has adopted the security levels for the protection of personal data legally required by the Law and its Regulations, under the principles of legality, quality, consent, information, purpose, loyalty, proportionality, and accountability, all under strict rules of security, confidentiality, and consistency of information.

We inform you that your personal data will be protected under strict administrative, technical, and physical security measures implemented to protect it against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

F. Modifications to This Privacy Policy

The Responsible Party reserves the right to make modifications or updates to this Privacy Policy at any time, to address legislative or jurisprudential developments, internal policies, new requirements related to the provision of our services, or market practices. Any modification to this Privacy Policy will be made available through our web portal, in the “Privacy Policy” section.

This Privacy Policy was last modified on July 24, 2026.