PRIVACY NOTICE

This Privacy Notice is made available to Data Subjects in Mexico so they can be aware of the practices followed by RIDEPUUL, S.A. de C.V. (hereinafter referred to as "PUUL"), headquartered at Torre BH, Piso 21, Blvd. Antonio L. Rodríguez 2100, 64650 Monterrey, N.L., in its capacity as the data controller of their personal data. This involves conducting activities such as collecting, obtaining, using, disclosing, transferring, sending, or storing personal data. The data collected through this Privacy Notice will be related to users.

1. Scope

This Privacy Notice governs all data processing activities and obligations that PUUL has in relation to personal data collected from its users.

Users: Individuals who request or receive transportation and related services through their account, in accordance with the terms and conditions applicable to the PUUL platform.

2. Purpose

This notice regulates the method of processing personal data in Mexico in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties ("LFPDPPP").

3. Processing of Personal Data. Categories of Data. Scope. Legal Basis.

PUUL collects different categories of personal data from users, depending on their location and based on the LFPDPPP.

3.1. Users.

PUUL may process personal data for:

- The provision of our services and to ensure that we provide the interested party with the requested services/information.

- Resolution of requests. We process the personal data of interested parties to respond to requests, requirements, complaints, or any other inquiries from users related to their personal data.

- Marketing purposes. We may use your data to inform you about promotions and discounts associated with our services.

In this case, the legal basis for processing will be the acceptance of the terms and conditions of use of the PUUL platform and the consent of the data subject to this notice.

To achieve the aforementioned purposes, we may collect the following categories of personal data:

a) Personal data such as last name, first name; gender; date of birth/age, profile picture.

b) Contact details, such as address/residence; phone number; email address.

c) Payment details, such as billing address; bank account/credit card number; last name and first name of the account holder, credit card expiration date, etc.

d) Location data: We collect precise or approximate location information from users' mobile devices if they allow us to do so through their device settings.

We collect your data during your communication with us regarding our services, such as technical support communications. These are the personal data you provide to us.

We also use third-party tools to facilitate, operate, and manage our website. These tools use cookies and other tracking technologies. These tools are created and managed by parties outside our control

The third-party tools we use on our digital platform will only insert cookies and other tracking technologies if you authorize them.

4. Rights as a Data Subject

The data subject has the rights of Access, Rectification, Correction, and Opposition in accordance with the LFPDPPP.

You can send your requests to exercise your rights to the following email address:

Please note that we may ask you to verify your identity before responding to such requests.

4.1 Response to Data Subject Requests

PUUL will respond to requests from interested parties within 20 business days following the receipt of the request. This period may be extended by another 20 days if necessary, taking into account the complexity and number of requests, as established by the LFPDPPP.

PUUL may take all reasonable measures to verify the identity of a data subject requesting access to the data, especially in the context of online services and online identifiers.

5. Transfer of Personal Data

The categories of recipients to whom PUUL may transfer the personal data of data subjects are as follows:

i. With PUUL's affiliates and subsidiaries

We share information with our affiliates and subsidiaries to assist us in providing services or performing data processing tasks on our behalf.

ii. With PUUL's service providers and business partners

These include the following:

- Payment processors and facilitators

- Background and identity verification providers

- Cloud storage providers

- Google, in connection with the use of Google Maps in the PUUL app (please refer to Google's Privacy Policy for information on data collection and use)

- Marketing partners and marketing platform providers, including social media advertising services, advertising networks, external data providers, and other service providers to reach or better understand our users and measure the effectiveness of advertising

- Research partners, including those conducting surveys or research projects associated with PUUL or on its behalf

- Providers helping PUUL improve the security of PUUL's apps and services

- Consultants, lawyers, accountants, and other professional service providers

iii. For legal reasons or in a dispute

Under the LFPDPPP, PUUL may share user data if required by applicable law, regulation, license or operating agreement, legal process, or government request, or when disclosure is appropriate due to security or similar matters.

This includes sharing data with law enforcement authorities, public health officials, other government entities, airports (if required by airport authorities as a condition for operating at their facilities), or other third parties as necessary to enforce our terms and conditions, protect PUUL's rights or property, or the rights, safety, or property of others, or in the event of a claim or dispute related to the use of our services. In the case of a dispute over the use of another person's credit card, the law may require us to share your data with the cardholder, including travel information.

This also includes sharing data with third parties in connection with negotiations for any merger with another company, sale of business assets, consolidation or restructuring, financing or acquisition of all or part of our business by another company, or while such transactions are ongoing.

iv. With consent

PUUL may share a user's data differently than described in this notice if we notify them and they do not object to the transfer.

6. Processing Security. Security Measures

As established by the LFPDPPP, PUUL has implemented security measures to protect your personal data.

The security of your personal information also depends on the protection of your user account. Please use a unique and secure password and keep your login credentials confidential. Additionally, make sure to log out after using our services on a shared device.

7. Data Protection Officer

We appoint the Data Protection Officer based on their professional qualifications, particularly their expert knowledge of data protection law and practices. The Data Protection Officer is responsible for ensuring that we always comply with our responsibilities under applicable data protection legislation. Contact information for the Data Protection Officer:

Correo electrónico: admin@puul.co

8. Privacy Notice Change Notifications

From time to time, we may update this Privacy Notice. If we do, we will update the "last updated" sections at the top of the Privacy Notice. If we make substantial changes to this notice, we may notify you on our website, through a blog post, by email, or by any method we determine. Your continued use of this website or our service and/or continued provision of information to us will be subject to the terms of the Privacy Notice in effect at that time.