SRC ATHLETICS

Effective Date: November 1, 2026

At SRC ATHLETICS, we are deeply committed to protecting the personal data and privacy rights of every user who visits our website www.srcathletics.com and uses our outdoor gear shopping services. This Privacy Policy is designed to clearly explain how we collect, use, store, share, and protect your personal information when you interact with our platform, in full compliance with all applicable data protection laws in Mexico and global regulatory standards for e-commerce operations. We encourage you to read this document carefully to fully understand our information handling practices, as your trust is the foundation of everything we build as an outdoor lifestyle brand rooted in Mexico, dedicated to providing reliable, high-quality gear for every person who finds joy exploring nature.

1. Introduction and Scope of Application

This Privacy Policy applies to all information processing activities carried out by SRC ATHLETICS S.A. DE C.V., with registered address at Blvd. Atlixcáyotl 1810, Local 6, Oficina D-1, 72453 Heroica Puebla de Zaragoza, Puebla, México, across our official website www.srcathletics.com, all associated subdomains, mobile-optimized versions of our platform, and any related services we provide to customers including product browsing, order placement, payment processing, after-sales support, warranty services, and promotional program participation. This policy covers all types of personal information we collect through any of our service channels, regardless of whether you access our platform via desktop browser, mobile device, or other emerging access technologies.

This policy does not apply to services provided by third parties that you may access through links on our website, including but not limited to external payment gateways, third-party logistics providers, or social media platforms that you choose to interact with from our site. We strongly recommend that you review the independent privacy policies of those third-party service providers before sharing any of your personal information with them, as we do not control their information handling practices and cannot assume responsibility for their data protection measures.

By accessing, browsing, or creating an account on our website, placing an order for any of our products including collapsible buckets, collapsible cups, carabiners, and other outdoor gear, contacting our customer support team, or otherwise using any of our services, you acknowledge that you have read, understood, and agree to be bound by all terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please refrain from using our website and our services immediately.

2. Information We Collect From You

We strictly follow the principles of legality, fairness, transparency, and data minimization when collecting your personal information. We only collect information that is directly necessary to deliver the e-commerce services you request, and we never collect information that is irrelevant to our core operations without your explicit separate consent. The categories of information we may collect include the following:

2.1 Information You Provide Voluntarily to Us

• ‌Account Registration Information‌: When you create a personal account on our platform to enjoy features such as order tracking, saved shipping addresses, and exclusive promotional offers, you may provide us with your full name, valid email address, contact phone number, and a password of your choosing to secure your account. This information is necessary to verify your identity, protect your account security, and ensure we can reach you with important updates related to your purchases.
• ‌Transaction and Order Information‌: When you place an order for any of our outdoor products, we will collect the full name of the intended recipient, complete shipping and billing address, contact telephone number, and payment-related information required to process your purchase. For orders that require customs clearance for cross-border delivery, we may also request your government-issued identification information as legally required to complete customs declaration formalities, and we will only use this information for that specific compliance purpose.
• ‌Payment Information‌: When you complete checkout on our platform, we do not store full sensitive payment details such as complete credit or debit card numbers on our internal servers. We only work with PCI DSS certified payment processing partners who handle all sensitive payment data securely, and we retain only the minimal payment confirmation information required to verify completed transactions, resolve payment disputes, and maintain accurate financial records in compliance with Mexican tax regulations.
• ‌Communication Information‌: When you reach out to our customer service team via email at [email protected], phone at +52 222 2225 1869, or our website contact form for questions about products, order status, return requests, or warranty support, we will collect the content of your messages, your contact details, and any additional information you voluntarily share with our support team to respond to your inquiry efficiently.
• ‌Survey and Preference Information‌: On optional occasions, we may invite you to participate in customer satisfaction surveys, market research activities, or feedback programs to help us improve our product selection and service quality. Any feedback, preference data, or demographic information you choose to provide through these activities is collected only with your full consent, and you may opt out of providing such information at any time without negative impact on your ability to shop on our platform.

2.2 Information We Collect Automatically When You Use Our Platform

• ‌Device Information‌: We automatically collect standard technical information about the device you use to access our website, including device model, operating system version, unique device identifiers, IP address, browser type and version, language settings, and general geolocation information derived from your IP address. This information helps us optimize our website display for different devices, identify potential security risks, and troubleshoot technical issues to provide a smooth browsing experience.
• ‌Usage and Service Log Information‌: We automatically record standard service log data related to your activities on our platform, including pages you view, search queries you enter, product browsing history, click interactions, add-to-cart actions, time and date of your visit, and referring website addresses. This aggregate usage data helps us analyze platform performance, improve our product recommendation logic, and understand user preferences to curate a better selection of outdoor gear that matches the needs of our community.
• ‌Cookie and Similar Tracking Technologies‌: Our website uses Cookies, web beacons, and other similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your local device that help us remember your login status, save your preferred language and regional settings, keep items in your shopping cart between visits, and present relevant promotional offers that match your interests. You may adjust the settings on your web browser to refuse or delete Cookies at any time, but please note that disabling Cookies may cause certain core functionalities of our e-commerce website to operate improperly or become unavailable.

3. How We Use Your Personal Information

We will only process your personal information for purposes that are directly related to delivering our services, fulfilling our legal obligations, and protecting the legitimate interests of both our brand and our users, including the following use cases:

1. ‌Core Service Delivery‌: We use your personal information to complete the full lifecycle of your order, including verifying your identity during account creation, processing your payment, coordinating with our logistics partners to deliver your purchased outdoor gear to the correct shipping address, providing real-time order status updates, and processing returns, exchanges, and refunds in accordance with our published Refund and Returns Policy.
2. ‌Platform Security and Risk Protection‌: We use device information, usage log data, and transaction information to monitor for suspicious account activity, prevent unauthorized access, detect and block fraudulent transactions, protect your personal data from unauthorized disclosure, and maintain the overall security and stability of our e-commerce platform for all users.
3. ‌Personalized Service Improvement‌: With your appropriate consent where required by law, we may use your browsing history, purchase records, and stated product preferences to provide personalized product recommendations that match your interest in outdoor activities, send you updates about new product launches, limited-time promotions such as our 30% off limited offers, and exclusive event information that we believe may be relevant to you as an outdoor enthusiast. You may opt out of receiving these marketing communications at any time by clicking the unsubscribe link included in all our marketing emails, or by sending a request to our support email at [email protected].
4. ‌Legal and Compliance Obligations‌: We may process your personal information when it is necessary to comply with legally binding requests from public authorities, fulfill our tax reporting and audit obligations under Mexican law, respond to judicial proceedings, or protect the legal rights, property, and personal safety of our company, our users, our employees, and the general public.
5. ‌Product and Service Optimization‌: We may aggregate and anonymize collected user data to generate statistical insights that help us analyze market trends, identify high-demand product categories to expand our outdoor gear catalog, optimize our website user interface, and improve the overall quality of services we provide to our entire customer community. Anonymized aggregate data that cannot be linked back to any identifiable individual is not considered personal information under applicable data protection laws, and we may use and disclose such data for any legitimate business purpose without additional restriction.

4. How We Share and Disclose Your Personal Information

We never sell, rent, or lease your personal information to any third parties for their independent marketing purposes, and we only share your information with external parties in the limited circumstances outlined below:

• ‌Authorized Service Providers‌: We share necessary personal information with trusted third-party service providers who perform critical business functions on our behalf, including PCI-certified payment processors, regulated logistics and delivery companies, cloud hosting service providers that host our website infrastructure, email communication service platforms, and IT security maintenance vendors. All these third parties are bound by strict data protection agreements that require them to process your personal information only in accordance with our explicit instructions, maintain adequate security measures to protect your data, and are prohibited from using your information for any purposes outside of the specific services they are contracted to provide to us.
• ‌Legal Required Disclosures‌: We may disclose your personal information if we determine in good faith that such disclosure is necessary to comply with applicable laws, regulations, court orders, or mandatory governmental requests, or to respond to emergencies where the safety of individuals, the public, or our platform is at imminent risk.
• ‌Business Transaction Transfers‌: In the event of a merger, acquisition, reorganization, sale of all or substantially all of our company assets, or other similar business transfer, your personal information may be transferred to the succeeding entity as part of the transaction. We will provide you with reasonable advance notice before any such transfer of your personal data occurs, and we will ensure that the receiving party agrees to uphold the same level of personal data protection standards as outlined in this Privacy Policy.

5. Data Storage and Security Protection

All personal information we collect from our users is stored on secure servers located within the territory of Mexico, in full compliance with applicable data localization requirements. In the event that any data transfer to a jurisdiction outside of Mexico becomes necessary for operational reasons, we will ensure that adequate data protection safeguards are implemented in full accordance with applicable data protection regulations, and we will obtain any required separate consents from affected users and complete all legally required compliance procedures before carrying out any cross-border data transfer.

We implement industry-leading comprehensive technical and organizational security measures to protect your personal information from unauthorized access, accidental loss, tampering, destruction, or disclosure, including end-to-end data encryption during transmission and at rest, strict role-based access control systems that limit access to personal data only to authorized employees who require the information to perform their job duties, regular security audits and vulnerability assessments, and comprehensive data security incident response protocols to contain and mitigate any potential data breach rapidly, with legally required notifications to affected users and regulatory authorities completed within the timelines mandated by applicable law. All of our employees who process personal user data are required to complete regular data protection training and sign binding confidentiality agreements.

We will retain your personal information only for as long as strictly necessary to fulfill the purposes for which the information was originally collected, including completing all pending transactions, honoring warranty obligations, resolving any ongoing disputes, and enforcing our contractual agreements. After the applicable retention period expires, we will securely delete or fully anonymize your personal information in a manner that prevents it from being associated back to any identifiable individual. For standard transaction records, we retain related personal data for a period of 5 years after the completion of your last order to comply with Mexican tax and commercial record-keeping requirements. If you choose to permanently delete your user account on our platform, we will remove all your stored personal information within 30 business days, except for the limited data we are legally required to retain for compliance, tax, and audit purposes.

6. Your Rights Over Your Personal Information

Under applicable data protection laws, you hold full and enforceable rights over the personal information we hold about you, including the following rights:

1. ‌Right of Access‌: You may submit a request to us to obtain a copy of all personal information we have collected and processed related to you, at no additional cost for one access request per 12-month period.
2. ‌Right to Rectification‌: If you find that any of your personal information stored on our platform is inaccurate, incomplete, or outdated, you may request that we correct and update that information immediately. You may also modify most of your account details directly through the “My Account” page on our website at any time.
3. ‌Right to Erasure‌: You may request that we permanently delete your personal information in circumstances where the information is no longer necessary for the original purposes for which it was collected, you withdraw your previously provided consent for processing, or you object to the processing and we have no overriding legitimate legal grounds to continue holding your data.
4. ‌Right to Restriction of Processing‌: You have the right to request that we temporarily restrict the processing of your personal data in scenarios where you contest the accuracy of the data, the processing is unlawful, or we no longer need the data but you require us to retain it for the establishment, exercise, or defense of legal claims.
5. ‌Right to Data Portability‌: You may request to receive a machine-readable copy of all the personal data you have provided to us, for the purpose of transmitting that data to another data controller, where technically feasible.
6. ‌Right to Object‌: You may object at any time to our processing of your personal information for direct marketing purposes, or to processing that we justify on the basis of our legitimate interests, by submitting a request to our designated support contact.
7. ‌Right to Withdraw Consent‌: You may withdraw any consent you previously provided to us for processing your personal information at any time, without affecting the lawfulness of any processing activities we carried out prior to the withdrawal of your consent.

To exercise any of the rights listed above, you may submit a formal request by sending an email to our dedicated data protection team at [email protected], or contact us via phone at +52 222 2225 1869. We will respond to all valid user rights requests within a maximum of 15 business days, and we will only request additional information to verify your identity to ensure that we do not disclose your personal information to unauthorized third parties. If you believe our processing of your personal information has violated applicable data protection laws, you also retain the right to submit a formal complaint to the competent data protection regulatory authority in Mexico.

7. Updates to This Privacy Policy

We may periodically update and revise the terms of this Privacy Policy to reflect changes in our business operations, new service features, updates to legal and regulatory requirements, or improvements to our data protection practices. When we make material changes to this policy, we will prominently post the updated version on our website with a revised “Effective Date” clearly marked, and we may send a direct notification to all registered users via email to inform them of the upcoming changes before they take effect. Your continued use of our website and our services after the revised Privacy Policy goes into effect will constitute your acknowledgment and acceptance of the updated terms. We encourage you to revisit this page on a periodic basis to stay informed about our latest information handling practices.

8. Contact Information

If you have any questions, comments, concerns, or complaints regarding this Privacy Policy, or any aspect of our personal information processing practices, you may contact us directly at any time:

• Company Name: SRC ATHLETICS S.A. DE C.V.
• Physical Address: Blvd. Atlixcáyotl 1810, Local 6, Oficina D-1, 72453 Heroica Puebla de Zaragoza, Puebla, México
• Contact Email: [email protected]
• Contact Telephone Number: +52 222 2225 1869

Our dedicated data protection representative will respond to your inquiry promptly and work with you to resolve any concerns you may have about your privacy and personal data security. We are committed to upholding the highest standards of data protection for every member of our outdoor community, so you can shop for collapsible buckets, collapsible cups, carabiners, and all your adventure gear with complete peace of mind.