CONFIDENTIALITY AND PERSONAL INFORMATION PROTECTION NOTICE

LOK FOODS S.A.S. with ID (NIT) 900.736.361-8, is a legally constituted commercial company in Bogotá D.C., Colombia, located at Cra 29 # 73-45, with email tucompralok@lokfoods.com, and the Data Controller for Personal Data. Therefore, we collect personal information you provide to us when you purchase our products or visit our website.

The categories of information we may collect include: (i) Personal identifiers, including name, email address, mailing address, phone number, and online identifiers. (ii) Internet activity Business information, including purchases Financial information, including credit card or debit card number. (iii) Location information, including general location data. (iv) Inferences from other data, including inferences created from other personal information
collected cookie policy. (v) We use cookies to create a better experience for you on our site. For example, cookies prevent you from having to log in repeatedly and help us remember the items you added to your cart. We also use third-party cookies, which are cookies placed by third parties for advertising and analytics purposes. You can control these cookies through your browser settings. (vi) Information from other sources. (viii) We may collect personal information about you from third party sources, including other consumers (e.g., referrals) and retail partners.

The personal data provided to the Data Controller will be collected, stored, used, analyzed, shared, updated, and reported for the purposes established in the corresponding authorization. Additionally, the Company may also process Personal Data, among other things, for the following purposes: (i) as an element of analysis to establish and maintain a labor, contractual, or commercial relationship, regardless of its nature, (ii) as an element of analysis for conducting market studies or commercial or statistical research, (iii) as a tool for offering products or services, whether from the Company or third parties, (iv) for carrying out any procedure before a public authority or a private person or entity, where the information is relevant, (v) so that all information related to credit, financial, commercial, service behavior, and data of a similar nature from third countries can be consulted, provided, reported, processed, or disclosed, (vi) for compliance with any other legal obligation of the Data Controller, including, but not limited to, SARLAFT obligations and document retention, and (vii) so that the information may be transmitted to third parties located within or outside the Republic of Colombia, for any of the purposes provided herein, (viii) to exercise its right to sufficiently know the Data Subject with whom it intends to establish relationships, provide services, and assess the present or future risk of such relationships and services, (ix) to carry out the necessary steps for the development of the pre-contractual, contractual, and post-contractual stages with the Company, concerning any of the products or services offered by it, whether acquired or not, or concerning any underlying business relationship that it has with it, as well as to comply with Colombian or foreign law and orders from judicial or administrative authorities; (x) to carry out marketing, sales, and promotional activities, telemarketing, customer service, brand activation activities, prizes, and promotions, directly or through third parties derived from commercial alliances or any other relationship; (xi) to implement relationship strategies with customers, suppliers, shareholders, and other third parties with whom the Company has contractual or legal relationships; (xii) to send invitations to events, improve products and services, or offer new products, and all
activities associated with the commercial relationship or existing link with the Company, or any that may arise; (xiii) to manage procedures (requests,
complaints, claims), conduct satisfaction surveys regarding the goods and services offered by the Company or related companies and its business partners;
(xiv) to disclose, transfer, and/or transmit Personal Data within and outside the country to the parent companies, affiliates, or subsidiaries of LOK FOODS
S.A.S., or to third parties as a result of a contract, law, or legal link that requires it or to implement cloud computing services.

As the Data Subject, you have the following rights with respect to the Data Controller: (i)To know, update, and rectify their personal data. (ii) To request proof of the authorization granted. (iii) To be informed by the Data Controller, upon request, about the use given to their personal data. (iv) To file complaints
with the Superintendence of Industry and Commerce for violations of the provisions of Law 1581 of 2012 and Decree 1074 of 2015, once the consultation
or complaint process has been exhausted with the Data Controller. (v) To revoke the authorization and/or request the deletion of the data when the processing
does not respect constitutional and legal principles, rights, and guarantees. (vi) To access their personal data that has been processed free of charge.

If you require more information to understand our personal data processing policy and any substantial changes made to it, please consult here https://lokfoods.com/pages/tratamiento-de-datos, or request it via email at info.us@lokfoods.com. If you wish to submit an inquiry, complaint, or request for information related to personal data protection, you may send an email to info.us@lokfoods.com or to the address 7911 NW 21 StreetMiami FL 33122 in the city of Miami in the country of United States. In any case, the communication must contain the following information: (i) The name, address of the data subject, and a means of contact for receiving the response, such as a phone number, email address, or residential address. (ii) The documents that prove the identity or representation of the person represented. (iii) A clear and precise description of the personal data regarding which the data subject seeks to exercise any of their rights. (iv) If applicable, any other elements or documents that facilitate the location of the personal data. Once the communication is received by the Data Controller, a response will be provided within the timeframes established by the applicable regulations.