Effective Date: October 6, 2026

Welcome to the privacy policy of STARFIT MÉXICO, accessible at www.starfitmex.com. We are deeply committed to protecting the personal information of every user who browses, shops, and interacts with our compact fitness equipment e-commerce platform. This policy is designed to help you fully understand how we collect, use, store, share, and safeguard your personal data when you use our services, as well as clarify the rights you hold over your information. By accessing and using our website and related services, you acknowledge that you have read, understood, and agreed to all terms outlined in this privacy policy. If you do not agree with any part of this document, please refrain from using our platform.

1. Introduction: Our Commitment to Your Privacy

At STARFIT MÉXICO, founded by a team of dedicated fitness enthusiasts, our core mission is to make daily physical movement accessible to everyone, no matter how limited their living space or busy their daily schedules are. This mission extends far beyond providing high-quality, durable portable workout gear – it also includes protecting your personal privacy as a fundamental part of our service promise. We operate in full compliance with Mexico’s applicable data protection regulations, including the Federal Law for the Protection of Personal Data Held by Private Entities (LFPDPPP), the Personal Information Protection Law of Mexico, and other relevant local regulatory requirements set by the National Institute of Transparency, Access to Information and Personal Data Protection (INAI). We strictly adhere to the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, storage limitation, integrity and confidentiality, and accountability when processing your personal information, to ensure your data is always handled with the highest level of care.

2. Scope of Application

This privacy policy applies to all personal information processing activities carried out by STARFIT MÉXICO when you access, browse, register an account, browse product listings, place orders, make payments, submit feedback, contact customer service, or participate in any interactive activities on our official website www.starfitmex.com. This policy applies to all forms of access to our services, whether you visit our website via desktop browser, mobile browser, or any new digital channel we may launch in the future to provide our fitness gear products to users across Mexico.

This policy does not apply to services provided by third parties on our platform, including but not limited to third-party payment service providers, independent logistics delivery partners, or external links that may appear on our website that direct you to third-party platforms. We strongly recommend that you review the respective privacy policies of those third parties before providing any personal information to them, as we do not control and cannot take responsibility for the data processing practices of those external entities.

3. What Personal Information We Collect and How We Use It

We only collect the minimum scope of personal information that is necessary to deliver our complete shopping experience to you, and we will never collect or process your data for purposes that are not explicitly stated in this policy. The types of information we collect and the corresponding use scenarios are as follows:

3.1 Information You Provide Actively to Us

We collect the information you voluntarily submit when you interact with our platform, including:

• ‌Account Registration Information‌: When you create a STARFIT MÉXICO user account, we collect your mobile phone number to verify your identity, secure your account, and help you recover access to your account if you forget your login credentials. You may also choose to submit your full name to personalize your account experience.
• ‌Order and Delivery Information‌: When you place an order for our compact fitness tools such as resistance bands, massage rollers, adjustable gliding discs and other products, we require you to provide your full name, detailed delivery address (including street name, neighborhood, city, postal code, and additional delivery notes if needed), contact phone number, and email address. This information is used exclusively to process your order, arrange shipping, ensure our logistics partners can deliver your purchased products accurately to your designated location, and send you order status updates.
• ‌Payment Information‌: When you complete payment for your order, we work with certified, regulated payment service providers to process your transaction. We do not store your full bank card number, payment password or complete payment credentials on our own servers. We only receive limited payment confirmation information from our payment partners to verify that your transaction has been completed successfully.
• ‌Feedback and Correspondence Information‌: When you submit a product review, send us an inquiry via our contact channels, leave a message in our FAQ interaction section, or contact our customer service team for after-sales support, you may voluntarily provide us with additional information including your feedback content, photos of products you wish to share, and any other details you choose to provide to help us resolve your query.
• ‌Return and After-Sales Information‌: If you request a return for an unused fitness product within our 30-day full refund policy window, we will collect relevant information related to your return application, to process your refund request efficiently and accurately.

3.2 Information We Automatically Collect When You Use Our Services

When you browse our website, we automatically collect certain technical information from your device to help us maintain platform stability, optimize user experience, and prevent fraudulent activities. This information includes:

• Your device information, such as your device model, operating system version, unique device identifier, network type, and operator name
• Your IP address, browser type, language settings, access time, browsing history of our product pages, click records, search keywords you entered on our platform, and the time you spend on each page
• Log information related to your interaction with our website, including crash logs, system administrative records, and performance data that helps us identify and fix technical issues quickly.

We use this automatically collected information to analyze user preference trends, optimize our product display layout, improve website loading speed, identify potential security risks, and ensure that all visitors can have a smooth, fast, and stable browsing experience when shopping for our portable workout gear.

3.3 Special Notes on Sensitive Personal Data

In line with the provisions of Mexico’s updated data protection regulations, we clearly define sensitive personal data as information that involves high privacy risks, including your health data, biometric information such as fingerprints or facial recognition data, religious belief, political affiliation, precise geolocation data, complete payment credentials, and account login passwords. We will never actively request any sensitive personal data that is not necessary for the normal operation of our e-commerce services. If for any special service scenario we need to process any of your sensitive personal data, we will first obtain your explicit written separate consent, and strictly limit the processing scope to the specific purpose you have agreed to, following the minimum necessary principle.

4. How We Share Your Personal Information

STARFIT MÉXICO will never sell, rent, or trade your personal information to any unrelated third parties for commercial marketing purposes without your explicit separate consent. We only share your necessary information with third parties in the following limited scenarios:

• ‌Sharing with Authorized Service Providers‌: We share the necessary information with our trusted, compliance-vetted service partners who perform key operational functions for us. These parties include our logistics and delivery partners, who only receive your delivery name, address, and phone number to complete the last-mile delivery of your fitness equipment orders; our certified payment processing service providers, who process your payment transactions in full compliance with Mexican financial regulatory rules; and our cloud service providers who host our website server data, and are bound by strict data confidentiality agreements. All of our third-party service partners are required to process your personal information strictly in accordance with this privacy policy, and they are not authorized to use your data for any independent unrelated purposes.
• ‌Compliance with Legal Obligations‌: We may disclose your personal information if we are required by applicable Mexican laws, judicial procedures, government administrative orders, or requests from authorized law enforcement or regulatory authorities to make such a disclosure. We will only disclose the scope of information that is strictly required to meet the legal compliance requirements.
• ‌Business Transfer Scenarios‌: In the event of a merger, acquisition, asset reorganization, or sale of all or part of the assets of STARFIT MÉXICO, we will ensure the confidentiality of personal information during the transaction process, and require the new entity that takes over the operation of our platform to continue to be bound by the terms of this privacy policy to protect your personal data.

5. How We Store and Protect Your Personal Information

All of your personal information collected by STARFIT MÉXICO will be stored in data centers located within the territory of Mexico, in full compliance with local data localization requirements for e-commerce businesses operating in the country. We will not transfer your personal data to any third countries or international organizations outside of Mexico unless we have obtained your explicit consent, or the transfer meets all the requirements stipulated by applicable Mexican data protection laws.

We retain your personal information only for the period that is necessary to fulfill the specific service purposes for which the information was collected, or for the period required by mandatory legal retention requirements. For example, we retain your order information for the duration required by Mexican tax regulations and consumer protection laws to support after-sales services, compliance audits, and dispute resolution. After the relevant retention period expires, we will securely delete or anonymize your personal information in accordance with standard industry security protocols.

We have implemented a series of industry-standard technical and organizational security measures to protect your personal information from unauthorized access, disclosure, misuse, modification, damage or loss: we use end-to-end SSL encryption during data transmission on our website, we regularly perform security audits and system vulnerability scans on our servers, we implement strict role-based access control for all our internal team members, so that only a very limited number of authorized personnel can access your personal information, and we conduct regular data protection training for all our employees. In the unfortunate event of a personal data security incident that may pose a high risk to your rights and interests, we will notify you and the relevant Mexican data regulatory authority in accordance with the procedures and time limits required by law, without any unnecessary delay.

6. Your Rights Over Your Personal Information

Under the applicable Mexican data protection laws, you have a series of clear, legally guaranteed rights over your personal information processed by STARFIT MÉXICO:

1. ‌Right of Access‌: You have the right to request a copy of all the personal information we hold about you, and to obtain details about how we have processed your data.
2. ‌Right of Rectification‌: If you find that any of your personal information stored on our platform is inaccurate or incomplete, you can submit a request to us to correct and update your information at any time.
3. ‌Right of Erasure‌: You have the right to request us to delete your personal information under specific circumstances, including when the information is no longer necessary for the original service purpose for which it was collected, or when you withdraw your previous consent to the data processing.
4. ‌Right to Restriction of Processing‌: You have the right to request us to restrict the processing of your personal information when you contest the accuracy of the data, or when the processing is no longer lawful, or when we no longer need the data but you require it for the establishment, exercise or defense of legal claims.
5. ‌Right to Data Portability‌: You have the right to request us to provide your personal information that you have submitted to us, in a structured, commonly used and machine-readable format, so that you can transmit this data to another data controller.
6. ‌Right to Withdraw Consent‌: You have the right to withdraw your consent to our processing of your personal information at any time. Please note that the withdrawal of consent will not affect the lawfulness of any processing activities we have carried out before you submitted your withdrawal request. If you withdraw your consent to certain necessary processing activities, you may no longer be able to use the corresponding features of our services that require that information.
7. ‌Right to Account Cancellation‌: You have the full right to cancel your STARFIT MÉXICO user account at any time. After you complete the account cancellation process, we will securely delete all your personal information within the scope permitted by applicable law, except for the information we are required to retain to meet mandatory legal retention obligations.

To exercise any of the above rights, you can contact us at any time via the contact methods listed in Section 8 of this policy. We will respond to your request within the time period stipulated by Mexican applicable data protection laws, and we will not charge any unreasonable fees for handling your reasonable, legitimate access requests.

7. Updates to This Privacy Policy

We may make necessary updates and revisions to this privacy policy from time to time, to adapt to new business operation requirements, adjust to updated Mexican legal regulatory requirements, or respond to new technological developments that affect our data processing practices. When we make updates to this policy, we will prominently post the revised version on the homepage of our website www.starfitmex.com, clearly mark the new effective date of the revised policy, and take reasonable measures to notify you of the important changes to the policy. Your continued use of our website services after the effective date of the updated privacy policy will be regarded as your confirmation and agreement to all the revised terms of the new policy.

8. Contact Information

If you have any questions, comments, suggestions, or complaints about this privacy policy, or if you need to submit a request to exercise any of your data rights, you can contact us through the following official channels at any time:

• Company Name: STARFIT MÉXICO
• Official Website: www.starfitmex.com
• Contact Email: [email protected]
• Contact Address: Efrén Rebolledo 34A, Col. Obrera, Cuauhtémoc, C.P. 06800, Ciudad de México, México
• Contact Phone Number: +52 55 6478 6399‌

Our dedicated data protection team will review and respond to your inquiry as soon as possible, normally within no more than 15 business days. If you are not satisfied with our response to your personal data related issue, you also have the right to submit a complaint to the National Institute of Transparency, Access to Information and Personal Data Protection (INAI), the competent data protection regulatory authority in Mexico.

At STARFIT MÉXICO, we believe that protecting your personal privacy is the foundation of the trust that you place in our brand. We will continue to improve our data protection practices as we grow, to make sure every shopping experience on our platform is not just about finding the perfect compact fitness gear for your active lifestyle, but also a completely safe, transparent experience where your personal information is always fully protected.