Privacy Policy.

01About PesoRama

PesoRama Inc. is a Canadian-founded value retailer building Mexico’s premier dollar store chain under the JOi Dollar Plus banner.

PesoRama operates JOi Dollar Plus stores across Mexico. The company’s public market listings are TSXV: PESO, OTC: PSSOF, and FSE: ZE6.

This Privacy Policy applies to PesoRama’s corporate and investor relations website. Separate privacy notices may apply to JOi Dollar Plus retail operations, employment applications, supplier relationships, in-store operations, invoicing, video surveillance, or other Mexico-based activities.

02What is personal information?

Personal information means information about an identifiable individual, or information that can reasonably be used to identify an individual.

Personal information may include your name, email address, telephone number, organization, title, investor communication preferences, reason for contacting us, message content, subscription preferences, information provided when requesting investor materials, and any other information you choose to provide to PesoRama.

In most circumstances, personal information does not include business contact information used solely to communicate with you in your capacity as an employee, representative, director, officer, advisor, investor relations professional, journalist, analyst, supplier, landlord, or other representative of an organization.

03Our privacy principles

We follow principles that guide how we collect, use, and disclose personal information:

1. We are accountable for personal information under our control.
2. We identify the purposes for collecting personal information at or before the time it is collected.
3. We obtain consent where required, except where collection, use, or disclosure is otherwise permitted or required by law.
4. We limit the personal information we collect to what is necessary for our identified purposes.
5. We use, disclose, and retain personal information only for the purposes for which it was collected, unless you consent to another use or disclosure or the law permits or requires otherwise.
6. We take reasonable steps to keep personal information accurate and up to date.
7. We safeguard personal information using security measures appropriate to the sensitivity of the information.
8. We are open about our privacy practices.
9. We provide access to personal information upon request, subject to legal limitations.
10. We address privacy questions, requests, and concerns.

04Information we collect

We do not collect personal information indiscriminately. We limit the amount and type of personal information we collect to what is necessary for the purposes identified in this Privacy Policy or otherwise permitted or required by law.

We may collect personal information directly from you when you:

• submit an inquiry through our website;
• contact Investor Relations;
• subscribe to news, press releases, newsletters, alerts, or other updates;
• request investor materials, public company information, presentations, regulatory information, or corporate documents;
• download or interact with investor presentations, PDFs, market-data resources, or press releases;
• communicate with us by email, phone, social media, or other channels;
• submit a media, partnership, supplier, landlord, business development, or other inquiry;
• attend or register for investor presentations, meetings, webinars, events, or calls;
• apply for employment or submit career-related information; or
• otherwise choose to provide information to us.

Depending on the interaction, this information may include your name, last name, email address, phone number, organization, title, investor status, reason for contact, communication preferences, comments, message content, and any information included in documents or attachments you provide.

05Website and technical information

Certain information may be collected automatically when you visit our website. This may include:

• IP address;
• browser type and version;
• device type;
• operating system;
• referring website;
• pages viewed;
• date and time of visit;
• approximate location derived from IP address;
• time spent on pages;
• links clicked;
• files requested or downloaded;
• website errors or diagnostics; and
• other website usage data.

We use this information to operate, secure, measure, maintain, and improve our website and investor relations communications. We may also use it to detect security incidents, prevent misuse, troubleshoot technical issues, and understand how visitors interact with our corporate and investor content.

06Cookies and similar technologies

Like many websites, our website may use cookies, pixels, tags, scripts, local storage, and similar technologies.

Cookies are small files placed on your device that help websites function, remember preferences, measure traffic, improve user experience, and support security. Some cookies are necessary for the website to work properly. Others may help us understand how visitors use the website or interact with investor relations content.

We may use cookies and similar technologies to:

• maintain website functionality;
• measure website traffic and performance;
• understand visitor preferences;
• improve content and navigation;
• support investor communications;
• protect website security;
• identify technical issues; and
• evaluate the effectiveness of communications and campaigns.

Most browsers allow you to manage or disable cookies. If you disable cookies, some features of the website may not function properly.

07Market data and TradingView widgets

Our website may display stock quotes, charts, performance data, market information, or other investor tools provided by third-party services such as TradingView.

When you view or interact with these widgets, the third-party provider may collect information from your browser or device and may use cookies, local storage, analytics, advertising technologies, or similar tools in accordance with its own privacy policy and cookie policy.

PesoRama does not control the cookies or tracking technologies used by third-party market-data providers. We encourage you to review the privacy and cookie policies of any third-party service you interact with through our website.

08Analytics and third-party service providers

We may use third-party service providers to help operate and improve our website, host files, provide security, process contact-form submissions, manage email subscriptions, distribute investor communications, analyze website use, or support investor relations activities.

These service providers may process information on our behalf, including website usage data and information you provide through forms or subscriptions. We require service providers to use personal information only for the services they provide to us, or as otherwise permitted or required by law.

We do not sell your personal information.

09How we use personal information

We may use personal information for the following purposes:

• to respond to your inquiries, requests, comments, or messages;
• to provide investor-related notices, news releases, newsletters, presentations, public documents, filings, or other corporate information;
• to manage subscriptions and communication preferences;
• to communicate with shareholders, potential investors, analysts, media, advisors, and other stakeholders;
• to operate, maintain, secure, and improve our website;
• to understand how visitors use our website and investor materials;
• to provide access to corporate presentations, press releases, market-data resources, and other investor materials;
• to administer events, calls, webinars, or meetings;
• to evaluate employment, supplier, landlord, partnership, media, or business inquiries;
• to comply with legal, regulatory, stock exchange, securities, tax, accounting, and reporting obligations;
• to detect, prevent, and respond to fraud, security incidents, misuse, or unlawful activity;
• to protect our rights, property, business, personnel, stakeholders, and users; and
• for any other purpose to which you consent or that is permitted or required by law.

Before personal information is used or disclosed for a new purpose, we will obtain consent where required unless the use or disclosure is otherwise permitted or required by law.

10Consent

By providing us with personal information, you consent to the collection, use, and disclosure of that information as described in this Privacy Policy.

The form of consent may vary depending on the circumstances and the sensitivity of the information. Consent may be express or implied. For example, if you submit a contact form or email us, we may use the information you provide to respond to your inquiry.

You may refuse to provide personal information or withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. If you refuse or withdraw consent, we may be unable to provide certain information, respond to certain requests, or continue certain communications.

11Investor communications and anti-spam

PesoRama is committed to ensuring that you do not receive unsolicited electronic messages.

Where required by Canada’s Anti-Spam Legislation or other applicable laws, we will obtain consent before sending commercial electronic messages. Our electronic communications will identify PesoRama as the sender and provide a way to unsubscribe or manage your communication preferences where required.

You may unsubscribe from investor updates, newsletters, or other electronic communications at any time by using the unsubscribe mechanism included in the message or by contacting us.

Please note that even if you unsubscribe from promotional or investor update communications, we may still send you transactional, legal, regulatory, or administrative communications where permitted or required by law.

12Disclosure of personal information

We disclose personal information only as described in this Privacy Policy, with your consent, or as otherwise permitted or required by law.

We may disclose personal information to:

• PesoRama affiliates, subsidiaries, and related entities;
• service providers that support our website, hosting, analytics, security, communications, investor relations, email distribution, data storage, and business operations;
• third-party market-data, document-hosting, or investor communication providers where you interact with those services;
• professional advisors, including legal, accounting, audit, insurance, investor relations, financial, and communications advisors;
• securities regulators, stock exchanges, government authorities, law enforcement, courts, or other public bodies where required or permitted by law;
• parties involved in a financing, merger, acquisition, reorganization, sale of assets, corporate transaction, or due diligence process;
• third parties where necessary to protect our rights, property, business, personnel, stakeholders, or users; and
• any other party with your consent or as otherwise permitted or required by law.

13Cross-border storage and processing

PesoRama operates in Canada and Mexico and may use service providers located in Canada, Mexico, the United States, or other jurisdictions.

Your personal information may be accessed, stored, or processed outside your province, state, or country of residence. In those cases, your personal information may be subject to the laws of the jurisdiction where it is stored or processed, including lawful access by courts, law enforcement, regulators, or government authorities.

14Retention of personal information

PesoRama retains personal information only for as long as necessary to fulfill the purposes for which it was collected, or as otherwise permitted or required by law.

Retention periods may vary depending on the type of information and the purpose for which it was collected. For example, investor communications, subscription records, business inquiries, website logs, legal records, employment-related information, and regulatory records may be retained for different periods.

When personal information is no longer required, we will securely delete, destroy, anonymize, or archive it in accordance with applicable law and our internal practices.

15Safeguards

We use reasonable physical, technical, and administrative safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, modification, or destruction.

These safeguards may include access controls, secure systems, administrative controls, contractual protections with service providers, and other measures appropriate to the sensitivity of the information.

No website, email system, network, or method of electronic transmission is completely secure. We cannot guarantee absolute security, but we take reasonable steps to protect personal information under our control.

16Accuracy, access, and correction

We take reasonable steps to ensure that personal information under our control is accurate, complete, and up to date for the purposes for which it is used.

You may request access to personal information we hold about you. You may also request that we correct personal information you believe is inaccurate or incomplete.

In some circumstances, we may be unable to provide access or make a correction, including where doing so would reveal personal information about another individual, compromise confidentiality, affect legal privilege, create security concerns, or where access is otherwise restricted by law.

17Mexico privacy rights

To the extent applicable, individuals in Mexico may have rights under Mexican privacy laws, including rights of access, rectification, cancellation, and opposition regarding personal data.

Separate privacy notices may apply to JOi Dollar Plus activities in Mexico, including retail customer matters, invoicing, employment, suppliers, video surveillance, and other operational activities. Where a separate JOi Dollar Plus privacy notice applies, that notice will govern the relevant activity.

18Links to other websites

Our website may contain links to third-party websites, including regulatory filing platforms, news release platforms, social media sites, stock exchange resources, investor presentation materials, market-data providers, video platforms, map services, and JOi Dollar Plus websites.

We are not responsible for the privacy practices, content, or security of third-party websites. We encourage visitors to review the privacy policies of any external websites they visit.

19Social media

PesoRama and JOi Dollar Plus may maintain social media channels to engage, share, and communicate with stakeholders, customers, investors, and the public.

Information you post or share on social media platforms may be visible to other users and is governed by the privacy policies and terms of those platforms. We may monitor, respond to, moderate, or remove content on our social media channels where appropriate and permitted by the platform rules and applicable law.

20Children’s privacy

Our corporate and investor relations website is not directed to children. We do not knowingly collect personal information from children through our investor relations website. If you believe a child has provided personal information to us, please contact us so we can take appropriate steps.

21Changes to this Privacy Policy

We may amend this Privacy Policy from time to time. Any changes will be posted on our website with an updated “Last updated” date.

Where required by applicable law, we will take reasonable steps to notify you of material changes and obtain consent where required.

22Contact us

If you have questions, concerns, requests, or complaints about this Privacy Policy or PesoRama’s handling of personal information, please contact:

PesoRama Inc.
Attention: Privacy Officer / Investor Relations
Email: investors@pesorama.ca
Headquarters: Toronto, Canada

We will review and respond to privacy inquiries in accordance with applicable law.