Privacy Policy

BLAST BAJA CALIFORNIA S. de R.L. de C.V.

www.blast-institute.com

Version 1.3 | Last Updated: March 1, 2026

BLAST INSTITUTE BAJA CALIFORNIA S. de R.L. de C.V. (“Blast,” “we,” “us,” or “our”) operates www.blast-institute.com and related digital properties (collectively, the “Website”). Certain platform and communications infrastructure supporting this Website is hosted on cloud services operated in Mexico and the United States.

This Privacy Policy describes how we collect, use, disclose, and protect your personal data in accordance with applicable laws, including:

• Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP — Mexico)

• Applicable United States federal and state data protection regulations, to the extent applicable

• Other applicable international data protection standards
By using the Website, you agree to the terms of this Privacy Policy.

Personal Data We Collect

a) Information You Provide

• Name, email address, phone number.

• Any information submitted through contact forms or program inquiries.

• Communication preferences, including consent to receive email communications.

b) Automatically Collected Information

• IP address, browser type and version, device information.

• Pages visited, time and date of visits, and usage statistics.

Purposes of Processing

Primary Purposes (necessary)

• To respond to inquiries and provide requested information about our services and treatments.

• To communicate with you regarding your requests and program interests.

• To operate and maintain the Website and supporting platform infrastructure.

• To comply with applicable legal and regulatory obligations in Mexico and, where applicable, the United States.

Secondary Purposes (optional, with consent)

• Marketing and promotional communications regarding our services.

• Improving our services and user experience through analytics.

You may opt out of secondary purposes at any time as described in Section 4 below.

Email Communications

We send email communications from the domain blast-institute.com using third-party email delivery services, with infrastructure hosted in Mexico and the United States. Email types we send include:

• Program and service information in response to inquiries (from programs@blast-institute.com).

• Compliance and consent disclosures (from compliance@blast-institute.com).

Opt-In

We only send email communications to individuals who have provided their email address directly to us through an inquiry form or program interest submission on this Website, and who have not opted out of receiving communications.

Opt-Out

You may opt out of email communications at any time by:

• Clicking the “Unsubscribe” link included in every marketing email.

• Replying “STOP” to any email communication.

• Contacting us directly at info@blast-institute.com or programs@blast-institute.com.

Note: Opting out of marketing emails does not affect compliance or consent-related communications required by applicable law.

Bounce and Complaint Handling

We actively monitor email delivery metrics including bounce rates and spam complaint rates. Email addresses that generate hard bounces are immediately suppressed from future sends.

Addresses that generate spam complaints are suppressed in accordance with industry best practices and applicable anti-spam regulations. We maintain a suppression list to prevent sending to addresses that have opted out, bounced, or filed complaints.

SMS COMMUNICATIONS

Blast Institute sends transactional SMS/text messages to recipients in the United States and Mexico using a third-party SMS delivery service (AWS End User Messaging), with infrastructure in the United States and Mexico. Messages are sent from our U.S. toll-free number and, for recipients in Mexico, from the Sender ID of our toll-free number and a registered Sender ID for Mexico.

The text messages we send are strictly transactional and include:

• Appointment reminders

• Treatment notifications

• Account and service alerts

We do not send marketing or promotional text messages.

Opt-In

SMS/Text Messaging. With your consent, Blast Institute may send you transactional text messages such as appointment reminders, treatment notifications, and account alerts. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time or HELP for assistance. Consent to receive texts is not a condition of any purchase. We do not sell or share your mobile opt-in information with third parties for their marketing. See our Privacy Policy and Terms for details.

Marketing Communications

We may contact you regarding services you have inquired about or that may be relevant to your health and wellness goals. All marketing communications are sent only with your prior consent or as otherwise permitted by applicable law.

You may opt out at any time by:

• Clicking “Unsubscribe” in any marketing email.

• Replying “STOP” to any SMS message (when SMS is active).

• Contacting us directly at info@blast-institute.com or programs@blast-institute.com.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Improve Website functionality.

• Analyze usage and performance.

• Enhance user experience.

Types of cookies may include essential cookies, analytics cookies, and marketing cookies. You can control cookies through your browser settings. Disabling certain cookies may affect Website functionality.

We do not sell your personal data. We may share your data with:

• Cloud infrastructure and email delivery service providers operating in Mexico and the United States.

• Affiliated entities in which Blast Institute holds an ownership interest.

• Professional advisors (legal, accounting, compliance).

• Government authorities or regulators, when required by applicable law in Mexico or the United States.

All third-party service providers are contractually required to protect your personal data.

International Data Transfers

Our primary operations are located in Mexico. Certain technology infrastructure supporting this Website and our communications platform may be hosted in Mexico or the United States. By submitting your personal data through this Website, you acknowledge that your data may be transferred to, stored in, and processed in Mexico or the United States.

We take reasonable contractual, technical, and organizational steps to ensure that such transfers comply with the LFPDPPP and other applicable US federal and state privacy laws.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in this Policy, or as required by applicable legal, regulatory, or contractual obligations in Mexico or the United States. When data is no longer needed, we securely delete or anonymize it.

Your Rights (ARCO Rights and Applicable International Rights)

Under Mexican law (LFPDPPP), you have the right to:

• Access — obtain a copy of your personal data we hold.

• Rectification — correct inaccurate or incomplete data.

• Cancellation — request deletion of your data.

• Opposition — object to certain processing of your data.

Depending on your jurisdiction, you may also have additional rights including data portability, restriction of processing, or rights under applicable US federal and state privacy laws.

To exercise any of these rights, contact us at info@blast-institute.com or programs@blast-institute.com.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS/HTTPS), access controls, and cloud security best practices.

No system is completely secure, and we cannot guarantee absolute security of your data.

Children’s Privacy

This Website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at info@blast-institute.com.

Changes to This Privacy Police

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. Updates will be posted on this page with a revised Last Updated date. Continued use of the Website after updates constitutes acceptance of the revised Policy.

Contact Information

For questions, concerns, or to exercise your data rights, contact us at: BLAST BAJA CALIFORNIA S. de R.L. de C.V.
Blvd Agua Caliente 10535 No. 1B
Tijuana BC 22020, Mexico.

Secondary Address:

4012 S Rainbow Blvd K401 Las Vegas, NV 89103

Email: info@blast-institute.com
Phone: +1 858-868-4388 | +52 624 181 1498 Website: www.blast-institute.com