Ascend Privacy Policy

Ascend offers physical training services in indoor cycling, yoga, strength (and related sports disciplines) and a benefits program for its clients. This document aims to inform in a clear, prior, and transparent manner about the processing of personal data of those who use our services, as required by Article 12 of the LOPDP.

Company name: Corporación Deportiva de Indoor Cycling S.A.S.

Contact email for personal data issues: info@ascend.ec

Depending on your relationship with us (visitor, client, member of the loyalty and benefits program), we may collect:

• Identification data: full name, ID/passport, date of birth.

• Contact data: email, phone number, address.

• Account and loyalty program data: booking history, class attendance, accumulated points, redemptions, and training preferences.

• Health and physical performance data (sensitive data category): heart rate, weight, injuries, or relevant medical conditions that you voluntarily declare, and performance metrics in class, when the service requires it.

• Payment data: in case payments are processed by card, these are managed directly by our payment provider (payment gateway), which has its own security standards (PCI-DSS). We do not store your full card number.

• Technical and navigation data: IP address, device type, cookies (see section 13).

The processing of sensitive data (health/physical performance) requires your express and separate consent, which we request specifically at the time of creating your account or completing your training profile.

We use your personal data to:

• Create and manage your account and your profile in the loyalty program.

• Manage class bookings, attendance, accumulation, and redemption of points.

• Personalize training recommendations according to your history and declared physical condition.

• Process payments and billing for the contracted services.

• Address requests, inquiries, and claims.

• Comply with legal, tax, and regulatory obligations.

• Send commercial communications and promotions, only if you gave your specific and separate consent for it.

We do not use your data for purposes other than or incompatible with those described here without requesting new consent.

We process your personal data based on: (i) your free, specific, informed, and unambiguous consent; (ii) the execution of the service contract you sign with us when registering; and (iii) compliance with applicable legal obligations (tax, accounting, etc.).

We request your consent in a prior, free, specific, and informed manner, through non-pre-checked acceptance boxes, before creating your account. The consent for the processing of data necessary to provide the service (account, loyalty program) is independent of the consent to receive commercial communications; the latter is always optional and does not condition access to our services.

We implement reasonable technical, physical, and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure, including access control, transit encryption, and internal information management policies.

We may share your personal data with third parties who provide us with services necessary to operate (for example: payment providers, booking platforms, email or messaging tools, hosting providers), who act as data processors under our instructions and contractual confidentiality and security obligations. We do not sell your personal data to third parties.

Some of our providers (for example, payment platforms, email, or cloud storage) may be located outside Ecuador. In these cases, Ascend adopts the necessary guarantees to ensure that said data receives an adequate level of protection, in accordance with the LOPDP.

We keep your personal data as long as you maintain an active account with us and, subsequently, for the period necessary to comply with legal, accounting, or tax obligations, or to address claims. Once these periods are fulfilled, your data will be securely deleted or anonymized.

As the owner of your personal data, you can exercise the following rights at any time by writing to info@ascend.ec:

• Access: to know what data of yours we process.

• Rectification: to correct inaccurate or incomplete data.

• Deletion/Suppression: to request the deletion of your data when they are no longer necessary.

• Opposition: to object to specific processing.

• Limitation: to request that we temporarily restrict processing.

• Portability: to receive your data in a structured format.

• Revocation of consent: to withdraw your consent at any time, without affecting the lawfulness of the prior processing.

We will respond to your request within the deadlines established by the LOPDP. If you consider that your rights have not been addressed, you can file a claim with the Superintendence of Personal Data Protection (SPDP) through spdp.gob.ec.

Our services are aimed at adults. In case minors participate in our activities, the processing of their personal data requires the prior, express, and verifiable consent of their parents or legal guardians, who will be responsible for accepting this Policy on their behalf. If we detect data of a minor collected without such authorization, we will proceed to delete it immediately.

Our Platform may use cookies and similar technologies to improve your browsing experience, remember your preferences, and analyze site usage. You can manage your cookie preferences from your browser settings. By continuing to browse www.ascend.ec, you accept the use of cookies in accordance with this section.

Ascend maintains a Record of Processing Activities (RAT) and adopts measures of proactive and demonstrated responsibility, in line with the principles of the LOPDP, to be able to accredit compliance with this regulation before the SPDP at all times.

Ascend may modify this Policy at any time to reflect legal, operational, or technological changes. We will notify substantial changes through the Platform or by email, indicating the date of the last update.

This Policy is governed by the laws of the Republic of Ecuador. Any controversy related to the processing of personal data may be resolved before the Superintendence of Personal Data Protection or before the competent judges of Ecuador, without prejudice to the prior administrative channel.

For any questions, requests, or exercise of rights related to this Policy, you can write to us at info@ascend.ec.