Last updated: February 24th, 2026

This Privacy Notice (“Notice”) of BLANCOS Y NEGROS BYN LTDA., legal entity ID number 3-102-844612 (hereinafter, “ByN” or the “Controller”), applies to all personal information that ByN collects from its users (hereinafter the “User”) through the digital platform Mozzo®, available at https://mozzolife.com/
(hereinafter, “Mozzo®” or the “Platform”), through its digital channels such as social media or online chats (hereinafter, “Digital Channels”), or information that ByN may collect through offline interactions.

This Notice does not apply to information collected by any third party other than the Controller, including through any application or content (including advertising) that may be linked to or accessible from Mozzo®.

The purpose of this Notice is to inform the User about the information we collect, how such information will be processed, when and how it may be shared or transferred, the User’s rights related to the collection and processing of such information, the right to access and update it, and the security measures we use to protect it.

GLOSSARY

• QR Code: QR Codes (Quick Response) are two-dimensional barcodes capable of storing certain types of information, such as a URL, SMS, email, text, etc., which can be read by mobile device or smartphone cameras.
• Access and Authentication Credentials (“Access Credentials”): Authentication mechanism consisting of a username and password, security questions, PINs, tokens, or biometric data, which allows the Platform to validate the User’s identity and grant access to the user account and its features.
• User account: The virtual space assigned to each User or Customer once registered in Mozzo®, enabling interaction with the Platform’s services and features.
• Services: Features available to Users through the Mozzo® Platform.
• Partner(s): Restaurants, establishments selling prepared food with table service, hospitality businesses, or related services, that contract with ByN for Mozzo® services and features.

Informed Consent

For the purposes of this Notice, a User is any natural person who uses Mozzo® services. Therefore, the USER GRANTS BYN FREE, EXPRESS, INFORMED, AND UNEQUIVOCAL INFORMED CONSENT for ByN, as the CONTROLLER, to process the USER’S personal data in accordance with this Privacy Notice. Where necessary, this consent, acceptance, and understanding may also be evidenced through any messaging platform, electronic communication platform, or Digital Channels used to contact Mozzo®.

If the USER REFUSES TO GRANT THIS INFORMED CONSENT to the Controller, the USER’S ability to acquire Mozzo® services, content, or features and/or to contact ByN through any means provided by ByN, including Digital Channels, will be restricted.

Accordingly, the USER’S acceptance of informed consent includes express authorization for the Controller to process personal data in accordance with the following provisions:

1. What information do we collect?

The Controller limits the collection of information to what is relevant for the services it commercializes in Costa Rica. Collection may be carried out directly or through third parties acting on our behalf. Personal data is always collected through lawful means, in accordance with the laws of the Republic of Costa Rica, particularly Law No. 8968 (Ley 8968 de Protección de la Persona Frente al Tratamiento de sus Datos Personales) and its Regulation.

1.1 Information provided directly by the User

The User may share information directly as a requirement to create a user account and place orders, such as full name, identification type, email address, mobile phone number, country, and payment method data (debit or credit card). This information may be provided to register on Mozzo® and place orders through the Platform at any Partner establishments affiliated with Mozzo®, to maintain an existing business relationship between Mozzo® and the User, or to receive commercial or promotional information from Mozzo® or its services, as well as from Partners affiliated with Mozzo®. In some cases, depending on the requested service, the service cannot be provided if the information is not supplied by the User.

If for any reason the User provides information about a third party, the User does so at their own responsibility and must have that third party’s consent. Any processing of that third party’s data by the Controller will be carried out in good faith under this understanding.

1.2 Information provided indirectly

The Controller may collect certain information indirectly through the User’s activity on the Platform, such as IP addresses, web browser type, internet service provider, referring/exit pages, device operating system, content viewed on Mozzo® by the User, clickstream data, order history, preferences, and consumption habits at Partner establishments affiliated with Mozzo®, as well as other metadata, for the purpose of analyzing trends, improving Mozzo® operation and content, and personalizing the User experience. Such collection may be carried out using commercial technologies such as cookies or beacons, as explained in the Cookies section.

We may have access to information about the User’s location, such as the GPS coordinates of the Partner establishment where the User is located. If the User does not want Mozzo® to collect and use specific geolocation information, in some cases the User may disable location features on their device. The User may consult the device manufacturer’s settings to do so.

2. Purposes for using Users’ information

The Controller uses the information collected from Users on Mozzo® for various purposes, including:

2.1 Mandatory purposes

Use collected data to create the user account and present Partner products and services offers to the User.

• Identify or authenticate the User when accessing Mozzo®.
• Manage payments for each order placed by the User through Mozzo®.
• Store and share the User’s payment method data with financial institutions to validate the payment method used and approve the transaction.
• Keep the User’s information updated within Mozzo®.
• Develop and implement fraud prevention tools.
• Evaluate, maintain, improve, and strengthen the contractual relationship, including offering new products and/or services related to those contracted.
• Improve Platform security.
• Provide customer service.
• Legal compliance.

2.2 Purposes necessary for providing the service

• Develop activities related to the User’s commercial profile, such as commercial, advertising, and marketing campaigns related to Mozzo® products and services and those of ByN Partners.
• Identify Users’ preferences and consumption habits at Partner establishments.
• Loyalty and User satisfaction programs.
• Statistical or behavioral studies on tastes and preferences related to products and/or services requested from Partners.
• Analyze trends and User behavior to improve Partner content offered through Mozzo®.
• Commercial prospecting to identify needs and preferences to be addressed with products and/or services offered by Mozzo®.
• Provide information to the User about events, news, promotions, advertising, and loyalty programs via email, landline, mobile, SMS, MSM, social media, or similar means.
• Generate WhatsApp notifications from Partners to consumers.
• Generate WhatsApp notifications from Mozzo to Partners and/or Users.
• Measure satisfaction levels regarding Mozzo® products and/or services.
• Consult and share with third-party providers data related to compliance or non-compliance with obligations arising from contractual or commercial relationships related to products or services commercialized by Mozzo®.
• Information will be retained for as long as necessary to provide the contracted and requested service, back up information, comply with legal, regulatory, administrative, financial, or compliance obligations, and resolve disputes or controversies.

3. With whom is information shared?

3.1 Partners affiliated with Mozzo®

The information described in Section 1 may be shared with or entrusted to Partners affiliated with Mozzo® in Costa Rica or other countries.

3.2 Service providers

The Controller may also share the User’s information with service providers that perform functions on behalf of the company or provide services to the Controller, and who are contractually obligated to maintain confidentiality and use personal information only for the purposes for which it is disclosed. Examples include customer service platforms, web analytics services such as Google Analytics, electronic invoicing services used by Partners, CRM solutions, call centers, instant messaging applications (WhatsApp, Telegram, Facebook Messenger), email marketing platforms, administrative management solutions, email and calendar management software, online payment processing services, market research or commercial intelligence providers, and data storage/processing providers. ByN will also share the User’s personal and financial information with payment gateways and associated financial institutions for proper processing of the order payment at the Partner establishment.

3.3 Compliance

Information may also be shared when required by law, to comply with a court or administrative order, legal proceeding, or similar process, including disclosure to external auditors or legal advisors; or when we believe in good faith that such disclosure is necessary to protect our rights, protect the User’s safety or the safety of others, investigate or prevent fraud, or respond to a government request.

3.4 Business operations

The Controller may share the User’s information described in Section 1 if ByN is involved in a merger, absorption, transformation, acquisition, sale or transfer of shares, or in the unlikely event of insolvency proceedings.

3.5 Communication with the User

The Controller may communicate with the User via email, postal mail, phone, text messaging systems (WhatsApp, Telegram, Line), chat, chatbot, or other means on a regular basis to provide the products or services requested by the User or to periodically inform about products, services, events, or special offers.

4. Information security

The Controller adopts reasonable security measures in accordance with applicable law and industry best practices to help ensure that Users’ personal information remains secure and up to date.

Sensitive personal information such as debit or credit card data will be stored encrypted on the Controller’s servers and processed using international information security standards for online payments.

However, no data transmission over the Internet is completely secure. Despite our best efforts, we cannot ensure or guarantee absolute security. The User assumes a reasonable level of risk in the processing of their information and is responsible for using and keeping their Access Credentials and other personal data secure, as well as the devices necessary to use Mozzo®.

5. Exercise of Rights

The Controller respects each User’s control over their personal information and recognizes the rights of access, rectification, cancellation, and objection granted by law. Upon request and after confirming the User’s identity by verifying their identification document, we will confirm whether we hold or process information obtained from that User. Each User has the right to rectify or update incorrect or incomplete personal information, request cancellation of their personal information, or request that processing cease (objection).

In certain cases, we may not be able to delete information, for example, if the request is incompatible with legal, contractual, regulatory, or compliance obligations, prevents ByN from exercising rights granted by law or contract, if the requester’s identity cannot be verified, or if it involves disproportionate cost or effort. However, we will respond within the legally established timeframes and provide the relevant explanations.

6. Minors

The Site is intended for a general audience and its content is not directed to children or minors under 15 years of age. The Controller does not collect or process personal information from children or minors under 15, unless permitted by law. If a User believes that Mozzo® may have collected personal information from their children or minors for whom they are a legal guardian, the User may contact ByN to request deletion where possible and legally binding.

7. Cookies

Mozzo® or certain third parties integrated into Mozzo® that provide services or features through the Platform use cookies, beacons, and similar technologies for various purposes, including analyzing trends, Platform administration, monitoring Users’ navigation on Mozzo®, and storing demographic information.

Cookies are small pieces of information stored on the hard drive of devices. A cookie allows the organization that placed it on the User’s device to recognize it across different websites, services, devices, and browsing sessions. For example, to identify a User when they return to the Sites and provide a better browsing experience. Third-party cookies may be allowed on Mozzo®, and we do not control their use or content. Internet browsers allow Users to configure settings to accept or reject cookies, or to be notified when a cookie is sent. If the User chooses not to install cookies, they may not be able to fully use Mozzo® features and functions. For more information about cookies, the User may visit the public reference site http://www.allaboutcookies.org/es/.

Beacons and similar technologies are code snippets embedded in web pages and emails that communicate with third parties. For example, beacons are used to count visits to a web page, communicate with cookies, and study usage patterns of Mozzo®. Beacons may also be included in emails to learn whether messages were opened, interacted with, or forwarded.

8. Forums and Social Media

Mozzo® and/or its Digital Channels may provide access to publicly available community forums. The User should be aware that any information provided in these areas is public and may be read, collected, and used by ByN and others with access. If the User does not want this information to be processed by the Controller, the User should delete it. If unable to do so, the User may expressly request ByN to remove it. In some cases, personal information cannot be removed.

9. Third-party links

Mozzo® and/or its Digital Channels may contain links to websites owned, operated, or administered by third parties over which the Controller has no control. Any information the User provides to third-party websites will be governed by the privacy policy/notice of each website, and the User should review those policies before disclosing information. The Controller assumes no responsibility for the content, actions, or policies of third-party websites. The inclusion of third-party links on Mozzo® or its social media does not constitute endorsement of the content, actions, or policies of such websites.

10. Third-party functionality

If the User accesses services offered by third parties such as Facebook, Google, or Twitter through Mozzo®—either to log in to the Platform or to share information about their Mozzo® experience—those third-party services may collect information about the User, including activity on this Platform, and may share connections with such services regarding the use of Mozzo® in accordance with their own privacy policies.

11. Changes to this Notice

This Notice was last updated on the date shown in the header. The Controller reserves the right to modify this Notice at any time. In case of a material change, we will notify Users through a notice on the Mozzo® website. Continued use of Mozzo® will be deemed acceptance of such changes. The User should review this Notice periodically to remain familiar with the most current version. By using the Platform after changes are published, the User accepts such changes.

12. How to contact the Controller about these matters

The Controller is committed to protecting your information. If you have any questions about the processing of your personal information or wish to exercise your rights under Section 5 of this Notice, you may contact us at: [email protected].

13. Applicable law and venue

This Notice is governed by the laws of the Republic of Costa Rica. Any dispute arising in relation to this Notice shall be resolved by the courts of San José.