Privacy Policy

Last updated: June 2026

This Privacy Policy explains how RTUL Fitness Ltd. ("RTUL", "we", "us") collects and uses personal data in connection with this investor portal.

1. Data we collect

When you access the Investor Deck we collect the name, email address and company you provide in the NDA form, together with your IP address, browser user-agent and the date and time of your submission. We also use a short-lived session cookie to remember that you have agreed to the NDA.

2. Why we use it

We use this data to (a) keep a record of who has accessed our confidential investor materials, (b) communicate with you about a potential investment and (c) protect our legal interests. Our lawful basis under applicable Canadian privacy legislation (including PIPEDA) is our legitimate interest in managing a private fundraising process.

3. How long we keep it

NDA submissions are retained for as long as necessary to administer the fundraising and to evidence the agreement, and in any event no longer than six years from the date of submission.

4. Sharing

We do not sell your data. We share it only with our advisers and with service providers that host this site and store the NDA log on our behalf, under appropriate contractual safeguards.

5. Your rights

Under applicable Canadian privacy law you have the right to access, correct or request deletion of your personal data, and to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). To exercise any of these rights, email invest@rtul.ca.

6. Governing law

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein.

7. Contact

RTUL Fitness Ltd., Canada — invest@rtul.ca