PRIVACY POLICY

Effective Date: October 9th, 2026

www.daddyyankee.com

DY Records LLC | P.O. Box 360314, San Juan, PR 00936-0314 | [email protected]

IMPORTANT: PLEASE READ CAREFULLY. This Privacy Policy explains what personal information DY collects through the Site, including through the Newsletter, cookies, and analytics and advertising tools, how DY uses and shares that information, and the choices and rights available to you. Section 13 describes your privacy rights and how to exercise them.

1. DEFINITIONS

The following capitalized terms have the meanings set forth below. Capitalized terms that this Policy does not define have the meanings given in the Terms of Use.

“Artist” means Ramón Luis Ayala Rodríguez, professionally known as “Daddy Yankee.”

“Consent Tool” means the cookie banner and preference center that DY makes available on the Site, provided by a third-party consent management platform (such as CookieYes, Cookiebot, or a similar tool) that DY may replace from time to time.

“DY” means DY Records LLC, a Puerto Rico limited liability company with its principal place of business at P.O. Box 360314, San Juan, PR 00936-0314. “We,” “us,” and “our” refer to DY.

“Newsletter” means any email, text message, or other electronic communication program that DY offers through the Site.

“Personal Information” means any information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable individual, including information that applicable law defines as “personal data.”

“Service Providers” means third parties that process Personal Information on DY’s behalf and under DY’s instructions, such as hosting, newsletter, analytics, and consent management providers.

“Site” means the website located at www.daddyyankee.com and all subdomains and related pages that DY operates and that link to this Policy.

“Terms of Use” means the DY Terms of Use available on the Site, as amended from time to time.

“Tracking Technologies” means cookies, pixels, tags, scripts, software development kits, local storage, and similar technologies that collect information automatically from your browser or device.

“User” means any person who accesses or uses the Site. “You” and “your” refer to the User.

2. SCOPE AND WHO WE ARE

2.1 Scope. This Privacy Policy (“Policy”) applies to Personal Information that DY collects through the Site and the Newsletter. This Policy does not apply to Third-Party Services that the Site links to or embeds, such as streaming platforms, social media networks, online stores, or ticketing services, which have their own privacy policies.

2.2 Controller. DY is responsible for the Personal Information described in this Policy and acts as the “controller” or “responsible party” of that information under applicable law. You may contact DY at [email protected].

2.3 Relationship to the Terms of Use. This Policy forms part of the Terms of Use. By using the Site, you acknowledge that you have read this Policy. Where applicable law requires your consent, DY will request it separately, for example through the Consent Tool or the Newsletter sign-up form.

3. INFORMATION WE COLLECT

3.1 Categories of Personal Information. The following paragraphs describe the categories of Personal Information that DY collects and the sources of that information:

Identifiers and Contact Information. Examples: Name, email address, country or region, preferred language, mobile number (if you enroll in a text message program), and date of birth or age confirmation (if the sign-up form requests it). Source: You, when you subscribe to the Newsletter or complete a contact form.

Communications. Examples: The content of messages, Submissions, and requests that you send to DY. Source: You.

Newsletter Engagement Data. Examples: Whether you open a Newsletter email, which links you click, and the date and time of those actions. Source: Automatically, through the email and messaging service provider that DY uses to send the Newsletter.

Device and Online Activity Information. Examples: IP address, browser type, operating system, device identifiers, cookie identifiers, pages viewed, time spent on pages, referring URLs, and dates and times of visits. Source: Automatically, through Tracking Technologies.

Approximate Location. Examples: Country, region, or city derived from your IP address. DY does not collect precise geolocation. Source: Automatically, through Tracking Technologies.

Preferences and Inferences. Examples: Your cookie choices, language settings, and interests that DY or its advertising partners infer from your activity on the Site. Source: Automatically, and from analytics and advertising partners.

Social Media Information. Examples: Your public profile information and interactions, if you engage with DY’s official social media pages or share content from the Site. Source: Social media platforms, subject to your settings on those platforms.

3.2 Information You Provide. DY collects the information that you provide directly, for example when you subscribe to the Newsletter, contact DY, report impersonation or fraud, or send a Submission. You may choose not to provide this information, but some features, such as the Newsletter, will not be available without it.

3.3 Information Collected Automatically. When you visit the Site, DY, its Service Providers, and its analytics and advertising partners use Tracking Technologies to collect information about your device and your interaction with the Site. Section 5 describes these technologies and your choices.

3.4 Sensitive Information. DY does not intentionally collect sensitive Personal Information, such as government identification numbers, financial account information, health information, or information about racial or ethnic origin, religious beliefs, or sexual orientation, through the Site. Please do not send this type of information to DY.

4. HOW WE USE INFORMATION

4.1 Purposes. DY uses Personal Information for the following purposes:

  1. To operate, maintain, secure, and improve the Site;
  2. To send the Newsletter, including news, releases, tour and event announcements, and promotional communications about the Artist and related projects;
  3. To respond to your inquiries, requests, and reports;
  4. To measure Site traffic and Newsletter performance, and to understand how Users interact with the Site;
  5. To deliver and measure advertising about the Artist on third-party platforms, subject to your consent where applicable law requires it;
  6. To detect, prevent, and respond to fraud, impersonation, security incidents, and other harmful or unlawful activity;
  7. To comply with legal obligations, enforce the Terms of Use, and protect the rights, property, and safety of DY, the Artist, Users, and others; and
  8. For any other purpose that DY discloses to you at the time of collection or with your consent.

4.2 Legal Bases for Processing. If you are located in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction that requires a legal basis for processing, DY relies on the following legal bases:

Newsletter and marketing communications. Legal Basis: Your consent, which you may withdraw at any time.

Analytics and advertising cookies and pixels. Legal Basis: Your consent, collected through the Consent Tool.

Operation and security of the Site, including strictly necessary cookies. Legal Basis: DY’s legitimate interest in providing a functional and secure Site.

Responses to your inquiries and requests. Legal Basis: Performance of your request and DY’s legitimate interest in communicating with its audience.

Fraud prevention, legal compliance, and protection of rights. Legal Basis: Compliance with legal obligations and DY’s legitimate interest in protecting the Artist, DY, and Users.

5. COOKIES AND TRACKING TECHNOLOGIES

5.1 How DY Uses Tracking Technologies. DY manages the Tracking Technologies on the Site through Google Tag Manager, a tag management tool that loads other tags. The Site uses the following categories of Tracking Technologies:

Strictly Necessary. Purpose: Enable core functions of the Site, such as security, load balancing, and storage of your cookie preferences. These technologies do not require consent and are always active. Examples of Providers: Webflow; the consent management platform that DY uses; and similar providers.

Analytics. Purpose: Measure traffic, page views, and User interaction so that DY can understand and improve the Site. Examples of Providers: Google Analytics 4 and similar analytics tools.

Marketing and Advertising. Purpose: Measure the effectiveness of DY’s advertising and show relevant ads about the Artist to you on third-party platforms. Examples of Providers: Meta Pixel; Google Ads; TikTok Pixel; and similar advertising and measurement tools of other platforms.

Embedded Content. Purpose: Display content from Third-Party Services, such as music players and videos. These providers may set their own Tracking Technologies when you interact with the embedded content. Examples of Providers: YouTube; Spotify; Apple Music; Instagram; TikTok; and other streaming, video, and social media platforms.

5.2 Consent Tool. When you first visit the Site from a jurisdiction that requires consent, the Consent Tool asks you to accept or reject non-essential Tracking Technologies before they run. You may change or withdraw your consent at any time through the “Cookie Settings” link (or similarly named link) on the Site. Withdrawal of consent does not affect processing that occurred before the withdrawal.

5.3 Google Consent Mode. The Site uses Google Consent Mode, which communicates your cookie choices to Google tags so that Google Analytics and other Google services adjust their behavior to your selection. If you reject analytics or advertising cookies, Google tags will not store cookies for those purposes.

5.4 Additional Choices. You may also: (a) set your browser to block or delete cookies, although some features of the Site may not work properly as a result; (b) opt out of Google Analytics at tools.google.com/dlpage/gaoptout; (c) adjust your advertising preferences in your Meta account settings; and (d) learn more about interest-based advertising and opt out of participating companies at www.aboutads.info/choices and www.youronlinechoices.eu.

5.5 Global Privacy Control and Do Not Track. The Site recognizes the Global Privacy Control (“GPC”) signal as a valid request to opt out of the sale or sharing of Personal Information for targeted advertising, where applicable law requires it. Because no uniform standard exists for “Do Not Track” browser signals, the Site does not respond to those signals.

6. NEWSLETTER AND MARKETING COMMUNICATIONS

6.1 Subscription. When you subscribe to the Newsletter, DY collects your email address and any other information that the sign-up form requests. DY uses one or more third-party email and messaging service providers (such as Mailchimp, Klaviyo, or a similar platform) to store subscriber information and send the Newsletter. DY may ask you to confirm your subscription through a confirmation email (double opt-in) before you receive the Newsletter.

6.2 Engagement Tracking. Newsletter emails may contain pixels and tracked links that tell DY whether you opened an email or clicked a link. DY uses this information to measure performance and improve its communications.

6.3 Unsubscribe. You may unsubscribe at any time by clicking the “unsubscribe” link in any Newsletter email or by contacting DY at [email protected]. DY will honor your request within the time required by applicable law.

6.4 Text Messages. If you enroll in a DY text message program, DY collects your mobile number and records of your consent. You may opt out at any time by replying STOP. DY does not share mobile numbers or text message consent with third parties for their own marketing purposes.

7. HOW WE SHARE INFORMATION

7.1 Recipients. DY may disclose Personal Information to the following categories of recipients:

  1. Affiliates of DY and the Artist that help operate the Site, the Newsletter, or related projects;
  2. Service Providers, including website hosting (Webflow), Newsletter delivery, consent management, analytics, advertising measurement, security, and customer support providers, which may use Personal Information only to provide services to DY;
  3. Advertising and social media partners, such as Meta, that receive device and online activity information through Tracking Technologies, subject to your consent where applicable law requires it;
  4. Government authorities, courts, or other parties, when DY believes in good faith that disclosure is required by law or necessary to protect the rights, property, or safety of DY, the Artist, Users, or others, including to investigate fraud or impersonation;
  5. A buyer, successor, or other party in connection with a merger, acquisition, financing, reorganization, or sale of all or part of DY’s business or assets; and
  6. Other third parties, with your consent or at your direction.

7.2 Sale and Sharing. DY does not sell Personal Information in exchange for money. However, certain laws in the United States treat the disclosure of device and online activity information to advertising partners through Tracking Technologies, such as the Meta Pixel, as a “sale” or as “sharing” for targeted advertising. Section 13.2 explains how to opt out.

7.3 Aggregated and De-identified Information. DY may use and disclose aggregated or de-identified information that cannot reasonably identify you for any lawful purpose.

8. THIRD-PARTY LINKS, EMBEDDED CONTENT, AND SOCIAL MEDIA

8.1 The Site contains links to, and embedded content from, Third-Party Services, such as streaming platforms, video platforms, social media networks, online stores, and ticketing services. When you click a link or interact with embedded content, the Third-Party Service may collect information about you under its own privacy policy. DY does not control and is not responsible for the privacy practices of Third-Party Services. DY encourages you to review their privacy policies before you provide any information to them.

9. INTERNATIONAL TRANSFERS

9.1 DY is based in Puerto Rico, United States, and its Service Providers may process Personal Information in the United States and other countries. Those countries may have data protection laws that differ from the laws of your country. When DY transfers Personal Information from the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction that restricts transfers, DY relies on appropriate safeguards, such as the standard contractual clauses that the European Commission approves, or on other mechanisms that applicable law permits.

10. DATA RETENTION

10.1 DY retains Personal Information only as long as reasonably necessary for the purposes described in this Policy, unless applicable law requires or permits a longer period. In general:

  1. DY retains Newsletter subscriber information until you unsubscribe, and afterward retains a suppression record of your email address so that DY can honor your request;
  2. DY retains messages and requests that you send for up to twenty-four (24) months after DY resolves them, or longer if necessary to resolve a dispute, enforce the Terms of Use, or comply with law;
  3. Analytics data is retained for the period configured in the applicable analytics tool, which generally does not exceed twenty-six (26) months; and
  4. DY retains records of your cookie choices for the period configured in the Consent Tool, which generally does not exceed twelve (12) months.

When DY no longer needs Personal Information, DY deletes it or de-identifies it.

11. SECURITY

11.1 DY implements reasonable technical and organizational measures designed to protect Personal Information against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet or method of electronic storage is completely secure, and DY cannot guarantee absolute security. If a security breach affects your Personal Information, DY will notify you and the appropriate authorities as applicable law requires.

12. CHILDREN’S PRIVACY

12.1 The Site is not directed to children under thirteen (13) years of age, and DY does not knowingly collect Personal Information from children under thirteen (13). If you reside in a jurisdiction that sets a higher age for valid consent to the processing of Personal Information, you must have the consent of a parent or legal guardian to subscribe to the Newsletter. DY does not knowingly sell or share the Personal Information of Users under sixteen (16) years of age. If you believe that a child has provided Personal Information to DY, please contact DY at [email protected], and DY will delete it.

13. YOUR PRIVACY RIGHTS

13.1 Rights Available to All Users. Regardless of where you live, you may: (a) unsubscribe from the Newsletter at any time; (b) manage your cookie preferences through the Consent Tool; and (c) ask DY to access, correct, or delete the Personal Information that DY holds about you. DY will review each request in accordance with applicable law.

13.2 United States State Privacy Rights. If you reside in California or another U.S. state with a comprehensive privacy law, and to the extent that law applies to DY, you have the right to: (a) know and access the Personal Information that DY collects about you, including the categories of sources, purposes, and recipients; (b) correct inaccurate Personal Information; (c) delete Personal Information; (d) receive a portable copy of your Personal Information; (e) opt out of the sale of Personal Information and of the sharing or processing of Personal Information for targeted advertising; and (f) not receive discriminatory treatment for the exercise of these rights. To opt out of the sale or sharing of your Personal Information, click the “Your Privacy Choices” link (or similarly named link) on the Site, reject marketing cookies in the Consent Tool, or enable GPC in your browser. In the preceding twelve (12) months, DY disclosed the categories of Personal Information described in Section 3 for the business purposes described in Section 4, and disclosed Device and Online Activity Information to advertising partners in a manner that may constitute a sale or sharing under applicable law.

13.3 European Economic Area, United Kingdom, and Switzerland. If you are located in these jurisdictions, you have the right to: (a) access your Personal Information; (b) rectify inaccurate Personal Information; (c) erase your Personal Information; (d) restrict or object to processing, including processing for direct marketing; (e) receive your Personal Information in a portable format; (f) withdraw your consent at any time; and (g) lodge a complaint with the data protection supervisory authority of your country of residence.

13.4 Latin America. If you reside in Mexico, Brazil, Colombia, Argentina, Chile, or another Latin American country with a data protection law, you may have the rights to access, rectify, cancel or delete, and oppose the processing of your Personal Information, to request portability, to revoke your consent, and to file a complaint with the competent data protection authority, such as the Secretaría Anticorrupción y Buen Gobierno in Mexico, the Autoridade Nacional de Proteção de Dados in Brazil, the Superintendencia de Industria y Comercio in Colombia, or the Agencia de Acceso a la Información Pública in Argentina.

13.5 How to Exercise Your Rights. To exercise any of these rights, please email DY at [email protected] or complete any privacy request form that DY makes available on the Site. DY will verify your identity before it fulfills a request, generally by confirming the email address associated with your Newsletter subscription, and may request additional information when necessary. You may designate an authorized agent to submit a request on your behalf where applicable law permits, and DY may require proof of the agent’s authority. DY will respond within the time that applicable law requires.

13.6 Appeals. If DY denies your request, you may appeal the decision by emailing [email protected] with the subject line “Privacy Request Appeal.” DY will respond to your appeal within the time that applicable law requires. If DY denies your appeal, you may contact the attorney general or data protection authority of your jurisdiction.

14. CHANGES TO THIS POLICY

14.1 DY may update this Policy from time to time. When DY makes changes, DY will post the updated Policy on the Site with a new effective date. If DY makes material changes, DY will provide additional notice where applicable law requires it, for example through a notice on the Site or by email. Your continued use of the Site after the effective date constitutes your acknowledgment of the updated Policy.

15. CONTACT US

15.1 If you have questions or concerns about this Policy or DY’s privacy practices, please contact DY at:

DY PRIVACY CONTACT

Entity: DY Records LLC

Mailing Address: P.O. Box 360314, San Juan, PR 00936-0314

Email: [email protected]

Subject Line: “Privacy Request: [Your Name]”

This Privacy Policy is effective as of the date first posted above.

DY RECORDS LLC

P.O. Box 360314, San Juan, PR 00936-0314 | [email protected] | www.daddyyankee.com