Privacy Policy

Mogotes Metals Inc.

Last updated: 6 June 2026 Effective date: 6 June 2026

1. Who we are and about this policy

Mogotes Metals Inc. ("Mogotes", the "Company", "we", "us" or "our") is a mineral exploration and development company whose common shares trade on the TSX Venture Exchange (TSXV: MOG). Our registered office is 401/217 Queen St W, Toronto, ON M5V 0R2, Canada, and we can be reached at info@mogotesmetals.com.

We acquire and explore mineral properties, with project interests in Argentina and Chile (the Filo Sur Project), Kazakhstan (Beskauga) and the United States (Copper Cliff). As a reporting issuer in Canada, we are subject to Canadian corporate and securities laws and the rules of the TSX Venture Exchange, and we file public disclosure on SEDAR+.

This Privacy Policy explains how we collect, use, disclose and safeguard personal information, and the choices and rights available to you. It applies to personal information we handle through our website at https://mogotesmetals.com(the "Website") and in the ordinary course of our business — including our dealings with investors and shareholders, business contacts, stakeholders in the communities and jurisdictions where we operate, and people who work with or apply to work with us.

In Canada, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws. Where we collect personal information from individuals in other jurisdictions — including the European Economic Area (EEA), the United Kingdom, Argentina, Chile and elsewhere — additional local requirements may apply, and we comply with applicable law (see Sections 5 and 8).

By using the Website or otherwise providing personal information to us, you acknowledge the practices described in this Privacy Policy. If you do not agree with it, please do not use the Website or submit personal information to us.

2. Who this policy covers

Depending on your relationship with us, we may collect and process personal information about:

• Website visitors — anyone who browses the Website, submits a contact or subscription form, or signs up to receive Company news and updates.
• — including beneficial and registered holders of our securities, participants in financings (such as private placements and prospectus-exempt offerings), and people who request investor materials.
• Business contacts and counterparties — representatives of joint-venture, option, farm-in/farm-out and strategic partners, suppliers, contractors, brokers, analysts and professional advisers.
• Community members and other stakeholders — landholders, surface-rights holders, government and regulatory contacts, and members of the communities near our projects, with whom we engage as part of responsible exploration and permitting.
• Personnel and applicants — directors, officers, employees, consultants, field crews, and individuals who apply for roles or engagements with us.

3. The personal information we collect

The categories of personal information we collect depend on how you interact with us. They may include:

• Identity and contact details — name, job title, employer, postal address, email address and phone number.
• Website and communication content — the information you choose to provide in a contact form, newsletter sign-up or email, and your communication preferences.
• Technical and usage data — IP address, device and browser type, pages viewed, referring pages, approximate location derived from IP, and similar information collected automatically through cookies and comparable technologies (see Section 6).
• Investor and shareholding information — securityholdings, transaction and trading details, registration details, and information we receive from our share registrar and transfer agent, your broker or intermediary, or securities depositories.
• Financing and eligibility information — where you participate in a financing, information needed to confirm your eligibility and complete the subscription, which may include residency and citizenship, investor-eligibility or accredited-investor status, tax identifiers, and payment or banking details.
• Regulatory and disclosure information — information required to meet insider-reporting, early-warning, beneficial-ownership and similar obligations under securities laws.
• Stakeholder and operational information — contact and engagement records relating to landholders, communities, government and regulatory bodies in our operating jurisdictions.
• Recruitment and personnel information — where you apply for or hold a role, information in your CV/résumé and application, references, qualifications, and information necessary to administer an engagement or employment relationship.

We collect this information directly from you; automatically when you use the Website; and from third parties such as our share registrar and transfer agent, brokers and intermediaries, our service providers, securities regulators and exchanges, publicly available sources, and our business partners and references.

We do not seek to collect sensitive personal information through the Website and ask that you not submit it to us unless we specifically request it for a legitimate purpose.

4. How we use personal information

We use personal information for the following purposes:

• Operating and improving the Website — to provide, secure, maintain and analyse the Website and respond to your enquiries and form submissions.
• Investor relations and shareholder communications — to respond to investors, send Company news, disclosure documents, corporate presentations and event invitations (where you have asked to receive them or where otherwise permitted), and to administer shareholder meetings, proxies and voting.
• Capital raising and corporate transactions — to conduct and administer financings, and to evaluate, negotiate and complete corporate transactions such as joint ventures, option agreements, financings and mergers or acquisitions.
• Legal, regulatory and corporate compliance — to comply with our obligations under Canadian corporate and securities laws, the rules of the TSX Venture Exchange, tax laws, anti-money-laundering and "know-your-client" requirements, and our public-disclosure and record-keeping obligations, including filings on SEDAR+.
• Managing our projects and stakeholder engagement — to advance exploration, permitting and community-engagement activities and maintain relationships with landholders, partners, governments and regulators.
• Recruitment and personnel administration — to assess applications and administer engagements and employment.
• Security and protection of rights — to protect the security and integrity of the Website and our business, prevent and detect fraud or misuse, and establish, exercise or defend legal claims.
• Analytics and marketing — to understand how the Website is used and, where you have consented or as otherwise permitted by law, to deliver and measure communications and advertising.

If we wish to use your personal information for a materially different purpose, we will seek your consent or otherwise comply with applicable law.

5. Legal bases for individuals in the EEA and the United Kingdom

If you are located in the EEA or the United Kingdom, we rely on one or more of the following legal bases to process your personal information: your consent; the performance of a contract with you or to take steps at your request before entering into one; compliance with a legal obligation to which we are subject; and our legitimate interests(such as operating and securing the Website, communicating with investors and stakeholders, and conducting our business), provided these are not overridden by your interests or fundamental rights. Where we rely on consent, you may withdraw it at any time (see Section 11).

6. Cookies and tracking technologies

The Website uses cookies and similar technologies to function, to understand how it is used, and — where you have consented — to support marketing. We manage consent through a cookie-consent tool (CookieHub), which lets you accept or decline categories of cookies and change your choices at any time via the cookie settings on the Website.

We group these technologies into three categories:

• Necessary — required for the Website to function and to keep it secure (for example, cookies used by our content-delivery and security provider, Cloudflare, and the cookie that records your consent choices). These cannot be switched off.
• Analytical — help us measure and improve the Website by reporting on how visitors use it (for example, Google Analytics). The Website also embeds live market-data widgets provided by TradingView, which may set analytics cookies (including those operated by Snowplow) when displayed.
• Marketing — used to deliver and measure relevant communications and advertising and to support embedded social content (for example, technologies operated by LinkedIn and by X (Twitter)).

The Website also incorporates third-party content and links — including TradingView market-data widgets, social media links and buttons (LinkedIn and X), and our corporate presentation hosted on DocSend. These third parties may collect information about you in accordance with their own privacy policies, which we do not control.

For the full, up-to-date list of the specific cookies we use, their providers and durations, please see our Cookie Policy.

7. How we disclose personal information

We do not sell your personal information. We disclose it only as described below, and we require our service providers to use it only for the purposes for which it was shared and to protect it appropriately:

• Service providers and processors — companies that help us operate our business and the Website, such as website hosting and design platforms, our content-delivery and security provider, analytics providers, email and communications tools, document-sharing platforms, and investor-relations and customer-relationship tools.
• Share registrar, transfer agent and intermediaries — our share registrar and transfer agent, and brokers, dealers, custodians, depositories and clearing systems, in connection with our securities and shareholder matters.
• Professional advisers — legal counsel, auditors, accountants and other advisers, under duties of confidentiality.
• Regulators, exchanges and authorities — securities regulators and stock exchanges (including the TSX Venture Exchange and Canadian securities regulatory authorities), tax authorities, and other government, law-enforcement or regulatory bodies, where required or permitted by law, including filings made publicly available on SEDAR+.
• Counterparties in transactions — partners and their advisers in connection with joint ventures, option and farm-in/farm-out arrangements, financings, and any merger, acquisition, financing, reorganization or sale of assets (in which case personal information may be among the assets transferred).
• With your consent or at your direction, or otherwise as permitted or required by applicable law, including to enforce our agreements or terms, or to protect the rights, property or safety of the Company, our personnel or others.

Please note that certain information filed with securities regulators or the exchange becomes part of the public record.

8. International transfers

We operate internationally, and your personal information may be stored or processed in Canada, the United States, the EEA, and the countries where we conduct our projects (currently Argentina, Chile, Kazakhstan and the United States), as well as in other countries where our service providers operate. Privacy laws in these countries may differ from those in your home jurisdiction. Where required, we take steps to ensure that personal information transferred across borders receives an appropriate level of protection in accordance with applicable law (which may include contractual safeguards such as standard contractual clauses).

9. How we protect your information

We maintain reasonable administrative, technical and physical safeguards designed to protect personal information against loss, theft and unauthorized access, use, disclosure, alteration or destruction, appropriate to the sensitivity of the information. No method of transmission over the internet or electronic storage is completely secure, however, so we cannot guarantee absolute security.

10. How long we keep your information

We retain personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, including to provide our services and communications and to satisfy our legal, regulatory, accounting, tax and reporting obligations — which, for a reporting issuer, may require us to keep certain records for extended periods. When personal information is no longer required, we take reasonable steps to securely delete or anonymize it. Aggregated or de-identified information that does not identify you may be retained and used indefinitely.

11. Your rights and choices

Depending on the law that applies to you, you may have the right to: access the personal information we hold about you; have it corrected if it is inaccurate or incomplete; request its deletion; object to or request that we restrict certain processing; request a copy of certain information in a portable format; and withdraw any consent you have given (without affecting processing already carried out). If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

You can opt out of our marketing communications at any time by using the unsubscribe link in those communications or by contacting us, and you can manage cookies through the cookie settings on the Website (see Section 6).

To exercise any of these rights, contact us using the details in Section 16. We may need to verify your identity before responding, and we will respond within the time required by applicable law. Please note that, in some cases, we may be required or permitted by law to retain certain personal information — for example, to meet securities, corporate or tax obligations. If you choose not to provide personal information we need to deal with you, we may be unable to provide the relevant service or complete the relevant transaction.

12. Third-party links and content

The Website may contain links to, and embedded content from, third-party websites and services (for example, TradingView, DocSend, SEDAR+, LinkedIn and X). We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their privacy policies.

13. Children's privacy

The Website is intended for a general business and investor audience and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

14. Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on the Website and update the "Last updated" date above. If we make material changes, we will take reasonable steps to provide additional notice as appropriate. Your continued use of the Website after a revised Privacy Policy is posted constitutes your acknowledgement of the changes.

16. How to contact us

If you have any questions, requests or concerns about this Privacy Policy or how we handle your personal information, please contact our Privacy Officer:

Mogotes Metals Inc. — Privacy Officer 401/217 Queen St W, Toronto, ON M5V 0R2, Canada Email: concerns@mogotesmetals.com

We will address your enquiry in accordance with applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or, if you are in the EEA or the UK, your local data protection supervisory authority.

‍