1. Sources from Which the Company Collects Personal Data

1.1 Information You Provide Directly to the Company

The Company may collect the following personal data when you use our services:

• Personal Information: First name, last name
• Contact Information: Email, phone number, address
• Financial Information: Credit/debit card details or bank account information

1.2 Information Collected Automatically

• Usage Information: Browsing history, duration of use
• Technical Information: IP Address, browser type, operating system
• Tracking Technologies
• Location Information

2. Use of Tracking Technologies

The Company uses tracking technologies such as Google Analytics to collect information including browser type, online usage duration, pages visited, referring URL, language settings, and other traffic-related data. This is done for security purposes, to facilitate website usage, to enhance performance, to collect statistical data, and to improve your website and application experience according to your needs while using our online services.

3. Purposes for Collecting Personal Data

The Company uses your personal data for the following purposes:

• Service Provision: To process and manage your orders, including order fulfillment and payment processing
• Service Improvement: To analyze and improve the quality of services and user experience
• Communication: To send updates, announcements, and marketing offers
• Legal Compliance: To comply with legal or regulatory obligations
• Security: To detect and prevent fraud or unlawful activities

4. Data Retention Period

The Company will retain your personal data for as long as necessary to fulfill the purposes stated in this Privacy Policy, unless the law requires or permits a longer retention period. This may be approximately 5–10 years or longer, depending on applicable statutory limitation periods, legal proceedings, or regulatory audits.

5. Disclosure of Personal Data

The Company will not disclose your personal data to any third party without your consent. However, for the efficiency of service delivery or to comply with legal obligations, you acknowledge and agree that the Company may disclose your personal data to the following parties:

• Business Partners such as payment service providers and delivery companies
• Government Authorities acting under legal authority
• Technology Providers such as hosting, cloud, or data analytics providers
• Corporate Transactions: In the event of a merger, acquisition, or asset transfer

6. Your Rights Regarding Personal Data

Under the Personal Data Protection Act, you have the following rights:

• Right of Access: You may withdraw your consent at any time if you no longer wish to receive information or promotional communications from the Company, or if you wish to limit specific processing activities.
• Right to Rectification: You may request correction of inaccurate, incomplete, or outdated personal data to ensure accuracy and completeness.
• Right to Erasure: You may request the deletion of your personal data stored by the Company.
• Right to Lodge a Complaint: You may file a complaint with the Expert Committee under the Personal Data Protection Act if the Company or its data processors, employees, or contractors fail to comply with the Act or relevant regulations.

7. Data Security

The Company uses appropriate security measures to protect your personal data, including:

• Access control measures
• Regular data backups
• Employee training on data security

In the event of a data breach, the Company will notify you and the relevant authorities within the legally required timeframe.

8. Changes to This Privacy Policy

The Company may update this Privacy Policy from time to time to reflect changes in our practices, operational requirements, or legal and regulatory obligations. Significant changes will be communicated to you through:

• Email notifications

Your continued use of the Company’s services after such changes signifies your acknowledgment and acceptance of the revised policy.