Your Privacy Matters

We collect information you provide directly to us when creating an account, making a purchase, or contacting our support team. This includes:

• Personal identifiers: full name, email address, phone number, and date of birth • Account information: username, password (encrypted), and profile photo • Transaction data: purchase history, payment method details (stored securely via our payment partners), and delivery addresses • Communication data: messages sent to our support team, reviews, and feedback • Device & usage data: IP address, browser type, pages visited, and time spent on the platform

We only collect data that is necessary to provide you with a safe and seamless shopping experience on JOVO.

Your personal data is used to deliver, maintain, and continuously improve our services. Specifically, we use your data to:

• Process and fulfil your orders, including sending confirmations and delivery updates • Personalise your shopping experience with relevant product recommendations • Send important account notifications such as password resets and security alerts • Communicate promotional offers, flash sales, and updates (only if you've opted in) • Analyse platform usage patterns to identify bugs and improve performance • Prevent fraudulent activity and ensure the safety of all users • Comply with legal and regulatory obligations

We will never use your data for purposes not listed here without first obtaining your explicit consent.

We do not sell, rent, or trade your personal information to any third parties. However, we may share your data in the following limited circumstances:

• Service providers: Trusted partners who assist with payment processing, order delivery, customer support, and analytics. All partners are bound by strict data confidentiality agreements. • Legal compliance: When required by law, court order, or regulatory authority, we may disclose your information to the relevant parties. • Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you in advance. • With your consent: We may share your information with third parties when you have given us explicit permission to do so.

All third parties we work with are required to handle your data securely and in accordance with applicable privacy laws.

As a JOVO user, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you at any time. • Right to Rectification: Ask us to correct any inaccurate or incomplete information. • Right to Erasure: Request that we delete your personal data, subject to certain legal obligations. • Right to Restrict Processing: Ask us to limit how we use your data in certain circumstances. • Right to Data Portability: Receive your data in a structured, machine-readable format. • Right to Object: Object to our use of your data for marketing or profiling purposes. • Right to Withdraw Consent: Withdraw any consent you've previously given at any time.

To exercise any of these rights, contact our privacy team at privacy@jovomart.com. We will respond within 30 days.

We take the security of your personal information extremely seriously and implement industry-standard measures to protect it:

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security). • Password security: Passwords are hashed and salted using bcrypt - we never store plain-text passwords. • Access controls: Only authorised personnel with a legitimate business need can access your personal data. • Regular audits: We conduct periodic security reviews and penetration testing to identify and address vulnerabilities. • Secure payment processing: Payment details are handled by PCI-DSS compliant payment providers. We never store raw card data. • Incident response: In the unlikely event of a data breach, we will notify affected users within 72 hours in compliance with applicable law.

While we work hard to protect your data, no system is completely infallible. We encourage you to use a strong, unique password for your JOVO account.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Account data is retained for as long as your account is active, plus an additional 2 years for legal compliance. • Transaction records are kept for 7 years in accordance with financial regulations. • Support communications are retained for up to 3 years. • Analytics data is anonymised after 26 months.

When you delete your account, we will remove or anonymise your personal data within 30 days, except where we are required by law to retain certain information. You can request account deletion at any time by contacting privacy@jovomart.com or through your account settings.

We may update this Privacy Notice from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:

• Send you an email notification to the address associated with your account • Display a prominent notice on our website and app • Update the "Last Updated" date at the top of this page

We encourage you to review this policy periodically. Your continued use of JOVO after any changes constitutes your acceptance of the updated policy. If you disagree with any changes, you may close your account at any time.

Previous versions of this Privacy Notice are available upon request by emailing privacy@jovomart.com.