PRIVACY POLICY

Company Name: BuyParfum LLC

Effective Date: 5^th December 2025

1. PURPOSE OF THIS PRIVACY POLICY

1.1 This Privacy Policy explains how BuyParfum LLC (“BuyParfum”, “we”, “us”, or “our”) collects, uses, discloses, and protects information relating to an identified or identifiable natural person (“Personal Data”) when individuals (“you” or the “User”) interact with:

• our website, online store, and related pages,
• our mobile or web interfaces (if any), and
• our marketing channels, customer support, and social media accounts

(collectively, the “Services”).

1.2 We are committed to handling Personal Data in a lawful, fair, and transparent manner and in accordance with applicable data protection and privacy laws in the countries where we operate.

1.3 This Privacy Policy forms part of, and is incorporated into, our Terms & Conditions. In the event of a conflict between the two, this Privacy Policy governs with respect to the processing of Personal Data.

2. WHO WE ARE – DATA CONTROLLER

2.1 For the purposes of this Privacy Policy, BuyParfum LLC acts as the data controller in relation to your Personal Data. This means we determine the purposes and means of processing.

2.2 Our primary legal and administrative head office is located in the United Arab Emirates:

BuyParfum LLC – UAE Head Office
Abdul Bari Muhammad Al Hashemi
1st Floor, Deira, Al Sabkha
Dubai, United Arab Emirates

2.3 We also maintain a registered office in the United States of America:

BuyParfum LLC – US Office
654 East, 224 Street, 1E
Bronx, NY 10466
United States of America

2.4 For any questions about this Privacy Policy or how we process Personal Data, you may contact us at:

• Email: infos@buyparfum.com
• Phone: +971 432 88080

3. SCOPE AND WHO THIS POLICY APPLIES TO

3.1 This Privacy Policy applies to:

• customers and prospective customers of BuyParfum;
• visitors to our website and users of our online store;
• recipients of marketing communications, newsletters, and promotional campaigns;
• individuals who contact us by email, phone, contact form, or social media.

3.2 This Privacy Policy does not apply to:

• employees, contractors, or job applicants, whose data may be governed by separate notices;
• websites, apps, or services provided by third parties that we do not control, even if they are linked from our Services.

4. TYPES OF PERSONAL DATA WE COLLECT

Depending on how you interact with us, we may collect the following categories of Personal Data:

4.1 Identity Data

• first and last name;
• title, gender (if provided);
• date of birth (if provided, e.g., for age verification or birthday offers).

4.2 Contact Data

• billing and shipping address;
• email address;
• phone number;
• country and city.

4.3 Account & Profile Data

• account login details (email/username and password hash);
• order history and wishlists;
• saved addresses and preferences.

4.4 Transaction & Order Data

• products purchased, quantities, pricing;
• order dates and times;
• payment status and methods;
• delivery details and tracking information.

4.5 Payment Data
We do not generally store full card numbers. Payment details are processed by our third-party payment processors. We may receive limited information such as:

• tokenized payment identifiers;
• last four digits of card;
• card brand;
• transaction IDs and payment confirmations.

4.6 Technical & Usage Data

• IP address and approximate location;
• device identifiers, browser type, and operating system;
• access times, pages viewed, and referring URLs;
• interactions with our site (e.g. clicks, scrolls).

4.7 Marketing & Communications Data

• your marketing preferences (email, SMS, etc.);
• newsletter subscription status;
• participation in promotions, discounts, or loyalty-style programs.

4.8 Feedback & Communications Data

• messages sent to us (email, forms, chat, social media);
• reviews, ratings, testimonials, and responses to surveys.

4.9 Special Categories
We do not intentionally collect special categories of Personal Data (such as health information, religious beliefs, or biometric data). However, you may voluntarily share information regarding allergy concerns or sensitivities when contacting us, which we handle only to respond appropriately to your queries.

5. HOW WE COLLECT PERSONAL DATA

We collect Personal Data in the following ways:

5.1 Directly from You

• when you place an order;
• when you create or update an account;
• when you subscribe to our newsletter;
• when you contact us for support or submit a form;
• when you participate in surveys, promotions, or review requests.

5.2 Automatically from Your Use of the Services

• through cookies and similar tracking technologies;
• through server logs and analytics tools recording interactions with our website.

5.3 From Third Parties

• payment processors providing transaction confirmations;
• logistics partners providing delivery status updates;
• marketing and analytics providers (e.g., advertising platforms) offering aggregated or limited profile data;
• social media platforms when you engage with our official accounts or use social logins (if enabled).

6. LEGAL BASES FOR PROCESSING PERSONAL DATA

Where applicable law requires a lawful basis for processing (for example, in many jurisdictions), we rely on one or more of the following:

6.1 Performance of a Contract
To process and deliver your orders, manage your account, and provide related customer service.

6.2 Compliance with Legal Obligations
To retain certain records for tax, accounting, or regulatory purposes; to comply with requests from competent authorities where legally required.

6.3 Legitimate Interests
To operate, secure, and improve our Services, prevent fraud and misuse, personalize your experience, and conduct limited direct marketing within reasonable expectations.

6.4 Consent
For certain activities such as sending marketing emails where required by law, deploying non-essential cookies, or processing particular optional information. You may withdraw consent at any time, without affecting prior lawful processing.

7. HOW WE USE PERSONAL DATA (PURPOSES OF PROCESSING)

We use Personal Data for the following purposes:

7.1 Order Processing & Fulfilment

• to confirm, prepare, ship, and deliver your orders;
• to provide order updates and delivery notifications.

7.2 Customer Account Management

• to create and maintain your account;
• to track your order history and preferences;
• to help you manage saved addresses and payment options (through our processors).

7.3 Customer Support & Communications

• to respond to inquiries, complaints, and feedback;
• to manage returns, exchanges, and refunds;
• to provide technical support and service updates.

7.4 Marketing & Personalization

• to send newsletters, offers, and promotions where permitted;
• to tailor recommendations and content (for example, highlighting products similar to your past purchases).

7.5 Analytics, Performance & Improvement

• to understand how users interact with our Services;
• to monitor performance and resolve technical issues;
• to develop new features and improve user experience.

7.6 Security & Fraud Prevention

• to detect and prevent fraud, abuse, and unauthorized access;
• to protect the integrity of our systems and our customers.

7.7 Legal & Regulatory Purposes

• to comply with applicable laws, regulations, and legal processes;
• to establish, exercise, or defend legal claims.

8. COOKIES AND SIMILAR TECHNOLOGIES

8.1 Our Services use cookies, pixels, tags, and similar technologies to:

• enable core site functionality (e.g., cart and checkout);
• remember your preferences;
• perform analytics and measure performance;
• support marketing and advertising activities.

8.2 Certain cookies are strictly necessary for the functioning of the site and cannot be switched off. Non-essential cookies (such as analytics and advertising cookies) may be managed through your browser settings or (where implemented) our cookie banner preferences.

8.3 Further details about the categories of cookies we use and how you can manage them are provided in our Cookie Policy, which should be read together with this Privacy Policy.

9. MARKETING COMMUNICATIONS

9.1 Where permitted by law, we may use your email address or other contact details to send you marketing communications regarding our products, promotions, and news.

9.2 You can opt out of marketing communications at any time by:

• clicking the “unsubscribe” link in the email; or
• contacting us at infos@buyparfum.com.

9.3 Opting out of marketing communications will not affect transactional messages (such as order confirmations, shipping updates, or essential service notifications).

10. SHARING AND DISCLOSURE OF PERSONAL DATA

We do not sell your Personal Data. We may, however, share Personal Data in limited circumstances with:

10.1 Service Providers (Processors)

• Shopify and related apps (store platform, hosting, ecommerce functions);
• Payment processors (to process payments securely);
• Logistics and shipping partners (for product delivery);
• Marketing and analytics providers (for campaigns and performance measurement);
• IT and security providers (for hosting, maintenance, and security monitoring).

These service providers are contractually required to process Personal Data only on our documented instructions and to implement appropriate security measures.

10.2 Group Entities and Offices
We may share Personal Data between our UAE and US offices as necessary for centralized administration, finance, customer support, or logistics.

10.3 Legal and Regulatory Authorities
We may disclose Personal Data where we believe it is required by law, regulation, court order, or governmental request, or to protect our rights, property, or the safety of our customers or the public.

10.4 Business Transfers
In the context of a merger, acquisition, reorganization, or sale of assets, Personal Data may be transferred to the relevant third party as part of the transaction, subject to confidentiality safeguards.

11. INTERNATIONAL DATA TRANSFERS

11.1 Due to the international nature of our business, your Personal Data may be transferred to, stored in, and accessed from countries other than your own, including the United Arab Emirates and United States of America.

11.2 We implement appropriate safeguards to protect Personal Data during such transfers, which may include:

• contractual protections with recipients of the data;
• limiting access to those who need it for legitimate business purposes;
• applying security measures described in Section 13.

11.3 By using our Services and providing Personal Data, you acknowledge that your information may be processed in countries that may have different data protection standards than those in your home jurisdiction, subject always to applicable law.

12. DATA RETENTION

12.1 We retain Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law (for example, tax or accounting rules).

12.2 In general:

• order and transaction records may be retained for a number of years after your last purchase, to comply with financial and legal obligations;
• account data may be retained while your account is active and for a reasonable period afterward, or until you request deletion;
• marketing data is retained until you withdraw consent or object to receiving marketing communications.

12.3 When Personal Data is no longer required, we will either delete it or irreversibly anonymize it.

13. SECURITY OF PERSONAL DATA

13.1 We implement technical and organizational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

13.2 Such measures may include:

• encryption in transit (e.g., HTTPS);
• access controls and authentication;
• data minimization and pseudonymization where appropriate;
• regular monitoring and security reviews.

13.3 Despite our efforts, no system can be guaranteed to be entirely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect unauthorized use of your account.

14. YOUR PRIVACY RIGHTS

14.1 Subject to applicable law and certain exemptions, you may have the following rights in relation to your Personal Data:

• Right of access: to obtain information about whether we hold Personal Data about you and to receive a copy of such data.
• Right to rectification: to request correction of inaccurate or incomplete Personal Data.
• Right to erasure: to request deletion of your Personal Data in certain circumstances.
• Right to restriction: to request restriction of processing in limited cases.
• Right to object: to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: where processing is based on consent, to withdraw it at any time.

14.2 To exercise any of these rights, please contact us at infos@buyparfum.com and clearly describe your request and the Personal Data concerned. We may need to verify your identity before responding.

14.3 We will respond to requests within timeframes required by applicable law and will explain the reasons if we are unable to comply with a specific request.

15. ADDITIONAL RIGHTS UNDER CERTAIN LAWS

15.1 In some jurisdictions, such as certain states in the United States, the European Economic Area, the United Kingdom, or the United Arab Emirates, additional privacy rights or specific procedures may apply.

15.2 Where such local laws grant you additional rights beyond those listed in Section 14, we will honor those rights to the extent required by law and, where reasonably practicable, as a matter of good practice.

15.3 If you believe a particular privacy law applies to you and wish to exercise a specific right under that law, please specify this in your request so that we can consider it appropriately.

16. CHILDREN’S PRIVACY

16.1 Our Services are not intended for children below the age of 16, and we do not knowingly collect Personal Data from children below this age without appropriate parental or guardian consent where required by law.

16.2 If we learn that we have collected Personal Data from a child in violation of applicable law, we will take reasonable steps to delete it or to obtain valid consent.

16.3 Parents or guardians who believe that their child has provided Personal Data to us without proper consent may contact us at infos@buyparfum.com.

17. SOCIAL MEDIA AND THIRD-PARTY LINKS

17.1 Our Services may include links to third-party websites, plug-ins, or applications (for example, links to Instagram or TikTok). Clicking on those links or enabling those connections may allow third parties to collect or share data about you.

17.2 We do not control these third-party services and are not responsible for their privacy practices. We encourage you to read the privacy policies of every site or service you visit.

17.3 When you interact with our social media pages (e.g., by liking, following, or commenting), your interactions are also governed by the privacy policies of those platforms.

18. AUTOMATED DECISION-MAKING AND PROFILING

18.1 We do not engage in automated decision-making that produces legal effects concerning you or similarly significantly affects you, within the meaning of many data protection laws.

18.2 We may use limited profiling or segmentation (for example, grouping customers by purchase history or geographic region) to tailor marketing communications or product recommendations. Such processing does not involve decisions with legal or similarly significant effects.

19. CHANGES TO THIS PRIVACY POLICY

19.1 We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

19.2 When we make material changes, we will take appropriate steps to inform you, such as updating the “Effective Date” at the top of this page and, where required, providing additional notice or seeking your consent.

19.3 We encourage you to review this Privacy Policy periodically to stay informed about how we handle Personal Data.

20. CONTACT, QUESTIONS, AND COMPLAINTS

20.1 If you have any questions, requests, or concerns about this Privacy Policy or our handling of Personal Data, please contact us at:

• Email: infos@buyparfum.com
• Phone: +971 432 88080

20.2 We will investigate and attempt to resolve any complaints or disputes regarding the use or disclosure of Personal Data.

20.3 If you are not satisfied with our response and your local data protection laws so provide, you may have the right to lodge a complaint with the competent supervisory or regulatory authority in your country of residence or in the place where the alleged infringement occurred.