🔒 Privacy Policy — ITS OK PLUS

Last Updated: October 10, 2025

Introduction

ITS OK PLUS, as a retail and e-commerce business entity, values the trust of its esteemed customers and reaffirms its full commitment to protecting their privacy and securing their personal data in accordance with the highest legal and technical standards.
This Policy explains how we handle personal data collected from our customers through our official website, mobile applications, authorized branches and retail points, or any other electronic channel affiliated with the company.

By using any ITS OK PLUS services, or by continuing to browse the website or mobile application, you explicitly acknowledge and agree to all terms and conditions stated herein. You understand that this Policy constitutes a binding legal agreement between you and the Company.

Section 1: Scope of Application

This Policy applies to all activities and services provided by ITS OK PLUS, its subsidiaries, affiliates, or technical partners, whether within or outside the country, including but not limited to:

• The official company website and its affiliated online stores.

• Mobile applications (Android and iOS).

• Official ITS OK PLUS social media platforms.

• Purchase, payment, subscription, delivery, return, and customer support operations.

• Electronic, text, or phone communications between the customer and the company.

Section 2: Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• “Company”: Refers to ITS OK PLUS, its subsidiaries, and its legal representatives.

• “User” or “Customer”: Any natural or legal person using the company’s services by any means.

• “Personal Data”: Any information related to an identified or identifiable person, such as name, phone number, email address, location, or device data.

• “Processing”: Any operation performed on personal data, whether automated or manual, such as collection, storage, transfer, or analysis.

• “Third Parties”: Entities that cooperate with the company to provide services (such as payment or shipping providers).

Section 3: Types of Data Collected

The Company collects several categories of data, some of which are voluntarily provided by the user, while others are collected automatically for operational or technical purposes, as follows:

1. Data Provided Directly by the User:

• Full name and title.

• Email address and mobile phone number.

• Residential, delivery, and billing addresses.

• Payment details (credit card, bank account, or digital wallets).

• Correspondence and inquiries sent to customer support or sales teams.

• Files or images uploaded for verification or return purposes.

2. Data Collected Automatically:

• Internet Protocol (IP) address and approximate geographic location.

• Browser type, operating system, device type and model, and unique device identifiers (Device ID).

• Browsing history within the website or app, including visited pages, session duration, viewed or added products.

• Login and logout timestamps, general usage patterns.

• Analytical data, purchase behavior, and potential interests.

3. Data Collected from Third Parties:

• Payment confirmations from payment service providers.

• Delivery information from logistics and shipping companies.

• Authentication data when signing in via Google, Facebook, or Apple.

Section 4: Purposes of Data Collection and Use

Personal data is collected and processed for the following purposes, without limitation:

1. Service Delivery: Creating user accounts, managing orders, processing purchases and payments, shipping and delivery operations.

2. Performance Improvement: Studying customer behavior and analyzing purchase patterns to enhance products and services.

3. Digital Security: Preventing fraud, verifying identity, and protecting the system from unauthorized activities.

4. Communication: Responding to inquiries and complaints, and sending service notifications or updates.

5. Marketing and Advertising: Displaying personalized content and promotional offers in line with user interests (subject to consent).

6. Legal Purposes: Compliance with regulatory requirements such as invoicing, taxation, and recordkeeping.

7. Statistical Purposes: Conducting anonymized performance analysis without identifying individuals.

Section 5: Data Storage and Security

The Company applies the highest technical security standards to protect personal data against loss, alteration, or unauthorized access.
Security measures include:

• Encryption of data during transmission and storage using SSL/TLS and AES-256 protocols.

• Use of advanced firewalls and intrusion detection systems.

• 24/7 security monitoring to detect suspicious activities.

• Restricted access permissions for authorized personnel only.

• Regular backups and secure data center storage.

• Periodic security assessments and compliance with global best practices (such as ISO 27001).

Nevertheless, the Company shall not be liable for any damage resulting from breaches beyond its control or from unsafe usage by the user.

Section 6: Data Retention Period

The Company retains personal data for as long as necessary to fulfill the purpose for which it was collected,
or to comply with legal and regulatory obligations, resolve disputes, or enforce agreements.
Once the purpose is fulfilled, the data is deleted or converted into an anonymized format that cannot identify the user.

Section 7: Data Sharing with Third Parties

The Company treats personal data with strict confidentiality and does not share it with external parties except in the following cases:

• Service Providers: Including payment, shipping, hosting, marketing, analytics, email, and WhatsApp API providers.

• Government Authorities: Upon official request or legal obligation.

• Affiliates or Partner Companies: Under internal agreements ensuring equal levels of data protection.

• Mergers or Acquisitions: In the event of company restructuring, while maintaining the validity of this Policy until users are notified.

No third party is permitted to use data except for the specific purposes outlined and under strict data protection agreements.

Section 8: User Rights

In accordance with applicable laws, users have the right to:

• Request a copy of their personal data held by the Company.

• Correct inaccuracies or update information.

• Request permanent deletion of their account and data.

• Withdraw consent to receive notifications or marketing offers.

• Object to data processing in specific circumstances.

Such requests are processed within a reasonable timeframe not exceeding thirty (30) days from receipt,
subject to any legal obligations preventing immediate deletion.

Section 9: Cookies

The Company uses cookies to enhance performance and user experience.
These may include:

• Essential cookies required for website operation.

• Preference cookies to remember settings and language choices.

• Analytical cookies to understand website usage.

• Marketing cookies to tailor offers and advertisements.

Users may manage or disable cookies through browser settings,
but doing so may affect the quality of their browsing experience.

Section 10: Children’s Privacy

Our services are not intended for children under the age of 13, and we do not knowingly collect data from minors.
If we discover that data has been collected from a child, it will be immediately deleted, and corrective actions will be taken.

Section 11: Cross-Border Data Transfer

Your personal data may be stored or processed on servers located outside your country of residence for technical and operational reasons.
We ensure that such entities maintain data protection standards equivalent to those enforced locally.

Section 12: Policy Updates

The Company reserves the right to modify or update this Privacy Policy at any time
in line with legal, technical, or business developments.
Users will be notified via email or in-app notification in the event of any material update.
Continued use of the services after such publication constitutes implicit acceptance of the new terms.

Section 13: Limitation of Liability

The Company shall not be liable for any direct or indirect damages arising from the user’s use of the website or app,
or from their failure to protect personal data (such as sharing passwords).
The Company is also not responsible for the content or privacy practices of third-party websites or services.

Section 14: Contact and Inquiries

Users may contact us for any inquiries or requests related to privacy through the following channels:

📧 Email: itsokplus@gmail.com
🌐 Website: https://itsok.ps

Section 15: Final Consent

By using any ITS OK PLUS services, you confirm that you have read and fully understood this Policy,
and that you grant the Company the legal right to collect, use, and process your data as outlined above.