"Applicable Laws" means any personal data privacy or protection law, statute, treaty, rule, regulation, regulatory or legislative requirement, ordinance, license, restriction, judicial or administrative order, code, common law or other pronouncement having the effect of law in the state of Kuwait.

"Child" means a natural person who has not attained 20 years of age.

"Data Subject" or "you" means an identified or identifiable living individual natural person to whom personal data relates and that is using this site or Dana Valora Services.

"Personal Data" means any information relating to a data subject who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that data subject.

"Privacy Notice" means this set of terms and conditions that regulates the processing of personal data.

"Processing" means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

"Sensitive Personal Data" means personal data that reveals your racial or ethnic origin, religious, political or philosophical beliefs or trade union membership, genetic data, biometric data for the purposes of unique identification.

"Site" means the website danavalora.com and any mobile or desktop application developed by Dana Valora or on its behalf.

"Dana Valora" or "we" means the owner and operator of danavalora.com and all associated services.

"Dana Valora Services" means the products and services offered by Dana Valora whether online on this site or any other website, that reference this Privacy Policy.

In order to provide a seamless customer experience, we receive and store your personal data in relation to Dana Valora Services, including without limitation:

• Name, address and phone numbers.
• Payment information.
• Age.
• Personal description and photograph in your profile.
• Information and documents regarding identity, including Civil ID or National ID numbers.
• Financial information.
• Purchase history.

We automatically collect and store certain types of personal data about your use of Dana Valora Services. We use cookies and other unique identifiers, and we obtain certain types of personal data when your web browser or device accesses our site. This may include:

• The internet protocol (IP) address used to connect your computer to the internet.
• Login, email address and password.
• The location of your device or computer.
• Device metrics such as when a device is in use, application usage, connectivity data, and any errors or event failures.
• Version and time zone settings.
• Purchase history.

We might receive personal data about you from third-party sources, such as updated delivery and address information from carriers. We may also collect personal data from other sources including:

• Updated delivery and address information from third parties.
• Search results and links, including paid listings.
• Third-party applications or websites through which you allow us to collect, share and/or use your personal data.
• Third-party sources that provide marketing or demographic information to help us tailor our content and services.

Dana Valora uses your personal data to operate, provide, develop and improve our Services, including without limitation:

Dana Valora uses your personal data to take and handle orders, deliver products and services, process payments and communicate with you about orders, products, services and promotional offers.

When applicable, Dana Valora uses your personal data for marketing, answering your queries, running data analysis, and for administrative, accounting, tax and audit requirements.

Dana Valora uses your personal data to provide functionality, analyse performance, fix errors and improve the usability and effectiveness of our Services.

Dana Valora uses your personal data to recommend products and services that might be of interest to you, identify your preferences, and personalise your experience.

In certain cases, Dana Valora collects and uses your personal data to comply with applicable laws.

Dana Valora uses your personal data to communicate with you in relation to our Services via different channels (e.g., by phone, email, or on-site messaging).

Dana Valora uses your personal data to prevent and detect fraud and abuse in order to protect the security of our platform and our customers.

4.1 Dana Valora may be required to disclose and share your personal data to comply with legal obligations, and to prevent, detect, mitigate, and investigate fraudulent or illegal activities. Dana Valora may disclose personal data to government agencies or authorised law enforcement agencies if required by law or in good faith that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal processes.

4.2 Dana Valora may share your personal data with third-party vendors and service providers when required for business purposes to conduct and facilitate Dana Valora Services and its marketing and advertising activities.

4.3 Dana Valora will share some or all of your personal data with another business entity should we plan to merge with, or be acquired by that business entity, or undergo re-organisation, amalgamation or restructuring. Should such a transaction occur, that other business entity will be required to follow terms at least as extensive as this privacy notice with respect to your personal data.

Where we process your personal data, you have rights over how it is processed and you can exercise these rights at any point by contacting us.

You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data.

You have the right to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

You have the right to rectify any incomplete or inaccurate personal data we hold about you.

You have the right to ask us to delete or remove personal data where there is no good reason for us continuing to process it. We may not always be able to comply with your request for specific legal reasons, which will be notified to you at the time of your request.

You have the right to object to certain types of processing, including processing for direct marketing.

You have the right to restrict the processing of your personal data in the following scenarios:

• If you want us to establish the personal data's accuracy.
• Where our use of the data is unlawful but you do not want us to erase it.
• Where you need us to hold the personal data even if we no longer require it, to establish, exercise or defend a legal claim.
• You have objected to our processing of your personal data, but we need to verify whether we have overriding legitimate grounds to use it.

We shall provide you, or a third party you have chosen, with your personal data in a structured, commonly used and machine-readable format under certain circumstances.

You have the right to withdraw your consent to the processing of your personal data at any time by contacting us. This does not affect the lawfulness of any processing carried out before the withdrawal.

You have the right not to be subject to a decision based solely on automated processing that produces legal or significant effects on you. You have the right to obtain human intervention, express your point of view, and obtain an explanation of the decision reached.

You have the right to lodge a complaint with the Competent Data Protection Authority in Kuwait if you consider that the processing of your personal data infringes your rights or applicable laws.

You will not have to pay a fee to access your personal data or to exercise any of your rights. However, we may charge a reasonable fee if we believe that your request is unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

We try to respond to all legitimate requests within 30 days. Occasionally it may take us longer if your request is particularly complex or you have made multiple requests. In this case, we shall notify you and keep you updated.

We may need to request specific information from you to help us confirm your identity and ensure your right to access personal data. This is an appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request to speed up our response.

We do not knowingly solicit or collect personal data from Children. If you have shared any personal data of a child, you represent and warrant that you have the authority to do so and permit Dana Valora to use the personal data in accordance with this Privacy Notice.

10.1 Dana Valora retains your personal data in accordance with applicable laws, for a period no longer than is required for the purpose for which it was collected.

10.2 After that period, Dana Valora will either delete or anonymise your personal data so that it cannot be linked back to you. However, Dana Valora may retain your personal data if it believes it may be necessary to prevent fraud or future abuse, to exercise its legal rights and/or defend against legal claims, or if required by applicable laws. Dana Valora may continue to retain your personal data in anonymised form for analytical and research purposes.

11.1 We adopt security practices and procedures in line with applicable laws to protect your personal data from unauthorised access, disclosure, loss, damage or misuse. We design our systems with security and privacy in mind and keep them updated to protect against hacking or virus dissemination.

11.2 We use various methods to safeguard personal data:

• Physical Measures — Locked file cabinets, restricted access to offices and alarm systems.
• Technical Tools — Passwords and encryption using industry best practices.
• Organisational Controls — Confidentiality agreements, limiting access on a need-to-know basis, staff training and security clearances.
• Online Security — Encryption and authentication tools to protect your personal data from unauthorised use. Firewalls protect our servers and network, and we conduct regular malware scanning.

11.3 Your personal data is contained behind secured networks and is only accessible by a limited number of people who have special access rights and are required to keep personal data confidential. All sensitive personal data and credit information you supply is encrypted via Secure Socket Layer (SSL) technology.

12.1 Automated decisions are decisions made automatically based on a computer determination, without human intervention. We use your personal data to build profiles by analysing information about your online browsing, searching and buying behaviour to personalise our site and communications to you, and to display relevant offers.

12.2 We perform automated decision making and profiling to analyse your shopping preferences to enable us to review, develop and improve Dana Valora Services and to provide you with relevant information through our marketing programmes.

12.3 We will not make decisions based solely on automated decision making that have a significant impact on you. If we do so, we shall notify you and provide clear information about our decision and its lawful basis.

12.4 When using automated decision making, we will provide you with further information about the logic involved, as well as the significance and the envisaged consequences to you.

We will only use your personal data for the purposes stated in this Privacy Policy, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.

Dana Valora may collect and/or generate anonymised and aggregated information from your use of our Services. This information is not personal data since we are not able to re-identify you from it. It is used for a variety of functions including identifying and remediating bugs, improving performance, internal analysis and research. Dana Valora may share this information with third parties in an anonymised or aggregated form designed to prevent anyone from identifying you.

Cookies are small data files transferred to your device's storage by a website while using a web browser (if you allow). They keep a record of your activities on this site to make your subsequent visits more efficient. Cookies may store a variety of information, including the number of times you access this site, registration information and the number of times you view a particular page.

By continuing to use Dana Valora Services, you are agreeing to our use of cookies. If you do not agree, you can block them in your browser settings; however, you may lose some functionality on this site.

16.1 In accordance with this Privacy Notice, you hereby explicitly grant Dana Valora the right to process your personal data, internally or with third parties, for the purposes described herein. You certify that you submitted your personal data voluntarily and that such personal data is true, accurate, complete and up to date. You agree to defend, indemnify and hold Dana Valora, its shareholders, officers, directors and employees harmless from and against all claims, liabilities, damages, losses or expenses arising out of or in any way connected with your access to or use of this site.

16.2 Dana Valora, its directors and employees, shall not be liable in any manner whatsoever for any direct, indirect, incidental, consequential, or punitive damages arising out of or related to:

• The use of, access of, or inability to use the information or hyperlinks available on this site or any Dana Valora Services.
• Your provision of any information including your personal data.
• Any default, delays, omissions, interruptions and inaccuracies resulting directly or indirectly from any cause, including unauthorised access or misuse of personal data by any third party, or failure of network services.
• Dana Valora's acts or negligence or any of its third-party service providers, agents or employees.

16.3 To the fullest extent permitted by applicable laws, Dana Valora disclaims and excludes all warranties and representations, express, implied or statutory, with respect to this site or as a result of your use of Dana Valora Services. This site, including all content, information and links contained therein, is provided "as-is" without any warranty that it will be uninterrupted or error-free.

This site and all of its content including without limitation all text, graphics, HTML codes, product names, trade names, service names, domain names, tag lines or logotypes are copyright materials and may not be printed, copied, posted, reproduced, used or otherwise distributed in whole or in part without Dana Valora's prior written approval.

We may update this Privacy Notice from time to time in response to emerging legal, technical, contractual, regulatory or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. Your continued use of this site will be considered as consent to such changes.

If you have any comments or queries in connection with our Privacy Policy or Terms & Conditions, please contact us via the Contact page on our website at danavalora.com.