Mallvest Privacy Policy

Effective: April 2026  |  Last Updated: April 2026  |  Version: 1.0

---

1. Information We Collect

We collect the following types of information to provide and improve our services:

• Personal Identification Information: Full name, email address, phone number, username, and date of birth.
• Financial Information: Wallet balances, shop partnership history, funding records, profit-share payouts, and transaction details.
• Technical Information: IP address, browser type, device information, operating system, and cookies.
• Verification Information: KYC documents, proof of address, identification photos, and selfie verification (collected for compliance purposes).
• Usage Information: Pages visited, shops viewed, partnerships made, features used, time spent on the platform, and interaction patterns.
• Communication Information: Support tickets, messages, and feedback you provide to us.

---

2. How We Use Your Information

We use your information for the following purposes:

• Account Management: To create, verify, and maintain your account.
• Partnership Processing: To facilitate shop funding, calculate profit-share, and manage payouts.
• After-Sales Management: To handle returns, refunds, and customer support on behalf of partnered shops.
• Compliance: To meet legal and regulatory requirements (AML, KYC, tax reporting).
• Communication: To send confirmations, notifications, profit-share updates, and account alerts.
• Marketing: To send promotional offers and newsletters (only with your consent).
• Platform Improvement: To analyze usage, enhance security, and improve user experience.
• Fraud Prevention: To monitor for suspicious activity and protect against fraud.

---

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual Performance: To fulfill our agreement with you (e.g., managing your account, shop partnerships, and profit-share payouts).
• Legal Obligation: To comply with financial, anti-money laundering, and tax regulations.
• Legitimate Interests: To improve services, manage after-sales operations, prevent fraud, and ensure platform security.
• Consent: For marketing communications and optional data processing (you can withdraw at any time).

---

4. How We Share Your Information

We do not sell or rent your personal data. We may share your information with:

• Service Providers: Payment processors, identity verification providers, cloud hosting, after-sales support partners, and email delivery services.
• Regulatory Authorities: When required by law, court order, or government request.
• Business Partners: Only with your explicit consent.
• Professional Advisors: Lawyers, auditors, and consultants where necessary.

All third-party service providers are contractually obligated to protect your data and use it only for the purposes for which it is shared.

---

5. Data Security

We take data security seriously and implement robust measures to protect your information:

• Encryption: All sensitive data is encrypted in transit (TLS) and at rest.
• Access Controls: Strict role-based access ensures only authorized personnel can access your data.
• Security Monitoring: Continuous monitoring and regular vulnerability assessments.
• Incident Response: A documented protocol to handle data breaches promptly.

---

6. Data Retention

We retain your personal data only for as long as necessary:

• Active Accounts: Retained for the duration of your active account plus 5 years after closure to comply with financial regulations.
• KYC Records: Retained for 5 years after relationship ends (AML requirements).
• Partnership & Transaction Records: Retained for 7 years for audit, tax, and after-sales reconciliation purposes.
• Marketing Data: Retained until you withdraw consent or unsubscribe.

After the retention period, your data will be securely deleted or anonymized.

---

7. Your Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to legal obligations).
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent for marketing and optional processing.

---

8. Cookies & Tracking

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for platform functionality (authentication, sessions).
• Analytics Cookies: To understand usage patterns and partnership behaviors (e.g., Google Analytics).
• Preference Cookies: To remember your settings and preferences.
• Marketing Cookies: For personalized advertising (with your consent).

You can manage your cookie preferences through your browser settings. For more details, see our Cookie Policy.

---

9. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data in accordance with applicable privacy laws.

---

10. Children's Privacy

Mallvest is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it.

---

11. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new version on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

---

12. Contact Us

If you have any questions about this Privacy Policy, need to exercise your rights, or wish to report a concern, please contact us:

Email: support@mallvest.com

Support Ticket: Available via your Mallvest dashboard.

Address: As provided on our website.

We are committed to protecting your privacy and will handle all privacy matters with the utmost care and urgency.

---

Mallvest — Privacy Policy

Version 1.0 | April 2026