Privacy Statement

Privacy Terms of Services Agreement and

Information Tracking Policy (Cookies and others)

Type of website: Ecommerce

Effective date: 30th of October, 2025

We welcome you to www.MaliMorphe.com (the "Site") and the mobile “app” which both make up the MaliMorphe platform. This platform is owned and operated by MaliMorphe Incorporated (“company”, “we”, “us” “our”). Any “user”, “you”, “your” which accesses the platform is encouraged to read our “Privacy Terms of Services Agreement”. You signify that you have read and understood and agree to be bound by our “Privacy Terms of Services Agreement” once you have accessed and read our Terms of Service agreement. This applies to anyone accessing the Platform regardless of whether they are registered as a user of the Site or our App. By accessing the MaliMorphe Platform you are bound by this agreement and have read the Privacy Terms. If you do not agree to the Privacy Terms please do not use the Site or the App. If you have questions regarding our Privacy Agreement please contact our office in the contacts area so that we may be of assistance.

To the maximum extent of the law when using or accessing the Malimorphe Platform you agree to not participate in any class action lawsuit against us. You agree to resolve any privacy issues through your individual capacity with us the company MaliMorphe Inc. You may not act as a plaintiff in a represented proceeding.

Our dispute resolution procedures regarding is as follows:

Pre-dispute resolution:

The customer must notify the company in writing by email with the Primary subject heading “Notice of Dispute Regarding the Privacy Agreement ”. The notice must include a clear description as to how we have not met our Privacy agreement. The notice must be written in English. The demands of the individual should be included. The arbitration shall remain confidential between the two parties, between “you” and the “company”. The company, in good faith, will attempt to resolve the dispute through a meeting. If the dispute cannot be resolved through a meeting between the two parties within 30 days, a neutral arbitrator will be appointed by the company.

Arbitration Fees: Initial fees for arbitration in Ontario, Canada include the arbitrator's fee, administrative fees, and a retainer. The total cost depends on the length of the arbitration and the complexity of the case. A retainer will be held in trust by the arbitrator. There are other SHARED fees between the company and you such as:

Legal fees for each party
Fees for expert witnesses
Fees for document production
Costs for copying, mailing, and serving documents
Fees for court reporters or translators
Administrative fees
Logistical fees

The cost of arbitration is usually split between the parties.

Arbitration:

The neutral arbitrator will try to resolve the issue at hand. The arbitration will proceed in Canada, the Province of Ontario through a recognized Canadian arbitration body. If through arbitration the problem cannot be resolved the party with the complaint must file a claim with a small claims court in Canada, in the Province of Ontario. Small Claims Court handles cases of $35,000 or less. If the complainant is not satisfied with their outcome, legal representation will be required to file a claim with the Canadian Superior Court of Justice. If it so happens that the dispute against the company is unfounded the claimant will agree to pay a large portion of the legal expenses for the company including their own. This cost is usually at the discretion of the judge.

Purpose

The purpose of this Privacy Agreement is to inform the user of our Site “Platform” regarding the following:

1. The personal data we will collect;

2. Use of collected data;

3. Who has access to the data collected;

4. The rights of Site users; and

5. The Site's cookie policy.

This Privacy Policy applies in addition to the terms and conditions of our Site.

Consent

By using our Site users agree that they consent to:

1. The conditions set out in this Privacy Agreement; and

2. The collection, use, and retention of the data listed in this Privacy Agreement.

Personal Data We Collect

We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.

Data Collected Automatically

When you visit and use our Site, we may automatically collect and store the following:

1. IP address;

2. Location;

3. Hardware and software details;

4. Clicked links; and

5. Content viewed.

Data Collected in a Non-Automatic Way

We may also collect the following data when you perform certain functions on our Site:

1. First and last name;

2. Email address;

3. Phone number;

4. Address; and

5. Payment information.

This data may be collected using the following methods:

1. By the customer willingly providing the information during access to the Platform.

How We Use Personal Data

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Agreement.

The data we collect automatically is mainly used for the following purposes:

1. To carry out the purchase and to deliver the product to the consumer.

The data we collect when the user performs certain functions may be used for the following purposes:

1. To communicate with the customer regarding their purchase such as a receipt of their purchase and deliver the product.

Who We Share Personal Data With

Employees

We may disclose user data to any member of our organization who reasonably needs access to user data to achieve the purposes set out in this Privacy Agreement. Persons whom we share our information are bound by a company privacy agreement.

Third Parties

We may share user data with the following third parties:

1. Bank processing centres and delivery centres. Please refer to Electronic Commerce Act, 2000, S.O. 2000, c. 17. Section 23, “ Contracts for the Carriage of Goods” in the Province of Ontario, Canada.

In an e-commerce business, the information shared between the customer and the business can vary depending on the type of transaction, the platform, and the specific policies of the business. However, there are several key categories of information commonly exchanged:

1. Personal Information

Name: Typically required for shipping and billing purposes.
Email Address: For order confirmation, updates, and marketing communications (if opted-in).
Phone Number: Often used for delivery or customer service inquiries.

2. Shipping Information

Shipping Address: The destination where products will be sent, usually including street address, city, state/province, postal code, and country.
Delivery Instructions: Any special requests or notes for delivery, like "leave at the door" or "deliver after 5 PM."

3. Payment Information

Credit/Debit Card Details: Including card number, expiration date, and CVV for payment processing.
Billing Address: Often needed to verify payment details and prevent fraud.
Alternative Payment Methods: Such as PayPal, Apple Pay, or other digital wallets.

4. Order Details

Product Information: Including product name, quantity, size, color, and other specifications.
Order Total: Price of items, taxes, shipping fees, discounts, and final amount.
Promotional Codes or Discounts: Any applicable codes the customer enters at checkout.

5. Customer Preferences

Order History: Previous purchases, preferences, and repeat orders that can influence future buying decisions.
Subscription/Account Info: For businesses offering memberships or recurring orders (e.g., subscription box services).
Wishlist or Saved Items: Customers may save items they are interested in purchasing later.

6. Customer Service Interactions

Support Tickets or Chats: If a customer reaches out for help, information from those interactions may be recorded.
Return/Exchange Requests: Information about returned items, reasons for return, and whether the return is accepted.

7. Tracking Information

Order Tracking: Once the product is shipped, the customer usually receives tracking details to monitor the shipment's progress.

8. Marketing Information (if applicable)

Opt-in for Newsletters: If the customer subscribes, their email may be used for marketing campaigns.
Customer Feedback or Reviews: Any reviews or feedback provided after purchase.

9. Legal/Compliance Information

Terms and Conditions: Customers usually have to acknowledge the business's terms and privacy policy during checkout.
Consent for Data Use: In some regions (e.g., GDPR in Europe), businesses must get explicit consent to collect and process personal data.

Data Security Considerations:

It's also important to note that e-commerce businesses are required to follow data protection regulations like GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), or PCI DSS (Payment Card Industry Data Security Standard) to ensure the security and privacy of customer data.

The key information shared includes personal, payment, shipping, and order-related details, along with communication for marketing and support purposes.

Other Disclosures

We will not sell or share your data with other third parties other than the ones mention above, except in the following cases:

1. If the law requires it;

2. If it is required for any legal proceeding;

3. To prove or protect our legal rights; and

4. To buyers or potential buyers of this company in the event that we seek to sell the company.

If you follow hyperlinks from our Site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.

How Long We Store Personal Data

Canadian businesses, by Law must retain customer transaction information generated on their website for a minimum of six years from the end of the last tax year to which the transaction relates. This includes required information and supporting documents.

You will be notified if your data is kept for longer than this period.

How We Protect Your Personal Data

In order to protect your security, we use the strongest available browser encryption and store all of our data on servers in secure facilities. All data is only accessible to our employees. Our employees are bound by strict confidentiality agreements and a breach of this agreement would result in the employee's termination. We also use reputable banking institutions to process our monetary transactions and delivery companies that uphold secure information for their own protection.

While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.

International Data Transfers

We may transfer user personal data to the following countries or from and to us:

1. USA, European Union and the UK.

When we transfer user personal data we will protect that data as described in this Privacy Policy and comply with applicable legal requirements for transferring personal data internationally. Regulations are primarily laid out under the General Data Protection Regulation (GDPR), which came into force on May 25, 2018. GDPR applies to all businesses, both within and outside the EU, that process the personal data of EU citizens.

Third-party Processors: If a business shares customer data with third parties (e.g., payment processors, delivery services, or marketing agencies), it must ensure that these third parties comply with GDPR requirements. This typically involves signing a Data Processing Agreement (DPA) to outline the responsibilities of both parties regarding data protection.

Children

We do not knowingly collect or use personal data from children under 13 years of age. If we learn that we have collected personal data from a child under 13 years of age, the personal data will be deleted as soon as possible. If a child under 13 years of age has provided us with personal data their parent or guardian may contact our privacy officer.

How to Access, Modify, Delete, or Challenge the Data Collected

If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, or if you would like your data to be deleted or modified in any way, please contact our privacy officer here:

Malimorphe Inc.

malimorphe@gmail.com

The subject line must read “Personal Data”. We will try to connect with you within 30 days.

Do Not Track Notice

Do Not Track ("DNT") is a privacy preference that you can set in certain web browsers. We do not track the users of our Site over time and across third party websites and therefore do not respond to browser-initiated DNT signals. We are not responsible for and cannot guarantee how any third parties who interact with our Site and your data will respond to DNT signals.

How to Opt-Out of Data Collection, Use or Disclosure

We provide the following specific opt-out methods for the forms of collection, use, or disclosure of your personal data:

1. You can opt-out of the use of your personal data for marketing emails. You can opt-out by clicking "unsubscribe" on the bottom of any marketing email or updating their email preferences under "Your account"

Types of collection of Information Methods may include the following:

Data collection on an eCommerce website is a crucial process for understanding customer behavior, improving user experience, and driving business decisions. There are several ways data is collected, often using a combination of methods:

1. Tracking User Interactions

Cookies: These small text files are stored on a user's device when they visit the site. Cookies track user activity like pages viewed, time spent, items added to the cart, and even transactions. They can also help identify repeat visitors.
Tracking Pixels: These are small, invisible images embedded in web pages or emails that track user interactions, such as clicks and page visits. Facebook, Google, and other platforms use tracking pixels for targeted advertising.

2. Web Analytics Tools

Tools like Google Analytics or Adobe Analytics track user behavior in real-time. They can provide insights on:

Traffic sources (e.g., organic search, paid ads, social media)
User demographics (location, device type, etc.)
Behavior flow (how users navigate the site)
Conversions (actions taken, like signing up or completing a purchase)

3. User-Generated Data

Account Creation: When users register for an account, they provide personal information like name, email, and shipping address, which can be used for future marketing or analysis.
Search Queries: The terms customers search for on your site can reveal what products or categories are popular, and whether they are having trouble finding certain items.
Reviews and Ratings: Customer feedback on products is valuable data for improving product offerings and understanding customer satisfaction.

4. Transaction Data

Every purchase made on the site provides valuable information about:

Products purchased
Transaction values
Payment methods
Time and date of the purchase
Shipping details This data is often integrated into the backend of the store and can help improve inventory management, pricing strategies, and customer service.

Modifications

This Privacy Agreement may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the "Effective Date" at the top of this Privacy Policy. We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of changes to this Privacy Policy.

Contact Information

If you have any questions, concerns or complaints, you can contact our privacy officer, at:

malimorphe@gmail.com