JUYMO & CO – FZCO

Privacy and Data Protection Policy

Effective date: 12 August 2026

Version: 2.0

Scope: Business-to-business Website and related online functions

This Privacy and Data Protection Policy ("Policy") explains how JUYMO & CO – FZCO ("JUYMO", "we", "us" or "our") collects, uses, stores, shares, transfers and otherwise processes personal data through its Website and related online functions.

This Policy applies to the JUYMO Website, contact forms, marketing subscriptions and campaigns, live-chat functions, invitation-only Partner Portal, artificial-intelligence agents and chatbot functions, and other online services that link to this Policy (together, the "Website").

This Policy should be read together with the JUYMO Website Terms and Conditions and any specific privacy notice presented when personal data is collected.

1. Who We Are

The controller responsible for the processing described in this Policy is:

JUYMO & CO – FZCO

Licence No. 65723

Legal Status: FZCO

Issuing Authority: Dubai Integrated Economic Zones Authority

Premises No.: DSO-IFZA

Building: IFZA Properties

Area: Dubai Silicon Oasis

Dubai, United Arab Emirates

Privacy contact: admin@juymo.com

JUYMO's licensed activities are:

• Management Consultancies;
• Marketing Management; and
• Innovation & Artificial Intelligence Research & Consultancies.

The privacy contact above is the contact point for privacy matters. It does not by itself mean that JUYMO has appointed, or is required to appoint, a statutory Data Protection Officer.

Where applicable law requires appointment of a Data Protection Officer or another statutory privacy contact, JUYMO will make the required appointment and publish the relevant information.

2. Scope and JUYMO's Role

This Policy applies where JUYMO determines the purposes and means of processing personal data and therefore acts as a controller.

JUYMO may also process personal data on behalf of a client or other organisation under a separate agreement. In those circumstances, that organisation may act as controller and JUYMO may act as processor.

Where JUYMO acts as processor:

• the relevant controller determines the purposes and essential means of processing;
• the applicable client agreement or data-processing agreement governs JUYMO's processing;
• requests concerning that processing may need to be referred to the relevant controller; and
• the controller's privacy notice may provide additional information.

This Policy does not replace:

• a specific collection notice;
• a client or partner privacy provision;
• an employee or contractor privacy notice;
• a data-processing agreement;
• a contractual confidentiality arrangement; or
• an external provider's privacy notice where that provider acts independently.

Where a more specific notice applies to a particular processing activity, that notice should be read together with this Policy and will prevail for that specific activity to the extent necessary.

3. Intended Users and Minors

The Website is intended primarily for:

• businesses;
• organisations;
• independent professionals;
• consultants;
• prospective partners;
• suppliers; and
• persons acting in a business or professional capacity.

The Website is not directed to children.

Users must be at least 18 years old to submit an interactive Website form, subscribe to marketing, create or use a Partner Portal account or use other restricted interactive functions.

JUYMO does not knowingly seek personal data from children through the Website.

If JUYMO becomes aware that personal data relating to a child has been submitted inappropriately, JUYMO will assess the circumstances and take appropriate steps, which may include deletion or restriction.

4. Applicable Privacy Framework

JUYMO is established in Dubai, United Arab Emirates.

Its principal federal privacy framework is Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, together with other applicable UAE legislation.

Depending on the nature of the relevant activity and its territorial scope, other privacy laws may also apply.

These may include, where legally applicable:

• the European Union General Data Protection Regulation;
• applicable European national data-protection legislation;
• United Kingdom data-protection law;
• the Swiss Federal Act on Data Protection; and
• privacy legislation in another jurisdiction whose territorial requirements are met.

The fact that the Website can technically be accessed from a jurisdiction does not by itself mean that every privacy law of that jurisdiction applies to JUYMO.

References in this Policy to rights, legal grounds, time limits or safeguards are subject to the specific law applicable to the relevant processing.

5. Personal Data We May Collect

The personal data JUYMO processes depends on how a person interacts with the Website.

5.1 Business Contact and Enquiry Data

JUYMO may collect:

• name;
• business email address;
• telephone number;
• country or location;
• company or organisation;
• role or job title;
• professional information;
• subject and content of an enquiry;
• preferred communication method;
• attachments voluntarily provided;
• source or referral information;
• communication history;
• follow-up records; and
• relationship or opportunity status.

Users should not provide confidential, privileged or sensitive information through a general contact form unless JUYMO has specifically requested it through an approved process.

5.2 Marketing and Campaign Data

Where business marketing functions are used, JUYMO may process:

• name;
• business email address;
• organisation;
• country;
• role;
• areas of professional interest;
• subscription source;
• date and time of subscription;
• consent or permission records;
• verification status;
• campaign delivery information;
• bounce information;
• unsubscribe information;
• complaint information;
• email opens or link interactions where enabled and lawful;
• preferences; and
• suppression records.

5.3 Live Chat Data

When a live-chat or messaging function is used, JUYMO may process:

• information submitted in the conversation;
• business contact details;
• chat messages;
• attachments;
• conversation date and time;
• conversation duration;
• referral page;
• session information;
• IP address;
• browser and device data;
• approximate location;
• routing information;
• chatbot or agent information;
• follow-up records;
• security information; and
• quality or abuse-prevention information.

A chat interface may be automated, human-assisted or a combination of both.

Where a user could reasonably believe that an automated system is a human, JUYMO will seek to make the nature of the interaction reasonably clear.

5.4 Partner Portal Data

The Partner Portal is a restricted business environment.

Depending on the stage and nature of a potential or existing relationship, JUYMO may process:

• identity and contact details;
• account and authentication information;
• professional profile;
• experience and qualifications;
• skills and areas of expertise;
• availability;
• proposed rates;
• company information;
• licence or registration data;
• ownership or authorised-signatory information;
• tax residence;
• tax-registration information;
• VAT information;
• invoicing information;
• payment preferences;
• bank-account or IBAN information;
• compliance declarations;
• conflict-of-interest information;
• sanctions-screening information;
• politically exposed person information where relevant;
• identity-verification documentation;
• passport or identification details where legitimately required;
• proof of address;
• professional certificates;
• insurance information;
• application status;
• review and approval records;
• contractual records;
• project or engagement identifiers;
• consent and terms-acceptance evidence;
• portal activity logs;
• security logs; and
• related correspondence.

JUYMO will seek to collect only information reasonably necessary for the relevant process.

Users must not upload information merely because a free-text or file-upload function is technically available.

5.5 AI and Automated-System Data

Where an artificial-intelligence or automated function is used, JUYMO may process:

• prompts;
• questions;
• instructions;
• submitted text;
• files or attachments;
• generated outputs;
• conversation history;
• feedback;
• session identifiers;
• technical metadata;
• model or workflow information;
• moderation information;
• security and abuse-detection records;
• error information; and
• human-review or escalation records.

Users must not submit confidential or highly sensitive information to a general-purpose AI interface unless the relevant workflow expressly requests the information and provides appropriate protections.

5.6 Technical and Security Data

JUYMO and authorised providers may process:

• IP address;
• approximate location derived from an IP address;
• browser type and version;
• operating system;
• device type;
• language;
• page views;
• referring URL;
• navigation information;
• clicks;
• session duration;
• date and time;
• cookie identifiers;
• local-storage identifiers;
• authentication logs;
• failed-login records;
• server logs;
• application logs;
• firewall and security logs;
• consent-management records;
• performance data;
• error data;
• fraud indicators; and
• bot-detection information.

5.7 Communications and Compliance Records

JUYMO may retain appropriate records of:

• emails;
• chat conversations;
• meeting notes;
• support communications;
• complaints;
• privacy requests;
• security incidents;
• notices;
• permissions;
• approvals;
• contractual acceptance; and
• business transactions.

6. Sensitive Personal Data

JUYMO does not generally seek sensitive personal data through the public Website.

Certain restricted Partner Portal, identity-verification, compliance or legal workflows may require information that is sensitive or presents elevated privacy risk.

Where such information is genuinely required, JUYMO will seek to:

• limit collection to what is necessary;
• use an appropriate lawful basis;
• restrict access;
• apply proportionate technical and organisational controls;
• restrict further use; and
• retain the information only for an appropriate period.

Users should not submit health data, biometric data, criminal-record information, passwords, authentication keys, full payment-card information, privileged communications or trade secrets through a general Website form or general AI chatbot.

7. How We Obtain Personal Data

JUYMO may obtain personal data:

• directly from the individual;
• from the individual's organisation;
• from an authorised representative;
• through Website forms;
• through the Partner Portal;
• through chat;
• through email or other communications;
• through campaign interactions;
• from professional referrals;
• from business events or networks;
• from publicly available professional information;
• from corporate or professional registers where lawful;
• from JUYMO clients, partners or suppliers;
• from technology providers supporting the Website; and
• through technical or security records generated during Website use.

Where personal data is obtained indirectly, JUYMO will provide any information required by applicable law unless a lawful exception applies.

8. Purposes of Processing

JUYMO may process personal data for the following purposes.

8.1 Website Operation and Security

To:

• deliver Website content;
• maintain Website functions;
• authenticate users;
• maintain sessions;
• prevent fraud;
• prevent abuse;
• investigate suspicious activity;
• identify technical problems;
• maintain backups; and
• protect systems, users and information.

8.2 Enquiries and Business Development

To:

• receive and assess enquiries;
• respond to requests;
• arrange meetings;
• communicate with prospective clients or partners;
• evaluate suitability;
• prepare proposals;
• maintain appropriate business-development records; and
• take requested steps before a potential contract.

8.3 Partner Portal Administration

To:

• invite users;
• create accounts;
• verify information;
• assess applications;
• perform proportionate due diligence;
• manage partner relationships;
• maintain professional records;
• administer tax and payment information;
• administer contracts and projects;
• maintain compliance records; and
• protect the integrity of the partner network.

8.4 AI and Chat Functions

To:

• generate requested responses;
• provide preliminary assistance;
• classify or route requests;
• support document processing;
• support semantic search;
• identify errors;
• monitor performance;
• prevent abuse;
• improve approved workflows; and
• provide human escalation where appropriate.

8.5 Business Communications

To:

• send requested updates;
• send newsletters or invitations;
• communicate relevant business information;
• verify subscriptions;
• administer preferences;
• maintain suppression lists; and
• measure campaign effectiveness where lawful.

8.6 Website Improvement and Analytics

To:

• understand Website performance;
• identify technical issues;
• analyse navigation;
• improve user experience;
• improve accessibility;
• test Website functions; and
• measure permitted campaigns.

Non-essential analytics, advertising or tracking technologies will be subject to any choice or consent required by applicable law.

8.7 Legal, Regulatory and Compliance Purposes

To:

• comply with applicable legal obligations;
• maintain corporate records;
• comply with tax and accounting obligations;
• support sanctions or compliance controls;
• respond to lawful authority requests;
• investigate suspected misconduct;
• establish legal rights;
• exercise legal rights; and
• defend legal claims.

8.8 Corporate Administration

To:

• administer suppliers;
• manage technology providers;
• conduct audits;
• manage risk;
• maintain internal business records;
• support insurance;
• support professional advisers; and
• manage a lawful corporate transaction or reorganisation.

8.9 Anonymisation and Aggregation

JUYMO may create genuinely anonymised or aggregated information that no longer identifies an individual.

Properly anonymised information may be used for lawful business, statistical, operational and analytical purposes.

9. Legal Grounds

The applicable legal ground depends on the processing activity and the law governing that activity.

9.1 UAE Processing

Under applicable UAE personal-data legislation, JUYMO may process personal data on the basis of valid consent or where another basis or statutory exception permits processing.

Depending on the circumstances, this may include processing necessary:

• to enter into or perform a contract;
• to comply with applicable law;
• to protect legal rights;
• to establish, exercise or defend legal claims;
• for employment or occupational purposes where applicable; or
• for another purpose expressly permitted by applicable legislation.

9.2 EU, UK or Other Applicable Frameworks

Where another privacy framework applies, JUYMO will rely on an available lawful basis under that framework.

Depending on the law and activity, this may include:

• performance of a contract;
• steps requested before entering into a contract;
• legitimate interests, where legally available and appropriately balanced;
• consent;
• compliance with a legal obligation;
• establishment, exercise or defence of legal claims; or
• another legally recognised ground.

JUYMO will not rely on consent where consent would not be freely given or where another legal ground is more appropriate.

Where processing is based on consent, consent may be withdrawn at any time, subject to applicable law.

Withdrawal does not affect processing that was lawful before withdrawal.

10. Artificial Intelligence, Automation and Human Review

JUYMO may use external technology and AI providers to support Website and approved business workflows.

10.1 AI Processing

An AI interaction may pass through:

• the Website;
• JUYMO's automation systems;
• JUYMO's enterprise systems;
• approved AI-model providers;
• document-processing systems;
• search or vector-search systems; and
• related security or monitoring services.

Only information reasonably required for the relevant function should be transmitted.

JUYMO will seek to use business or enterprise configurations and contractual arrangements appropriate to the relevant use case.

JUYMO does not authorise an external provider to use confidential Partner Portal information for general model training unless:

• there is a documented lawful basis;
• appropriate contractual terms exist;
• the processing is consistent with JUYMO's obligations; and
• affected individuals receive any notice required by law.

10.2 AI Limitations

AI-generated output may be inaccurate, incomplete, outdated, biased or inappropriate.

AI output should not be treated as verified professional advice merely because it is generated through a JUYMO Website function.

10.3 Automated Administrative Processing

JUYMO may use automated functions for activities such as:

• duplicate detection;
• invitation validation;
• security controls;
• spam or fraud detection;
• routing;
• classification;
• workflow status;
• document extraction; and
• administrative checks.

10.4 Significant Automated Decisions

JUYMO does not intend to make decisions based solely on automated processing where those decisions produce legal or similarly significant effects for an individual.

If JUYMO introduces such processing, it will first assess:

• legal basis;
• transparency requirements;
• proportionality;
• privacy risk;
• applicable safeguards; and
• whether human intervention or review must be available.

A person materially affected by an automated outcome may contact admin@juymo.com to request information or human review where applicable law provides such a right.

11. Cookies and Similar Technologies

The Website may use cookies and comparable technologies including:

• browser storage;
• local storage;
• pixels;
• tags;
• session identifiers; and
• other technical identifiers.

11.1 Categories

The Website may use the following categories.

Strictly necessary technologies

Used for purposes such as:

• Website security;
• authentication;
• session management;
• load balancing;
• form submission;
• fraud prevention; and
• storing privacy choices.

Preference technologies

Used to remember appropriate settings or user choices.

Analytics and performance technologies

Used to understand Website performance and usage where enabled and lawful.

Communication technologies

Used for live chat, chatbot continuity, message routing or similar functions.

Campaign technologies

Used to manage subscriptions and measure permitted campaign activity.

Marketing or advertising technologies

JUYMO will not activate cross-site advertising or comparable non-essential tracking without first implementing the notice and user choice required by applicable law.

11.2 Consent and Cookie Settings

Where prior consent is legally required:

• non-essential technologies will not be activated before the required choice;
• users will be able to accept or reject relevant categories;
• consent will not be obtained through inactivity or pre-selected options where prohibited;
• withdrawing consent will be reasonably accessible; and
• refusal of non-essential technologies will not prevent access to core public Website content.

The Website's Cookie Settings should provide the current operational inventory of active technologies, including where reasonably practicable:

• cookie or technology name;
• provider;
• purpose;
• category; and
• duration.

The live Cookie Settings inventory is intended to provide the most specific current description of cookies and similar technologies active on the Website.

12. WordPress, Hostinger and Zoho One

The Website is built using WordPress technology and hosted using Hostinger infrastructure.

JUYMO uses Zoho One as its principal enterprise environment for Website-related business administration.

Depending on the workflow, relevant Zoho applications may process:

• contact data;
• CRM records;
• Website form submissions;
• campaign information;
• consent information;
• live-chat records;
• Partner Portal records;
• documents;
• files;
• workflow information; and
• internal administrative records.

JUYMO may also use approved supporting providers for:

• hosting;
• backups;
• domain and DNS services;
• email;
• communications;
• cybersecurity;
• automation;
• electronic signatures;
• analytics;
• artificial intelligence;
• semantic search;
• document processing; and
• technical support.

References to specific providers describe the current or anticipated technical environment and do not prevent JUYMO from replacing a provider where appropriate.

Any material change affecting privacy will be reflected in this Policy or another appropriate notice where required.

13. Service Providers and Other Recipients

JUYMO may disclose personal data where reasonably necessary to:

• Website hosting providers;
• WordPress support providers;
• Zoho and relevant Zoho applications;
• cloud and backup providers;
• domain, DNS and network providers;
• cybersecurity providers;
• email and communication providers;
• electronic-signature providers;
• automation or integration providers;
• AI-model providers;
• search or document-processing providers;
• banks and payment-service providers;
• accountants;
• auditors;
• insurers;
• lawyers;
• tax advisers;
• other professional advisers;
• clients or project parties where required for a legitimate relationship;
• potential purchasers or successors in a genuine corporate transaction;
• courts;
• regulators;
• licensing authorities;
• tax authorities;
• law-enforcement authorities; and
• another recipient expressly authorised by the individual.

Where a provider acts as processor, JUYMO will seek appropriate contractual confidentiality, security and data-protection commitments.

JUYMO does not intentionally disclose more personal data than reasonably necessary for the relevant purpose.

14. International Processing and Transfers

JUYMO is based in the UAE and works with international business users and service providers.

Personal data may therefore be processed in the UAE and in other countries where authorised providers or infrastructure operate.

Those countries may apply privacy laws that differ from those applicable in another jurisdiction.

Where applicable law requires a transfer mechanism, JUYMO will use an appropriate mechanism available under that law.

Depending on the relevant framework, this may include:

• transfer to a jurisdiction formally recognised as providing adequate protection;
• contractual data-protection commitments;
• recognised standard contractual clauses;
• additional technical or organisational safeguards;
• a mechanism recognised by applicable UK or Swiss law;
• a mechanism permitted under Articles 22 and 23 of the UAE Personal Data Protection Law; or
• a legally available transfer exception.

JUYMO may supplement contractual safeguards with measures such as:

• data minimisation;
• encryption;
• pseudonymisation;
• access restrictions; and
• regional configuration where technically and commercially appropriate.

Information about safeguards relevant to a particular transfer may be requested from admin@juymo.com, subject to legitimate confidentiality, security and commercial restrictions.

15. Data Retention

JUYMO retains identifiable personal data only for as long as reasonably necessary for:

• the relevant processing purpose;
• an active or potential business relationship;
• contractual obligations;
• corporate administration;
• tax or accounting obligations;
• compliance requirements;
• security;
• dispute management;
• limitation or claims periods; and
• legal obligations.

Subject to legal holds, active disputes and applicable statutory requirements, JUYMO currently intends to apply the following Website-related retention framework.

Record or activity	Intended retention
General enquiries that do not become an active relationship	Normally up to 24 months after the last substantive interaction
Marketing subscriber data	While actively subscribed; inactive subscriptions may be reviewed after up to 24 months
Marketing suppression records	As long as reasonably necessary to honour the opt-out
SalesIQ or general chatbot transcripts	Normally up to 12 months unless converted to a business record or required for security or legal purposes
AI security and quality logs	Normally up to 12 months, subject to applicable provider settings and earlier deletion where appropriate
Unsuccessful, withdrawn or incomplete Partner Portal applications	Normally up to 24 months after closure
Active and former partner contractual, tax, payment, project and compliance records	During the relationship and normally 7 years after its end, or longer where legally required
Material consent and terms-acceptance evidence	Normally up to 7 years where needed to demonstrate compliance
General technical and security logs	Normally up to 12 months, unless needed for an incident or investigation
Privacy requests and complaints	Normally up to 7 years after closure where reasonably required to evidence handling
Cookie and consent-management records	For the period reasonably required to apply and demonstrate the user’s choice

These periods are intended operational limits rather than a commitment to retain information for the maximum period.

JUYMO may delete information earlier when it is no longer necessary.

Backup data may remain within secure rolling backup systems until overwritten in accordance with the applicable backup cycle.

Backups are not intended for ordinary business use.

Where deleted or restricted information is restored from backup, applicable deletion or restriction measures should be re-applied where required.

JUYMO may retain genuinely anonymised information without the periods above because it no longer identifies an individual.

16. Information Security

JUYMO applies technical and organisational measures proportionate to the nature and risk of processing.

Measures may include:

• role-based access;
• least-privilege access;
• strong authentication;
• multi-factor authentication where supported;
• encryption in transit;
• provider-supported encryption at rest;
• secure configuration;
• software updates;
• malware protection;
• vulnerability management;
• logging;
• monitoring;
• access reviews;
• backup and recovery procedures;
• separation of Website and enterprise functions;
• separation of AI or automation workflows where appropriate;
• data minimisation;
• masking;
• pseudonymisation;
• confidentiality commitments;
• personnel awareness;
• processor due diligence; and
• security review of higher-risk changes.

No internet-connected or storage system can be guaranteed to be completely secure.

Users are responsible for protecting their own credentials and devices and should notify JUYMO promptly if unauthorised access is suspected.

17. Personal-Data Incidents

JUYMO maintains procedures for identifying, assessing, containing and responding to suspected personal-data incidents.

Where an incident triggers a legal notification requirement, JUYMO will notify the competent authority and/or affected individuals in the manner and within the period required by applicable law.

Suspected loss, unauthorised access, misdirection or disclosure involving JUYMO personal data should be reported promptly to:

admin@juymo.com

Persons reporting an incident should avoid actions that could unnecessarily destroy evidence, spread affected information or create additional security risk.

18. Individual Rights

Privacy rights depend on the law applicable to the relevant processing and may be subject to conditions, exceptions and limitations.

Where applicable, an individual may have rights to:

• receive information about processing;
• obtain confirmation that personal data is being processed;
• access personal data;
• receive a copy of relevant personal data;
• correct inaccurate information;
• complete incomplete information;
• request deletion where continued retention is not justified;
• restrict certain processing;
• object to certain processing;
• object to direct marketing;
• withdraw consent;
• request portability of certain information;
• obtain information concerning applicable automated processing;
• request human review of qualifying automated decisions; and
• complain to a competent privacy authority.

JUYMO will not unlawfully discriminate against a person for exercising a valid privacy right.

JUYMO does not currently sell personal data for monetary consideration and does not currently use personal data for cross-context behavioural advertising.

If JUYMO materially changes those practices, it will update its privacy documentation and implement any legally required choices before the relevant practice is introduced.

19. Exercising Privacy Rights

Privacy requests may be sent to:

admin@juymo.com

The subject line "Privacy Request" is recommended.

A request should include sufficient information to identify:

• the requester;
• the relevant organisation or relationship;
• the email address or account concerned;
• the right being exercised; and
• the records or processing activity involved.

JUYMO may request proportionate information to verify identity or authority.

A full passport or other sensitive identity document should not be sent through ordinary email unless JUYMO specifically requests it using an approved secure process.

Where applicable, an authorised representative may submit a request, subject to reasonable verification of authority.

JUYMO will respond within the period required by applicable law.

Where a request cannot be fulfilled fully or immediately because of legal obligations, another person's rights, security requirements, contractual records, claims or backup constraints, JUYMO will apply any appropriate restriction or alternative measure available under applicable law.

20. Marketing Choices

JUYMO may send business marketing where:

• the recipient has validly opted in;
• an existing business relationship permits the communication; or
• another applicable rule lawfully allows relevant B2B marketing.

Marketing consent will be separated from acceptance of Website Terms or a Partner Portal agreement where applicable law requires such separation.

Recipients may unsubscribe using the mechanism in a communication or by contacting:

admin@juymo.com

JUYMO may retain a minimal suppression record after unsubscribe to avoid inadvertently adding the address back to marketing.

Operational, contractual, security, account and compliance communications are not marketing and may continue where necessary.

21. Accuracy and Data Minimisation

Individuals should provide information that is accurate and reasonably necessary for the relevant purpose.

Partner Portal users are responsible for keeping material professional, tax, payment, licence, ownership and contact information reasonably current.

JUYMO may request verification or correction where material information appears inaccurate or out of date.

JUYMO may restrict or suspend a workflow where information required for compliance or administration cannot reasonably be verified.

22. Third-Party Websites and Services

The Website may link to or integrate with external websites or services.

An external provider may act as an independent controller and may apply its own privacy terms.

JUYMO is not responsible for independent processing carried out by another controller merely because a link appears on the Website.

Users should review applicable privacy information before supplying personal data to an external provider.

23. Representatives and Local Privacy Contacts

JUYMO is established in the United Arab Emirates.

Where JUYMO's activities legally require appointment of a privacy representative, local contact or similar representative in another jurisdiction, JUYMO will make the appropriate appointment and provide the representative's details in this Policy or another applicable notice.

Until such an appointment is legally required and made, direct privacy communications should be addressed to:

admin@juymo.com

24. Complaints

JUYMO encourages individuals to contact admin@juymo.com first so that a privacy concern can be investigated and addressed.

Where applicable law provides a regulatory complaint mechanism, an individual may also have the right to complain to the competent privacy or data-protection authority.

The competent authority will depend on:

• the jurisdiction;
• the individual's location;
• JUYMO's relevant establishment or activity; and
• the law governing the processing.

Nothing in this section restricts a legally available regulatory or judicial remedy.

25. Changes to This Policy

JUYMO may update this Policy to reflect changes in:

• applicable law;
• Website functionality;
• technology;
• providers;
• data-processing activities;
• security practices; or
• business operations.

The current version and effective date will be published on the Website.

Where a material change requires additional notice, renewed consent or another action under applicable law, JUYMO will take that action before or when the relevant change takes effect.

Previous versions may be retained as compliance records.

26. Contact

For questions, privacy requests or suspected personal-data incidents:

JUYMO & CO – FZCO

Licence No. 65723

Premises No. DSO-IFZA

Building: IFZA Properties

Dubai Silicon Oasis

Dubai, United Arab Emirates

Email: admin@juymo.com

End of Privacy and Data Protection Policy – Version 2.0