Privacy Policy

PEILATEIS LIMITED offers an online platform where users can buy and sell items ("our services"). This privacy policy explains how we collect, use, and share personal data in the provision of our services and the operation of our platform.

We may change this privacy policy from time to time to keep it up to date with legal requirements and the way we run our business. Please regularly check these pages for the latest version.

Who are we?

When you visit our platform www.nonos.live and use our Services, you entrust us with your personal data.

Our site is operated by PEILATEIS LIMITED (hereinafter "NONOS", "the Company", or "We"), a simplified joint-stock company whose registered office is located at Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, HONG KONG S.A.R, registered in the Commercial Register under number 76198334, acting as the data controller for personal data that may be collected on the website for the purposes described below.

What information do we collect?

Personal data you provide to us

We collect personal data that you provide to us, such as name, delivery address, contact details, passwords and security data, as well as payment data.

We collect personal data that you voluntarily provide when you register for the Services, when you express an interest in obtaining information about us or our products and services, when you participate in activities on the Services, or when you contact us.

The personal data we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal data we collect can include the following:

• Name and Contact Data. We collect your first and last name, email address, postal address, phone number, and other similar contact data.

• Credentials: We collect passwords, password hints, and similar security information used for authentication and account access. These details are encrypted and therefore not accessible to us.

• Payment Data: We collect data necessary to process your payment if you make purchases, such as your payment instrument number (e.g., a credit card number) and the security code associated with your payment instrument. All payment data is stored by our payment processing partner, Stripe. You can find their privacy policy link(s) here: https://stripe.com.

All personal data you provide must be up-to-date, complete, and accurate. We encourage you to inform us of any changes to this personal data.

Data we collect automatically

Certain information is collected automatically when you visit, use, or navigate our Services via cookies and similar technologies. These data do not directly reveal your identity (like your name or contact information) but may include indirectly identifying data, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily necessary for maintaining the security and operation of our Services, as well as for our internal analytics.

How do we use your personal data?

We process your data for various purposes described below. These purposes can be based on our legitimate business interests, the performance of our contract with you, compliance with our legal obligations, and/or your consent.

We indicate the legal bases for these specific processing activities next to each purpose listed below.

Purposes

Legal Bases

• To manage user accounts and allow you to access our platform. We may use your data to manage your account and keep it in working order.

Contract with you

• To process and manage your orders. We may use your data to process and manage your orders, payments, returns, and exchanges made through the Services.

Contract with you

• To respond to user inquiries and complaints and improve our Services. We may use your data to respond to your inquiries and solve any potential issues you might have using our Services.

Contract with you and legitimate interest in improving our services

• To enforce our terms and conditions and policies as part of our business relationship, for legal and contractual reasons.

Contract with you

• To send you marketing and promotional communications, and better understand your preferences. We and/or our third-party marketing partners may use the personal data you send to us for marketing purposes if this is in accordance with your marketing preferences. You can opt-out of our marketing emails at any time.

Consent Legitimate interest (to provide you with information you might find interesting and to enhance the data we use to deliver marketing content in an optimized and more personalized manner)

• To protect our Services. We may use your data as part of our efforts to keep our Services safe (e.g., for fraud monitoring and prevention).

Legitimate interest in ensuring the security of our transactions with you, identifying and preventing or resolving fraudulent transactions on the platform and/or inappropriate behaviors as defined in our Terms Of Service. |

| • To respond to lawful requests and protect our rights. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond. | Legal Obligations |

| • For statistical analysis. We may use your data for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our services, products, marketing, and your experience. We may use and store this data in aggregated and anonymized form so that it is not associated with individual end-users and does not include personal data. We do not use identifiable personal data without your consent. | Legitimate interest in improving our services. |

| • To manage our business relationships with our providers. We collect the contact details of our providers to manage our business relationships with them. | Legitimate interest in conducting our activities, including organizing the delivery and receiving of services and the payment for these services |

| • To ask for feedback. We may use your data to ask for feedback and to contact you about your use of our Services. | Legitimate interest in better understanding your expectations, understanding your use of our services, and improving our services |

Who do we share your personal data with?

We may need to share your personal data in the following situations:

• Service Providers. We may employ third-party companies and individuals to facilitate our Services. Specifically, we use payment service providers (for example, Stripe), to whom we entirely entrust the management and processing of information related to your payment card. We also use IT service providers, for example, to host our platform, store your personal data, perform data analysis, send emails, provide our customer service, and manage our marketing actions. These providers are subject to contracts that require them to comply with our instructions and to process your personal data only for the purpose of providing the service we have requested.

• Vendors. When you are a buyer, your data is shared with vendors from whom you make purchases through our platform, for transaction purposes. When dealing with a professional seller, we encourage you to directly consult their data protection policy to learn more about how they manage your personal data and to exercise your rights.

• Business Transfers. We may share or transfer your data in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

• Law Enforcement. We may be required to disclose or share your personal data with law enforcement or other authorities to comply with a legal obligation, a court order, or police request, or to protect our rights or the rights of our customers or third parties.

Do we use cookies and other tracking technologies?

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

How long do we keep your personal data?

We will retain your personal data only for as long as necessary for the purposes set out in this privacy policy:

• User identification and contact information are retained for the duration of the contract with NONOS;

• Identification and contact data of visitors to the Site are retained for the time necessary for NONOS to respond to their request;

• IP addresses collected for security purposes are retained for 13 months;

• Data collected using cookies and other trackers on our Site (that are not solely functional) are retained, subject to your consent, for a period not exceeding 13 months in accordance with applicable laws and regulations;

• Payment data is retained (i) in the case of a single payment, until the goods are received or the service is provided, plus the withdrawal period provided for distance sales of goods and services, (ii) in the case of storing bank card details, subject to your consent for facilitating future purchases until the consent is withdrawn and/or the expiry of the validity of the bank card data.

After these periods, we will archive only the data necessary for our legal and regulatory obligations, within the limits of the applicable limitation period.

How do we keep your data safe?

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal data we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we do our best to protect your personal data, the transmission of personal data to and from our Services is at your own risk. You should only access the Services within a secure environment.

What are your rights?

You have a number of rights relating to your personal data. More information on each of these rights is provided below:

• Access. You can ask us to confirm whether we are processing your personal data and, if so, inform you of the characteristics of such processing, allow you to access it, and give you a copy of it.

• ***Rectification You can ask us to rectify or complete inaccurate or incomplete personal data.

• Erasure. You can ask us to erase your personal data in the following cases: if it is no longer necessary for the purposes for which it was collected; if you have withdrawn your consent; if you have objected to the processing of your personal data; if your personal data has been unlawfully processed; or to comply with a legal obligation. We are not required to comply with your request, particularly if the processing of your personal data is necessary to comply with a legal obligation or for the establishment, exercise, or defense of legal claims.

• Restriction. You can ask us to restrict the processing of your personal data (i.e., to store your personal data but not use it) when: you contest the accuracy of your personal data; the processing is unlawful but you do not want it to be erased; it is still needed for the establishment, exercise, or defense of legal claims; you have exercised your right to object, and the verification of overriding grounds is pending. We may still use your personal data following a request for restriction, when: we have your consent; for the establishment, exercise, or defense of legal claims; or for the protection of the rights of another natural or legal person.

• Portability. You can ask us to provide you with your personal data in a structured, commonly used, and machine-readable format, or you can request to have it "transferred" directly to another data controller, but only when the processing is based on your consent or on the performance of a contract, and the processing is carried out by automated means.

• Digital Legacy. You have the right to set out general or specific instructions for the handling of your personal data after your death.

• Right to Object to Processing. Where we rely on a legitimate interest to process your personal data, you have the right to object to that processing. If you object, we must stop that processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or we need to process the data for the establishment, exercise, or defense of legal claims.

• Withdrawal of Consent. You may withdraw your consent regarding any processing of personal data based on your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

• You may unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the contact details provided below. You will then be removed from the marketing email list — however, we will still need to send you service-related emails that are necessary for the administration and use of your account. To otherwise opt-out, you may contact us using the contact information provided.

Do we make updates to this policy?

We may update this privacy policy. The updated version will be indicated by an updated "Revised" date and will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your data.

How can you contact us about this policy?

To exercise any of your rights, or if you have any questions or comments about this policy, you can email us at info@nonos.live or by mail at: PEILATEIS LIMITED, Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, Hong Kong S.A.R