Contents

1. Introduction and Scope

GENYX Store respects your privacy and is committed to handling personal data lawfully, fairly, transparently and securely.

This Privacy Policy explains how personal data is collected, used, disclosed, retained and protected when you:

• visit or use genyx.store; •create or manage a customer account; •browse or purchase clothing, activewear, fashion accessories or related lifestyle products; •subscribe to marketing communications; •contact customer service or request a return, refund or exchange; •submit a product review, image, video or other content; •participate in a promotion, competition or survey; or •otherwise interact with GENYX Store online or through an authorised customer-service channel. This policy should be read together with the Cookie Policy, Terms and Conditions, Shipping Policy, Returns and Refunds Policy and any privacy notice displayed at the point where particular information is collected.

2. Data Controller and Contact

The legal trader identified as the operator of GENYX Store in the Legal Information section of genyx.store is the data controller for the processing described in this policy. The controller determines why and how personal data is processed.

Privacy questions, rights requests and complaints may be submitted through the official customer-service or privacy contact details displayed on genyx.store. Please use the subject line “Privacy Request” where possible.

Certain third parties, including payment providers, couriers and social-media platforms, may act as independent controllers when they determine their own purposes and methods of processing. Their separate privacy notices may therefore also apply.

3. Meaning of Personal Data

“Personal data” means information relating to an identified or identifiable natural person. It includes information that identifies a person directly, such as a name or email address, and information that may identify a person when combined with other data, such as an order number, device identifier or internet-protocol address.

Information that has been irreversibly anonymised so that no individual can reasonably be identified is not personal data. Aggregated information may be used for statistics, business planning and service improvement where individuals are not identifiable.

4. Personal Data We May Collect

4.1 Identity and contact information

• full name, title, username or account identifier; •email address and telephone number; •billing and delivery addresses, country and postcode; •age confirmation or date of birth where genuinely required; and •signature, delivery code or other identity information where necessary for secure delivery or verification.

4.2 Order, transaction and delivery information

• products viewed or purchased, including size, colour, quantity and value; •order number, discounts, promotional codes and purchase history; •payment method, payment status, transaction reference and limited payment metadata; •delivery method, tracking information, delivery status and proof of delivery; •returns, exchanges, refunds, chargebacks and warranty or complaint information; and •customs and import information required for international delivery.

4.3 Payment information

Payments may be processed by banks, payment gateways or authorised payment-service providers. GENYX Store does not ordinarily receive or retain a complete payment-card number or card security code when an external provider processes the payment.

We may receive limited information such as the payment method, provider, card type, masked card details, billing information, transaction reference, payment status, fraud-screening result, refund information or chargeback status.

4.4 Account and preference information

• account login information and securely protected credentials; •saved addresses and preferences; •wish-list, cart and product-interest information; •marketing and cookie choices; and •account activity, security alerts and login history.

4.5 Customer-service and correspondence information

• emails, contact-form submissions and other messages; •complaints, return requests, delivery enquiries and sizing questions; •photographs or videos supplied to evidence a faulty, damaged or incorrect product; •customer-service notes, call records where lawful and disclosed, and resolution history; and •information required to verify identity before handling a privacy request.

4.6 Technical and usage information

• internet-protocol address, browser, operating system, device type and approximate location derived from an IP address; •language, time zone, screen settings, device or advertising identifiers; •pages viewed, searches, links selected, session duration and referral source; •products added to or removed from a cart, abandoned-cart activity and campaign attribution; •server logs, error reports, security information and suspected misuse; and •information collected through cookies, pixels, tags, local storage or similar technologies, subject to applicable consent requirements.

4.7 Marketing, reviews and submitted content

• marketing subscriptions, consent records, unsubscribe requests and campaign engagement; •product ratings, review text, chosen display name and submitted photographs or videos; •competition entries, survey responses and promotional interactions; and •public social-media interactions and content voluntarily shared with GENYX Store.

5. Information We Do Not Normally Require

GENYX Store does not ordinarily require special-category personal data, such as information about health, racial or ethnic origin, religion, political opinions, trade-union membership, genetics, biometrics used for identification, sex life or sexual orientation.

Please do not provide sensitive, confidential or excessive information unless it is genuinely necessary for a particular request. Where you voluntarily disclose sensitive information, for example in an accessibility or sizing enquiry, it will be processed only where a lawful condition exists and only to the extent necessary to address the request.

GENYX Store does not request or retain payment-card security codes after payment authorisation.

6. How We Collect Personal Data

6.1 Directly from you

We collect information that you provide when you place an order, create an account, subscribe to marketing, contact customer service, request a return, enter a promotion, complete a survey or submit a review.

6.2 Automatically from your device

Technical and usage information may be collected through server logs, necessary cookies, consented analytics or advertising technologies, security systems, pixels, tags, software-development kits and similar technologies.

6.3 From service providers and business partners

Information may be received from payment providers, couriers, fulfilment providers, ecommerce and hosting providers, fraud- prevention services, marketing platforms, analytics providers, social-media platforms and customer-service systems.

6.4 From another person

A purchaser may provide another person’s name, address or contact details for gift delivery or authorised collection. The person supplying the information should ensure that they are authorised to do so and that the recipient is appropriately informed.

7. Purposes and Lawful Bases

GENYX Store processes personal data only where a lawful basis applies. The principal purposes and bases are summarised below.

Orders and contract performance Receive orders, authorise payment, dispatch products, issue confirmations, complete delivery, manage returns and refunds.

Customer accounts Create, maintain, authenticate and secure accounts; display order history and preferences.

Customer service Answer enquiries, investigate complaints, provide sizing assistance and resolve delivery or product issues.

Legal and regulatory compliance Maintain tax and accounting records, respond to lawful authorities, handle product safety and consumer rights.

Security and fraud prevention Protect accounts, detect suspicious transactions, prevent abuse, manage chargebacks and defend legal claims.

Website operation and improvement Maintain functionality, diagnose errors, understand performance and improve the customer experience.

Marketing and personalisation Send offers, announce launches, measure campaigns, recommend products and deliver tailored advertising.

Reviews and public content Publish genuine customer reviews and use submitted content for agreed promotional purposes.

7.1 Legitimate interests

Where legitimate interests are relied upon, GENYX Store considers the purpose, necessity and potential impact on individuals. Relevant interests may include operating and securing the Website, preventing fraud, improving services, maintaining business records, responding to customers and protecting legal rights.

7.2 Consent

Where processing is based on consent, consent must be freely given, specific, informed and unambiguous. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

8. Order Processing and Customer Accounts

Personal data is used to take steps requested before a purchase, form and perform the sales contract, process payment, communicate order status, arrange delivery and manage after-sales matters.

Where you create an account, account data is used to authenticate access, maintain saved preferences, display order history and provide account functionality. You are responsible for protecting your password and notifying GENYX Store promptly if you suspect unauthorised use.

GENYX Store may retain essential records after account closure where necessary for tax, accounting, consumer-protection, fraud-prevention, security or legal-claims purposes.

9. Marketing Communications

Where permitted, GENYX Store may send information about new clothing collections, activewear releases, limited drops, restocks, special offers, discount codes, events and related brand news.

Marketing is based on consent where consent is required. Limited marketing to existing customers concerning similar GENYX Store products may be carried out where applicable law permits and a clear opportunity to object is provided.

You may unsubscribe at any time by using the unsubscribe link in a message, adjusting available account preferences or contacting GENYX Store. A limited suppression record may be retained after opt-out so that the preference can continue to be respected.

Opting out of marketing does not prevent service communications concerning an order, payment, delivery, return, account security, product safety or legal notice.

10. Cookies, Analytics and Advertising Technologies

GENYX Store may use cookies, pixels, tags, local storage and similar technologies for Website operation, shopping-cart functionality, account login, security, fraud prevention, preference management, analytics, personalisation and advertising.

Strictly necessary technologies may be used where required to provide a service requested by you or to operate the Website securely. Non-essential analytics, personalisation and advertising technologies will be used only where permitted and, where required, after valid consent has been obtained.

Where enabled on the Website, services such as Google Analytics and Meta Pixel may receive technical, usage or campaign information in accordance with the choices made through the cookie-preference tool and the relevant provider arrangements.

The Website should allow visitors to accept optional technologies, reject them, choose individual categories and change preferences later. The separate Cookie Policy should identify the technologies actually in use, their providers, purposes and durations.

11. Personalisation and Profiling

Where permitted and subject to required consent, Website activity and purchase information may be used to recommend relevant products, personalise content, understand customer interests, measure advertising performance, create advertising audiences and limit repeated advertising.

Profiling for marketing does not ordinarily produce legal or similarly significant effects. You may withdraw relevant consent or object to direct marketing at any time.

12. Sharing Personal Data

GENYX Store does not sell or rent personal data in exchange for money. Personal data may be shared only where reasonably necessary with the following categories of recipients:

• payment providers, banks and fraud-prevention services for payment authorisation, refunds, security and chargeback management; •couriers, fulfilment providers and customs intermediaries for preparation, transport, tracking and delivery; •ecommerce, hosting, cloud, security and technology providers for Website operation and data storage; •customer-service and communications providers for enquiries, returns, complaints and transactional messages; •marketing, analytics and advertising providers where lawfully enabled and subject to required consent; •professional advisers, including lawyers, accountants, auditors, insurers and consultants; •public authorities where disclosure is required by law, court order, customs requirement, tax obligation or other lawful request; and •a buyer, investor, successor or adviser in connection with a genuine sale, merger, restructuring, financing or transfer of the GENYX Store business. Service providers acting on GENYX Store’s instructions must process personal data only for authorised purposes and subject to appropriate contractual, confidentiality and security obligations. Independent controllers process information under their own legal responsibilities and privacy notices.

13. International Data Transfers

Some service providers may process or store personal data outside Malta or the European Economic Area. Where a restricted international transfer occurs, GENYX Store will use a lawful transfer mechanism where required, such as:

• a European Commission adequacy decision; •European Commission Standard Contractual Clauses; •binding corporate rules or another approved safeguard; or •a legally permitted exception applicable to the particular transfer. Additional technical, contractual or organisational safeguards may be applied where appropriate. Further information about relevant safeguards may be requested, subject to legitimate confidentiality and security restrictions.

14. Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, consumer-protection, fraud-prevention, security and dispute-resolution requirements.

Retention decisions take account of the nature and sensitivity of the information, the purpose of processing, the customer relationship, applicable legal periods, warranty and consumer-rights periods, limitation periods for claims, security risks and whether information can be anonymised.

Typical retention approach

• Order and transaction records: retained for applicable accounting, tax, consumer-protection and legal-claims periods. •Account information: retained while the account is active and for a reasonable period after closure where required for security, fraud prevention, legal compliance or dispute resolution. •Customer-service correspondence: retained for the time needed to resolve the matter and for an appropriate period afterwards to maintain records and protect legal rights. •Marketing information: retained until consent is withdrawn, the individual unsubscribes or the information is no longer necessary; limited suppression data may be retained to honour opt-out choices. •Cookie and analytics information: retained according to the durations stated in the Cookie Policy or cookie-preference tool. •Security and fraud information: retained for a period reasonably necessary to prevent repeated abuse and establish, exercise or defend legal claims. When information is no longer required, it will be securely deleted, anonymised or placed beyond normal operational use, subject to any lawful archival or backup requirement.

15. Data Security

GENYX Store uses appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, unlawful disclosure, misuse, alteration, destruction and other unlawful processing.

Depending on the circumstances, safeguards may include access controls, authentication, encryption in transit, secure payment processing, restricted staff access, service-provider due diligence, backups, monitoring, fraud-prevention measures, confidentiality obligations and incident-response procedures.

No internet transmission, electronic storage system or Website can be guaranteed to be completely secure. Customers should protect account credentials and promptly report suspected unauthorised access.

Where a personal-data breach creates a legal notification obligation, GENYX Store will notify the competent supervisory authority and affected individuals as required by applicable law.

16. Automated Decision-Making

GENYX Store and its service providers may use automated tools to assess payment or fraud risk, protect customer accounts, detect suspicious activity, recommend products and measure advertising performance.

GENYX Store does not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects. Where such processing is used under a lawful basis, the safeguards required by law will apply, which may include the opportunity to obtain human intervention, express a point of view and contest the decision.

A payment provider may independently decline or refer a transaction for review under its own security, regulatory or fraud- prevention procedures.

17. Your Data-Protection Rights

Subject to applicable conditions and exemptions, you may have the following rights:

• Right to information – to receive clear information about how personal data is processed. •Right of access – to obtain confirmation of processing and a copy of relevant personal data. •Right to rectification – to correct inaccurate or incomplete personal data. •Right to erasure – to request deletion in circumstances recognised by law. •Right to restriction – to request that processing be limited in certain circumstances. •Right to object – to object to processing based on legitimate interests and at any time to direct marketing. •Right to data portability – where applicable, to receive data provided by you in a structured, commonly used and machine-readable format and have it transmitted to another controller where technically feasible. •Right to withdraw consent – at any time where processing is based on consent. •Rights concerning certain automated decisions – including safeguards against qualifying solely automated decisions. •Right to complain – to lodge a complaint with a competent data-protection authority. These rights are not absolute. For example, information may need to be retained to complete a contract, comply with law or establish, exercise or defend legal claims.

18. Exercising Your Rights

A request may be submitted through the official privacy or customer-service contact details displayed on genyx.store. Please provide your full name, the email address associated with the order or account, the nature of the request and sufficient information to locate the relevant records.

GENYX Store may request proportionate proof of identity before disclosing, deleting or changing personal data. This protects information from unauthorised access.

A response will normally be provided within one month of receiving a valid request. Where permitted by law, this period may be extended by up to two additional months for complex or numerous requests, and the requester will be informed of the extension and reasons.

Requests are ordinarily handled free of charge. A reasonable fee may be charged, or a request may be refused, where permitted by law and the request is manifestly unfounded or excessive. Where a request cannot be fulfilled in full, the reason will be explained unless legally prohibited.

19. Children’s Privacy

GENYX Store is an online clothing and fashion retailer intended principally for adults. A person under eighteen may not place an order independently and should use the Website only with the involvement and authorisation of a parent or legal guardian.

GENYX Store does not knowingly seek to collect personal data from a child below the applicable age of digital consent without any authorisation required by law. Where information appears to have been supplied without appropriate authorisation, GENYX Store may delete it, restrict the account or request parental confirmation.

20. Reviews, Social Media and Public Content

A review, photograph, video or other content submitted for publication may become visible to the public. Depending on the settings selected, published information may include a first name, initials, display name, review text, product rating and submitted media.

Do not submit information that you do not want made public. GENYX Store may moderate or remove content that breaches review rules, infringes another person’s rights, contains unlawful material or reveals unnecessary personal information.

Where you interact with GENYX Store through a social-media platform, that platform may independently process information under its own privacy notice. GENYX Store may receive public profile information, comments, messages, reactions, advertising interaction and other information you choose to share.

Where audience, analytics or advertising tools are used with social-media platforms, the parties’ respective responsibilities may be governed by applicable law and the platform’s controller arrangements.

21. Third-Party Websites and Services

The Website may contain links to payment providers, courier-tracking sites, social-media platforms and other external services. GENYX Store does not control the independent privacy practices of third parties.

You should review the privacy notice of the relevant third party before providing personal data through its service. A link or integration does not automatically mean that GENYX Store endorses or accepts responsibility for the third party’s independent processing activities.

22. Changes to This Privacy Policy

GENYX Store may update this Privacy Policy to reflect changes in law, Website functionality, business operations, service providers, payment or delivery arrangements, marketing practices or data-protection requirements.

The revised policy will be published on genyx.store with an updated revision date. Where a change materially affects how personal data is used, additional notice or renewed consent will be provided where appropriate or legally required.

23. Complaints and Supervisory Authority

GENYX Store encourages you to contact us first so that there is an opportunity to investigate and resolve any concern.

You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner in Malta. Current complaint and contact information is available through the Commissioner’s official website at idpc.org.mt.

You may also be entitled to contact the data-protection authority in the EU or EEA country of your habitual residence, place of work or place of the alleged infringement.

24. Contact GENYX Store

Questions concerning this Privacy Policy or the processing of personal data may be submitted through the official privacy or customer-service email address or the Contact page displayed on:

genyx.store

Please use the subject line “Privacy Request” where possible. This helps ensure that the request is directed to the appropriate person.

Your main privacy choices

Access, correct, delete or restrict data Submit a Privacy Request through the official contact channel on genyx.store.

Stop promotional messages Use the unsubscribe link or contact GENYX Store.

Change cookie preferences Open the Website cookie-preference tool and update your selections.

Report suspected account misuse Contact customer service promptly and change your password.

Raise a privacy complaint Contact GENYX Store first or lodge a complaint with the Malta IDPC.