At DepomClub, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit depomclub.com, create an account, place an order, contact our support team, or otherwise use our website and services. This Privacy Policy is intended to provide information in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), where applicable. 1. DATA CONTROLLER The entity responsible for processing your personal data is: Email: [SUPPORT EMAIL] Website: https://depomclub.com For privacy-related questions or requests concerning your personal data, you can contact us using the information above. If we appoint a Data Protection Officer ("DPO") where required by applicable law, the relevant contact information will be provided here. 2. PERSONAL DATA WE COLLECT Depending on how you interact with DepomClub, we may collect different categories of personal data. Information You Provide Directly This may include: First and last name Email address Billing information Country or region Order information Information provided when contacting customer support Information provided through forms on our website Information contained in customer communications We only request information that is reasonably necessary for the relevant purpose. Order Information When you purchase a product, we may process information such as: Order number Purchased product Purchase date and time Order status Price and currency Email address associated with the order Delivery information Refund or dispute information Payment Information Payments may be processed by third-party payment providers. Depending on the payment method used, payment providers may collect and process information such as payment card details, billing information, transaction identifiers and fraud-prevention information. DepomClub does not intentionally store complete payment card numbers or security codes when those payment details are processed directly by a third-party payment provider. The relevant payment provider's own privacy policy may also apply. 3. INFORMATION COLLECTED AUTOMATICALLY When you visit our website, certain technical information may be collected automatically. This may include: IP address Browser type and version Device type Operating system Language settings Approximate location derived from IP address Pages visited Referring pages Date and time of access Website interaction information Technical logs Security and fraud-prevention information This information may be collected through server logs, cookies, pixels, analytics technologies or similar technologies, depending on the configuration of our website. 4. HOW WE USE YOUR PERSONAL DATA We may process personal data for the following purposes: Processing Orders We use your information to: Process and confirm purchases Deliver digital products Send order information Provide account or product access information Process refunds where applicable Maintain transaction records Customer Support We use information you provide to: Respond to support requests Investigate order issues Resolve delivery problems Verify order ownership Assist with product-related issues Fraud Prevention and Security We may process technical, transaction and order information to: Detect suspicious transactions Prevent fraud Prevent abuse of refunds or payment systems Protect our website and customers Investigate unauthorized activity Maintain the security of our systems Legal and Regulatory Compliance We may process personal data where necessary to: Comply with applicable laws Respond to lawful requests from authorities Maintain accounting and transaction records Establish, exercise or defend legal claims Fulfil regulatory obligations Website Operation and Improvement We may use technical and usage information to: Operate our website Maintain functionality Diagnose technical problems Improve website performance Understand how visitors use our website Protect the security of the website 5. LEGAL BASES FOR PROCESSING Where the GDPR applies, we process personal data on one or more of the following legal bases: Performance of a Contract We may process information where it is necessary to fulfil an order or provide a service requested by you. For example, we need your email address to deliver your digital order. Legal Obligation We may process personal data where necessary to comply with a legal obligation, including applicable accounting, tax, financial or regulatory requirements. Legitimate Interests We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples may include: Fraud prevention Website security Protecting our business Preventing abuse Maintaining transaction records Responding to customer disputes Improving our services Consent Where required by law, we may process personal data based on your consent. Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. The European Commission notes that consent must be freely given, specific, informed and unambiguous where it is used as the legal basis. 6. COOKIES AND SIMILAR TECHNOLOGIES DepomClub may use cookies and similar technologies to operate and improve the website. Cookies may be used for purposes such as: Essential website functionality Security Session management Remembering preferences Analytics Performance measurement Marketing, where applicable Some cookies may be placed by third-party service providers. Where applicable law requires consent for non-essential cookies, we will request the appropriate consent before placing those cookies. You can also control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the website. 7. THIRD-PARTY SERVICE PROVIDERS We may use third-party service providers to operate DepomClub. These providers may include: Website and hosting providers E-commerce/storefront providers Payment processors Fraud-prevention providers Email delivery providers Customer support tools Analytics providers Security providers Other technology providers necessary to operate our services Third-party providers may process personal data on our behalf or independently under their own privacy policies, depending on their role. We seek to use service providers that provide appropriate safeguards for personal data. 8. PAYMENT PROCESSORS When you make a purchase, payment information may be processed by an external payment provider. The payment provider may process: Payment information Billing information Transaction information Device and technical information Fraud-prevention information The payment provider may also perform security, verification or fraud-screening checks. Payment providers may retain certain information in accordance with their legal, regulatory, security and business requirements. You should review the applicable payment provider's privacy policy for additional information about how it processes personal data. 9. WHO MAY RECEIVE YOUR PERSONAL DATA We may disclose personal data to the following categories of recipients where necessary: Payment processors Storefront/e-commerce providers Hosting and infrastructure providers Email service providers Customer support providers Fraud-prevention and security providers Analytics providers Professional advisers Accountants and legal advisers Government authorities or law-enforcement agencies where legally required Other service providers necessary to provide our services We do not sell your personal data as a product to third parties. 10. INTERNATIONAL DATA TRANSFERS Some of our service providers may process personal data outside the European Economic Area ("EEA"). Where personal data is transferred outside the EEA, we will rely on an appropriate legal mechanism where required by applicable law, such as: An adequacy decision; Standard Contractual Clauses; Another lawful transfer mechanism recognized under applicable data protection law. The specific location of processing may depend on the third-party services used by DepomClub. 11. DATA RETENTION We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Different categories of information may be retained for different periods. For example: Order and Transaction Records Transaction and accounting information may be retained for the period required by applicable tax, accounting or legal requirements. Customer Support Communications Support communications may be retained for as long as reasonably necessary to resolve the relevant issue, maintain records, prevent abuse and defend potential legal claims. Account Information Account information may generally be retained while your account remains active and for a reasonable period afterward where necessary for legal, security or legitimate business purposes. Technical and Security Logs Technical and security information may be retained for a reasonable period necessary to maintain website security, investigate incidents and prevent abuse. When personal data is no longer necessary, it will be deleted, anonymized or otherwise securely disposed of where appropriate. The GDPR requires organisations to provide information about how long data will be stored, or the criteria used to determine the retention period. 12. DATA SECURITY We take reasonable technical and organizational measures designed to protect personal data against: Unauthorized access Unauthorized disclosure Loss Destruction Accidental damage Unauthorized alteration Other unlawful processing Security measures may include access controls, authentication, encryption where appropriate, monitoring and restricted access to personal information. However, no internet transmission or electronic storage system can be guaranteed to be completely secure. 13. YOUR GDPR RIGHTS Where the GDPR applies, you may have the following rights: Right of Access You may request confirmation as to whether we process your personal data and request access to that information. Right to Rectification You may request correction of inaccurate or incomplete personal data. Right to Erasure You may request deletion of your personal data in certain circumstances. This right is not absolute and may be subject to legal exceptions. Right to Restriction You may request restriction of processing in certain circumstances. Right to Data Portability Where applicable, you may request your personal data in a structured, commonly used and machine-readable format. Right to Object You may object to certain processing activities where permitted under the GDPR, including certain processing based on legitimate interests. Right to Withdraw Consent Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that occurred before the withdrawal. Rights Relating to Automated Decision-Making Where applicable, you may have rights concerning decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects. These rights are subject to the conditions and exceptions established by applicable law. 14. HOW TO EXERCISE YOUR RIGHTS To exercise your privacy rights, contact us at: Email: [SUPPORT EMAIL] Please include enough information for us to understand your request and, where reasonably necessary, verify your identity. We will respond to valid requests within the timeframe required by applicable law. Under the GDPR, requests are generally handled without undue delay and, in principle, within one month, subject to applicable extensions and exceptions. 15. IDENTITY VERIFICATION For certain privacy requests, we may need to verify your identity before providing information or making changes. This is intended to protect personal information from unauthorized disclosure. We will only request information reasonably necessary for verification. 16. MARKETING COMMUNICATIONS If we send marketing communications based on your consent, you may withdraw your consent or unsubscribe at any time. You may also object to direct marketing where applicable under law. Transactional emails, such as order confirmations, delivery information, security notices and important service communications, are not necessarily marketing communications and may still be sent where necessary to provide the service. 17. CHILDREN'S PRIVACY DepomClub is not intended to collect personal information from children where such collection is prohibited by applicable law. If you are below the age at which you can lawfully provide consent or enter into a contract in your jurisdiction, you should use the Service only with the involvement of a parent or legal guardian where required. If we become aware that we have collected personal data from a child in circumstances where such collection was not permitted, we will take reasonable steps to address the situation. 18. THIRD-PARTY WEBSITES Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of third-party websites. When you leave DepomClub and visit a third-party website, we recommend reviewing that website's privacy policy. 19. FRAUD PREVENTION AND SECURITY MONITORING To protect DepomClub and our customers, we may use automated or manual systems to identify suspicious activity. These systems may consider information such as: Transaction information Device information IP address Order history Payment information Other technical or behavioral indicators Such processing may be used to identify potentially fraudulent or abusive transactions. Where legally required, we will provide information about automated decision-making and applicable rights. 20. DATA BREACHES If a personal data breach occurs, we will take appropriate steps to investigate, contain and address the incident. Where required by applicable law, we will notify the relevant supervisory authority and affected individuals within the legally required timeframe. 21. CHANGES TO THIS PRIVACY POLICY We may update this Privacy Policy from time to time to reflect: Changes to our services Changes to technology Changes to third-party providers Changes to legal requirements Changes to our data-processing practices The latest version will always be published on this page. The "Last Updated" date at the top of this Privacy Policy indicates when it was most recently updated. Where required by law, we will provide additional notice regarding material changes. 22. CONTACT US For questions, requests or concerns regarding this Privacy Policy or your personal data, contact: DepomClub Email: [SUPPORT EMAIL] Website: https://depomclub.com © 2026 DepomClub. All rights reserved.