Last Updated: 20/03/2025

Thank you for visiting JollofLabs (the “Website”) . We respect your privacy and are committed to protecting your personal data.

This Privacy Policy (“Policy”) will inform you as to how we look after your personal data when you visit our Website and tell you about your privacy rights and how the law protects you. 1. Who We Are Data Controller: JollofLabs OÜ hello@jolloflabs.com

In this Policy, “we,” “us,” or “our” refers to JollofLabs OÜ, as the data controller for the personal data processed through the Website.

2. Data We Collect We may collect and process different types of personal data about you, depending on your interactions with the Website: - Identity Data: First name, last name, username, or similar identifiers. - Contact Data: Email address, phone number, postal address. - Technical Data: IP address, browser type, time zone setting, browser plug-in types and versions, operating system and platform, device information, and other technology on the devices you use to access this Website. - Usage Data: Information about how you use our Website, products, and services (e.g., pages viewed, links clicked). - Marketing and Communications Data: Preferences in receiving marketing from us and your communication preferences. We do not intentionally collect any Special Categories of Personal Data (e.g., data about health, race, religion, or political opinions). If you choose to provide such data, you consent to our processing of that data as necessary to fulfill the purposes for which it was provided.

3. How We Collect Your Data - Direct Interactions: You may provide us with your personal data by filling in forms or by corresponding with us via phone, email, or otherwise. - Automated Technologies: As you interact with our Website, we may automatically collect Technical Data and Usage Data. We collect this data using cookies, server logs, and similar technologies. - Third Parties: We may receive personal data about you from third parties such as analytics providers or advertising networks.

4. Purposes and Legal Bases for Processing Under the General Data Protection Regulation (GDPR), we rely on one or more of the following legal bases for processing your personal data: - Performance of a Contract: Where processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into a contract. - Legitimate Interests: Where it is in our legitimate interests to conduct our business (e.g., to administer and improve our Website, analyze usage, or engage in marketing), and these interests are not overridden by your fundamental rights and freedoms. - Consent: Where you have provided clear consent for us to process your personal data for a specific purpose (e.g., newsletter subscriptions). You have the right to withdraw consent at any time. - Legal Obligation: Where we need to comply with a legal or regulatory obligation.

5. How We Use Your Data We use your personal data for the following purposes: - Website Functionality: To present our Website content effectively and securely. - Customer Support: To respond to your inquiries, questions, and feedback. - Account Management: To manage and maintain any accounts you create on the Website. - Marketing and Communications: To provide you with updates and offers where you have opted in to receive such communications. - Analytics: To analyze usage trends and improve our Website, products, and services. - Legal Compliance: To comply with applicable laws and regulations, respond to legal process, or protect our rights or the rights of others.

6. Cookies and Similar Technologies We use cookies and similar tracking technologies to collect and use personal data about you. For detailed information about the cookies we use and the purposes for which we use them, please see our [Cookie Policy] (if applicable). Cookies are small text files placed on your device. We use them to: - Ensure the proper functioning of the Website. - Remember user preferences. - Understand how visitors interact with our Website. You can block cookies at any time by activating the setting on your browser that allows you to refuse cookies. However, if you choose to disable cookies, some features of our Website may not function properly.

7. Data Sharing and Recipients We may share your personal data with the following categories of recipients: - Service Providers: Third-party vendors that provide services on our behalf (e.g., hosting, payment processing, analytics). We only share the data necessary for them to perform their services, and they are contractually obligated to safeguard the data. - Legal and Regulatory Authorities: We may disclose personal data to law enforcement, regulatory bodies, or government agencies as required by law or to protect our rights. - Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We do not sell your personal data to third parties.

8. International Transfers Where we transfer your personal data outside the European Economic Area (EEA), we ensure an adequate level of protection by implementing safeguards such as: - EU Commission-approved Standard Contractual Clauses (SCCs), or - Transferring data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.

9. Data Retention We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. When we no longer require your personal data, we will securely delete or anonymize it.

10. Your Rights Under GDPR Under GDPR, you have the following rights regarding your personal data: - Right of Access: Request a copy of the personal data we hold about you. - Right to Rectification: Request that we correct any personal data that is inaccurate or incomplete. - Right to Erasure (‘Right to be Forgotten’): Request that we delete your personal data under certain circumstances. - Right to Restrict Processing: Request that we restrict the processing of your personal data under certain circumstances. - Right to Data Portability: Request the transfer of your personal data to another data controller. - Right to Object: Object to the processing of your personal data where we rely on a legitimate interest or where processing is for direct marketing purposes. - Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. To exercise any of these rights, please contact us at [Contact Email]. We will respond to legitimate requests within one month or inform you if we require additional time.

11. Security Measures We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures are designed to provide a level of security appropriate to the risks of processing your personal data.

12. Links to Third-Party Websites Our Website may contain links to third-party websites or plugins. We do not control these websites and are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party website you visit.

13. Complaints If you have concerns about our data processing, please contact us at [Contact Email]. You also have the right to file a complaint with your local data protection authority if you believe that our processing of your personal data violates GDPR or other applicable data protection laws.

14. Updates to This Policy We may update this Policy from time to time to reflect changes in our data processing practices or relevant laws. When we do, we will post the updated Policy on this page and update the “Last Updated” date at the top. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data.

15. Contact Us If you have any questions about this Policy or our data practices, or wish to exercise your rights, please contact us at:

JollofLabs OÜ, Registration Code 16285022 hello@jolloflabs.com