SINBADEXPRESS PRIVACY POLICY

Effective Date: 07/05/2026
Last Updated: 07/05/2026

SECTION 1 – GENERAL PROVISIONS

1. Purpose

This Privacy Policy (the "Policy") explains how personal information is collected, used, disclosed, protected, and retained by Sinbadexpress Inc. ("Sinbadexpress," "Company," or "Platform") in connection with the use of the website www.sinbadexpress.us, its mobile applications, and all related digital services.

Sinbadexpress values the privacy of its users and is committed to processing personal information in accordance with the principles of transparency, security, accountability, and applicable data protection laws.

This Policy forms an integral part of the Sinbadexpress Membership Agreement.

2. Scope

This Policy applies to:

·         Visitors to the Platform;

·         Registered Members;

·         Customers purchasing Products or Services;

·         Mobile application users;

·         Individuals receiving customer support services;

·         Users subscribing to newsletters; and

·         Individuals participating in promotions or marketing campaigns.

3. Definitions

For purposes of this Policy, the following terms shall have the meanings set forth below.

Personal Information

"Personal Information" means any information that directly or indirectly identifies, or is reasonably capable of identifying, an identified or identifiable natural person.

Examples include:

·         Full name;

·         Email address;

·         Telephone number;

·         Shipping address;

·         Billing address;

·         IP address;

·         Device information;

·         Location information;

·         Order history;

·         Payment information; and

·         User preferences.

Sensitive Personal Information

"Sensitive Personal Information" means personal information that receives enhanced legal protection under applicable law.

Sinbadexpress does not intentionally collect such information unless it is necessary and legally permissible to do so.

Cookie

A "Cookie" is a small data file stored on a user's web browser or device.

Processing

"Processing" means any operation performed on Personal Information, including but not limited to:

·         collection;

·         recording;

·         storage;

·         modification;

·         analysis;

·         disclosure or sharing; and

·         deletion.

4. Information We Collect

The Platform may collect the following categories of information.

4.1 Identity Information

·         First name;

·         Last name;

·         Username; and

·         Company name (if applicable).

4.2 Contact Information

·         Email address;

·         Telephone number;

·         Shipping address; and

·         Billing address.

4.3 Account Information

·         Encrypted login credentials;

·         Membership registration date;

·         Login history; and

·         Account preferences.

4.4 Order Information

·         Purchased Products;

·         Order history;

·         Return requests;

·         Shipping information; and

·         Delivery information.

4.5 Payment Information

Sinbadexpress does not store:

·         credit card numbers;

·         CVV security codes; or

·         debit card PINs

within its own systems.

Payment transactions may be processed exclusively through authorized third-party payment service providers that comply with the Payment Card Industry Data Security Standard (PCI DSS).

4.6 Technical Information

The Platform may automatically collect technical information, including:

·         IP address;

·         Browser type;

·         Operating system;

·         Language preferences;

·         Device model;

·         Screen resolution;

·         Date and time of visit;

·         Session duration;

·         Referrer information; and

·         Clickstream and usage data.

4.7 Location Information

Subject to the Member's consent or device settings, the Platform may collect approximate or precise location information.

Users may withdraw location access permissions at any time through their device settings.

4.8 Customer Support Information

When a user contacts customer support, Sinbadexpress may retain:

·         email correspondence;

·         live chat transcripts;

·         notes relating to telephone conversations; and

·         customer support requests.

5. Methods of Collecting Information

Personal Information may be collected through the following methods.

Information Provided Directly by the User

For example, when the user:

·         creates a Membership account;

·         places an Order; or

·         submits a customer support request.

Automated Technologies

Including but not limited to:

·         Cookies;

·         Pixel tags;

·         Log files;

·         Software Development Kits (SDKs); and

·         Analytics technologies.

Third-Party Sources

Where necessary and permitted by applicable law, information may also be obtained from:

·         payment service providers;

·         shipping and logistics companies;

·         identity verification service providers; and

·         fraud prevention and risk management service providers.

6. Purposes for Processing Personal Information

Sinbadexpress may process Personal Information for the following purposes:

·         Creating and maintaining Membership accounts;

·         Processing and fulfilling Orders;

·         Completing payment transactions;

·         Arranging the shipment and delivery of Products;

·         Preventing fraud and unauthorized activities;

·         Enhancing Platform security;

·         Verifying user identity;

·         Providing customer support services;

·         Resolving technical issues;

·         Improving the Platform and its Services;

·         Developing new features and functionality;

·         Conducting promotions and marketing campaigns;

·         Personalizing the user experience;

·         Complying with legal obligations;

·         Responding to court orders and lawful governmental requests;

·         Fulfilling tax and accounting obligations;

·         Protecting the security and integrity of the Platform; and

·         Improving the overall quality of the Services.

7. Legal Bases for Processing

Sinbadexpress may process Personal Information on one or more of the following legal bases, to the extent permitted by applicable law:

·         The Member's consent, where required;

·         The performance or formation of a contract;

·         Compliance with legal obligations;

·         Legitimate business interests;

·         Fraud prevention;

·         Protection of the security and integrity of the Platform; and

·         Establishment, exercise, or defense of legal claims and rights.

SINBADEXPRESS PRIVACY POLICY

SECTION 2 – DISCLOSURE OF PERSONAL INFORMATION, INFORMATION SECURITY, AND USER RIGHTS

8. Disclosure of Personal Information

Sinbadexpress does not sell users' Personal Information.

Personal Information is disclosed only for the purposes described in this Policy and in accordance with applicable law.

Personal Information may be shared with the following persons or entities:

8.1 Sellers

To facilitate the fulfillment of Orders placed through the Platform, the following information may be shared with the relevant Seller:

·         Full name;

·         Shipping address;

·         Telephone number;

·         Order information; and

·         Delivery instructions.

Sellers may use such Personal Information solely for the purpose of fulfilling the applicable Order.

8.2 Payment Service Providers

Information necessary to process payment transactions may be shared with authorized payment service providers.

Such providers operate under their own privacy policies and are required to comply with applicable industry security standards, including the Payment Card Industry Data Security Standard (PCI DSS).

8.3 Logistics and Shipping Providers

To facilitate the delivery of Orders, the following information may be shared with logistics or shipping providers:

·         Recipient's name;

·         Shipping address;

·         Telephone number;

·         Order number; and

·         Delivery instructions.

8.4 Cloud Service Providers

Personal Information may be stored or processed by third-party cloud service providers that provide hosting, backup, content delivery, data storage, or security services.

Such providers are contractually bound by confidentiality and data protection obligations.

8.5 Technical Service Providers

To operate the Platform, Sinbadexpress may utilize third-party providers offering services such as:

·         Server hosting;

·         Analytics services;

·         Error logging systems;

·         Security software;

·         Email delivery services; and

·         Customer support systems.

8.6 Governmental Authorities

Sinbadexpress may disclose Personal Information where required by:

·         A court order;

·         A lawful request from an administrative authority;

·         A lawful request from law enforcement authorities; or

·         Any other applicable legal obligation.

8.7 Corporate Transactions

In connection with a merger, acquisition, corporate restructuring, share transfer, sale of assets, or similar corporate transaction, Personal Information may be transferred to the relevant parties in accordance with applicable law.

9. International Data Transfers

Sinbadexpress' infrastructure or service providers may be located in jurisdictions outside the Member's country of residence.

Accordingly, Personal Information may be transferred to and processed in the United States or other countries, subject to appropriate safeguards and in accordance with applicable law.

When transferring Personal Information internationally, Sinbadexpress implements appropriate contractual, technical, and organizational measures required under applicable law.

10. Data Retention

Personal Information may be retained:

·         For the duration of the Membership relationship;

·         As long as necessary to complete Order fulfillment;

·         To comply with legal obligations;

·         To satisfy accounting and tax recordkeeping requirements; and

·         To establish, exercise, or defend legal claims.

Once the applicable retention period has expired, Personal Information will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable law.

11. Information Security

Sinbadexpress implements reasonable administrative, technical, and physical safeguards designed to protect Personal Information.

Such safeguards may include, without limitation:

·         Encryption technologies;

·         Access control mechanisms;

·         Firewalls;

·         Multi-Factor Authentication (MFA);

·         Security logging;

·         Regular data backups;

·         Network monitoring systems;

·         Security testing; and

·         Employee authorization and access controls.

Because no electronic system can be guaranteed to be completely secure, Sinbadexpress does not warrant or guarantee absolute security.

12. User Rights

Subject to applicable law, Members may have the right to:

·         Know what Personal Information is processed about them;

·         Request access to their Personal Information;

·         Request correction of inaccurate or incomplete Personal Information;

·         Request deletion of Personal Information under certain circumstances;

·         Object to certain processing activities;

·         Request data portability where applicable;

·         Modify their marketing communication preferences; and

·         Manage their cookie preferences.

Sinbadexpress aims to respond to such requests within the time periods required by applicable law.

13. Marketing Communications

Subject to the Member's preferences and applicable law, users may receive:

·         Promotional campaign announcements;

·         Discount notifications;

·         New product announcements;

·         Newsletters; and

·         Promotional and marketing messages.

Members may opt out of receiving marketing communications at any time.

Operational communications that are necessary for the provision of the Services—including Order confirmations, shipping updates, account notifications, and security alerts—are not considered marketing communications.

14. Cookies and Similar Technologies

The Platform may use Cookies and similar technologies to enhance the user experience, maintain security, remember user preferences, and analyze the performance of the Services.

Detailed information regarding the use and management of Cookies is available in the Sinbadexpress Cookie Policy.

15. Children's Privacy

The Platform is not intended for children under the age of thirteen (13).

Sinbadexpress does not knowingly collect Personal Information from children under the age of thirteen (13).

If Sinbadexpress becomes aware that Personal Information belonging to a child under the age of thirteen (13) has been inadvertently collected, reasonable steps will be taken to delete or anonymize such information in accordance with applicable law.

Parents or legal guardians may contact Sinbadexpress regarding any concerns related to a child's Personal Information.

16. External Links

The Platform may contain links to third-party websites or services.

Sinbadexpress is not responsible for the privacy practices, policies, or content of such third parties.

Users are encouraged to review the privacy policies of any third-party websites they visit.

17. Data Breach Management

If Sinbadexpress identifies a data breach that may affect the confidentiality or security of Personal Information, it may:

·         assess the nature and scope of the incident;

·         implement measures to mitigate potential harm;

·         take appropriate technical and organizational security measures; and

·         notify affected individuals and competent governmental authorities where required by applicable law.

18. Changes to this Privacy Policy

Sinbadexpress may amend or update this Privacy Policy from time to time.

Material changes will be communicated to users through the Platform or by other appropriate means in accordance with applicable law.

The most current version of this Privacy Policy will always be made available on the Platform.

19. Contact Information

Questions, requests, or inquiries concerning this Privacy Policy or the processing of Personal Information may be directed through the following contact channels:

Company Name: Sinbadexpress Inc.

Principal Business Address: 2100 Lakeside Blvd Ste 160 Richardson TX 75082-4367

Texas Registered Office: 2100 Lakeside Blvd Ste 160 Richardson TX 75082-4367

Privacy Email: privacy@sinbadexpress.us

Customer Support Email: support@sinbadexpress.us

Website: https://www.sinbadexpress.us

Requests will be reviewed within a reasonable period and in accordance with applicable law.

APPENDIX 1

U.S. STATE PRIVACY NOTICE

Effective Date: 07/05/2026

This U.S. State Privacy Notice forms an integral part of the Sinbadexpress Privacy Policy and explains the additional privacy rights available to users residing in certain states within the United States.

Sinbadexpress is committed to complying with applicable U.S. state privacy laws, and this Notice summarizes the rights available to residents of applicable states to the extent required by law.

1. Scope

This Notice may apply, where applicable, to residents of the following states:

·         California;

·         Virginia;

·         Colorado;

·         Connecticut;

·         Utah;

·         Texas (to the extent applicable);

·         Oregon;

·         Montana;

·         Delaware;

·         Iowa;

·         Nebraska;

·         New Hampshire;

·         New Jersey;

·         Tennessee;

·         Minnesota;

·         Indiana;

·         Kentucky;

·         Rhode Island (upon the effective date of applicable legislation); and

·         Any other U.S. state that enacts applicable privacy legislation.

Sinbadexpress reserves the right to update this list in response to new legal or regulatory developments.

2. Categories of Personal Information Collected

Subject to applicable law, Sinbadexpress may collect and process the following categories of Personal Information:

·         Identity information;

·         Contact information;

·         Account information;

·         Order history;

·         Delivery information;

·         Payment transaction information;

·         Technical device information;

·         IP addresses;

·         Approximate location information;

·         Cookie and similar technology data;

·         User preferences;

·         Security records; and

·         Customer service records.

Sinbadexpress does not knowingly collect Sensitive Personal Information unless such collection is necessary and permitted by applicable law.

3. Purposes of Use of Personal Information

Personal Information may be used for the following purposes:

·         Creating Membership accounts;

·         Fulfilling Orders;

·         Processing payment transactions;

·         Preventing fraud;

·         Maintaining the security of the Platform;

·         Verifying user identity;

·         Providing customer support;

·         Improving the Services;

·         Complying with legal obligations; and

·         Conducting marketing activities, where permitted and, when required by law, in accordance with the user's communication preferences.

4. User Rights

To the extent provided under applicable state law, users may have the following rights.

4.1 Right to Know and Access

Users may have the right to know what Personal Information Sinbadexpress processes about them and to request access to such information.

4.2 Right to Correct

Users may request the correction of inaccurate or incomplete Personal Information.

4.3 Right to Delete

Users may request the deletion of their Personal Information where the conditions established under applicable law are satisfied.

This right may be limited for reasons including:

·         compliance with legal obligations;

·         fraud prevention;

·         security purposes;

·         accounting records;

·         tax obligations; and

·         ongoing legal disputes.

4.4 Right to Data Portability

Where permitted by applicable law, users may request that certain Personal Information relating to them be provided in a structured, commonly used, and electronically readable format.

4.5 Right to Opt Out of Marketing Communications

Users may modify their commercial electronic communication preferences at any time.

This right does not apply to service-related communications, including Order confirmations, shipping notifications, account notices, or security alerts.

4.6 Right to Object to Profiling

To the extent provided by applicable law, users may have the right to object to decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects concerning the user.

5. Sensitive Personal Information

Sinbadexpress processes Sensitive Personal Information only:

·         where permitted by applicable law;

·         where the user's explicit consent has been obtained when required; and

·         where such processing is necessary for the provision of the Services.

6. Cookies and Targeted Advertising

The Platform may use:

·         performance cookies;

·         analytics cookies;

·         security cookies; and

·         preference cookies.

Where targeted advertising activities are conducted, users will be provided with the choice mechanisms required under applicable law.

7. Sale or Sharing of Personal Information

Sinbadexpress does not engage in the commercial sale of Personal Information as part of its business model.

However, under certain U.S. state privacy laws, specific disclosures of Personal Information may be considered a "sale" or "sharing" of Personal Information.

Where applicable, users may exercise the rights available to them under applicable law.

8. Identity Verification

To process privacy rights requests, Sinbadexpress may verify the identity of the requesting individual.

Reasonable additional information may be requested for identity verification purposes.

9. Authorized Agents

To the extent permitted by applicable law, users may authorize a representative in writing to exercise their privacy rights on their behalf.

Sinbadexpress may require verification of the representative's authority.

10. Non-Discrimination

Users who exercise their privacy rights shall not be subjected to discriminatory treatment solely because they exercised such rights.

This provision does not affect loyalty programs, promotional campaigns, discounts, or other benefits permitted under applicable law.

11. Request Submission Process

Privacy rights requests may be submitted through the following channels:

Email: privacy@sinbadexpress.us

Website: www.sinbadexpress.us

Requests will be processed within the time periods required by applicable law.

12. Notice to California Residents

Residents of California may have the following rights under applicable California law:

·         to know the categories of Personal Information collected;

·         to access Personal Information;

·         to request deletion in certain circumstances;

·         to request correction in certain circumstances;

·         to opt out of certain disclosures of Personal Information; and

·         to exercise rights relating to Sensitive Personal Information.

The scope of these rights is governed by applicable California law.

13. Notice to Residents of Virginia, Colorado, and Other States

Residents of Virginia, Colorado, and other applicable states may have rights under their respective state privacy laws, including:

·         access;

·         correction;

·         deletion;

·         data portability; and

·         the right to opt out of certain data processing activities.

The availability and scope of these rights may vary depending on applicable state law.

14. Updates to this Notice

Sinbadexpress may update this Notice from time to time to reflect changes in applicable laws or in its business operations.

The most current version of this Notice will always be published on the Platform.