SINBADEXPRESS MEMBERSHIP AGREEMENT

Effective Date: 07/05/2026

SECTION 1 – GENERAL PROVISIONS

Article 1 – Parties

This Sinbadexpress Membership Agreement (the "Agreement") is entered into electronically between Sinbadexpress Inc., a corporation duly organized under the laws of the State of Texas, with its principal place of business located at 2100 Lakeside Blvd Ste 160, Richardson, TX 75082-4367, United States of America (hereinafter referred to as "Sinbadexpress," "Platform," or "Company"), and natural persons who become members of the website www.sinbadexpress.us, its mobile applications, and all related digital services (hereinafter referred to as the "Member," "User," or "Buyer").

By creating an account, selecting the option "I Have Read and Accept the Membership Agreement," or continuing to use the Platform, the Member represents and warrants that they have read, understood, and accepted all provisions of this Agreement.

Article 2 – Purpose of the Agreement

The purpose of this Agreement is to:

• Establish the terms and conditions governing the use of the Sinbadexpress Platform;
• Define the rights and obligations of Members;
• Explain the procedures governing the ordering process;
• Ensure the secure and fair use of the Platform;
• Define the legal responsibilities of the Parties; and
• Regulate electronic commerce activities in accordance with the laws of the United States and the State of Texas.

Article 3 – Nature of the Platform

3.1. Sinbadexpress is an online marketplace platform through which independent sellers may offer products and services to consumers.

3.2. Unless expressly stated otherwise, the Platform is not the manufacturer, importer, distributor, or seller of the products offered for sale.

3.3. Product descriptions, inventory status, pricing, technical specifications, warranty information, and all other product-related content are created and provided by the respective sellers.

3.4. Sinbadexpress does not sell products on behalf of sellers. Instead, it operates as an independent marketplace provider that offers electronic commerce infrastructure, order management, payment processing, communication tools, and customer support services between sellers and buyers.

3.5. Where the Platform directly offers certain products for sale in its own name, such status shall be expressly indicated on the relevant product page. In such cases, Sinbadexpress shall be deemed the seller solely with respect to the applicable transaction.

Article 4 – Definitions

For the purposes of this Agreement, the following terms shall have the meanings set forth below:

Buyer: A natural person who purchases products or services through the Platform.

Seller: An independent natural or legal person authorized to sell products or services on the Platform.

Platform: The Sinbadexpress website, mobile applications, APIs, and all related digital services.

Account: The personal user account created by the Member.

Order: A purchase request submitted by the Member through the Platform.

Product: Any physical or digital good or service offered for sale on the Platform.

Electronic Communication: Email, short message service (SMS), push notifications, or similar electronic communication methods.

Content: Any text, photograph, video, audio recording, graphic, logo, comment, review, rating, or other digital material.

Services: Marketplace services, order management, payment infrastructure, customer support, and other electronic services provided by Sinbadexpress.

Prohibited Product: Any product or service whose sale is prohibited under Platform policies or applicable law.

Article 5 – Membership Requirements

5.1. Only natural persons who have the legal capacity to enter into legally binding contracts may become Members of the Platform.

5.2. All information provided during registration must be accurate, current, and complete.

5.3. Creating multiple accounts under the same person, using false identities, or creating accounts on behalf of another person is strictly prohibited.

5.4. Sinbadexpress reserves the right to reject any membership application without providing a reason or to request additional verification documents.

5.5. Members are responsible for updating their account information within a reasonable period whenever changes occur.

5.6. The Platform may require email verification, telephone verification, Multi-Factor Authentication (MFA), government-issued identification, or proof of address for identity verification purposes.

Article 6 – Age and Legal Capacity

6.1. To register as a Member and place orders through the Platform, the User must be at least eighteen (18) years of age or otherwise possess the legal capacity to enter into a legally binding agreement under the laws of the applicable jurisdiction.

6.2. Individuals under the age of eighteen (18) may use the Platform only to the extent permitted by applicable law and under the supervision of a parent or legal guardian. Such use constitutes acceptance of this Agreement by the parent or legal guardian, who shall be responsible for the actions of the minor.

6.3. If Sinbadexpress has reason to doubt a User's age or legal capacity, it may suspend the membership, request additional documentation, or terminate the account.

Article 7 – Formation of the Electronic Agreement

7.1. This Agreement is concluded electronically.

7.2. By selecting the "I Agree" option during registration or by continuing to use the Platform, the Member shall be deemed to have accepted this Agreement under applicable law, even if such action does not constitute an electronic signature.

7.3. The Parties acknowledge and agree that electronic records, transaction logs, order records, IP records, timestamps, and other digital records shall constitute admissible evidence.

7.4. The Member agrees that electronic notifications shall have the same legal effect as written notices.

Article 8 – Account Security

8.1. The Member is responsible for maintaining the confidentiality of their username and password.

8.2. Unless proven otherwise, all transactions conducted through the Account shall be deemed to have been performed by the Account holder.

8.3. If the Member becomes aware that their password has been compromised or accessed by an unauthorized third party, the Member must immediately notify Sinbadexpress.

8.4. Sinbadexpress may implement Multi-Factor Authentication (MFA), session verification, device recognition, and other security measures to enhance account security.

8.5. Accounts suspected of being involved in a security breach may be temporarily suspended without prior notice.

Article 9 – Acceptance of the Agreement

By registering with the Platform or continuing to use the Platform's services, the Member acknowledges, represents, and warrants that they have read this Agreement in its entirety, fully understand its provisions, voluntarily accept all of its terms, and agree that this Agreement constitutes a legally binding contract upon the Member.

SINBADEXPRESS MEMBERSHIP AGREEMENT

SECTION 2 – ORDER, PAYMENT, SHIPPING, AND DELIVERY PROVISIONS

Article 10 – Order Placement

10.1. The Member may place an order electronically by reviewing the products or services offered for sale on the Platform.

10.2. In order for an order to be completed, all required information and documentation must be provided accurately, kept current, and submitted in full.

10.3. The submission of an order alone does not constitute a binding sales contract between the Seller and the Member. Each order is subject to payment verification, fraud screening, inventory availability, technical verification, and acceptance by the relevant Seller.

10.4. Sinbadexpress or the relevant Seller reserves the right to reject or cancel an order, in whole or in part, under any of the following circumstances:

a) The Product is out of stock;

b) The payment transaction is unsuccessful;

c) Suspected fraud or unauthorized use;

d) An obvious pricing error;

e) A technical system failure;

f) The sale cannot be completed due to applicable legal requirements;

g) A violation of any embargo, sanctions, or export restrictions; or

h) A violation of the Platform's policies.

10.5. If an order is canceled, any amounts collected shall be refunded in accordance with applicable law and the procedures of the relevant payment service provider.

Article 11 – Product Information and Pricing

11.1. Product descriptions, images, technical specifications, warranty information, and other product-related content are primarily provided by the respective Sellers.

11.2. Sinbadexpress does not guarantee the accuracy of the information provided by Sellers; however, it reserves the right to take appropriate measures to remove unlawful or clearly misleading content.

11.3. Product images are for illustrative purposes only. Variations in color, packaging, design, or minor technical specifications may occur due to manufacturer modifications.

11.4. Sinbadexpress or the relevant Seller reserves the right to cancel any order placed at a price that is manifestly inconsistent with the Product's actual market value due to typographical errors, technical errors, system malfunctions, or obvious pricing errors.

11.5. Campaigns, promotions, coupons, and discounts may be available only for limited periods and may be modified or discontinued without prior notice.

Article 12 – Payment Transactions

12.1. Payments made through the Platform shall be processed by payment service providers authorized by Sinbadexpress.

12.2. Sinbadexpress may not store credit card information within its own systems and may process payment transactions through third-party payment service providers that comply with the PCI DSS (Payment Card Industry Data Security Standard).

12.3. The Member represents and warrants that they are the lawful owner of the payment method used and have full authority to use such payment method.

12.4. Suspicious payment transactions may be subject to additional security verification procedures.

12.5. In the event of unauthorized card use, chargeback abuse, or fraudulent activity, Sinbadexpress may suspend the relevant Account, cancel the Order, and, where necessary, report the matter to the appropriate governmental or regulatory authorities.

Article 13 – Taxes

13.1. Sales Tax and other applicable statutory charges may be calculated based on the state of delivery, local regulations, and applicable law. Sales Tax shall be remitted by Sinbadexpress to the appropriate taxing authority.

13.2. Applicable tax rates may be calculated automatically during checkout and displayed separately on the payment page.

13.3. Sinbadexpress shall not be liable for any differences arising from amendments to applicable tax laws or regulations.

Article 14 – Shipping and Delivery

14.1. Products shall be shipped by the relevant Seller or through a logistics service provider authorized by the Seller.

14.2. Delivery times are estimates only and may vary due to weather conditions, natural disasters, governmental actions, carrier delays, or other force majeure events.

14.3. The Member is solely responsible for providing an accurate delivery address.

14.4. Any additional costs arising from an incorrect or incomplete delivery address may be charged to the Member.

14.5. If the Product packaging shows significant damage upon delivery, the Member is advised to inspect the shipment together with the carrier before accepting delivery.

14.6. Certain Products may be shipped only to specific states or countries. Delivery restrictions may apply to Products subject to legal or regulatory limitations.

Article 15 – Order Tracking

15.1. The Member may track the status of an Order through their user Account.

15.2. Where available, the shipment tracking number may be provided through the Member's Account or sent to the Member's registered electronic communication address.

15.3. Sinbadexpress shall not be directly responsible for delays caused by shipping carriers.

Article 16 – Order Cancellation

16.1. The Member may request cancellation of an Order before the order preparation process has commenced.

16.2. Once the Product has entered the shipping process, cancellation requests shall be considered only to the extent permitted by the relevant Seller and applicable law.

16.3. Cancellation and return rights may vary for digital content, customized products, perishable goods, or Products for which returns are restricted under applicable law.

Article 17 – Returns and Refunds

17.1. Return requests shall be governed by the conditions specified on the relevant Product page and by the Platform's Return and Refund Policy.

17.2. The Member is responsible for providing accurate information when submitting a return request.

17.3. Returned Products may be required to be complete, unused, and in resalable condition, except where applicable law provides otherwise.

17.4. In the event that a Product is defective, damaged, incorrectly delivered, or incomplete, the Member's statutory rights under applicable law shall remain fully reserved.

17.5. Refunds shall, whenever reasonably possible, be issued using the same payment method originally used for the purchase.

17.6. Sinbadexpress shall not be liable for processing delays attributable to banks or payment service providers.

Article 18 – Seller Responsibilities

18.1. Sellers offering products or services through the Platform are independent natural persons or legal entities.

18.2. Sellers are solely responsible for the safety, quality, legal compliance, warranty obligations, labeling, import requirements, consumer disclosures, and compliance with all applicable laws and regulations relating to their Products.

18.3. Sinbadexpress does not act as the manufacturer, importer, distributor, or guarantor on behalf of any Seller.

18.4. Sinbadexpress may facilitate communication between the Parties in resolving disputes; however, such assistance shall not be construed as making the Platform a party to the sales contract.

Article 19 – Buyer Protection Program

19.1. At its sole discretion, Sinbadexpress may offer a Buyer Protection Program for certain Orders.

19.2. The Buyer Protection Program constitutes a commercial service that is supplemental to, and does not replace or limit, any rights available under applicable law.

19.3. The scope of the Program, application deadlines, review procedures, and payment conditions may be governed by a separate policy.

19.4. Sinbadexpress reserves the right to reject any application involving suspected abuse, fraudulent claims, or suspected fraud.

SINBADEXPRESS MEMBERSHIP AGREEMENT

SECTION 3 – USER CONDUCT, INTELLECTUAL PROPERTY RIGHTS, AND ACCOUNT MANAGEMENT

Article 20 – Rules of Use

20.1. The Member agrees and undertakes to use the Platform solely for lawful purposes.

20.2. The Member shall not:

a) Violate any applicable federal, state, or local laws or regulations;

b) Use another person's Account without authorization;

c) Use a false identity or provide misleading information;

d) Attempt to bypass or compromise the Platform's security systems;

e) Upload or distribute malware, viruses, Trojan horses, or other malicious code;

f) Collect data from the Platform without authorization through automated software, bots, crawlers, scrapers, or similar technologies;

g) Perform activities that impose an excessive load on the Platform's servers;

h) Attempt to gain unauthorized access to another user's Account;

i) Interfere with or disrupt the operation or performance of the Platform;

j) Infringe the intellectual property rights of any third party;

k) Engage in or facilitate fraud, money laundering, terrorist financing, or any other unlawful activity; or

l) Use the Platform in violation of applicable export control laws, sanctions, or embargo regulations.

20.3. If Sinbadexpress determines that any of the foregoing violations have occurred, it may suspend or terminate the Member's Account and, where appropriate, report the matter to the competent authorities.

Article 21 – Prohibited Products and Transactions

21.1. Products prohibited under applicable law or the Platform's policies may not be listed for sale on the Platform.

21.2. Examples of prohibited Products include, but are not limited to:

·         Counterfeit or imitation products;

·         Stolen goods;

·         Products that infringe intellectual property rights;

·         Controlled substances or illegal drugs;

·         Unlicensed pharmaceuticals;

·         Products that endanger human health;

·         Illegal firearms and ammunition;

·         Explosives;

·         Materials involving child exploitation;

·         Illegal digital content;

·         Products or services intended to facilitate fraud; and

·         Transactions involving persons or entities designated under United States sanctions programs.

21.3. Sinbadexpress reserves the right to remove any Product from the Platform at any time without prior notice if it deems such action necessary.

21.4. Individuals and legal entities located in the following countries or regions are prohibited from registering as Members of the Platform:

Iran, North Korea, Cuba, Russia, Belarus, Venezuela, Myanmar (Burma), Sudan, Libya, Somalia, Yemen, Zimbabwe, Crimea, the Donetsk region (Russian-controlled areas), and the Luhansk region (Russian-controlled areas).

Article 22 – User Content

22.1. The Member is solely responsible for ensuring that all reviews, ratings, photographs, videos, and other content submitted to the Platform comply with applicable law.

22.2. Content containing defamation, threats, hate speech, discrimination, obscenity, misleading information, or violations of the rights of third parties is strictly prohibited.

22.3. The Member shall retain ownership of all rights in the content they publish on the Platform.

22.4. Notwithstanding the foregoing, the Member grants Sinbadexpress a worldwide, royalty-free, non-exclusive, sublicensable, and irrevocable license to use the content published on the Platform. Such license includes the right to display, reproduce, distribute, use the content for promotional purposes, and perform all other acts necessary for the operation and provision of the Platform's services.

22.5. Sinbadexpress reserves the right to remove any content that violates applicable law or the Platform's policies.

Article 23 – Product Reviews

23.1. Product reviews must reflect genuine and honest user experiences.

23.2. False reviews, manipulated ratings, undisclosed paid endorsements, or content intended to unfairly disparage competitors are strictly prohibited.

23.3. Sinbadexpress reserves the right to review, remove, or restrict the visibility of any review that it reasonably considers suspicious or inconsistent with this Agreement or the Platform's policies.

Article 24 – Intellectual Property Rights

24.1. The name Sinbadexpress, its logo, trade dress, software, designs, databases, user interfaces, graphics, text, algorithms, and all other intellectual property elements are the property of their respective rights holders and are protected under applicable intellectual property laws.

24.2. Without the prior written consent of Sinbadexpress, the Member shall not:

·         Copy;

·         Reproduce;

·         Modify;

·         Sell;

·         Lease;

·         License; or

·         Use for any commercial purpose,

any of the foregoing intellectual property.

24.3. Any unauthorized reproduction or commercial use of any portion of the Platform may result in civil and criminal liability.

Article 25 – Copyright Infringement (DMCA)

25.1. Sinbadexpress shall evaluate copyright infringement claims in accordance with applicable United States copyright laws, including the Digital Millennium Copyright Act ("DMCA"), where applicable.

25.2. Any person claiming to be the owner of copyrighted material may submit a copyright infringement notice through the communication channels designated by the Platform.

25.3. Upon receipt of a valid notice, the relevant content may be temporarily removed or access to such content may be disabled.

25.4. The user who posted the content shall have the right to submit a counter-notification in accordance with applicable law.

Article 26 – Account Suspension

26.1. Sinbadexpress may temporarily suspend a Member's Account under any of the following circumstances:

·         Suspected security breach;

·         Suspected fraud;

·         Failure to complete the identity verification process;

·         Violation of this Agreement;

·         Unauthorized payment transactions;

·         A request from a governmental or regulatory authority; or

·         Activities that threaten the security or integrity of the Platform.

26.2. During the suspension period, the Member may be unable to access certain services available through the Platform.

Article 27 – Termination of Membership

27.1. The Member may request the closure of their Account at any time.

27.2. Sinbadexpress may terminate a Member's Account unilaterally under any of the following circumstances:

a) A material breach of this Agreement;

b) Repeated violations of this Agreement or the Platform's policies;

c) Fraudulent conduct;

d) Activities involving the sale of counterfeit or fake products;

e) Infringement of intellectual property rights;

f) Suspected money laundering or other unlawful activities; or

g) Pursuant to a court order or a request issued by a competent governmental authority.

27.3. The closure or termination of an Account shall not relieve either Party of any obligations, liabilities, or indebtedness that arose prior to such termination.

Article 28 – Retention of Records

28.1. Sinbadexpress may retain transaction records, electronic logs, order records, payment records, security logs, and other records required under applicable law for such periods as may be required by law or reasonably necessary.

28.2. Such records may be used as evidence in accordance with applicable law.

Article 29 – Platform Updates

29.1. Sinbadexpress may periodically update the Platform to improve its features, functionality, and services.

29.2. Certain services may be temporarily unavailable as a result of such updates.

29.3. Sinbadexpress may temporarily suspend access to the Platform for technical maintenance, security reasons, or other operational requirements.

Article 30 – Electronic Notices

30.1. The Member acknowledges and agrees that emails, SMS messages, mobile application notifications, and in-account notifications sent by the Platform constitute valid forms of electronic notice.

30.2. The Member is responsible for maintaining accurate and up-to-date contact information.

30.3. Any notice sent to the Member's registered contact information shall be deemed delivered at the time of transmission, unless otherwise required by applicable law.

SINBADEXPRESS MEMBERSHIP AGREEMENT

SECTION 4 – DISCLAIMER OF WARRANTIES, LIMITATION OF LIABILITY, INDEMNIFICATION, DISPUTE RESOLUTION, AND MISCELLANEOUS PROVISIONS

Article 31 – Provision of the Platform

31.1. Subject to the mandatory provisions of applicable law, Sinbadexpress provides the Platform and its Services on an "AS IS" and "AS AVAILABLE" basis.

31.2. Sinbadexpress does not warrant or guarantee that:

·         the Platform will operate without interruption;

·         the Platform will always be error-free;

·         every Product will remain continuously available for sale;

·         every Order will be successfully completed;

·         the Platform will be fully compatible with all devices; or

·         the Platform will be entirely free from viruses, malware, or other harmful software.

31.3. The information made available on the Platform is provided solely for general informational purposes and does not constitute legal, financial, medical, technical, or other professional advice.

Article 32 – Responsibility for Products

32.1. The Seller is solely responsible for:

·         the safety of the Products;

·         the quality of the Products;

·         compliance with applicable laws and regulations;

·         technical specifications;

·         warranty coverage;

·         instructions for use;

·         labeling requirements; and

·         compliance with all applicable legal and regulatory obligations relating to the Products offered on the Platform.

32.2. Sinbadexpress is not the manufacturer, importer, distributor, or guarantor of any Product and shall not be deemed the Seller unless expressly identified as such on the applicable Product page.

32.3. Nothing in this Article shall be interpreted to limit or waive any non-waivable consumer rights provided under applicable law.

Article 33 – Limitation of Liability

33.1. To the fullest extent permitted by applicable law, Sinbadexpress shall not be liable for any indirect, incidental, special, punitive, exemplary, or consequential damages.

33.2. Such damages include, without limitation:

·         loss of revenue;

·         loss of profits;

·         loss of data;

·         loss of business opportunities;

·         loss of goodwill or reputation;

·         business interruption; and

·         other indirect economic losses.

33.3. To the maximum extent permitted by applicable law, the total aggregate liability of Sinbadexpress arising out of or relating to this Agreement shall not exceed the total amount actually paid by the Member for the Order giving rise to the dispute.

33.4. This limitation of liability shall not apply in cases involving willful misconduct, gross negligence, or any liability that cannot lawfully be excluded or limited under applicable law.

Article 34 – Member's Indemnification Obligation

34.1. The Member agrees to indemnify, defend, and hold harmless Sinbadexpress from and against any losses, damages, liabilities, claims, costs, and expenses arising out of or relating to:

·         the Member's breach of this Agreement;

·         unlawful conduct;

·         infringement of the rights of third parties;

·         fraudulent activities;

·         intellectual property infringements; or

·         violations of applicable laws and regulations.

34.2. Such indemnification may include reasonable attorneys' fees, court costs, arbitration expenses, and other legal costs incurred by Sinbadexpress, to the extent permitted by applicable law.

Article 35 – Force Majeure

35.1. Events beyond the reasonable control of the Parties may constitute force majeure events, including but not limited to:

·         natural disasters;

·         fire;

·         flood;

·         earthquakes;

·         epidemics or pandemics;

·         war;

·         acts of terrorism;

·         civil unrest or riots;

·         cyberattacks;

·         internet infrastructure failures;

·         power outages;

·         telecommunications failures;

·         governmental actions or orders;

·         embargoes;

·         international sanctions; and

·         strikes or lockouts.

35.2. Neither Party shall be liable for any failure or delay in performing its obligations during the existence of a force majeure event.

Article 36 – Privacy and Data Processing

36.1. Personal data relating to Members shall be processed in accordance with applicable data protection laws and the Sinbadexpress Privacy Policy.

36.2. By using the Platform, the Member acknowledges that they have read the Privacy Policy and agree that their personal data may be processed in accordance with its provisions.

36.3. The Privacy Policy forms an integral part of this Agreement.

Article 37 – Evidentiary Value of Electronic Records

37.1. The Parties acknowledge and agree that the following may constitute admissible evidence to the extent permitted by applicable law:

·         system records;

·         transaction logs;

·         server logs;

·         electronic correspondence;

·         emails;

·         SMS records;

·         application records;

·         timestamps; and

·         other comparable electronic records.

Article 38 – Dispute Resolution

38.1. In the event of any dispute arising out of or relating to this Agreement, the Parties agree to first attempt to resolve the dispute amicably and in good faith.

38.2. If an amicable resolution cannot be reached, disputes may, to the fullest extent permitted by applicable law, be resolved through individual and binding arbitration. The arbitration procedures, venue, governing rules, and applicable exceptions may be set forth in a separate Arbitration Policy or in an appendix to this Agreement.

38.3. Nothing in this Agreement shall limit any right to bring a claim before a court where such right is mandatorily provided under applicable law.

Article 39 – Class Action Waiver

39.1. To the fullest extent permitted by applicable law, any dispute between the Member and Sinbadexpress shall be brought solely on an individual basis.

39.2. Unless prohibited by applicable law, the Parties agree not to participate as a plaintiff, claimant, class member, or representative in any class action, class arbitration, consolidated proceeding, or other representative action.

39.3. If any portion of this Article is determined to be unenforceable, only the unenforceable portion shall be severed, and the remainder of this Agreement shall remain in full force and effect.

Article 40 – Waiver of Jury Trial

To the fullest extent permitted by applicable law, and in the event that any dispute is brought before a court of competent jurisdiction, the Parties knowingly and voluntarily waive their right to a trial by jury. Where such waiver is prohibited or unenforceable under applicable law, the mandatory provisions of such law shall govern.

Article 41 – Governing Law

41.1. This Agreement shall be governed by and construed in accordance with the laws of the State of Texas, United States of America, without regard to its conflict of laws principles.

41.2. To the extent that federal law is mandatory or preemptive, the applicable laws of the United States shall govern.

41.3. Nothing in this Agreement shall limit any mandatory consumer protection rights afforded under the laws of the jurisdiction in which the consumer resides.

Article 42 – Severability

If any provision of this Agreement is held to be invalid, illegal, or unenforceable, such provision shall be severed from this Agreement to the minimum extent necessary, and the remaining provisions shall continue in full force and effect. The invalid provision shall be interpreted or replaced, where legally permissible, with a valid provision that most closely reflects the original legal and commercial intent of the Parties.

Article 43 – No Waiver

The failure or delay of Sinbadexpress in exercising any right, remedy, or provision under this Agreement shall not constitute a waiver of such right, remedy, or provision.

Article 44 – Amendments to the Agreement

44.1. Sinbadexpress reserves the right to amend or update this Agreement from time to time in accordance with applicable law.

44.2. Material amendments shall be communicated to Members through appropriate means as required by applicable law.

44.3. Continued use of the Platform after the effective date of any amendment constitutes the Member's acceptance of the revised Agreement, except where applicable law requires the Member's express consent.

Article 45 – Assignment

Sinbadexpress may assign or transfer its rights and obligations under this Agreement, in whole or in part, to a third party in connection with a merger, acquisition, corporate restructuring, sale of assets, or similar transaction, to the extent permitted by applicable law.

The Member may not assign, transfer, or delegate any rights or obligations under this Agreement without the prior written consent of Sinbadexpress.

Article 46 – Effective Date

This Agreement shall become effective upon the Member's electronic acceptance and shall remain in force for as long as the membership relationship continues, unless terminated in accordance with its terms.

Article 47 – Contact Information

Notices, legal communications, and requests relating to this Agreement may be submitted through the following contact channels:

Company Name: Sinbadexpress Inc.

Principal Business Address: 2100 Lakeside Blvd Ste 160 Richardson TX 75082-4367

Texas Registered Office: 2100 Lakeside Blvd Ste 160 Richardson TX 75082-4367

Legal Email: legal@sinbadexpress.us

Customer Support Email: support@sinbadexpress.us

Website: https://www.sinbadexpress.us

Any changes to the above contact information shall become effective upon publication through the Platform.

SINBADEXPRESS PRIVACY POLICY

Effective Date: 07/05/2026
Last Updated: 07/05/2026

SECTION 1 – GENERAL PROVISIONS

1. Purpose

This Privacy Policy (the "Policy") explains how personal information is collected, used, disclosed, protected, and retained by Sinbadexpress Inc. ("Sinbadexpress," "Company," or "Platform") in connection with the use of the website www.sinbadexpress.us, its mobile applications, and all related digital services.

Sinbadexpress values the privacy of its users and is committed to processing personal information in accordance with the principles of transparency, security, accountability, and applicable data protection laws.

This Policy forms an integral part of the Sinbadexpress Membership Agreement.

2. Scope

This Policy applies to:

·         Visitors to the Platform;

·         Registered Members;

·         Customers purchasing Products or Services;

·         Mobile application users;

·         Individuals receiving customer support services;

·         Users subscribing to newsletters; and

·         Individuals participating in promotions or marketing campaigns.

3. Definitions

For purposes of this Policy, the following terms shall have the meanings set forth below.

Personal Information

"Personal Information" means any information that directly or indirectly identifies, or is reasonably capable of identifying, an identified or identifiable natural person.

Examples include:

·         Full name;

·         Email address;

·         Telephone number;

·         Shipping address;

·         Billing address;

·         IP address;

·         Device information;

·         Location information;

·         Order history;

·         Payment information; and

·         User preferences.

Sensitive Personal Information

"Sensitive Personal Information" means personal information that receives enhanced legal protection under applicable law.

Sinbadexpress does not intentionally collect such information unless it is necessary and legally permissible to do so.

Cookie

A "Cookie" is a small data file stored on a user's web browser or device.

Processing

"Processing" means any operation performed on Personal Information, including but not limited to:

·         collection;

·         recording;

·         storage;

·         modification;

·         analysis;

·         disclosure or sharing; and

·         deletion.

4. Information We Collect

The Platform may collect the following categories of information.

4.1 Identity Information

·         First name;

·         Last name;

·         Username; and

·         Company name (if applicable).

4.2 Contact Information

·         Email address;

·         Telephone number;

·         Shipping address; and

·         Billing address.

4.3 Account Information

·         Encrypted login credentials;

·         Membership registration date;

·         Login history; and

·         Account preferences.

4.4 Order Information

·         Purchased Products;

·         Order history;

·         Return requests;

·         Shipping information; and

·         Delivery information.

4.5 Payment Information

Sinbadexpress does not store:

·         credit card numbers;

·         CVV security codes; or

·         debit card PINs

within its own systems.

Payment transactions may be processed exclusively through authorized third-party payment service providers that comply with the Payment Card Industry Data Security Standard (PCI DSS).

4.6 Technical Information

The Platform may automatically collect technical information, including:

·         IP address;

·         Browser type;

·         Operating system;

·         Language preferences;

·         Device model;

·         Screen resolution;

·         Date and time of visit;

·         Session duration;

·         Referrer information; and

·         Clickstream and usage data.

4.7 Location Information

Subject to the Member's consent or device settings, the Platform may collect approximate or precise location information.

Users may withdraw location access permissions at any time through their device settings.

4.8 Customer Support Information

When a user contacts customer support, Sinbadexpress may retain:

·         email correspondence;

·         live chat transcripts;

·         notes relating to telephone conversations; and

·         customer support requests.

5. Methods of Collecting Information

Personal Information may be collected through the following methods.

Information Provided Directly by the User

For example, when the user:

·         creates a Membership account;

·         places an Order; or

·         submits a customer support request.

Automated Technologies

Including but not limited to:

·         Cookies;

·         Pixel tags;

·         Log files;

·         Software Development Kits (SDKs); and

·         Analytics technologies.

Third-Party Sources

Where necessary and permitted by applicable law, information may also be obtained from:

·         payment service providers;

·         shipping and logistics companies;

·         identity verification service providers; and

·         fraud prevention and risk management service providers.

6. Purposes for Processing Personal Information

Sinbadexpress may process Personal Information for the following purposes:

·         Creating and maintaining Membership accounts;

·         Processing and fulfilling Orders;

·         Completing payment transactions;

·         Arranging the shipment and delivery of Products;

·         Preventing fraud and unauthorized activities;

·         Enhancing Platform security;

·         Verifying user identity;

·         Providing customer support services;

·         Resolving technical issues;

·         Improving the Platform and its Services;

·         Developing new features and functionality;

·         Conducting promotions and marketing campaigns;

·         Personalizing the user experience;

·         Complying with legal obligations;

·         Responding to court orders and lawful governmental requests;

·         Fulfilling tax and accounting obligations;

·         Protecting the security and integrity of the Platform; and

·         Improving the overall quality of the Services.

7. Legal Bases for Processing

Sinbadexpress may process Personal Information on one or more of the following legal bases, to the extent permitted by applicable law:

·         The Member's consent, where required;

·         The performance or formation of a contract;

·         Compliance with legal obligations;

·         Legitimate business interests;

·         Fraud prevention;

·         Protection of the security and integrity of the Platform; and

·         Establishment, exercise, or defense of legal claims and rights.

SINBADEXPRESS PRIVACY POLICY

SECTION 2 – DISCLOSURE OF PERSONAL INFORMATION, INFORMATION SECURITY, AND USER RIGHTS

8. Disclosure of Personal Information

Sinbadexpress does not sell users' Personal Information.

Personal Information is disclosed only for the purposes described in this Policy and in accordance with applicable law.

Personal Information may be shared with the following persons or entities:

8.1 Sellers

To facilitate the fulfillment of Orders placed through the Platform, the following information may be shared with the relevant Seller:

·         Full name;

·         Shipping address;

·         Telephone number;

·         Order information; and

·         Delivery instructions.

Sellers may use such Personal Information solely for the purpose of fulfilling the applicable Order.

8.2 Payment Service Providers

Information necessary to process payment transactions may be shared with authorized payment service providers.

Such providers operate under their own privacy policies and are required to comply with applicable industry security standards, including the Payment Card Industry Data Security Standard (PCI DSS).

8.3 Logistics and Shipping Providers

To facilitate the delivery of Orders, the following information may be shared with logistics or shipping providers:

·         Recipient's name;

·         Shipping address;

·         Telephone number;

·         Order number; and

·         Delivery instructions.

8.4 Cloud Service Providers

Personal Information may be stored or processed by third-party cloud service providers that provide hosting, backup, content delivery, data storage, or security services.

Such providers are contractually bound by confidentiality and data protection obligations.

8.5 Technical Service Providers

To operate the Platform, Sinbadexpress may utilize third-party providers offering services such as:

·         Server hosting;

·         Analytics services;

·         Error logging systems;

·         Security software;

·         Email delivery services; and

·         Customer support systems.

8.6 Governmental Authorities

Sinbadexpress may disclose Personal Information where required by:

·         A court order;

·         A lawful request from an administrative authority;

·         A lawful request from law enforcement authorities; or

·         Any other applicable legal obligation.

8.7 Corporate Transactions

In connection with a merger, acquisition, corporate restructuring, share transfer, sale of assets, or similar corporate transaction, Personal Information may be transferred to the relevant parties in accordance with applicable law.

9. International Data Transfers

Sinbadexpress' infrastructure or service providers may be located in jurisdictions outside the Member's country of residence.

Accordingly, Personal Information may be transferred to and processed in the United States or other countries, subject to appropriate safeguards and in accordance with applicable law.

When transferring Personal Information internationally, Sinbadexpress implements appropriate contractual, technical, and organizational measures required under applicable law.

10. Data Retention

Personal Information may be retained:

·         For the duration of the Membership relationship;

·         As long as necessary to complete Order fulfillment;

·         To comply with legal obligations;

·         To satisfy accounting and tax recordkeeping requirements; and

·         To establish, exercise, or defend legal claims.

Once the applicable retention period has expired, Personal Information will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable law.

11. Information Security

Sinbadexpress implements reasonable administrative, technical, and physical safeguards designed to protect Personal Information.

Such safeguards may include, without limitation:

·         Encryption technologies;

·         Access control mechanisms;

·         Firewalls;

·         Multi-Factor Authentication (MFA);

·         Security logging;

·         Regular data backups;

·         Network monitoring systems;

·         Security testing; and

·         Employee authorization and access controls.

Because no electronic system can be guaranteed to be completely secure, Sinbadexpress does not warrant or guarantee absolute security.

12. User Rights

Subject to applicable law, Members may have the right to:

·         Know what Personal Information is processed about them;

·         Request access to their Personal Information;

·         Request correction of inaccurate or incomplete Personal Information;

·         Request deletion of Personal Information under certain circumstances;

·         Object to certain processing activities;

·         Request data portability where applicable;

·         Modify their marketing communication preferences; and

·         Manage their cookie preferences.

Sinbadexpress aims to respond to such requests within the time periods required by applicable law.

13. Marketing Communications

Subject to the Member's preferences and applicable law, users may receive:

·         Promotional campaign announcements;

·         Discount notifications;

·         New product announcements;

·         Newsletters; and

·         Promotional and marketing messages.

Members may opt out of receiving marketing communications at any time.

Operational communications that are necessary for the provision of the Services—including Order confirmations, shipping updates, account notifications, and security alerts—are not considered marketing communications.

14. Cookies and Similar Technologies

The Platform may use Cookies and similar technologies to enhance the user experience, maintain security, remember user preferences, and analyze the performance of the Services.

Detailed information regarding the use and management of Cookies is available in the Sinbadexpress Cookie Policy.

15. Children's Privacy

The Platform is not intended for children under the age of thirteen (13).

Sinbadexpress does not knowingly collect Personal Information from children under the age of thirteen (13).

If Sinbadexpress becomes aware that Personal Information belonging to a child under the age of thirteen (13) has been inadvertently collected, reasonable steps will be taken to delete or anonymize such information in accordance with applicable law.

Parents or legal guardians may contact Sinbadexpress regarding any concerns related to a child's Personal Information.

16. External Links

The Platform may contain links to third-party websites or services.

Sinbadexpress is not responsible for the privacy practices, policies, or content of such third parties.

Users are encouraged to review the privacy policies of any third-party websites they visit.

17. Data Breach Management

If Sinbadexpress identifies a data breach that may affect the confidentiality or security of Personal Information, it may:

·         assess the nature and scope of the incident;

·         implement measures to mitigate potential harm;

·         take appropriate technical and organizational security measures; and

·         notify affected individuals and competent governmental authorities where required by applicable law.

18. Changes to this Privacy Policy

Sinbadexpress may amend or update this Privacy Policy from time to time.

Material changes will be communicated to users through the Platform or by other appropriate means in accordance with applicable law.

The most current version of this Privacy Policy will always be made available on the Platform.

19. Contact Information

Questions, requests, or inquiries concerning this Privacy Policy or the processing of Personal Information may be directed through the following contact channels:

Company Name: Sinbadexpress Inc.

Principal Business Address: 2100 Lakeside Blvd Ste 160 Richardson TX 75082-4367

Texas Registered Office: 2100 Lakeside Blvd Ste 160 Richardson TX 75082-4367

Privacy Email: privacy@sinbadexpress.us

Customer Support Email: support@sinbadexpress.us

Website: https://www.sinbadexpress.us

Requests will be reviewed within a reasonable period and in accordance with applicable law.

APPENDIX 1

U.S. STATE PRIVACY NOTICE

Effective Date: 07/05/2026

This U.S. State Privacy Notice forms an integral part of the Sinbadexpress Privacy Policy and explains the additional privacy rights available to users residing in certain states within the United States.

Sinbadexpress is committed to complying with applicable U.S. state privacy laws, and this Notice summarizes the rights available to residents of applicable states to the extent required by law.

1. Scope

This Notice may apply, where applicable, to residents of the following states:

·         California;

·         Virginia;

·         Colorado;

·         Connecticut;

·         Utah;

·         Texas (to the extent applicable);

·         Oregon;

·         Montana;

·         Delaware;

·         Iowa;

·         Nebraska;

·         New Hampshire;

·         New Jersey;

·         Tennessee;

·         Minnesota;

·         Indiana;

·         Kentucky;

·         Rhode Island (upon the effective date of applicable legislation); and

·         Any other U.S. state that enacts applicable privacy legislation.

Sinbadexpress reserves the right to update this list in response to new legal or regulatory developments.

2. Categories of Personal Information Collected

Subject to applicable law, Sinbadexpress may collect and process the following categories of Personal Information:

·         Identity information;

·         Contact information;

·         Account information;

·         Order history;

·         Delivery information;

·         Payment transaction information;

·         Technical device information;

·         IP addresses;

·         Approximate location information;

·         Cookie and similar technology data;

·         User preferences;

·         Security records; and

·         Customer service records.

Sinbadexpress does not knowingly collect Sensitive Personal Information unless such collection is necessary and permitted by applicable law.

3. Purposes of Use of Personal Information

Personal Information may be used for the following purposes:

·         Creating Membership accounts;

·         Fulfilling Orders;

·         Processing payment transactions;

·         Preventing fraud;

·         Maintaining the security of the Platform;

·         Verifying user identity;

·         Providing customer support;

·         Improving the Services;

·         Complying with legal obligations; and

·         Conducting marketing activities, where permitted and, when required by law, in accordance with the user's communication preferences.

4. User Rights

To the extent provided under applicable state law, users may have the following rights.

4.1 Right to Know and Access

Users may have the right to know what Personal Information Sinbadexpress processes about them and to request access to such information.

4.2 Right to Correct

Users may request the correction of inaccurate or incomplete Personal Information.

4.3 Right to Delete

Users may request the deletion of their Personal Information where the conditions established under applicable law are satisfied.

This right may be limited for reasons including:

·         compliance with legal obligations;

·         fraud prevention;

·         security purposes;

·         accounting records;

·         tax obligations; and

·         ongoing legal disputes.

4.4 Right to Data Portability

Where permitted by applicable law, users may request that certain Personal Information relating to them be provided in a structured, commonly used, and electronically readable format.

4.5 Right to Opt Out of Marketing Communications

Users may modify their commercial electronic communication preferences at any time.

This right does not apply to service-related communications, including Order confirmations, shipping notifications, account notices, or security alerts.

4.6 Right to Object to Profiling

To the extent provided by applicable law, users may have the right to object to decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects concerning the user.

5. Sensitive Personal Information

Sinbadexpress processes Sensitive Personal Information only:

·         where permitted by applicable law;

·         where the user's explicit consent has been obtained when required; and

·         where such processing is necessary for the provision of the Services.

6. Cookies and Targeted Advertising

The Platform may use:

·         performance cookies;

·         analytics cookies;

·         security cookies; and

·         preference cookies.

Where targeted advertising activities are conducted, users will be provided with the choice mechanisms required under applicable law.

7. Sale or Sharing of Personal Information

Sinbadexpress does not engage in the commercial sale of Personal Information as part of its business model.

However, under certain U.S. state privacy laws, specific disclosures of Personal Information may be considered a "sale" or "sharing" of Personal Information.

Where applicable, users may exercise the rights available to them under applicable law.

8. Identity Verification

To process privacy rights requests, Sinbadexpress may verify the identity of the requesting individual.

Reasonable additional information may be requested for identity verification purposes.

9. Authorized Agents

To the extent permitted by applicable law, users may authorize a representative in writing to exercise their privacy rights on their behalf.

Sinbadexpress may require verification of the representative's authority.

10. Non-Discrimination

Users who exercise their privacy rights shall not be subjected to discriminatory treatment solely because they exercised such rights.

This provision does not affect loyalty programs, promotional campaigns, discounts, or other benefits permitted under applicable law.

11. Request Submission Process

Privacy rights requests may be submitted through the following channels:

Email: privacy@sinbadexpress.us

Website: www.sinbadexpress.us

Requests will be processed within the time periods required by applicable law.

12. Notice to California Residents

Residents of California may have the following rights under applicable California law:

·         to know the categories of Personal Information collected;

·         to access Personal Information;

·         to request deletion in certain circumstances;

·         to request correction in certain circumstances;

·         to opt out of certain disclosures of Personal Information; and

·         to exercise rights relating to Sensitive Personal Information.

The scope of these rights is governed by applicable California law.

13. Notice to Residents of Virginia, Colorado, and Other States

Residents of Virginia, Colorado, and other applicable states may have rights under their respective state privacy laws, including:

·         access;

·         correction;

·         deletion;

·         data portability; and

·         the right to opt out of certain data processing activities.

The availability and scope of these rights may vary depending on applicable state law.

14. Updates to this Notice

Sinbadexpress may update this Notice from time to time to reflect changes in applicable laws or in its business operations.

The most current version of this Notice will always be published on the Platform.

SINBADEXPRESS COOKIE POLICY

Effective Date: 07/05/2026
Last Updated: 07/05/2026

1. Purpose

This Cookie Policy (the "Policy") has been prepared to inform users about the Cookies and similar technologies used by Sinbadexpress Inc. ("Sinbadexpress," "Company," or "Platform") in connection with www.sinbadexpress.us, its mobile applications, and all related digital services.

This Policy forms an integral part of the Sinbadexpress Privacy Policy.

2. What Are Cookies?

A Cookie is a small text file stored on your web browser or device by a website.

Cookies may be used for the following purposes:

·         remembering user preferences;

·         managing user sessions;

·         enhancing security;

·         measuring website performance;

·         improving the user experience;

·         preventing fraud; and

·         generating statistical information.

Cookies cannot access other files stored on your device and do not contain software capable of damaging your computer or device.

3. Technologies We Use

In addition to traditional browser cookies, Sinbadexpress may use the following technologies:

·         HTTP Cookies;

·         HTML5 Local Storage;

·         Session Storage;

·         Pixel Tags;

·         Web Beacons;

·         Software Development Kits (SDKs) for mobile applications;

·         API-based authentication tokens; and

·         Similar tracking technologies.

For purposes of this Policy, all of the foregoing technologies may collectively be referred to as "Cookies."

4. Types of Cookies

4.1 Strictly Necessary Cookies

These Cookies are essential for the operation of the Platform.

Examples include Cookies used for:

·         user authentication;

·         security verification;

·         maintaining shopping cart functionality;

·         payment processing;

·         identity verification;

·         fraud prevention;

·         load balancing; and

·         remembering essential user preferences.

If these Cookies are disabled, certain features or portions of the Platform may not function properly.

4.2 Performance and Analytics Cookies

These Cookies may be used to measure:

·         the number of visitors;

·         page views;

·         user behavior;

·         error reports; and

·         page loading times.

Whenever reasonably possible, information collected through these Cookies is processed in an aggregated or de-identified manner.

4.3 Functional Cookies

These Cookies may remember:

·         language preferences;

·         preferred currency;

·         display or theme settings;

·         location preferences;

·         recently viewed Products; and

·         favorite items.

4.4 Advertising and Marketing Cookies

Where permitted by the user's preferences and applicable law, these Cookies may be used for:

·         delivering interest-based advertising;

·         measuring advertising effectiveness;

·         evaluating marketing campaigns; and

·         remarketing activities.

Users may modify or withdraw their Cookie preferences at any time.

4.5 Security Cookies

These Cookies may be used to:

·         detect fraudulent Accounts;

·         identify unusual login sessions;

·         prevent Account takeover attempts;

·         block automated bot activity; and

·         analyze malicious traffic.

5. Cookie Retention Period

Sinbadexpress may use the following categories of Cookies.

Session Cookies

Session Cookies are automatically deleted when the user closes their browser.

Persistent Cookies

Persistent Cookies may remain stored on the user's device for a specified period.

The retention period varies depending on the purpose of each Cookie.

Upon expiration, a Cookie may be automatically deleted or renewed in accordance with its intended purpose.

6. First-Party and Third-Party Cookies

First-Party Cookies

First-Party Cookies are placed directly by Sinbadexpress.

Third-Party Cookies

The Platform may use third-party services, including but not limited to:

·         payment processing services;

·         analytics services;

·         customer support platforms;

·         fraud prevention solutions;

·         advertising services;

·         mapping services; and

·         Content Delivery Networks (CDNs).

These third-party providers may be subject to their own privacy and cookie policies.

7. Purposes of Using Cookies

Sinbadexpress may use Cookies for the following purposes:

·         Membership registration and account management;

·         session management;

·         Order processing;

·         payment security;

·         user authentication;

·         performance analysis;

·         error detection and troubleshooting;

·         improving the customer experience;

·         remembering user preferences;

·         fraud prevention;

·         compliance with legal obligations; and

·         generating statistical and analytical reports.

8. Managing Cookie Preferences

Users may manage their Cookie preferences through:

·         their browser settings;

·         their device settings; or

·         the Cookie Preference Center provided by the Platform (where available).

Certain Strictly Necessary Cookies cannot be disabled because they are essential for the operation of the Platform.

Disabling optional Cookies may result in limited functionality of certain Platform features.

9. Browser Settings

Most web browsers allow users to:

·         view Cookies;

·         delete Cookies;

·         block Cookies; and

·         allow Cookies for specific websites.

Changing browser settings may affect the proper functioning of certain features of the Platform.

10. Do Not Track (DNT) Signals

Some web browsers may transmit a "Do Not Track" (DNT) signal.

Because there is currently no universally accepted or legally binding technical standard governing DNT signals, Sinbadexpress may not respond to such signals in all circumstances.

If applicable law imposes different requirements, Sinbadexpress will comply with those legal obligations.

11. Targeted Advertising

Where the user has provided the consent required under applicable law, advertising and marketing Cookies may be used to deliver interest-based advertising.

Where applicable, users may have the right to opt out of such data processing activities.

12. Children's Privacy

Sinbadexpress does not knowingly use interest-based advertising Cookies for children under the age of thirteen (13).

The Platform is not intended for children under the age of thirteen (13).

13. Security

Information collected through Cookies is protected by reasonable administrative and technical security measures.

Sinbadexpress may implement safeguards including:

·         access controls;

·         encryption;

·         firewalls;

·         network monitoring systems; and

·         logging mechanisms.

14. Updates to this Policy

Sinbadexpress may update this Policy from time to time to reflect changes in applicable laws or its Services.

Material changes may be communicated to users through appropriate methods.

The most current version of this Policy will always be published on the Platform.

15. Contact Information

Questions, requests, or inquiries regarding this Cookie Policy may be submitted through the following contact channels:

Company Name: Sinbadexpress Inc.

Principal Business Address: 2100 Lakeside Blvd Ste 160 Richardson TX 75082-4367

Texas Registered Office: 2100 Lakeside Blvd Ste 160 Richardson TX 75082-4367

Privacy Email: privacy@sinbadexpress.us

Customer Support Email: support@sinbadexpress.us

Website: https://www.sinbadexpress.us

SINBADEXPRESS COOKIE PREFERENCE CENTER

Manage Your Cookie Preferences

Sinbadexpress uses Cookies and similar technologies to provide you with a secure, fast, and personalized shopping experience.

Some Cookies are strictly necessary for the operation of the Platform. Other Cookies may be enabled or disabled based on your preferences.

You may modify your preferences at any time to the extent required by applicable law.

1. Strictly Necessary Cookies

Status: Always Active

These Cookies are essential for the basic operation of the Platform and cannot be disabled.

Purposes of Use

·         Secure sign-in;

·         Account authentication;

·         Shopping cart functionality;

·         Order processing;

·         Payment security;

·         Fraud prevention;

·         Traffic load balancing;

·         Security logging; and

·         Language and essential system preferences.

Without these Cookies, certain Platform services may not function properly.

2. Performance and Analytics Cookies

Status: User Preference

These Cookies help us measure the performance of the Platform and improve our Services.

Purposes of Use

·         Page view statistics;

·         Visitor analytics;

·         Performance measurement;

·         Error analysis;

·         Page load times; and

·         Improvement of the user experience.

Whenever reasonably possible, the information collected is processed in an aggregated or de-identified form.

Preference:

☐ Enable

3. Functional Cookies

Status: User Preference

These Cookies remember your preferences to provide a more personalized experience.

Purposes of Use

·         Language preference;

·         Currency selection;

·         Region selection;

·         Favorite Products;

·         Recently viewed Products;

·         Display settings; and

·         Accessibility preferences.

Disabling these Cookies may affect certain personalization features.

Preference:

☐ Enable

4. Advertising and Marketing Cookies
Status: Optional (Based on User Preference)

These cookies help display content and advertisements that are relevant to your interests.

Purposes of Use

·         Interest-based advertising

·         Measuring advertising campaign performance

·         Remarketing

·         Advertising frequency management

·         Marketing analytics

These cookies are enabled only with your consent where required.

Preference:
☐ Enable

5. Security Cookies
Status: Always Active

These cookies help protect your account and the Platform.

Purposes of Use

·         Detecting suspicious login attempts

·         Preventing automated bot activity

·         Identifying account takeover attempts

·         Fraud risk analysis

·         Security verification and authentication

These cookies are essential for maintaining the security of the Platform and cannot be disabled.

6. Changing Your Cookie Preferences

You may update your cookie preferences at any time by using one of the following methods:

·         The "Privacy & Cookie Settings" section in your account;

·         The "Cookie Preferences" link located at the bottom of the website; or

·         Your browser settings (where applicable).

Any changes you make will apply to your future visits. You may need to use your browser settings to delete certain cookies that were previously stored on your device.

7. Browser Settings

Most internet browsers allow you to:

·         View cookies;

·         Delete cookies;

·         Block cookies; and

·         Allow cookies for specific websites.

Please note that if you change your browser settings, some features of the Platform may not function as intended.

8. Save Your Preferences

Please select your preferred cookie settings:

☐ Use Essential Cookies Only

☐ Essential + Performance Cookies

☐ Essential + Performance + Functionality Cookies

☐ Accept All Cookies

☐ Continue with My Selected Preferences

9. Withdrawing Your Consent

You may change or withdraw your cookie preferences at any time.

Any withdrawal of consent will apply only to processing activities carried out after the date of withdrawal and will not affect the lawfulness of any data processing performed before your consent was withdrawn.

10. More Information

For more information about the use of cookies, the processing of personal data, and your rights, please refer to the following documents:

·         Sinbadexpress Privacy Policy

·         U.S. State Privacy Notice

·         Do Not Sell or Share My Personal Information Notice (where applicable)

If you have any questions, please contact us at privacy@sinbadexpress.us.

DO NOT SELL OR SHARE MY PERSONAL INFORMATION

( Effective Date: 07/05/2026 )

This Notice forms an integral part of the Sinbadexpress Privacy Policy and the U.S. State Privacy Notice.

Sinbadexpress is committed to protecting your privacy. This Notice explains the rights you may have regarding certain data sharing activities involving your personal information under applicable U.S. state privacy laws.

1. Sale or Sharing of Personal Information

Sinbadexpress's core business model is not based on selling users' personal information to third parties for monetary or commercial purposes.

However, under certain applicable U.S. state privacy laws, the following activities may, under specific circumstances, be considered the "sale" or "sharing" of personal information:

·         Interest-based advertising;

·         Measuring advertising performance;

·         Remarketing;

·         Certain analytics and measurement services; and

·         Limited data sharing with advertising technology partners.

Accordingly, where required by applicable law, Sinbadexpress provides users with the ability to exercise their applicable privacy choices.

2. Your Rights

Depending on the privacy laws applicable in your state of residence, you may have the right to:

·         Opt out of certain data sharing activities involving your personal information;

·         Opt out of certain disclosures of personal information for interest-based or targeted advertising;

·         Limit the use of certain categories of personal information, where applicable; and

·         Modify your privacy preferences at any time.

The availability and scope of these rights may vary depending on your state of residence.

3. How to Manage Your Preferences

You may manage your privacy preferences through any of the following methods:

·         By using the Cookie Preference Center available on our website;

·         Through the Privacy Settings section of your account; or

·         By submitting a request to privacy@sinbadexpress.us.

Your preferences will be implemented within a reasonable period following identity verification and technical processing, where applicable.

4. Sensitive Personal Information

Sinbadexpress processes sensitive personal information only for the following purposes:

·         Providing our services;

·         Maintaining the security of our Platform;

·         Complying with applicable legal obligations; and

·         Preventing fraud.

Such processing is carried out only to the extent permitted by applicable law.

Sinbadexpress does not use sensitive personal information for commercial purposes beyond those permitted under applicable law.

5. Children's Information

Sinbadexpress does not knowingly sell or share the personal information of children under the age of 13 for interest-based or targeted advertising purposes.

The Platform is not directed to children under 13 years of age.

6. Non-Discrimination

Subject to applicable law, Sinbadexpress will not discriminate against users for exercising their privacy rights.

This includes not denying services, charging different prices, or providing a different level or quality of service solely because a user has exercised their applicable privacy rights, except where permitted by law, including with respect to lawful loyalty, rewards, promotional, or discount programs.

7. Identity Verification

To process privacy rights requests, Sinbadexpress may verify the identity of the individual submitting the request.

Reasonable additional information or documentation may be requested where necessary to verify identity before processing a request.

8. Authorized Agent

Where permitted by applicable law, you may designate an authorized agent to submit a privacy rights request on your behalf.

Sinbadexpress reserves the right to verify both the identity of the requester and the authority of the authorized agent before processing the request.

9. How to Submit a Request

You may submit privacy rights requests through the following channels:

Email: privacy@sinbadexpress.us

Website: www.sinbadexpress.us

Sinbadexpress will review and respond to requests within the timeframes required by applicable law.

10. Updates to This Notice

Sinbadexpress may update this Notice from time to time to reflect changes in applicable laws, business operations, or technological developments.

The most current version of this Notice will always be published on the Platform.

11. Contact Information

If you have any questions regarding this Notice or your privacy rights, please contact us using the information below.

Company Name: Sinbadexpress Inc.

Privacy Email: privacy@sinbadexpress.us

Support Email: support@sinbadexpress.us

Website: https://www.sinbadexpress.us

SINBADEXPRESS DATA RETENTION & SECURE DISPOSAL POLICY

Document Type: Internal Policy

Document Owner: Sinbadexpress Inc.

Approved By: Board of Directors

Effective Date: 07/05/2026

Last Updated: 07/05/2026

Classification: Internal Use Only

1. Purpose

The purpose of this Policy is to establish the rules governing how personal data, business records, electronic records, and other corporate information processed by Sinbadexpress are:

·         retained;

·         protected through appropriate security measures;

·         deleted;

·         anonymized; and

·         securely disposed of.

2. Scope

This Policy applies to:

·         Employees;

·         Officers and Managers;

·         Contractors;

·         Consultants;

·         Information Technology personnel;

·         Customer Support personnel;

·         Finance Department;

·         Legal Department;

·         Marketplace Operations personnel; and

·         Information Security teams.

3. Core Principles

Sinbadexpress manages information in accordance with the following principles:

·         Data minimization

·         Purpose limitation

·         Storage limitation

·         Security

·         Transparency

·         Accountability

·         Accuracy

·         Confidentiality

4. Criteria for Determining Retention Periods

When determining how long information should be retained, Sinbadexpress considers, among other things:

·         Applicable legal requirements;

·         Tax regulations;

·         Accounting obligations;

·         Consumer protection laws;

·         The possibility of commercial or legal disputes;

·         Fraud investigations;

·         Security incidents;

·         Business continuity requirements; and

·         Operational needs of the Platform.

5. Categories of Data

The Platform may process the following categories of information:

·         Account registration information;

·         Identity information;

·         Order records;

·         Delivery records;

·         Return records;

·         Payment transaction records;

·         Customer support records;

·         Security records;

·         System logs;

·         Cookie records;

·         Marketing consent records;

·         Accounting records; and

·         Legal records.

6. Sample Retention Periods

The retention periods below are provided as general guidance. Depending on the circumstances of a particular case and the requirements of applicable law, longer or shorter retention periods may apply.

7. Extension of the Retention Period

Data may be retained beyond the standard retention period in the following circumstances:

• Ongoing litigation or arbitration proceedings;
• Investigations conducted by public authorities;
• Tax audits;
• Fraud investigations;
• Security incident investigations;
• Explicit legal obligations imposed by applicable law.

8. Secure Storage

Where appropriate, data is protected through the following measures:

• Encryption;
• Access controls;
• Role-based access control;
• Multi-factor authentication;
• Firewalls;
• Network segmentation;
• Regular backups;
• Audit logs;
• Security monitoring systems.

9. Access Authorization

Access to personal data is granted only to authorized personnel who require such access in order to perform their duties.

Access is restricted based on:

• Job responsibilities;
• Business need;
• The principle of least privilege.

10. Backup

Platform data may be backed up on a regular basis.

Backups are:

• Encrypted;
• Access-restricted;
• Stored in secure environments.

Data restoration activities from backups are logged.

11. Secure Disposal

Upon expiration of the applicable retention period, data may be processed using one of the following methods, taking into account applicable law, technical requirements, and operational needs:

• Secure deletion;
• Anonymization;
• Cryptographic destruction (secure destruction of encryption keys);
• Physical destruction of the storage media, where appropriate.

The disposal method is determined according to the type of data and the storage medium on which it is stored.

12. Anonymization

Where statistical analysis is required for legal or business purposes, personal information may be anonymized so that individuals can no longer be identified.

Anonymized information may be used for analysis and reporting purposes to the extent permitted by applicable law.

13. Legal Hold

Where litigation, an official investigation, or arbitration proceedings have commenced or are reasonably anticipated, a Legal Hold may be applied to the relevant data.

During the Legal Hold period, normal disposal processes are suspended, and the relevant records are preserved.

A Legal Hold is authorized by the Legal Department and remains in effect until it is formally lifted.

14. Policy Violations

Violation of this Policy may result in the implementation of appropriate measures, including:

• Disciplinary action;
• Revocation of access privileges;
• Contractual sanctions;
• Legal proceedings.

15. Training

Personnel who have access to data shall receive training at appropriate intervals on the following topics:

• Data protection;
• Information security;
• Privacy and confidentiality;
• Social engineering awareness;
• Secure data processing.

16. Policy Review

This Policy shall be reviewed at least once a year or whenever any of the following circumstances occur:

• Changes in applicable legislation;
• Adoption of new technologies;
• Security incidents;
• Significant changes in business processes;
• Audit findings.

17. Responsible Departments

The following departments are jointly responsible for the implementation of this Policy:

• Board of Directors;
• Legal Department;
• Information Security Team;
• Information Technology Department;
• Finance and Accounting Department;
• Customer Service Department;
• Internal Audit Department (where applicable).

18. Effective Date

This Policy shall become effective on the date it is approved by the Board of Directors.

All employees and relevant service providers are required to comply with this Policy in carrying out activities within the scope of their respective duties.

SINBADEXPRESS LAW ENFORCEMENT AND GOVERNMENT REQUEST GUIDELINES

Document Type: Corporate Policy
Effective Date: 07/05/2026
Last Updated: 07/05/2026

1. Purpose

This Policy establishes how Sinbadexpress Inc. evaluates and responds to requests for information and documents received from law enforcement agencies, courts, prosecutors' offices, regulatory authorities, and other competent public authorities.

The purposes of this Policy are to:

• Protect users' privacy rights;
• Comply with applicable law;
• Ensure a transparent and consistent process; and
• Prevent unauthorized disclosure of information.

2. Scope

This Policy applies to requests received from:

• U.S. federal authorities;
• Texas state authorities;
• Authorities of other U.S. states;
• Foreign government authorities;
• Courts;
• Arbitration tribunals;
• Regulatory authorities; and
• Law enforcement agencies.

3. Fundamental Principles

Sinbadexpress is committed to the following principles:

• Compliance with the law;
• Data minimization;
• Necessity;
• Proportionality;
• Transparency;
• Security;
• Confidentiality; and
• Accountability.

4. Authorities That May Submit Requests

Information requests may be received from, including but not limited to:

• Federal courts;
• Texas state courts;
• Courts of other U.S. states;
• Prosecutors' offices;
• Police agencies;
• Federal investigative authorities;
• Regulatory agencies;
• Tax authorities;
• Customs authorities; and
• Consumer protection authorities.

Sinbadexpress evaluates only those requests that are properly submitted by competent authorities in accordance with applicable law.

5. Types of Requests That May Be Honored

Information requests may be considered when submitted pursuant to one of the following legal processes:

• Court order;
• Search warrant;
• Subpoena;
• Administrative order;
• A valid legal obligation; or
• Emergency requests, where permitted by applicable law.

Each request is reviewed individually with respect to its legal basis and scope.

6. Identity and Authority Verification

Before disclosing any information, Sinbadexpress seeks to verify:

• The identity of the requesting authority;
• The authority of the requesting official;
• The legal basis of the request; and
• The scope of the request.

Additional information may be requested, or the request may be denied, if the request is incomplete or cannot be verified.

7. Review of Requests

Each request is evaluated to determine whether it:

• Has been submitted by a competent authority;
• Contains a sufficient legal basis;
• Is specific and clearly defined;
• Is not overly broad;
• Is limited to the information requested; and
• Complies with applicable law.

8. Data Minimization

Sinbadexpress aims to disclose only the information that is legally required and falls within the scope of the request.

Information or documents outside the scope of the request will not be disclosed.

9. User Notification

To the extent permitted by applicable law and unless prohibited by a court order, Sinbadexpress may notify the affected user of a request for information.

Notification may not be provided in circumstances including, but not limited to:

• A court-issued nondisclosure order;
• The confidentiality of an investigation;
• An imminent risk to life or physical safety; or
• Other circumstances where notification is prohibited by law.

10. Emergency Requests

Where there are reasonable grounds to believe that a person faces an imminent risk of death, serious physical injury, or other significant threat to physical safety, Sinbadexpress may give priority to emergency requests in accordance with applicable law.

Even in such cases, only the minimum amount of information necessary will be disclosed.

11. International Requests

Requests from public authorities outside the United States may not be fulfilled directly.

Sinbadexpress may require that such requests be processed through:

• Applicable international treaties;
• Mutual legal assistance mechanisms; or
• Applicable United States law.

12. Recordkeeping

Subject to applicable law and company policies, the following information may be recorded:

• Date of the request;
• Requesting authority;
• Legal basis of the request;
• Categories of data requested;
• Response provided; and
• Date of processing.

These records are maintained in a manner that is accessible only to authorized personnel.

13. Transparency Report

Where deemed appropriate and to the extent permitted by applicable law, Sinbadexpress may periodically publish a Transparency Report containing anonymized and aggregated statistics.

Such report may include, for example:

·         The number of information requests received;

·         The types of requesting authorities;

·         The percentage of requests fulfilled;

·         The number of requests denied; and

·         The number of emergency requests received.

The Transparency Report does not contain any personal information relating to individual users.

14. Information Security

Appropriate technical and organizational security measures are implemented when responding to information requests.

These measures may include, for example:

·         Encrypted communications;

·         Access logs;

·         Authorization controls; and

·         Secure file transfer methods.

15. Personnel Authorization

Only personnel specifically authorized by the Company are permitted to review and respond to requests for information from law enforcement agencies and government authorities.

Employees are not authorized to respond to requests that fall outside their authority and are required to promptly refer such requests to the Legal Department.

16. Policy Violations

Violation of this Policy may result in:

·         Disciplinary action;

·         Revocation of access privileges;

·         Contractual sanctions; and

·         Civil or criminal liability, where applicable.

17. Policy Review

This Policy shall be reviewed at least annually or whenever any of the following occurs:

·         Changes in applicable legislation;

·         Court decisions;

·         Guidance issued by regulatory authorities; or

·         Significant changes in the Company's operations.

18. Contact Information

Law enforcement agencies and government authorities may submit information requests through the following contact channels:

Sinbadexpress Inc.
Legal Department

Email: legal@sinbadexpress.us

Privacy Team: privacy@sinbadexpress.us

Mailing Address: 2100 Lakeside Blvd Ste 160 Richardson TX 75082-4367

Sinbadexpress may decline to accept information requests submitted by telephone or through social media as official request channels.

19. Effective Date

This Policy shall become effective on the date it is approved by the Board of Directors and shall remain in effect until amended or replaced.

SINBADEXPRESS INFORMATION SECURITY POLICY

Document Type: Internal Policy
Document Owner: Sinbadexpress Inc.
Approved By: Board of Directors
Effective Date: 07/05/2026
Last Updated: 07/05/2026
Confidentiality Classification: Internal Use Only

1. Purpose

The purpose of this Policy is to protect the confidentiality, integrity, and availability of Sinbadexpress's information assets and to establish the fundamental information security requirements for managing risks relating to customer data, corporate records, trade secrets, and the Company's information technology infrastructure.

2. Scope

This Policy applies to:

·         Board of Directors;

·         All employees;

·         Temporary personnel;

·         Consultants;

·         Interns;

·         Service providers;

·         Contractors;

·         Cloud services;

·         Data centers;

·         Servers;

·         Network infrastructure;

·         Mobile devices;

·         Laptop and desktop computers;

·         Source code repositories;

·         Testing and production environments; and

·         All information systems.

3. Information Security Principles

Sinbadexpress adopts the following fundamental information security principles:

·         Confidentiality;

·         Integrity;

·         Availability;

·         Authentication;

·         Authorization;

·         Accountability;

·         Principle of Least Privilege;

·         Security by Design; and

·         Privacy by Design.

4. Roles and Responsibilities

Board of Directors

·         Approves the information security strategy.

·         Supports the allocation of necessary resources.

·         Oversees significant information security risks.

Legal Department

·         Manages legal compliance processes.

·         Oversees data protection and privacy obligations.

Information Technology Department

·         Implements technical security controls.

·         Maintains the security of information systems.

·         Manages security patches and updates.

Information Security Team

·         Conducts risk assessments.

·         Manages security incidents.

·         Coordinates security testing.

·         Monitors compliance with this Policy.

Employees

·         Must comply with this Policy.

·         Must immediately report suspicious activities.

·         Must not disclose Company information to unauthorized persons.

5. Information Classification

All information assets shall be assigned to one of the following classifications:

Public

Information that may be disclosed to the public without restriction.

Internal

Information intended for access by Company personnel only.

Confidential

Information restricted to authorized personnel.

Highly Confidential

Information that could cause significant harm to Sinbadexpress if disclosed.

Each information owner is responsible for assigning the appropriate classification to the information they create.

6. Access Controls

Access to information systems shall be managed in accordance with the following principles:

·         Principle of Least Privilege;

·         Role-Based Access Control (RBAC);

·         Privileged account management;

·         Multi-Factor Authentication (MFA);

·         Strong password policy;

·         Regular access reviews; and

·         Immediate revocation of access rights upon termination of employment.

The use of shared user accounts is prohibited. Any unavoidable technical exceptions shall be documented and appropriately authorized.

7. Passwords and Authentication

• Strong password requirements shall be enforced.
• Passwords shall not be stored in plain text.
• Passwords shall be securely hashed using appropriate cryptographic algorithms.
• Multi-Factor Authentication (MFA) is mandatory for critical systems.
• Authentication credentials must not be shared with third parties.

8. Network Security

Where appropriate, the following security controls are implemented within the Sinbadexpress network infrastructure:

• Firewalls;
• Network segmentation;
• Intrusion Detection and Prevention Systems (IDS/IPS);
• Secure remote access;
• Network traffic monitoring;
• System and security logging; and
• Distributed Denial-of-Service (DDoS) protection solutions.

9. Endpoint Security

Where appropriate, Company devices are protected through:

• Up-to-date operating systems;
• Anti-malware protection;
• Full disk encryption;
• Automatic screen locking;
• Automatic security updates; and
• Restrictions on the installation of unauthorized software.

10. Application Security

Security is incorporated throughout the software development lifecycle.

Where appropriate, the following practices are implemented:

• Secure coding standards;
• Code reviews;
• Dependency management and security checks;
• Security testing;
• Vulnerability scanning; and
• Change management.

11. Cloud Security

When using cloud services, the following security measures are implemented, where appropriate:

• Access controls;
• Encryption;
• Configuration management;
• Backup procedures;
• Logging; and
• Security monitoring.

Cloud service providers are evaluated with respect to their security and privacy obligations.

12. Encryption

Personal information and critical Company data are protected, where appropriate, through strong and current encryption methods:

• During transmission; and
• While stored.

Encryption keys shall be securely generated, managed, and protected.

13. Logging

Security and operational logs may be maintained for critical systems.

Log records shall:

• Be protected against unauthorized modification;
• Have restricted access; and
• Be reviewed only by authorized personnel.

14. Security Incident Reporting

Every employee is required to report the following incidents to the Information Security Team without delay:

• Suspected unauthorized access;
• Data breaches;
• Phishing attempts;
• Malware infections;
• Lost or stolen devices;
• Suspicious network activity; and
• Security vulnerabilities.

15. Physical Security

Access to critical information processing facilities is restricted to authorized personnel only.

Server rooms and other sensitive areas are protected by appropriate physical security measures.

16. Training and Awareness

Personnel with access to information systems shall receive periodic training on the following topics:

• Information security;
• Data protection;
• Social engineering;
• Phishing attacks;
• Secure password practices; and
• Security incident reporting procedures.

17. Audit and Compliance

Where appropriate, Sinbadexpress may conduct:

• Internal audits;
• Technical testing;
• Security assessments;
• Vulnerability assessments; and
• Compliance reviews.

18. Policy Violations

Violation of this Policy may result in:

• Disciplinary action;
• Revocation of access privileges;
• Contractual sanctions; and
• Legal proceedings.

19. Policy Review

This Policy shall be reviewed at least annually or whenever any of the following occurs:

• Significant security incidents;
• Changes in applicable legislation;
• Adoption of new technologies;
• Audit findings; or
• Organizational changes.

20. Effective Date

This Policy shall become effective on the date it is approved by the Board of Directors.

All employees, managers, and relevant service providers are required to comply with this Policy in carrying out activities within the scope of their respective duties.

SINBADEXPRESS DATA BREACH RESPONSE PLAN

Document Type: Internal Policy
Document Owner: Sinbadexpress Inc.
Approved By: Board of Directors
Effective Date: 07/05/2026
Last Updated: 07/05/2026
Confidentiality Classification: Internal Use Only

1. Purpose

The purpose of this Plan is to ensure that personal data breaches and information security incidents affecting Sinbadexpress's information systems are managed promptly, in a coordinated manner, and in compliance with applicable law.

The objectives of this Plan are to:

• Minimize the impact of the incident;
• Protect users;
• Preserve evidence;
• Maintain business continuity;
• Fulfill applicable legal notification obligations; and
• Prevent similar incidents from recurring.

2. Scope

This Plan applies to:

• Customer data;
• Seller data;
• Employee data;
• Financial records;
• Order information;
• Cloud systems;
• Servers;
• Mobile applications;
• API services;
• Email systems; and
• Third-party service providers.

3. Definition of a Data Breach

For the purposes of this Plan, a Data Breach means any incident that results in, or creates a risk of, the unauthorized:

• Access to;
• Viewing of;
• Disclosure of;
• Alteration of;
• Deletion of;
• Loss of; or
• Unavailability of

personal data or other information that is required to be protected.

4. Examples of Data Breaches

The following are examples of incidents that may constitute a data breach:

·         Unauthorized system access;

·         Account compromise;

·         Ransomware attacks;

·         Malware infections;

·         Disclosure of data to the wrong recipient;

·         Cloud configuration errors;

·         API security vulnerabilities;

·         Stolen laptop computers;

·         Lost USB storage devices;

·         Improper access authorization;

·         Data leakage resulting from insider threats; and

·         Breaches involving third-party service providers.

5. Incident Response Team

Data breaches shall be handled by an Incident Response Team consisting of representatives from the following departments:

·         Information Security;

·         Information Technology;

·         Legal Department;

·         Privacy Team;

·         Customer Service;

·         Corporate Communications; and

·         Senior Management.

Where necessary, external legal counsel, digital forensics specialists, and cybersecurity consultants may be engaged.

6. Incident Response Process

Phase 1 – Detection

An incident may be detected through:

·         SIEM alerts;

·         Security logs;

·         Intrusion Detection and Prevention Systems (IDS/IPS);

·         Employee reports;

·         Customer reports;

·         Third-party notifications; or

·         Security researchers.

Every suspected data breach shall be documented.

Phase 2 – Initial Assessment

The initial assessment shall consider the following questions:

·         Is the incident genuine?

·         Which systems have been affected?

·         What categories of data have been affected?

·         How many individuals may have been impacted?

·         Is the breach ongoing?

·         What is the preliminary risk level?

Phase 3 – Containment

Where appropriate, the following measures may be implemented:

·         Isolating affected systems from the network;

·         Suspending user accounts;

·         Revoking API keys;

·         Terminating active sessions;

·         Resetting passwords; and

·         Updating firewall rules.

Phase 4 – Evidence Preservation

During the response process, the following records shall be preserved:

·         System logs;

·         Server logs;

·         Network traffic records;

·         Access logs;

·         Backups; and

·         Incident timeline documentation.

Evidence shall be preserved in its original state to the greatest extent possible.

Phase 5 – Impact Assessment

The following factors shall be evaluated:

·         Scope of the breach;

·         Categories of data involved;

·         Number of affected individuals;

·         Financial impact;

·         Legal impact;

·         Operational impact; and

·         Reputational risk.

Phase 6 – Legal Assessment

The Legal Department shall assess:

·         Applicable federal and state notification obligations;

·         Contractual obligations;

·         Insurance notification requirements; and

·         Regulatory reporting obligations.

Phase 7 – Notification

Whether notification is required shall be determined on a case-by-case basis.

Where notification is required, the following parties may be notified in accordance with applicable law:

·         Affected users;

·         Relevant government authorities;

·         Business partners; and

·         Insurance providers.

Phase 8 – Remediation

Following a data breach, and where appropriate:

·         Security vulnerabilities shall be remediated;

·         Security patches shall be applied;

·         Access privileges shall be reviewed;

·         System configurations shall be corrected; and

·         Additional security controls shall be implemented.

Phase 9 – Post-Incident Review

Following every significant incident, the following matters shall be evaluated:

·         Root cause analysis;

·         Process deficiencies;

·         Training requirements;

·         Policy updates;

·         Technical improvements; and

·         Measures to prevent similar incidents from recurring.

7. Incident Severity Levels

Critical

·         Large-scale data breach;

·         Ransomware attack;

·         Compromise of financial systems; or

·         Widespread service disruption.

High

·         Unauthorized access to sensitive data;

·         Compromise of an administrative account; or

·         Compromise of authentication systems.

Medium

·         Compromise of a single user account;

·         Improper access authorization; or

·         Limited disclosure of data.

Low

·         Unsuccessful attack attempts;

·         Violations of security policies; or

·         Low-risk configuration errors.

8. Communication Plan

During a data breach, all communications shall be handled exclusively by authorized personnel.

Only Senior Management or authorized Corporate Communications representatives are authorized to communicate with the media, social media platforms, or third parties regarding the incident.

9. Documentation

The following information shall be documented for every incident:

·         Incident identification number;

·         Date and time;

·         Detection method;

·         Affected systems;

·         Categories of affected data;

·         Response measures taken;

·         Notifications issued;

·         Incident outcome; and

·         Remediation activities.

10. Training and Exercises

Where appropriate, Sinbadexpress may conduct:

·         Tabletop exercises;

·         Technical scenario simulations; and

·         Incident response training.

This Plan shall be updated based on the results of such exercises and testing.

11. Plan Review

This Plan shall be reviewed at least annually or whenever any of the following occurs:

·         Significant security incidents;

·         Changes in applicable legislation;

·         Audit findings;

·         Organizational changes; or

·         Adoption of new technologies.

12. Effective Date

This Plan shall become effective on the date it is approved by the Board of Directors.

All employees and relevant service providers are required to comply with the provisions of this Plan in carrying out activities within the scope of their respective duties.

SINBADEXPRESS ACCEPTABLE USE POLICY

Document Type: Internal Policy
Document Owner: Sinbadexpress Inc.
Approved By: Board of Directors
Effective Date: 07/05/2026
Last Updated: 07/05/2026
Confidentiality Classification: Internal Use Only

1. Purpose

The purpose of this Policy is to ensure the secure, ethical, and lawful use of Sinbadexpress's information systems, network infrastructure, devices, software, cloud services, and other digital resources.

This Policy is intended to reduce information security risks, protect user accounts, and prevent the misuse of Company assets.

2. Scope

This Policy applies to:

·         Members of the Board of Directors;

·         Employees;

·         Temporary personnel;

·         Interns;

·         Consultants;

·         External service providers;

·         Contractors;

·         Software developers;

·         System administrators; and

·         Any other individuals authorized to access the Company's systems.

This Policy governs the use of the following resources:

·         Company computers;

·         Mobile devices;

·         Servers;

·         Network infrastructure;

·         Cloud services;

·         Corporate email;

·         Messaging systems;

·         Source code repositories;

·         Testing and production environments;

·         APIs; and

·         Corporate accounts.

3. Fundamental Principles

All users shall comply with the following principles:

·         Lawful use;

·         Security-focused behavior;

·         Principle of Least Privilege;

·         Protection of confidentiality;

·         Protection of Company assets;

·         Accountability;

·         Professional use; and

·         Ethical conduct.

4. Account Usage

Each user shall:

• Use only the account assigned to them.
• Not share account credentials with any third party.
• Avoid the use of shared accounts; any necessary technical exceptions shall be documented.
• Comply with the Company's strong password and Multi-Factor Authentication (MFA) requirements.
• Immediately report any suspicious login activity.

5. Acceptable Uses

Company systems may be used for the following purposes:

• Conducting business operations;
• Providing customer support;
• Software development;
• Security operations;
• System administration;
• Training;
• Approved testing activities; and
• Other corporate activities authorized by management.

Reasonable and limited personal use may be tolerated provided that it does not conflict with Company policies or interfere with business operations.

6. Prohibited Activities

The following activities are strictly prohibited:

• Unauthorized access to systems;
• Sharing passwords or authentication credentials;
• Installation of unlicensed or unauthorized software;
• Unauthorized copying of data;
• Unauthorized disclosure of confidential information;
• Use of pirated software;
• Development or execution of malicious software;
• Phishing activities;
• Social engineering attacks;
• Use of Company resources for unlawful purposes;
• Unauthorized cryptocurrency mining;
• Use of Company systems for sending spam;
• Unauthorized network scanning;
• Disabling or bypassing security controls; and
• Storing or distributing content that infringes intellectual property or copyright laws.

7. Information Handling Rules

Users shall:

• Process confidential information only as required for their job responsibilities.
• Use personal information only for authorized purposes.
• Avoid unnecessary duplication of data.
• Not upload Company data to unauthorized storage services.
• Follow all required approval procedures before transferring Company data outside the organization.

8. Email Usage

Corporate email systems:

• Shall be used primarily for business purposes;
• Shall not be used with misleading or false identities;
• Shall not be used to distribute malicious attachments;
• Shall not be used for sending spam; and
• Shall be used in a manner that protects confidential information.

Suspicious emails shall be reported to the Information Security Team before being opened or acted upon.

9. Internet Usage

When using the Company's Internet connection, users shall:

• Not access unlawful content;
• Avoid websites that pose security risks;
• Refrain from downloading copyrighted material without authorization; and
• Comply with all security warnings and alerts.

10. Software Installation

Software may be installed on Company devices only by authorized personnel or through approved deployment processes.

The installation of unauthorized applications is strictly prohibited.

11. Mobile Devices

Mobile devices provided by the Company or used to access Company data shall:

• Have screen lock enabled;
• Be encrypted where appropriate;
• Receive security updates in a timely manner; and
• Be reported immediately if lost or stolen.

12. Remote Work

Personnel working remotely shall:

• Use secure network connections;
• Implement additional security measures when using public Wi-Fi networks;
• Not leave Company devices unattended; and
• Protect confidential information displayed on their screens from unauthorized viewing.

13. Use of Artificial Intelligence Tools

The following information shall not be uploaded to general-purpose artificial intelligence services without prior authorization:

• Customer personal data;
• Trade secrets;
• Source code;
• Security keys or credentials;
• Confidential agreements; and
• Payment information.

Outputs generated by artificial intelligence tools shall be verified before being used in critical business processes.

14. Security Incident Reporting

The following incidents shall be reported to the Information Security Team without delay:

• Suspicious emails;
• Unauthorized access attempts;
• Malware infections;
• Data loss;
• Lost or stolen devices;
• Suspected compromise of authentication credentials; and
• Security vulnerabilities.

Employees shall not be subject to disciplinary action for reports made in good faith.

15. Monitoring and Auditing

To the extent permitted by applicable law and for legitimate security purposes, Sinbadexpress may monitor and audit:

• System usage;
• Network traffic;
• Access records;
• Security logs; and
• Corporate account activity.

Such monitoring shall be conducted with due regard for employees' reasonable expectations of privacy and in compliance with applicable law.

16. Third-Party Service Providers

Third parties granted access to Company systems are required to comply with:

• This Policy;
• Contractual security obligations; and
• Applicable confidentiality requirements.

Where appropriate, their access shall be limited in scope and duration.

17. Policy Violations

Violation of this Policy may result in:

• A warning;
• Restriction or revocation of access privileges;
• Disciplinary action;
• Termination of employment or contractual relationship;
• Legal proceedings; and
• Notification to the appropriate authorities where required or deemed necessary.

18. Training

Users covered by this Policy shall receive regular training on the following topics:

·         Information security;

·         Data protection;

·         Phishing awareness;

·         Social engineering;

·         Secure remote working; and

·         Secure use of artificial intelligence tools.

19. Policy Review

This Policy shall be reviewed and, where appropriate, updated at least annually or whenever any of the following occurs:

·         Changes in applicable legislation;

·         Security incidents;

·         Technological changes;

·         Audit findings; or

·         Organizational changes.

20. Effective Date

This Policy shall become effective on the date it is approved by the Board of Directors.

All individuals covered by this Policy acknowledge and agree to comply with the requirements set forth herein whenever they access or use Sinbadexpress information systems in connection with their duties.

SINBADEXPRESS SELLER VERIFICATION & KNOW YOUR CUSTOMER (KYC) POLICY

Document Type: Internal Policy
Document Owner: Sinbadexpress Inc.
Approved By: Board of Directors
Effective Date: 07/05/2026
Last Updated: 07/05/2026
Confidentiality Classification: Internal Use Only

1. Purpose

The purpose of this Policy is to establish the principles and procedures for:

·         Verifying the identity of sellers operating on the Platform;

·         Preventing fraud and identity theft;

·         Enhancing the security of the Platform;

·         Ensuring compliance with applicable laws and contractual obligations; and

·         Maintaining a trustworthy marketplace environment.

2. Scope

This Policy applies to:

·         Individual sellers;

·         Sole proprietorships;

·         Companies;

·         Distributors;

·         Manufacturers;

·         Importers;

·         Brand owners; and

·         International sellers.

This Policy applies throughout the seller application, account registration, ongoing monitoring, and re-verification processes.

3. Fundamental Principles

Sinbadexpress is committed to the following principles:

·         Risk-based approach;

·         Identity verification;

·         Transparency;

·         Data minimization;

·         Confidentiality;

·         Proportionality;

·         Ongoing monitoring; and

·         Accountability.

4. Risk Classification

Sellers may be classified according to their level of risk.

Low Risk

Examples include:

·         New sellers with low sales volume; and

·         Sellers offering products within low-risk product categories.

Medium Risk

Examples include:

·         Businesses conducting regular sales; and

·         Sellers with moderate transaction volumes.

High Risk

Examples include:

·         High transaction volumes;

·         International sales activities;

·         Product categories associated with an elevated risk of fraud;

·         Previous suspicion of fraudulent activity; and

·         Unusual transaction patterns.

Risk classifications shall be reviewed periodically.     

5. Application Process

During the seller application process, the following information may be requested:

·         Full name or business name;

·         Date of birth (for individual sellers);

·         Company formation details;

·         Tax Identification Number (TIN);

·         Business address;

·         Contact information;

·         Bank account details;

·         Authorized representative information;

·         Business activities; and

·         Trademark or brand information (if applicable).

Sinbadexpress reserves the right to request additional information or documentation where deemed necessary.

6. Identity Verification

Depending on the applicable risk level, one or more of the following verification methods may be used:

·         Verification of government-issued identification;

·         Verification of company registration records;

·         Verification of tax registration records;

·         Telephone verification;

·         Email verification;

·         Address verification;

·         Bank account verification;

·         Video verification; and

·         Liveness detection.

7. Legal Entity Verification

The following documents may be requested from corporate entities:

·         Certificate of incorporation or formation;

·         Current company registration records;

·         Tax registration documents;

·         Certificate of good standing or business activity certificate (where applicable);

·         Information regarding authorized representatives; and

·         Documents evidencing signing authority.

All submitted documents are expected to be current, valid, and capable of independent verification.

8. Beneficial Ownership

Where required by applicable law or by business partners, Sinbadexpress may request information regarding the natural person(s) who ultimately own or control a company.

Such information shall be used solely for verification and compliance purposes.

9. Ongoing Monitoring

Sellers may be monitored not only at the time of registration but throughout the duration of their activities on the Platform.

The monitoring process may include, for example, the evaluation of:

• Unusual order volumes;
• High return rates;
• Excessive chargeback rates;
• Complaints relating to counterfeit products;
• Changes to identity or registration information; and
• Suspicious payment behavior.

10. Re-Verification

A seller may be required to undergo re-verification in the following circumstances:

• Significant changes to account information;
• Assignment of a high-risk rating;
• Extended periods of account inactivity;
• Detection of suspicious activity; or
• Legal or contractual requirements.

Until the re-verification process has been completed, the seller account may be subject to appropriate restrictions.

11. Prohibited Sellers

Sinbadexpress may reject a seller application or suspend or terminate a seller account in any of the following circumstances:

• Use of fraudulent or false identity documents;
• Submission of false or misleading information;
• Sale of counterfeit products;
• Intellectual property infringement;
• Fraudulent activities;
• Serious violations of Platform rules;
• Violations of applicable sanctions or embargo regulations; or
• Activities that violate applicable law.

The following countries and territories are prohibited from registering on the Platform, whether as individual or business sellers:

• Iran;
• North Korea;
• Cuba;
• Russia;
• Belarus;
• Venezuela;
• Myanmar (Burma);
• Sudan;
• Libya;
• Somalia;
• Yemen;
• Zimbabwe;
• Crimea;
• The Russian-controlled portions of the Donetsk region; and
• The Russian-controlled portions of the Luhansk region.

12. Third-Party Verification Services

Sinbadexpress may engage third-party service providers for identity verification and fraud prevention purposes.

Information shared with such providers shall be protected in accordance with applicable law and applicable contractual confidentiality obligations.

13. Retention of Records

Information collected during the verification process shall be retained in accordance with applicable law and the Sinbadexpress Data Retention and Secure Disposal Policy.

Upon expiration of the applicable retention period, such information shall be securely deleted, anonymized, or destroyed.

14. Privacy

Information collected during the seller verification process shall be processed solely for the following purposes:

• Identity verification;
• Fraud prevention;
• Security;
• Compliance with legal obligations; and
• Fulfillment of contractual requirements.

15. Appeals and Review

Sellers whose applications have been rejected or whose accounts have been restricted may request a review of the decision.

Additional information or supporting documentation may be requested during the review process.

Where practicable, the review shall be conducted by authorized personnel who were not involved in the original decision.

16. Training

Personnel responsible for implementing this Policy shall receive regular training on:

• Identity verification procedures;
• Fraud indicators;
• Document verification techniques;
• Data protection;
• Privacy; and
• Social engineering awareness.

17. Policy Review

This Policy shall be reviewed at least annually or whenever any of the following occurs:

• Changes in applicable legislation;
• Emergence of new fraud methods;
• New requirements imposed by business partners;
• Audit findings; or
• Significant changes to Platform operations.

18. Effective Date

This Policy shall become effective on the date it is approved by the Board of Directors.

All employees involved in Sinbadexpress's seller onboarding, compliance, and operational processes are required to comply with this Policy.

SINBADEXPRESS ANTI-MONEY LAUNDERING (AML) & SANCTIONS COMPLIANCE POLICY

Document Type: Internal Policy
Document Owner: Sinbadexpress Inc.
Approved By: Board of Directors
Effective Date: 07/05/2026
Last Updated: 07/05/2026
Confidentiality Classification: Internal Use Only

1. Purpose

The purpose of this Policy is to:

• Prevent the Platform from being used for money laundering, terrorist financing, or other illicit financial activities;
• Support compliance with applicable sanctions programs;
• Establish risk-based controls; and
• Protect the Company's reputation and the security of its users.

2. Scope

This Policy applies to:

• Board of Directors;
• Compliance Team;
• Legal Department;
• Finance and Accounting Department;
• Information Security Team;
• Seller Operations Team;
• Customer Service Department; and
• Seller verification processes for sellers operating on the Platform.

3. Fundamental Principles

Sinbadexpress is committed to the following principles:

• Risk-based approach;
• Compliance with applicable law;
• Transparency;
• Data minimization;
• Accountability;
• Ongoing monitoring;
• Training and awareness; and
• Internal controls.

4. Risk Assessment

AML and sanctions risks shall be assessed on a regular basis.

The assessment may take into consideration, among other factors:

• The country or region in which the seller operates;
• Product categories offered by the seller;
• Transaction volume;
• Payment methods;
• Chargeback rates;
• History of fraudulent activities;
• Complaint records; and
• The seller's business model.

Risk assessments shall be reviewed periodically and whenever significant changes occur.

5. Know Your Customer (KYC)

Sellers accepted onto the Platform shall undergo appropriate verification procedures based on their respective risk levels.

Verification procedures may include, for example:

• Identity verification;
• Verification of company registration records;
• Verification of tax information;
• Verification of authorized representative information; and
• Bank account verification.

Enhanced due diligence may be performed for sellers classified as high risk.

6. Ongoing Monitoring

Seller activities and transactions may be monitored using a risk-based approach.

The following indicators may be evaluated, among others:

• Unusual order volumes;
• Sudden increases in sales within a short period of time;
• Repeated high-value transactions;
• Excessive return and chargeback rates;
• Linked or associated accounts; and
• Suspicious account activity.

7. Sanctions Compliance Process

To support compliance with applicable sanctions laws and regulations, Sinbadexpress implements reasonable risk-based controls.

Depending on the level of risk, the following factors may be evaluated:

• Seller information;
• Authorized representatives;
• Ultimate beneficial owners (where applicable);
• Countries in which the seller operates; and
• Delivery destinations.

Where suspicious circumstances are identified, account activation may be postponed, additional information may be requested, or the seller account may be restricted.

8. Prohibited Activities

The Platform shall not be used for any of the following activities:

• Money laundering;
• Terrorist financing;
• Fraud;
• Identity fraud or impersonation;
• Use of forged or fraudulent documents;
• Transactions intended to circumvent applicable sanctions;
• Trading in stolen goods; or
• Any other unlawful financial activities.

9. High-Risk Situations

The following circumstances may require enhanced review:

• Exceptionally high transaction volumes;
• Unusual payment behavior;
• Frequent changes to account information;
• Connections between multiple accounts;
• Inconsistencies identified during identity verification; and
• Unexplained business activities.

During the enhanced review process, the account may be temporarily restricted.

10. Reporting Suspicious Activities

Employees shall promptly report the following matters to the Compliance Team:

• Suspected use of false identity documents;
• Document forgery or falsification;
• Suspicious payment behavior;
• Sanctions-related risks;
• Unusual transaction patterns; and
• Any other suspicious activities.Employees who report concerns in good faith shall not be subjected to retaliation or adverse treatment as a result of such reports.

11. Record Retention

Information and documentation collected for AML and sanctions compliance purposes shall be retained in accordance with the Sinbadexpress Data Retention and Secure Disposal Policy and applicable law.

Upon expiration of the applicable retention period, such records shall be securely deleted, anonymized, or destroyed.

12. Third-Party Service Providers

Sinbadexpress may engage third-party service providers to perform identity verification, risk assessments, or sanctions screening.

Such service providers shall be subject to:

• Appropriate confidentiality obligations;
• Information security standards; and
• Contractual safeguards.

13. Training

Personnel responsible for implementing this Policy shall receive regular training on:

• AML awareness;
• Fraud indicators;
• Identity verification procedures;
• Sanctions risks;
• Data protection; and
• Reporting suspicious activities.

14. Internal Audit and Review

Compliance processes may be reviewed on a regular basis.

Internal audits may include, among other things, reviews of:

• Compliance with this Policy;
• Effectiveness of control mechanisms;
• Training records;
• Incident records; and
• Risk assessments.

Corrective action plans shall be developed to address any identified deficiencies.

15. Policy Violations

Violation of this Policy may result in:

• Disciplinary action;
• Restriction or revocation of access privileges;
• Contractual sanctions;
• Legal proceedings; and
• Notification to the appropriate authorities where required or deemed necessary.

16. Policy Review

This Policy shall be reviewed at least annually or whenever any of the following occurs:

• Changes in applicable legislation;
• Emergence of new risks;
• Audit findings;
• Significant security incidents; or
• Changes to the Company's business model.

17. Effective Date

This Policy shall become effective on the date it is approved by the Board of Directors.

All personnel working within Sinbadexpress's Compliance Finance, Legal, Seller Operations, and other relevant departments are required to comply with the provisions of this Policy.

SINBADEXPRESS COUNTERFEIT & INTELLECTUAL PROPERTY INFRINGEMENT POLICY

Document Type: Platform Policy
Document Owner: Sinbadexpress Inc.
Effective Date: 07/05/2026
Last Updated: 07/05/2026

1. Purpose

Sinbadexpress is committed to respecting intellectual property rights and ensuring the authenticity and reliability of products offered through the Platform.

The purposes of this Policy are to:

• Prevent the sale of counterfeit products;
• Protect trademarks, copyrights, patents, industrial designs, and other intellectual property rights;
• Provide rights holders with an effective complaint mechanism;
• Define the responsibilities of sellers; and
• Prevent repeated intellectual property infringements.

2. Scope

This Policy applies to:

• All sellers operating on the Platform;
• Trademark owners;
• Copyright owners;
• Patent and industrial design rights holders;
• Authorized representatives and licensees; and
• Platform users.

3. Protected Rights

Sinbadexpress may review complaints relating to the following intellectual property rights:

• Trademarks;
• Copyrights;
• Patents;
• Industrial designs;
• Trade names;
• Trade dress;
• Domain name-related rights; and
• Any other intellectual property rights recognized under applicable law.

4. Prohibited Products and Activities

The following products and activities are prohibited on the Platform:

• Counterfeit products;
• Falsely branded products;
• Unauthorized use of logos;
• Pirated software;
• Unauthorized digital content;
• Counterfeit packaging;
• Product descriptions that are misleading or likely to deceive rights holders or consumers;
• Fraudulent warranty certificates;
• Counterfeit serial numbers; and
• Any other products or content that infringe intellectual property rights.

5. Seller Responsibilities

Sellers represent and warrant that:

• They have the legal right to sell the products they offer;
• Their product descriptions are accurate and truthful;
• Their products and listings do not infringe any intellectual property rights; and
• They are able to provide documentation demonstrating the lawful source of their products upon request.

Upon request by Sinbadexpress, sellers shall provide invoices, distributor certificates, license agreements, or other supporting documentation necessary to verify the authenticity and lawful source of their products.

6. Complaints by Rights Holders

Rights holders or their authorized representatives may submit a complaint containing the following information:

• The name and contact information of the rights holder;
• Proof of authority to act on behalf of the rights holder, where applicable;
• Identification of the intellectual property right allegedly infringed;
• A link to the allegedly infringing product or content;
• A description of the alleged infringement; and
• A statement confirming the accuracy of the complaint.