Data Privacy Statement

1.Information We Collect

When you use our services, we may collect personal information that includes:

• Basic identification details
• Contact information
• Store or business-related information
• Transaction and service usage details
• Documents or proof submitted for verification
• Communications with our support teams
• Device and usage information
• Government IDs (optional, when required for verification)

We only collect information that is necessary to deliver our services and to support lawful operational requirements.

2.How We Use Personal Data

Personal information may be used for purposes such as:

• Account creation and user verification
• Processing orders, requests, or transactions
• Providing customer support
• Delivering services and fulfilling operational requirements
• Assessing and improving service performance
• Managing partnerships and business relationships
• Complying with legal and regulatory obligations
• Participation in promotional activities, marketing campaigns, and incentive programs, where applicable

We process data in a manner that is fair, lawful, and aligned with the expectations of our users.

3.Sharing of Personal Data

We may share personal information with:

• Authorized service providers and partners
• Logistics and fulfillment collaborators
• Internal teams who support operations
• Government agencies when required by law

Any sharing is based on necessity, follows applicable legal bases, and is performed with safeguards to ensure the protection of personal data.

We do not sell personal information.

4.Use of Artificial Intelligence Tools

Where the processing of personal data necessitates the use of artificial intelligence tools, Nueca Technologies Inc. ensures that only enterprise-grade accounts are utilized. The Company currently maintains enterprise accounts with Anthropic (Claude) and OpenAI (ChatGPT), both of which provide contractual guarantees that submitted data is not used for AI model training, and are governed by Data Processing Addendums (DPAs) that bind these providers as secure data processors under strict confidentiality obligations.

Before any new AI provider is adopted for workflows involving personal data, the Company conducts a thorough assessment led by management and senior personnel to evaluate the provider’s data handling practices, contractual safeguards, and compliance posture, ensuring that enterprise-grade protections are in place prior to organization-wide implementation.

The Company has likewise established internal policies governing employee use of AI tools, including an AI Usage Policy, Rules and Guidelines on AI Tool Usage, and Data Classification and Upload Guidelines. In handling personal data within AI-assisted workflows, employees are expected to observe proper data handling practices and to exercise ethical responsibility in accordance with all applicable internal policies.

5.Protection and Security Measures

We implement reasonable organizational, physical, and technical measures to protect personal data against loss, unauthorized access, misuse, modification, or other risks.

These safeguards are regularly reviewed and improved to meet evolving standards and best practices.

Use of CCTV

Nueca Technologies Inc. operates Closed-Circuit Television (CCTV) systems within its premises for legitimate business purposes, including but not limited to:

• ensuring the safety and security of employees, visitors, and property;
• preventing, detecting, and investigating security incidents or unlawful activities; and
• supporting compliance with internal policies and applicable laws.

CCTV cameras are installed only in appropriate locations and are not used in areas where individuals have a reasonable expectation of privacy (such as restrooms or private changing areas). Nueca Technologies Inc. does not conduct audio recording through its CCTV systems unless explicitly required by law and disclosed.

Nature of Personal Data Collected

CCTV systems may capture visual images and recordings of individuals present within the monitored areas.

Legal Basis for Processing CCTV Footage

Personal data collected through CCTV is processed on the basis of the Company’s legitimate interests in maintaining security and safety, and where applicable, in compliance with legal or regulatory obligations.

6.Data Retention

We retain personal data only for as long as necessary to:

• Fulfill the purposes outlined above
• Comply with legal, regulatory, and operational requirements

After the applicable retention period, personal data will be securely deleted or anonymized in accordance with our internal Data Retention and Disposal Policy.

7.Your Rights

Under R.A. 10173 (Data Privacy Act of 2012), you have the right to:

• Be informed
• Access your personal data
• Request correction of inaccuracies
• Withdraw consent
• Request erasure or blocking of your personal data
• Object to processing (subject to limitations)
• Data portability
• Submit a complaint with the National Privacy Commission
• Claim damages for unauthorized or improper processing

Requests may be submitted through our Data Protection Officer.

8.Contact Our Data Protection Officer

For questions, concerns, or requests regarding your personal data, you may contact:

9.Updates to This Statement

We may revise this Privacy Statement from time to time. Any updates will be posted on our website with the corresponding date of revision.