DATA PROTECTION POLICY

iEvolution Pro LLC

Effective Date: August 2020

1. Purpose

iEvolution Pro LLC is committed to protecting the personal data of our customers, Independent Brand Promoters (IBPs), employees, and partners. This policy establishes how we collect, process, store, and protect personal information in compliance with applicable data protection laws and industry standards.

2. Scope

This policy applies to all personal data collected, processed, and stored by iEvolution Pro LLC, including but not limited to customer information, payment details, IBP data, and business-related records. It covers all employees, IBPs, contractors, and third-party service providers working with iEvolution Pro LLC.

3. Data Collection & Processing

We collect and process personal data only for legitimate business purposes, including:

• Account registration and verification
• Order processing and fulfillment
• Payment processing (with Nuvei, our merchant provider)
• Marketing and promotional activities (with user consent)
• Customer support and communication
• Compliance with legal and regulatory obligations

The types of personal data we may collect include:

• Full name, email, phone number, and address
• Payment details (processed securely through Nuvei)
• Transaction history
• Business activities (for IBPs)

4. Lawful Basis for Data Processing

We ensure that all personal data is processed lawfully, fairly, and transparently based on the following grounds:

• Consent: When users explicitly agree to receive marketing communications.
• Contractual necessity: When processing is required to fulfill an order or provide services.
• Legal obligations: When compliance with tax, financial, or regulatory requirements is needed.
• Legitimate interests: When data processing is necessary for fraud prevention, business operations, or platform improvements.

5. Data Storage & Security

iEvolution Pro LLC employs strict security measures to safeguard personal data, including:

• Encryption of sensitive data, including payment details.
• Access controls ensuring only authorized personnel can access specific information.
• Regular security audits to identify and mitigate potential risks.
• Compliance with Nuvei’s security protocols for payment transactions.
• Data minimization practices, ensuring we only retain necessary information.

6. Data Sharing & Third-Party Providers

We do not sell or share personal data with third parties for marketing purposes. However, we may share data with trusted partners for essential business operations, including:

• Nuvei: Our payment processing partner, ensuring secure financial transactions.
• CRM & Support Platforms: For customer service and communication.
• Legal & Compliance Authorities: When required by law.

All third parties handling personal data must comply with this policy and maintain strict confidentiality.

7. User Rights & Control Over Personal Data

Users have the right to:

• Access their personal data.
• Request correction or deletion of inaccurate data.
• Withdraw consent for marketing communications.
• Request data portability where applicable.
• Object to data processing under certain circumstances.

Requests can be submitted via support@ievolutionpro.com.

8. Data Retention Policy

Personal data is retained only as long as necessary for business operations, legal compliance, and fraud prevention. After the retention period, data is securely deleted or anonymized.

9. Data Breach Response

In the event of a data breach:

• The incident will be investigated immediately to assess the impact.
• Affected users will be notified as required by law.
• Mitigation measures will be taken to prevent future breaches.
• Authorities will be informed if required by data protection regulations.

10. Compliance & Policy Review

This policy will be reviewed periodically to ensure compliance with applicable data protection laws and evolving security standards. Employees, IBPs, and partners are required to adhere to this policy to maintain a secure environment for all users.