Data controller / Seller: DEEPLUM TECHNOLOGY Limited

Controller address: OFFICE 5, 8/F, MEGA CUBE, 8 WANG KWONG ROAD, Kowloon Bay, Kowloon, Hong Kong SAR

Privacy contact: privacy@deeplum.ai  |  General support: support@deeplum.ai

Website: https://deeplum.ai

1. What these technologies are

We and our service providers may use cookies, software development kits (SDKs), pixels, tags, local storage, application identifiers, and similar technologies (collectively, "Cookies") when you use our website, online store, mobile application, or related Services.

Cookies are small files or technologies that may be stored on, read from, or associated with your browser, device, or application. They help us operate the Services, remember choices, protect against fraud, understand how the Services are used, and, where permitted, measure or personalize marketing.

2. Categories of Cookies and similar technologies

3. Our Cookie Settings

When required by applicable law, we ask for your consent before any non-essential Cookies are placed or read on your browser or device. We do not load analytics, advertising, or marketing Cookies until you have made a choice through our consent banner. Strictly necessary Cookies (see Section 2) are placed without prior consent, as permitted by law.

You can accept, reject, or change your preferences at any time:

1. Through our Cookie Settings panel in the website footer;
2. In the DEEPLUM App → Settings → Privacy → Cookie preferences; or
3. By contacting us at support@deeplum.ai.

Withdrawing your consent is as easy as giving it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. We refresh your consent at least every 12 months, in line with common regulatory guidance.

Rejecting non-essential Cookies will not prevent you from browsing the website or placing an order. However, some optional features, preferences, analytics, personalization, and advertising measurement may not operate as intended.

Your Cookie preferences apply to the browser and device from which you make your selection. If you use another browser or device, clear browser data, use private browsing, or reset your device, you may need to select your preferences again.

4. Analytics

We may use analytics providers, including Shopify Analytics / Google Analytics, to understand how visitors use the Services and to improve site performance, product information, checkout, support, and device/app reliability.

Analytics information may include pages viewed, referring source, device and browser information, approximate location derived from IP address, interactions, timestamps, error events, and conversion events. We configure analytics providers to collect only the information reasonably necessary for the relevant purpose and use available privacy controls, such as IP-address reduction, restricted data use, or pseudonymization, where appropriate.

We do not use analytics data to make decisions that produce legal or similarly significant effects concerning you.

5. Advertising and targeted advertising

Where permitted by law and subject to your choices, we and our advertising or marketing partners may use Cookies and related information to:

• measure the effectiveness of marketing campaigns;
• understand whether an advertisement resulted in a visit, cart activity, or purchase;
• limit how often you see an advertisement;
• create or measure advertising audiences; and
• show advertisements for DEEPLUM products on other websites, applications, or social-media platforms.

This activity may involve information about your interactions with our Services and, depending on the provider and your settings, information about your online activity across different websites, applications, or devices. We do not knowingly use AI-feature content, including real-time translation, transcription, meeting-summary, or voice content, for targeted advertising or marketing profiling.

We do not sell personal information for money.

You may opt out of such processing by selecting [Decline]. Your opt-out does not stop all advertising. You may still see non-personalized DEEPLUM advertising based on general factors, such as the content of the webpage or your approximate location.

Note: We will update this section with the current list of advertising/marketing partners and their privacy links once our integration inventory is finalized.

6. Global Privacy Control and universal opt-out signals

Where required by applicable law, we recognize applicable browser-based universal opt-out preference signals, including the Global Privacy Control (GPC) signal, as a request to opt out of the sale or sharing of personal information and/or targeted advertising for the browser and device from which the signal is received.

If we can reliably associate the browser or device receiving the signal with your account, we will apply the signal to the associated account where required by applicable law. You can learn more about GPC at https://globalprivacycontrol.org/.

Other browser "Do Not Track" signals may not operate according to a uniform industry standard. Except as required by law, we do not respond to such signals.

7. Mobile application technologies

Our mobile application may use application identifiers, SDKs, local storage, crash-reporting tools, and similar technologies to provide app functionality, maintain security, monitor performance, identify crashes or errors, remember settings, and support optional analytics.

Where required, the mobile application will request the appropriate consent or provide the applicable opt-out before enabling non-essential app analytics, advertising, or tracking technologies. You can also reset your mobile advertising identifier in your device settings (iOS: Settings → Privacy → Tracking; Android: Settings → Google → Ads).

Note: We will update this section with the current list of in-app SDKs (Shopify Mobile SDK, Firebase Crashlytics, Adjust, AppsFlyer, etc.) and their privacy links once our SDK inventory is finalized.

8. Third-party providers and international processing

Some Cookies and similar technologies are operated by Shopify or other third-party providers. These providers may process information in countries other than your country of residence, including in the United States, Ireland, Germany, Singapore, China, and other jurisdictions where they or their sub-processors operate.

When personal information is transferred from the EU/EEA, the UK, or Switzerland to a country not recognized by the European Commission (or the relevant UK authority) as providing an adequate level of protection, we use appropriate transfer mechanisms, including the European Commission Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum (UK Addendum) or UK International Data Transfer Agreement (IDTA), or another lawful mechanism. We implement supplementary measures (such as encryption in transit, pseudonymization, and access controls) where appropriate.

The processing by these providers is subject to their own privacy notices and, where they act on our behalf, to applicable contractual and data-protection safeguards. To request a copy of the relevant transfer safeguards, contact privacy@deeplum.ai.

9. How to manage Cookies outside our settings

In addition to using Cookie Settings, you can manage Cookies through your browser or device settings. Most browsers allow you to remove or block Cookies. Some mobile operating systems allow you to manage application permissions or reset advertising identifiers.

Blocking or deleting Cookies may affect the availability, security, or functionality of some parts of the Services, including checkout, saved preferences, account access, and consent-preference storage.

10. Marketing communications

Cookie choices are separate from marketing-communication preferences. To stop promotional emails, use the unsubscribe link in the email or contact us at support@deeplum.ai. We may still send non-promotional communications, such as order confirmations, delivery updates, product-safety notices, account notices, or responses to your requests.

11. Children

We do not knowingly use Cookies for targeted advertising based on personal information of individuals under 16 years of age (in line with GDPR Article 8 and applicable national laws).

12. Contact

For questions about our use of Cookies and similar technologies, contact:

We aim to respond to all inquiries within 3 business days.

© 2026 DEEPLUM TECHNOLOGY Limited. All rights reserved.