Privacy Policy

This Privacy Notice for DOCH FX INC (doing business as Luvngift) ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at www.luvngift.com, or any website of ours that links to this Privacy Notice
• Download and use our mobile application (Luvngift), or any other application of ours that links to this Privacy Notice
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@luvngift.com.

Summary of key points

This summary provides key points from our Privacy Notice. You can find more details about any of these topics in the relevant section below.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
• Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions. We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law.
• Do we collect any information from third parties? We do not collect any information from third parties.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
• When and with whom do we share personal information? We may share information in specific situations and with specific third parties.
• How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission or storage can be guaranteed to be 100% secure.
• What are your rights? Depending on where you are located geographically, applicable privacy law may mean you have certain rights regarding your personal information.
• How do you exercise your rights? The easiest way is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include the following:

• names
• phone numbers
• email addresses
• mailing addresses
• usernames
• passwords
• contact preferences
• contact or authentication data
• billing addresses

Payment Data. When you make a purchase, your payment is processed by our payment processor, Stripe. We do not collect or store your full payment card number or security code on our servers — these are handled and stored directly by Stripe. We may receive limited, non-sensitive details (such as the card brand and last four digits) for order management and support. You may find Stripe's privacy notice here: https://stripe.com/en-ca/privacy.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details. If you choose to register in this way, we will collect certain profile information about you from the social media provider, as described in the section "How do we handle your social logins?" below.

Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:

• Geolocation Information. We may request access or permission to track location-based information from your mobile device to provide certain location-based services. You can change our access or permissions in your device's settings.
• Mobile Device Data. We may automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system and version information, device and application identification numbers, browser type and version, hardware model, Internet service provider and/or mobile carrier, and IP address.
• Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). You can opt out in your device's settings.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. How do we process your information?

In short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes only with your prior explicit consent.

• To facilitate account creation and authentication and otherwise manage user accounts.
• To deliver and facilitate delivery of services to the user.
• To respond to user inquiries and offer support to users.
• To send administrative information to you, such as changes to our terms and policies.
• To fulfill and manage your orders, payments, returns, and exchanges made through the Services.
• To enable user-to-user communications.
• To save or protect an individual's vital interest, such as to prevent harm.

3. What legal bases do we rely on to process your information?

In short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law.

If you are located in the EU or UK, we may rely on the following legal bases to process your personal information:

• Consent. You can withdraw your consent at any time.
• Performance of a Contract. To fulfill our contractual obligations to you, including providing our Services.
• Legal Obligations. Where necessary for compliance with our legal obligations.
• Vital Interests. Where necessary to protect your vital interests or those of a third party.

If you are located in Canada, we may process your information if you have given us express consent, or where your permission can be inferred (implied consent). You can withdraw your consent at any time. In some exceptional cases we may be legally permitted to process your information without your consent, for example for fraud detection and prevention, or to comply with a subpoena, warrant, or court order.

4. When and with whom do we share your personal information?

In short: We may share information in specific situations described in this section and/or with the following third parties.

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Other Users. When you share personal information or otherwise interact with public areas of the Services, such information may be viewed by other users and may be publicly available. Other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile.

5. Do we use cookies and other tracking technologies?

In short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We may also use analytics cookies to understand how the Services are used so we can improve them. We do not use cookies to sell or share your personal information, and we do not use them for cross-context targeted advertising. Specific information about how we use these technologies and how you can refuse certain cookies is set out in our Cookie Policy.

6. How do we handle your social logins?

In short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details. Where you choose to do this, we will receive certain profile information about you from your social media provider, which will often include your name, email address, and profile picture. We will use the information we receive only for the purposes described in this Privacy Notice or that are otherwise made clear to you on the relevant Services.

7. How long do we keep your information?

In short: We keep your information for as long as necessary to provide the Services and meet our legal obligations. When you delete your account it is deactivated, and you can request full deletion by contacting support.

When you delete or deactivate your account, we deactivate it so it is no longer accessible to you, and we retain your personal information for as long as necessary for the purposes set out in this Privacy Notice — including to provide and operate the Services, comply with our legal, tax, and accounting obligations, prevent and investigate fraud, resolve disputes, and enforce our agreements.

If you would like your personal information to be permanently deleted, you can request this at any time by contacting our support team at info@luvngift.com. On receiving a verified request, we will delete or anonymize your personal information, except where we are required or permitted by law to retain it (for example, transaction and tax records).

8. How do we keep your information safe?

In short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

9. Do we collect information from minors?

In short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age (or the equivalent age as specified by law in your jurisdiction), nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to their use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at info@luvngift.com.

10. What are your privacy rights?

In short: Depending on your state or region of residence (such as the EEA, UK, Switzerland, and Canada), you have rights that allow you greater access to and control over your personal information.

These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, (iv) if applicable, to data portability, and (v) not to be subject to automated decision-making. You can make such a request by contacting us using the contact details provided below.

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection authority.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us. This will not affect the lawfulness of processing before its withdrawal.

Opting out of marketing communications: You can unsubscribe at any time by clicking the unsubscribe link in our emails, replying "STOP" to our SMS messages, or contacting us.

11. Controls for do-not-track features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.

12. Do United States residents have specific privacy rights?

In short: If you are a resident of certain US states, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information belonging to website visitors, users, and other consumers in the future.

Your rights under US state data protection laws may include:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling

To exercise these rights, you can contact us by emailing info@luvngift.com or by visiting www.luvngift.com/contact. We will verify your identity before processing your request.

13. Do we make updates to this notice?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated "Last updated" date and will be effective as soon as it is accessible. We encourage you to review this Privacy Notice frequently.

14. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at info@luvngift.com or contact us by post at:

DOCH FX INC
3354 Woodroffe Avenue
Nepean, Ontario K2J 0A8
Canada

15. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. To request to review, update, or delete your personal information, please contact us at info@luvngift.com.