Privacy Policy

Crown Worldwide Group Co. for Wholesale and Retail Trade ("CROWN VALUEMART", the "Company", "we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit the CROWN VALUEMART website, use our mobile applications, or otherwise interact with our services (collectively, the "Platform").

This Policy is issued in compliance with the laws of the State of Kuwait, including:

• Amiri Decree-Law No. 10 of 2026 Regulating the Digital Commerce Sector — in particular the data-protection provisions of Articles 29 through 32;
• Law No. 20 of 2014 on Electronic Transactions — which contains general data-handling and electronic-record-keeping obligations applicable to e-commerce operators;
• Law No. 39 of 2014 on Consumer Protection — to the extent it concerns confidentiality of consumer information;
• Law No. 63 of 2015 on Cybercrime — which criminalises unauthorised access to or disclosure of personal data.

Note on the Data Privacy Protection Regulation (DPPR). Following the amendments introduced by CITRA Decision No. 26 of 2024, the Data Privacy Protection Regulation now applies primarily to CITRA-licensed telecommunications and internet service providers. CROWN VALUEMART is a retail e-commerce operator and is not a CITRA Licensee for the purposes of the DPPR. However, we voluntarily apply the data-protection principles underlying the DPPR — lawfulness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability — as a matter of good practice, alongside our statutory obligations under the Digital Commerce Law and the Electronic Transactions Law.

By using CROWN VALUEMART, you confirm that you have read and understood this Privacy Policy. Your continued use of our services constitutes consent to the data practices described here, except where express, separate consent is required.

The data controller responsible for your personal data is:

• Brand name: CROWN VALUEMART
• Legal entity: Crown Worldwide Group Co. for Wholesale and Retail Trade
• Commercial Registration No.: 329981
• Registered address: Al Hamra Mall, 3rd Floor, Office 311, Kuwait City, State of Kuwait
• Data protection contact email: privacy@cwg-kwt.com
• Customer service email: info@cwg-kwt.com
• Customer service phone: +965 5105 2112

For the purposes of this Policy, "personal data" means any information relating to an identified or identifiable natural person. CROWN VALUEMART collects the following categories of personal data:

We process your personal data for the following purposes and on the following legal bases:

CROWN VALUEMART does not sell or rent your personal data. We share it only with the following categories of recipients, and only to the extent necessary:

• Payment service providers licensed by the Central Bank of Kuwait, to process transactions securely;
• Logistics and delivery partners, to deliver your order;
• Technology and cloud-service providers, who host or maintain our systems under written confidentiality and security obligations;
• Marketing and analytics partners, where you have given consent or where the data is aggregated and non-identifying;
• Professional advisers, including auditors, lawyers, and consultants, bound by professional secrecy;
• Regulatory and judicial authorities, where required by law or to protect our rights, property, or safety, or those of our customers or the public.

All third parties acting on our behalf are required to handle your personal data only for the specified purpose, with appropriate technical and organisational measures, and in line with applicable Kuwaiti law.

Our primary servers and operations are based in or near Kuwait. In limited cases, your personal data may be transferred outside Kuwait to service providers who help us operate CROWN VALUEMART — for example, regional cloud-hosting providers, email-delivery providers, or analytics services.

Where personal data is transferred outside Kuwait, we will:

• Transfer only with your consent or on another lawful basis recognised by Kuwaiti law;
• Ensure that the receiving country or recipient provides an adequate level of protection, or that appropriate contractual safeguards (such as data-processing agreements, encryption, and access controls) are in place;
• Comply with any specific transfer restrictions or guidelines issued by MOCI under the Digital Commerce Law.

CROWN VALUEMART retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Transaction records (invoices, orders, delivery confirmations, communications, returns, refunds, and complaints): at least five (5) years from the date of each transaction, in line with Article 33 of the Digital Commerce Law, and longer where Kuwaiti tax or commercial law requires (typically up to ten (10) years for accounting records);
• Account data: for the duration of your account, then aligned to the transaction-records retention period above;
• Customer service records: for at least five (5) years from the closure of the relevant case;
• Marketing data: until you withdraw consent or for up to two (2) years from your last interaction, whichever comes first;
• Cookies and technical logs: for the periods set out in our Cookie Notice.

Once data is no longer required, we will securely delete or irreversibly anonymise it.

Subject to the conditions set by Kuwaiti law, you have the following rights in respect of your personal data:

• Right of access: to be informed about whether we hold your personal data and to receive a copy;
• Right to correction: to ask us to correct inaccurate or incomplete data;
• Right to deletion: to ask us to delete your data where it is no longer needed or where consent has been withdrawn, subject to legal-retention obligations;
• Right to restrict processing: to ask us to limit how we use your data in specified circumstances;
• Right to object: to object to certain types of processing, including direct marketing;
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time;
• Right to data portability: to receive certain data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: with the Ministry of Commerce and Industry consumer protection hotline (135) or, in respect of data-protection matters specifically, with any other competent Kuwaiti authority.

To exercise any of these rights, contact us at privacy@cwg-kwt.com. We will respond within a reasonable timeframe and in any event within thirty (30) calendar days, unless the request is unusually complex or numerous. We may need to verify your identity before acting on your request.

CROWN VALUEMART uses cookies and similar technologies to provide essential functions, remember your preferences, analyse usage, and (where you consent) deliver personalised marketing.

We use the following categories of cookies:

• Strictly necessary cookies: required for the Platform to operate, such as login, basket, and checkout;
• Functional cookies: remember your preferences such as language and region;
• Analytics cookies: help us understand how the Platform is used, in aggregated form;
• Marketing cookies: used only with your consent, to show you relevant offers.

On your first visit, we present a cookie banner that allows you to accept, reject, or customise non-essential cookies. You can change your preferences at any time through the cookie settings link in the Platform footer or through your browser settings.

CROWN VALUEMART applies appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS) and at rest where appropriate;
• Strict access controls and the principle of least privilege within our team;
• Regular security testing, monitoring, and patching;
• Confidentiality obligations on all employees and contractors with access to personal data;
• Secure-by-design integration with payment service providers licensed by the Central Bank of Kuwait.

No system can be made completely secure. While we work hard to protect your data, we cannot guarantee absolute security. If you suspect that your account has been compromised, contact us immediately.

In the event of a personal-data breach that is likely to result in risk to your rights and freedoms, CROWN VALUEMART commits to:

• Notifying the competent Kuwaiti authority (the Ministry of Commerce and Industry, and any other authority designated under applicable law or implementing regulations of the Digital Commerce Law) without undue delay, and in any event within seventy-two (72) hours of becoming aware of the breach where feasible;
• Notifying affected users without undue delay where the breach poses a high risk to them;
• Taking immediate steps to contain the incident, mitigate harm, and prevent recurrence.

CROWN VALUEMART is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18 without parental or guardian consent, in line with Kuwaiti law. If you believe a minor has provided us with personal data, please contact us immediately so we can take appropriate action.

CROWN VALUEMART will only send you marketing communications where you have given us your consent or where permitted by Kuwaiti law. You can opt out at any time by:

• Clicking the "unsubscribe" link in any of our marketing emails;
• Replying STOP to any of our SMS messages, where supported;
• Updating your communication preferences in your account;
• Contacting our customer service team.

Withdrawing marketing consent will not affect transactional or service communications related to your orders.

CROWN VALUEMART maintains a presence on social media platforms such as Instagram, X (formerly Twitter), and TikTok to engage with our customers. When you interact with us on those platforms, the privacy practices of the platform itself also apply, and we encourage you to review their privacy policies. We are not responsible for the privacy practices of these third-party platforms.

CROWN VALUEMART monitors transactions and account activity to detect and prevent fraud, money laundering, and abuse of our services. Where suspicious activity is detected, we may:

• Temporarily suspend the relevant account;
• Delay or hold the relevant order;
• Request additional verification, such as identity confirmation;
• Report the matter to the appropriate Kuwaiti authorities, in line with the Cybercrime Law and anti-money-laundering rules.

CROWN VALUEMART may contain links to third-party websites and services that we do not control. This Policy does not apply to those websites. We are not responsible for their privacy practices, and we encourage you to read their privacy policies before sharing personal data with them.

CROWN VALUEMART may update this Privacy Policy from time to time to reflect changes in our practices, in technology, or in Kuwaiti law. The updated version will be posted on the Platform with a revised "Last updated" date. Material changes will be notified to you through reasonable means.

Your continued use of the Platform after such updates constitutes acceptance of the updated Privacy Policy, except where your separate consent is required by law.

This Privacy Policy is issued in Arabic and in English. The Arabic version is the official version for the purposes of Kuwaiti law and for any proceedings before Kuwaiti courts, regulatory authorities, or dispute-settlement committees. The English version is provided as a courtesy translation. In the event of any inconsistency or conflict between the Arabic and English versions, the Arabic version shall prevail.

This Privacy Policy is governed by the laws of the State of Kuwait. Any dispute arising from or in connection with this Policy shall fall under the exclusive jurisdiction of the competent courts of the State of Kuwait, without prejudice to your right to lodge a complaint with any competent Kuwaiti authority.

If you have any questions, concerns, or requests in relation to this Privacy Policy or your personal data, please contact CROWN VALUEMART at:

• Data protection contact email: privacy@cwg-kwt.com
• Customer service email: info@cwg-kwt.com
• Customer service phone: +965 5105 2112
• Postal address: Al Hamra Mall, 3rd Floor, Office 311, P.O. Box 1394, Kuwait City, State of Kuwait