Privacy Policy Last Updated: June 7, 2025 Elitrasmart Limited ("Elitrasmart," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website at https://elitrasmartltd.com (the "Website"), create an account, place orders, access our Smart Podcast, or interact with our services. By using the Website, you consent to the practices described in this Privacy Policy. This policy complies with the Republic’s Data Protection Act, 2021, and other applicable laws. Please review our Terms of Service for additional information on using our Website and services.

1. Information We Collect We collect the following types of information: 1.1 Personal Information You Provide

Account Creation:

Full Name Email Address Phone Number Country City State/Province ZIP/Postal Code Address Employment Status Name of Employer (if applicable) Marital Status Next of Kin (Name, Phone Number, Address, Relationship) Proof of Identity (e.g., NRC, Passport, Driver’s License, uploaded securely) Business Information (if registering as a business): Business Name Duration in Business as a Retailer Business Website or Facebook Page (if applicable) Business Structure Brief Description of Your Business Business License or Registration Certificate (if applicable)

Contact Forms: Name, email address, phone number, subject, and message when submitting inquiries (e.g., for Lusaka, Choma, Chipata, Kitwe, or wholesale).

Orders: Name, email address, phone number, billing/shipping address, and payment details (processed via Stripe).

Newsletter Subscriptions: Email address for updates.

1.2 Automatically Collected Information

Usage Data: Pages visited, time spent, links clicked, collected via cookies and similar technologies. Device Information: IP address, browser type, operating system, device identifiers. Analytics: Third-party tools (e.g., Google Analytics) track Website performance and user behavior.

1.3 Third-Party Information

Social Media and Podcast Platforms: Data from YouTube, Spotify, Amazon Music, or social media (e.g., Facebook, WhatsApp) when accessing our podcast or profiles, subject to their privacy policies. Payment Processors: Stripe processes payment data, subject to their privacy policy.

2. How We Use Your Information We use your information to:

Provide services, including account management, order processing, inquiry responses, and podcast delivery. Personalize your experience (e.g., product recommendations, tailored podcast content). Communicate about orders, updates, promotions, or customer service. Verify identity and business details for account creation and order fulfillment. Analyze Website usage to improve performance. Comply with legal obligations (e.g., tax, consumer protection, data protection laws). Protect our rights, property, or safety, and that of users or third parties.

3. How We Share Your Information We may share your information with:

Service Providers: Payment processors (Stripe), hosting providers, analytics tools (Google Analytics). Third-Party Platforms: YouTube, Spotify, Amazon Music, or social media platforms, subject to their privacy policies. Legal Authorities: If required by Zambian law, court orders, or to protect our rights. Business Transfers: In mergers, acquisitions, or asset sales, your information may be transferred.

We do not sell your personal information for marketing purposes. 4. Cookies and Tracking Technologies

Cookies enhance your experience, track usage, and remember preferences. You can manage cookies via your browser, but disabling them may affect functionality. Third-party services (e.g., Google Analytics, YouTube embeds) may set cookies, subject to their policies.

5. Data Storage and Security

Your information is stored in our database (elitrasmartdb_local) and secure servers. We use encryption for payment transactions, secure uploads (e.g., NRC, Passport), and other protective measures. No system is completely secure; you are responsible for maintaining account credential confidentiality.

6. Your Rights Under Zambia’s Data Protection Act, 2021, you have the right to:

Access: Request a copy of your personal information. Rectification: Correct inaccurate or incomplete data. Erasure: Request data deletion, subject to legal obligations. Restriction: Limit processing in certain circumstances. Objection: Object to processing for marketing or other purposes. Data Portability: Receive your data in a structured format.

To exercise these rights, contact us at elitrasmartltd@gmail.com. We will respond within legal timeframes. 7. Third-Party Links The Website links to third-party services (e.g., YouTube, Spotify, Facebook, WhatsApp, Stripe). These services have their own privacy policies, and we are not responsible for their practices. 8. Children’s Privacy Our Website is not intended for children under 13. We do not knowingly collect their personal information. If such data is collected, we will delete it promptly. 9. International Data Transfers Your information may be processed outside Zambia by third parties (e.g., YouTube, Stripe). We ensure compliance with Zambian data protection laws using appropriate safeguards. 10. Changes to This Privacy Policy We may update this Privacy Policy, with changes posted here and a revised "Last Updated" date. Continued use of the Website after changes constitutes acceptance. 11. Contact Us For questions about this Privacy Policy or your data, contact us:

Email: elitrasmartltd@gmail.com Phone: +260978544195 (Lusaka) Address: Along Cairo Road, Opposite Bank of Zambia, Church House Building, Shop No. 4, Lusaka, Zambia

© 2025 Elitrasmart Medical Suppliers Limited. All rights reserved.