Sure Swift Couriers Privacy Policy Effective Date: August 14, 2025 At Sure Swift Couriers (“we,” “us,” or “Sure Swift”), we are committed to protecting your privacy and ensuring the security of your personal information in compliance with the Data Protection Act (2020) and other applicable Jamaican laws, including the Electronic Transactions Act (2006). This Privacy Policy outlines how we collect, use, store, disclose, and protect your personal information when you use our website (“Platform”) to browse, purchase products from vendors, order food from restaurants, or utilize our delivery services across Jamaica. By using the Platform, you consent to the practices described in this policy.

1. Scope This Privacy Policy applies to all users of the Platform, including customers, registered vendors, and restaurants. It covers personal information collected through the Platform, mobile applications, or other interactions with Sure Swift Couriers. Vendors and restaurants are also subject to data protection obligations under our Vendor Contract Terms, which require compliance with the Data Protection Act (2020).

2. Information We Collect We collect personal information to facilitate orders, deliveries, and Platform functionality, in accordance with the Data Protection Act (2020). The types of information we collect include:

2.1 Personal Information Provided by You • Customer Information: Name, delivery address, phone number, email address, and payment details (e.g., credit/debit card information) provided during account registration, checkout, or customer support interactions. • Vendor/Restaurant Information: For vendors and restaurants, we collect company details (e.g., Business Registration Number, Tax Registration Number), contact information, banking details for payment remittance, and, for vendors with physical locations, business address for verification purposes. • User Feedback: Reviews, ratings, or complaints submitted through the Platform.

2.2 Automatically Collected Information • Usage Data: IP address, browser type, device information, pages visited, and time spent on the Platform, collected via cookies, web beacons, or similar technologies. • Delivery Data: GPS tracking data for delivery routes and proof of delivery, as permitted by the Electronic Transactions Act (2006). • Transaction Data: Order details, including purchase history, payment amounts, and delivery status. 1 of 5

2.3 Information from Third Parties • Payment Processors: Payment confirmation and verification data from our secure payment gateway. • Vendor Verification: Documentation (e.g., COJ registration, permits) or audit results from third-party verification services to ensure vendor legitimacy, as required under our Vendor Contract Terms.

3. How We Use Your Information We use your personal information for the following purposes, ensuring compliance with the Data Protection Act (2020): • Order Processing: To process and confirm orders, facilitate payments, and coordinate deliveries with vendors, restaurants, and our couriers. • Delivery Services: To schedule and track deliveries, provide estimated delivery times, and verify delivery completion, as outlined in our Customer Terms and Conditions. • Vendor Verification: To conduct biannual site visits for vendors with physical locations or inspect products submitted to our fulfillment center for vendors without physical locations, ensuring compliance with Jamaican laws and our Vendor Contract Terms. • Customer Support: To respond to inquiries, complaints, or refund/return requests, and mediate disputes as per the Consumer Protection Act (2005, amended 2012). • Fraud Prevention: To verify identities, monitor transactions, and detect fraudulent activities, aligning with international best practices and our fraud prevention policies. • Platform Improvement: To analyze usage data for improving Platform functionality, user experience, and service offerings. • Marketing: To send promotional offers, newsletters, or updates, only with your explicit consent, as required by the Data Protection Act (2020). You may opt out at any time. • Legal Compliance: To comply with Jamaican laws, including tax reporting (e.g., General Consumption Tax) and audit requirements under the Companies Act.

4. How We Share Your Information We share your personal information only as necessary and with your consent, where required, in compliance with the Data Protection Act (2020): • Vendors and Restaurants: We share customer name, delivery address, and contact details with vendors/restaurants to fulfill orders and coordinate deliveries, as stipulated in our Vendor Contract Terms. • Payment Processors: Payment details are shared with our secure payment gateway to process transactions.

2 of 5 • Couriers: Delivery address and contact information are shared with Sure Swift Couriers to complete deliveries. • Third-Party Verification Services: For vendors, we may share company details with third-party auditors to verify registration, permits, or operational status during biannual site visits or product inspections. • Legal Authorities: We may disclose information to comply with court orders, regulatory requirements, or investigations by the Consumer Affairs Commission or other Jamaican authorities, as mandated by law. We do not sell or share your personal information with third parties for marketing purposes without your explicit consent.

5. Data Security • We implement reasonable cybersecurity measures, such as encryption, secure servers, and access controls, to protect your personal information from unauthorized access, loss, or breaches, as required by the Data Protection Act (2020). • Vendors and restaurants are contractually obligated to maintain similar security measures for any customer data they process, as per our Vendor Contract Terms. • Despite our efforts, no system is completely secure. In the event of a data breach, we will notify affected users and the Office of the Information Commissioner within 72 hours, as mandated by the Data Protection Act (2020).

6. Data Retention • We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations (e.g., tax records for 7 years under Jamaican law). • Customer order and delivery data is retained for 2 years to support potential disputes or refunds, unless longer retention is required by law. • You may request deletion of your account data, subject to legal retention requirements, by contacting us at the details below.

7. Your Rights Under the Data Protection Act (2020), you have the following rights regarding your personal information: • Access: Request a copy of the personal information we hold about you. • Correction: Request correction of inaccurate or incomplete data. • Deletion: Request deletion of your data, subject to legal retention obligations. • Objection: Object to processing of your data for marketing or other purposes.

3 of 5 • Data Portability: Request transfer of your data to another service provider, where feasible. To exercise these rights, contact us at the details in Section 9. We will respond within 30 days, as required by law.

8. Cookies and Tracking Technologies • We use cookies and similar technologies (e.g., web beacons) to enhance Platform functionality, track usage, and improve user experience. • Types of cookies include: – Essential Cookies: Necessary for Platform operation (e.g., login, checkout). – Analytics Cookies: Collect anonymized data to analyze Platform performance. – Marketing Cookies: Used for personalized ads, only with your consent. • You may manage cookie preferences through your browser settings or our Platforms cookie consent tool. Disabling essential cookies may limit Platform functionality. 9. Third-Party Links The Platform may contain links to vendor, restaurant, or third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing personal information.

10. Childrens Privacy The Platform is not intended for users under 18 years old. We do not knowingly collect personal information from children, in compliance with the Data Protection Act (2020). If we become aware of such data, we will delete it immediately.

11. International Data Transfers As a Jamaican-based service, most data processing occurs within Jamaica. If data is transferred internationally (e.g., to cloud servers), we ensure compliance with the Data Protection Act (2020) through standard contractual clauses or other safeguards.

12. Updates to This Policy We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted on the Platform with notice via email or a Platform banner. Continued use constitutes acceptance of the revised policy.

13. Contact Information For questions, concerns, or to exercise your data protection rights, contact our Data Protection Officer at: 4 of 5 Email: support@sureswiftcouriers.com Phone: 876-208-0560 Address: Sure Swift Couriers, [Insert Registered Address] You may also lodge complaints with the Office of the Information Commissioner at www.oic.gov.jm, as provided under the Data Protection Act (2020). By using the Sure Swift Couriers Platform, you acknowledge that you have read, understood, and consent to this Privacy Policy.