PRIVACY POLICY

DATA CONTROLLER

She Is Glowing L.L.C.-FZ, company code2415006, is the data controller responsible for the processing of personal dataregistered on the website www.ecomwave.com. Contact email: hello@ecomwave.com, phone number: +971543271622

DEFINITIONS

Personal Data – Any information relating to an identified or identifiable natural person (data subject), who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Project – The Ecom Wave motivational andeducational project created by the Data Controller on the website www.ecomwave.com.

Data Subject – A natural person orrepresentative of a legal entity who uses the services of the Data Controlleror visits the Website.

IP Address – A unique number identifying a computer, phone, tablet, or other device connecting to the Internet. An IP address may be used to identify the country where the device is connected.

Client – An individual or legal entityregistered on the Website who has purchased a subscription to the Ecom Waveproject and seeks to receive business development consultation servicespublished on the Website.

Privacy Policy – This document thatoutlines the main rules for the collection, storage, processing, and protectionof personal data when visiting the Website, as well as the rights of DataSubjects and the procedures for their implementation.

Cookies – Small files placed on acomputer, phone, tablet, or other device when visiting www.ecomwave.com, which allow the Website torecognize the device. This term includes the use of similar technologies.

Website – The website www.ecomwave.com managed by the DataController.

Direct Marketing – Activities aimed atoffering goods or services to individuals by mail, phone, or other directmeans, and/or requesting their opinion about the offered goods or services.

Regulation – Regulation (EU) 2016/679 ofthe European Parliament and of the Council of 27 April 2016 on the protectionof natural persons with regard to the processing of personal data and on thefree movement of such data, and repealing Directive 95/46/EC (General DataProtection Regulation).

GENERAL PROVISIONS

This Privacy Policy provides informationabout how the Data Controller processes the personal data of Data Subjects.Additional information may be provided in the terms of sale, serviceagreements, or other agreements entered into with the Data Controller.

Registration on the Website is onlypossible after you have familiarized yourself with this Privacy Policy andconfirmed your agreement to it. We recommend that you carefully read thisPrivacy Policy before registering on the Website. The Privacy Policy can beaccessed at any time on the Website.

The processing of personal data isgoverned by the Regulation, the Data Protection Law of the United ArabEmirates, and other applicable laws.

PRINCIPLES OF PERSONAL DATA PROCESSING

The scope of personal data processeddepends on the services ordered or used by the Data Subject and the informationprovided by the Data Subject when inquiring about, ordering, or using services,or visiting the Website.

Personal data isprocessed only if there is a legal basis for processing – to ensure theprovision of services published on the Website, with the consent of the datasubject, or when the Data Controller is obligated by applicable laws to processpersonal data.

We ensure that personal data is processedaccurately, fairly, and lawfully, in accordance with the principles oftransparency and data protection specified by applicable laws.

You are not required toprovide any personal data, but certain services may not be available ifpersonal data is not provided.

SCOPE, PURPOSE, AND BASIS OF PERSONALDATA PROCESSING

The Data Controller processes personaldata collected from Clients visiting the Website, related to the servicesprovided on the Website, for the following purposes, legal grounds, and to thefollowing extent:

These personal data are processed whilethe services are being provided and are stored for 10 years to establish,exercise, or defend legal claims, and for document archiving purposes asrequired by law.