The following agreement describes the terms and conditions that apply to the relationship between you and UNLIMITED FASHION SHPK.

These Terms and Conditions for the Processing of Personal Data (the "Terms") set out how customers' personal data is collected, processed, stored, used, disclosed and protected by the Company in the context of its retail activity, online sales, loyalty programmes, customer support services, marketing activities and other related commercial activities.

Visiting our online store and carrying out transactions through it constitutes your acceptance of these Terms and Conditions.

You should therefore read them carefully. If there is anything you do not understand, please contact our Customer Service on 044 81 3007 or send an email to customer.support@unlimitedfashion.al. The Company undertakes to process personal data in accordance with the applicable legislation on the protection of personal data in the Republic of Albania, including Law No. 124/2024 "On the Protection of Personal Data", as amended, as well as any applicable secondary legislation.

By purchasing products, using our website, mobile applications, loyalty programmes, customer support services or interacting in any other form with the Company, customers declare that they have read and accept the terms of this Policy on the Processing of Personal Data.

The Data Controller responsible for the processing of personal data is:

UNLIMITED FASHION SHPK
Address: Brunes Space Building, TEG Shopping Centre, opposite the Violet entrance, Tirana–Elbasan National Road, Farkë, Lundër, Tirana, Albania
NUIS: M42325020H
Email: customer.support@unlimitedfashion.al
Telephone: 044 81 3007

For any request relating to the protection of personal data, customers may contact the Company using the contact details above.

The Company may collect and process the following categories of personal data:

3.1 Identification data

• Full name;
• Personal identification number, where legally required;
• Date of birth;
• Gender, where provided voluntarily.

3.2 Contact information

• Telephone number;
• Email address;
• Residential or delivery address;
• Billing address.

3.3 Transaction and purchase information

• Products purchased;
• Purchase history;
• Payment details;
• Delivery details;
• Warranty information;
• Invoices and fiscal receipts.

3.4 Loyalty programme information

• Membership number;
• Loyalty points and rewards;
• Customer preferences;
• Purchasing behaviour relating to loyalty benefits.

3.5 Technical and digital information

• IP address;
• Device information;
• Browser information;
• Cookies and online identifiers;
• Activity logs on websites and applications.

3.6 Customer service information

• Customer complaints;
• Communications with customer support;
• Service requests;
• Audio recordings of telephone calls, where applicable and legally permitted.

Personal data may be processed for the following purposes:

4.1 Sales and commercial activities

• Processing of purchases and payments;
• Delivery and installation of products;
• Issuance of invoices and fiscal documentation;
• Management of product returns and warranties.

4.2 Customer account administration

• Creation and maintenance of customer accounts;
• Administration of the loyalty programme;
• Management of rewards and promotions.

4.3 Customer support

• Responding to customer requests and complaints;
• Providing technical support and after-sales services;
• Improving the customer experience.

4.4 Marketing and communication

Subject to the applicable legal requirements and to the customer's consent where required, the Company may use personal data for:

• Promotional campaigns;
• Personalised offers;
• Newsletters and marketing communications;
• Customer satisfaction surveys;
• Advertising and remarketing activities.

Customers may opt out of marketing communications at any time.

4.5 Legal and regulatory compliance

• Fulfilment of tax and accounting obligations;
• Fraud prevention and security purposes;
• Fulfilment of applicable legal obligations;
• Protection of legal rights and interests.

4.6 Security and prevention of abuse

• Prevention of fraud and misuse;
• Monitoring of suspicious activities;
• Maintenance of IT and operational security.

The Company processes personal data on the basis of one or more of the following legal bases:

• Performance of a contract;
• Compliance with legal obligations;
• The legitimate interests of the Company, provided that such interests are not overridden by the rights and freedoms of customers;
• The customer's consent, where required;
• Protection of vital interests;
• Performance of tasks carried out in the public interest, where applicable.

Where consent is required by the applicable legislation, customers will be asked to give specific, informed, freely given and unambiguous consent.

Customers may withdraw their consent at any time without affecting the lawfulness of the processing carried out prior to the withdrawal.

The withdrawal of consent may affect the availability of certain services, promotions or loyalty programme benefits.

The Company may disclose personal data only where this is necessary and in accordance with the applicable legislation.

Personal data may be shared with:

• Payment service providers;
• Delivery and logistics partners;
• IT service providers and hosting providers;
• Customer support providers;
• Marketing agencies and communication providers;
• External legal, accounting or audit advisers;
• Public authorities and regulators, where legally required.

All third parties processing personal data on behalf of the Company shall be contractually bound to maintain confidentiality, to process personal data only in accordance with the Company's instructions, and to implement appropriate technical and organisational measures for the protection of data.

The Company will not sell customers' personal data to third parties.

Where personal data is transferred outside the Republic of Albania or to jurisdictions that do not provide an adequate level of data protection, the Company will apply appropriate safeguards in accordance with the applicable legislation.

Such safeguards may include:

• Standard contractual clauses;
• Adequacy decisions;
• Data processing agreements;
• Other legally recognised transfer mechanisms.

Personal data will be retained only for as long as is necessary for the purposes for which it was collected and processed, including the fulfilment of legal, tax, accounting, warranty and regulatory obligations.

Retention periods may vary depending on the category of data and the applicable legal requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised or archived in accordance with legal obligations.

10. CUSTOMER RIGHTS

Customers have the following rights in relation to their personal data, subject to the limitations provided for by the applicable legislation:

• The right of access to personal data;
• The right to rectification of inaccurate or incomplete data;
• The right to erasure (the "right to be forgotten");
• The right to restriction of processing;
• The right to object to processing;
• The right to data portability;
• The right to withdraw consent;
• The right not to be subject to automated decision-making, where applicable;
• The right to lodge a complaint with the competent supervisory authority.

Requests relating to the exercise of rights over personal data may be submitted using the contact details set out in these Terms.

The Company may require verification of identity before processing such requests.

Customers have the following rights in relation to their personal data, subject to the limitations provided for by the applicable legislation:

• The right of access to personal data;
• The right to rectification of inaccurate or incomplete data;
• The right to erasure (the "right to be forgotten");
• The right to restriction of processing;
• The right to object to processing;
• The right to data portability;
• The right to withdraw consent;
• The right not to be subject to automated decision-making, where applicable;
• The right to lodge a complaint with the competent supervisory authority.

Requests relating to the exercise of rights over personal data may be submitted using the contact details set out in these Terms.

The Company may require verification of identity before processing such requests.

The Company implements appropriate technical, organisational and administrative measures to protect personal data against:

• Unauthorised access;
• Accidental or unlawful destruction;
• Loss or alteration;
• Unauthorised disclosure;
• Misuse or unlawful processing.

Security measures may include:

• Access controls;
• Encryption technologies;
• Secure servers and networks;
• Internal confidentiality obligations;
• Employee training;
• Monitoring and incident response procedures.

Notwithstanding these measures, no electronic transmission or electronic storage system can be guaranteed to be entirely secure.

The Company's website and applications may use cookies and similar technologies for the following purposes:

• Improving website functionality;
• Analysing website traffic and performance;
• Personalising the customer experience;
• Supporting marketing and advertising activities.

Customers may manage their cookie preferences through their browser settings or cookie management tools.

Disabling certain cookies may affect the functionality of the website.

For security, protection and loss prevention purposes, the Company may use CCTV systems in its retail stores, warehouses, offices and other premises.

CCTV recordings will be processed in accordance with the applicable legislation and will be retained only for the necessary retention period.

Appropriate signage informing customers of CCTV surveillance will be displayed in the monitored areas.

The Company does not knowingly collect personal data from persons below the age permitted by the applicable legislation without the appropriate consent of a parent or legal guardian.

If the Company establishes that the personal data of a minor has been collected unlawfully, appropriate measures will be taken to delete such data.

The Company may use limited automated processing for:

• Fraud prevention;
• Marketing personalisation;
• Customer segmentation;
• Administration of the loyalty programme.

Where required by the applicable legislation, customers have the right to request review by an authorised person of decisions based solely on automated processing.

In the event of a breach of the security of personal data that may give rise to a risk to the rights and freedoms of customers, the Company will:

• Assess and contain the breach;
• Notify the competent supervisory authority where legally required;
• Notify the affected individuals where required by the applicable law;
• Implement corrective and mitigating measures.

To the extent permitted by the applicable legislation, the Company shall not be liable for damages arising from:

• Events beyond its reasonable control;
• Unauthorised actions of third parties;
• The customer's negligence in protecting account credentials;
• Technical interruptions or cyber incidents, notwithstanding the implementation of reasonable security measures.

Nothing in these Terms shall exclude liability where such exclusion is prohibited by the applicable law.

The Company reserves the right to amend or update these Terms at any time.

Updated versions take effect upon publication on the Company's website, mobile application or other official communication channels.

Continued use of the Company's services after publication of the updated Terms constitutes acceptance of the revised Terms.

These Terms are governed by and construed in accordance with the legislation of the Republic of Albania.

Any dispute arising out of or in connection with the processing of personal data shall first be addressed through amicable negotiations.

If no amicable settlement is reached, disputes shall be subject to the jurisdiction of the competent courts of the Republic of Albania.

For any question, request or complaint relating to the processing of personal data, customers may contact:

UNLIMITED FASHION SHPK
Address: Brunes Space Building, TEG Shopping Centre, opposite the Violet entrance, Tirana–Elbasan National Road, Farkë, Lundër, Tirana, Albania
NUIS: M42325020H
Email: customer.support@unlimitedfashion.al
Telephone: 044 81 3007
WhatsApp: +355 698023524