01. The Scope of This Policy

patpat.lk Platform is an e commerce and lifestyle platform and patpatMall Platform is a is a sub category and/or a feature of patpat.lk Platform owned and operated by Asset Capital Venture (Pvt) Ltd (“patpat”)

This policy applies to all patpat.lk and patpatMall Platform (“patpat Platform”) Users (Collectively referred to as “patpat User”) (“patpat User” means any person who has created a User Account and and/or a Vendor Account through patpat.lk or patpatMall (“patpat Accounts”) and includes all customers, vendors and delivery partners). Please remember that Your access and/or use of the patpat Platform is subject to the Terms and conditions of the relevant User Terms and Conditions, Terms of Service of the Vendor Agreement or Terms of Service of the Delivery Partner Agreement (collectively referred to as “Terms of Use”) as the case may be as well as this Privacy Policy and This privacy policy shall deemed to be a part and parcel of the relevant Terms of Use as applicable and executed by You. This privacy policy applies to all information we collect through patpat Platform and/or patpat Accounts from current and former patpat Users, including You.

You specifically consent to providing and/or use and/or processing of information by patpat in the manner set out in this Privacy Policy and You are hereby notified that the consent provided by You as aforesaid can be withdrawn at any time subject to applicable law and if such consent is withdrawn patpat at its discretion may suspend and/or terminate your access to patpat Platform and Collective Services

“User Account” or “Vendor Account” means an account which is assigned to a specific person after such person has duly signed up to use the patpat Platform as a Customer, Vendor.

“Verify” means an internal administrative process to ensure that information gathered is as accurate as practically possible, and to minimize human and instrument errors - including those which arise during information processing as much as possible. Verification does not mean that patpat is evaluating Users in any way other than to confirm minimum legal requirements to use the patpat Platform. For the avoidance of doubt, to verify/verification does not mean or imply that patpat is vouching for, certifying, or representing that persons, goods or services meet any quality, safety, or industry standards.

“Collective Services” means Supply of Goods or Services and/or Goods Delivery Services and/or Package Delivery Services.

Delivery partners and vendors are sometimes referred to herein as “Service Providers”. customers are sometimes referred to herein as “End Users.” Service Providers and End Users are collectively referred to herein as “Users.”

The delivery of Goods provided by delivery partners to customers shall be referred to herein as “Goods Delivery Services.”

02. The Information We Collect

When You use the patpat Platform, we collect the information You provide, usage information, and information about Your device and payments. We also collect information about You from other sources like third-party services, and optional programs in which You participate, which we may combine with other information we have about You. Following are some types of information that we collect about You:

A. Information You Provide to Us

patpat User Information and Account Registration: If You apply to be a patpat User, You will be obliged to provide certain information and we will collect the information You provide in Your application, including Your name, email address, phone number, birth date, profile photo, physical address, government identification number (such as ID Card Number), Proof of Business Registration, driver’s license information, vehicle information, and car insurance information. We collect the payment information You provide us, including Your bank routing numbers. At a later stage we may need additional information from You at some point after You become a patpat User, including information to confirm Your identity (like a photo). You shall be obliged to give us such additional information.

Ratings and Feedback: When You rate and provide feedback about users, we collect all of the information You provide in Your feedback.

Communications: When You contact us or we contact You, we collect any information that You provide, including the contents of the messages or attachments You send us.

FinancialInformation: bank account online login information, bank account and routing numbers and credit cards or debit cards linked to your patpat Accounts. patpat does not share financial information with third party social networking services and will ensure data protection as per all applicable laws.

patpat is committed to providing a safe, secure and reliable service on its patpat Platform. Therefore, before permitting You to access the patpat Platform and use the patpat Accounts, patpat may require additional information from You that we can use to verify Your identity, address or other information or to manage risk and compliance throughout our relationship. We may also obtain information about You from third parties such as identity verification, fraud prevention and similar services.

B. TYPES OF Information We Collect

Location Information: patpat collects location information (including GPS and WiFi data) depending on Your patpat Account settings and device permissions as well as whether You are using the patpat Platform as an End User, Driver or Vendor

End User: We collect Your device’s precise location when You open and use the patpat Platform, including while the patpat Platform is running in the background from the time You request a service until it ends. Vendor: We collect the device information which was used to receive a payment as well as transactional details in connection with the payment received. This may include but not limited to value, location, items, time, date, account details and bank routing numbers.

Driver: We collect Your device’s precise location when You open and use the patpat Platform, including while the patpat Platform is running in the background.

Usage Information: We collect information about Your use of the patpat Platform, including service information like the date, time, destination, distance, route, payment, and whether You used a promotional or referral code. We also collect information about Your interactions with the patpat Platform, including the pages and content You view and the dates and times of Your use.

Device Information. We collect information about the devices You use to access the patpat Platform, including device model, IP address, type of browser, version of operating system, identity of carrier and manufacturer, radio type (such as 4G), preferences and settings (such as preferred language), application installations, device identifiers, advertising identifiers, and push notification tokens. If You are a Vendor or Driver, we also collect mobile sensor data from Your device (such as speed, direction, height, acceleration, deceleration, and other technical data).

Communications Between End Users and Service Providers: End Users and Service Providers may communicate with each other via the corresponding telephone number indicated on the patpat Platform when an order has been placed and accepted. For security and quality assurance purposes, we may also monitor and/or record the contents of phone calls made to the patpat Platform call center

Cookies, Analytics, and Third-Party Technologies: We collect information through the use of “cookies”, tracking pixels, data analytics tools like Google Analytics, SDKs, and other third-party technologies to understand how You navigate through the patpat Platform and interact with patpat Platform advertisements, to make Your patpat Platform experience safer, to learn what content is popular, to improve Your site experience, to serve You more relevant ads on other sites, and to save Your preferences to speed up your experience. Cookies are small text files that web servers place on Your device; they are designed to store basic information and to help websites and apps recognize Your browser. We may use both session cookies and persistent cookies. A session cookie disappears after You close Your browser. A persistent cookie remains after You close Your browser and may be accessed every time You use the patpat Platform. You should consult Your web browser(s) to modify Your cookie settings. Please note that if You delete or choose not to accept cookies from us, You may miss out on certain features of the patpat Platform.

C. Information We Collect from Third Parties

Third-Party Service: Third-party services provide us with information needed for core aspects of the patpat Platform, as well as for additional services, programs, loyalty benefits, and promotions that can enhance Your patpat Platform experience. These third-party services may include communications integrators/providers, background check providers, insurance partners, financial service Providers, marketing providers, and other businesses. We obtain the following information about You from these third-party services:

Information to make the patpat Platform safe, such as background check information for drivers.

Information about Your participation in third-party programs that provide things like insurance coverage and financial instruments, such as insurance, payment, transaction, and fraud detection information.

Information to operationalize loyalty and promotional programs or applications, services, or features You choose to connect or link to Your patpat Accounts, such as information about Your use of such programs, applications, services, or features; and

Information about You provided by specific Collective Services, such as demographic and market segment information.

Referral Programs: If You refer someone to patpat Platform, we will collect the information about the person You referred to us.

Other Users and Sources: Other users or public or third-party sources such as law enforcement, insurers or media may provide us information about You, for example as part of an investigation into an incident or to provide You support.

03. How We Use Your Information

We use Your personal information to;

• Maintain the security and safety of the patpat Accounts, Platform and its users.
• Build and maintain the patpat community.
• Provide customer support.
• Improve the patpat Platform including improvements that increase efficiency and ease of use.
• Respond to legal proceedings and obligations.
• Provide a more personalized service.
• Prevent potentially fraudulent, prohibited or illegal activities, and enforce our User Agreement and Terms of Service of the Vendor Agreement or Delivery Partner Agreement as the case maybe through the use of our risk and fraud tools which may include use of Account Information, Identification Information, Financial Information, Device Information, Social Web Information and Geolocation Information;

In providing the patpat Platform: We use Your personal information to provide an intuitive, useful, efficient, and worthwhile experience on our platform. To do this, we use Your personal information to;

• Verify Your identity and maintain Your account, settings, and preferences.
• Connect You to Your Collective Service and track their progress.
• Calculate prices and process payments.
• Allow Users to connect regarding their Collective Service and to choose to share their location with
others.
• Communicate with You about Your Collective Service and experience.
• Collect feedback regarding Your experience.
• Facilitate additional services and programs with third parties.
• Operate contests, and other promotions.

Maintaining the Security and Safety of the patpat Platform and its Users: Providing You a secure and safe experience is one of the core objectives of the patpat Platform. To do this, we use Your personal information to:

• Authenticate users.
• Verify that Drivers and their vehicles meet minimum requirements.
• Verify that Vendors and their products meet minimum requirements.
• Investigate and resolve incidents, accidents, and insurance claims.
• Encourage safe driving behavior and avoid unsafe activities.
• Make best efforts to detect and prevent fraud.
• Block and remove unsafe or fraudulent users from the patpat Platform.

Building and Maintaining the patpat Community: The patpat Accounts works to be a positive part of the community. We use Your personal information to:

• Communicate with You about events, promotions, elections, and campaigns.
• Personalize and provide content, experiences, communications, and advertising which would be relevant to you while promote and ensuring the growth of the patpat Platform.

Providing Customer Support: We work hard to provide the best experience possible, including supporting You when You need it. To do this, we use Your personal information, among other things, to:

• Investigate and assist You in resolving questions or issues You have regarding the patpat Platform.
• Provide You support or respond to You.

Improving the patpat Platform: We are always working to improve Your experience and provide You with new and helpful features. We also strive to make the patpat Platform as efficient and easy to use as possible. To do this, we use Your personal information to:

• Perform research, testing, and analysis.
• Develop new products, features, partnerships, and services.
• Prevent, find, and resolve software or hardware bugs and issues.
• Monitor and improve our operations and processes, including security practices, algorithms, and other
modeling.

Responding to Legal Proceedings and Requirements: Sometimes the law, government entities, or other regulatory bodies impose demands and obligations on us with respect to the services we seek to provide. In such a circumstance, we may use Your personal information to respond to those demands or obligations.

04. How We Share Your Information

From time to time, we may share Your personal information with other users, third parties, and service Providers. This section explains which information we share and when we share such information.

A. Sharing Between patpat Platform Users

End User information shared with Service Providers: Upon receiving a service request, we share with the Service Provider, some of the End Users personal information such as location, name, profile photo, End User statistics (like approximate number of Collective Services completed and years as an End User), and any other information the End User includes in their profile. Upon pickup of the product and during the service, we share with the Service Providers information which may include, among other information, the End User’s destination. Once the service is finished, we also eventually share the End Users rating and feedback with the Service Provider. We remove the End User’s identity associated with ratings and feedback when we share it with Service Provider, but a Service Provider may be able to identify the End User that provided the rating or feedback.

Service Provider information shared with End User: Upon a Service Provider accepting a requested service, we will share with the End User information which may include, among other information, the Service Providers name, profile photo, preferred pronouns, store name, contact details, store rating, store reviews, store location, real-time location, and the vehicle make, model, color, and license plate, as well as other information in the Service Provider patpat Account, such as information Service Provider choose to add and Service Provider statistics (like approximate number of service runs completed and years as a Service Provider).

Although we help Users communicate with one another to arrange an order, we do not share Your actual phone number or other contact information with other users.

B. Sharing with Third-Party Service Providers for COMMERCIAL/Business Purposes

patpat may share the following categories of Your personal information for commercial and/or business purposes.

Personal identifiers, such as Your name, address, email address, phone number, date of birth, government identification number (such as ID Card Number), driver’s license information, vehicle information, and car insurance information;

Financial information, such as banking information, and any other payment information You provide us;

Commercial information, such as Service information, Your statistics and feedback, and Your transaction history;

Internet or other electronic network activity information, such as Your IP address, type of browser, version of operating system, carrier and/or manufacturer, device identifiers, and mobile advertising identifiers; and Location data.

We disclose those categories of personal information to service Providers to fulfill the following commercial and/or business purposes:

• Maintaining and servicing Your patpat Accounts.
• Processing or fulfilling Collective Services.
• Providing You customer service.
• Processing End User transactions.
• Processing Driver applications and payments.
• Verifying the identity of users.
• Detecting and preventing fraud.
• Processing insurance claims.
• Driver loyalty and promotional programs.
• Marketing and advertising.
• Financing and commercial/business requirements
• Providing requested emergency services.
• Providing analytics services and

patpat makes use of display advertising, and uses remarketing technology with Google Analytics to advertise online. Third-party vendors, including Google, may show ads of patpat Platform on various websites across the Internet, using first-party cookies and third-party cookies together to inform, optimize, and serve ads based on past visits to patpat Platform. You can opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using the Ads Preferences Manager.

C. For Legal Reasons and to Protect the patpat Platform

We may share Your personal information in response to a legal obligation, or if we have determined that sharing Your personal information is reasonably necessary or appropriate to:

• Comply with any applicable national or municipal law or regulation, civil, criminal or regulatory inquiry, investigation or legal process, or enforceable governmental request;
• Respond to legal process (such as a search warrant, summons, or court order);
• Enforce our User Agreement, Terms of Service of the Vendor Agreement or Delivery Partner Agreement asthe case maybe;
• Cooperate with law enforcement agencies concerning conduct or activity that we reasonably and in good faith believe may violate national or municipal law or regulations; or
• Exercise or defend legal claims, protect against harm to our rights, property, interests, or safety or the rights, property, interests, or safety of You, third
• parties, or the public as required or permitted by law.

D. In Connection with Sale or Merger

We may share Your personal information while negotiating or in relation to a change of corporate control such as a restructuring, merger, or sale of our assets.

E. Upon Your Further Direction

With Your permission or upon Your direction, we may disclose Your personal information to interact with a third party or for other purposes.

05. How We Store and Protect Your Information

We retain Your information for as long as necessary to provide You and our other users access to the patpat Platform. This means we keep Your profile information for as long as You maintain a patpat Account/s. We retain transactional information such as Collective Services and payments to ensure we have performed legitimate business functions, such as accounting for tax obligations. If You request account deletion, we will delete Your information as set forth in the “Deleting Your Account” section below subject to applicable law, We may retain your profile information, after you terminate the account for business purposes, and/or to improve, develop the patpat Platform and/or to share with third party service providers for commercial/business purposes.

We take reasonable and appropriate measures designed to protect and archive Your personal information. However, no security and/or archival measures can be 100% effective in practical terms, and we cannot guarantee the security of Your information, including against corruption of information and/or loss of information and/or unauthorized intrusions or acts by third parties in respect of such information

We strive to take our best effortsto ensure security on oursystems.Despite our efforts,we cannot guarantee that personal information may not be accessed, disclosed, altered or destroyed by breach of our administrative, managerial and technical safeguards. Therefore, we urge you to take adequate precautions to protect your personal data as well, including never sharing your UserAccount passwordwith anyone. If patpat learns of a systemssecurity breach, we may attempt to notify you electronically so that you can take appropriate protective steps. By using the patpat Accounts, you agree that patpat may communicate with you electronically. patpat may post a notice on the User Account if a security breach occurs. We may also send an email to you at the email address you have provided to us.

06. Your Rights and Choices Regarding Your Data

As explained more below, patpat provides ways for You to access and delete Your personal information as well as exercise other data rights that give You certain control over Your personal information.

Email Subscriptions: You can always unsubscribe from our commercial or promotional emails by clicking unsubscribe in those messages. We will still send You transactional and relational emails about Your use of the patpatMall Platform.

Text Messages: You can opt out of receiving commercial or promotional text messages by texting StopAd? SMS BL patpatMall to 9010 from the mobile device receiving the messages. You may also opt out of receiving all texts from patpat Platform and related services (including transactional or relational messages) by StopAd? SMS BL patpatMall to 9010 from the mobile device receiving the messages. Note that opting out of receiving all texts may impact Your use of the patpat Platform.

Push Notifications: You can opt out of receiving push notifications through Your device settings. Please note that opting out of receiving push notifications may impact Your use of the patpat Platform (such as receiving a notification that Your package has arrived).

Profile Information: You can review and edit certain account information You have chosen to add to Your patpat Account/s by logging in to Your patpat Account settings and profile.

Location Information: You can prevent Your device from sharing location information through Your device’s system settings. But if You do so, this may impact patpat’s ability to provide You our full range of features and Collective Services.

Cookie Tracking: You can modify Your cookie settings on Your browser, but if You delete or choose not to accept our cookies, You may be missing out on certain features of the patpat Platform.

Do Not Track: Your browser may offer You a “Do Not Track” option, which allows You to signal to operators of websites and web applications and services that You do not want them to track Your online activities. The patpat Platform may not currently support Do Not Track requests at this time.

Deleting Your Account: If You would like to delete Your patpat Accounts, you may do so via the User Application. In some cases, we will be unable to delete Your account, such as instances where there is an issue with Your account related to trust, safety, or fraud. When we delete Your account, we may retain certain information subject to applicable law for legitimate business purposes or to comply with legal or regulatory obligations. For example, we may retain Your information to resolve open insurance claims, or we may be obligated to retain Your information as part of an open legal claim. When we retain such data, we do so in ways designed to prevent its use for other purposes.

Links to Third-Party Websites/Systems/Platforms: The patpat Platform may contain links to third-party websites/Systems/Platforms. Those websites/Systems/Platforms may have privacy policies that differ from ours. We are not responsible for those websites, and we recommend that You review their policies. Please contact those websites/Systems/Platforms directly if You have any questions about their privacy policies.

07. Changes to This Privacy Policy

patpat reserves the right to update or amend or modify or replace (hereinafter referred to as “Amendments”) this Policy in any way and at any time at its sole discretion as Privacy law evolves. If we update it, we will do so online, and if we make material changes, we will let You know through the patpat Platform or by some other method of communication such as email. You shall be given reasonable notice of such Amendments.

Continued use of patpat Platform, after You have been notified of such Amendments shall be construed as You have agreed and consented to such Amendments.

08. Contact Us

If You have any questions or concerns about Your privacy or anything in this policy, including if You need to access this policy in an alternative format, we encourage You to contact us.

09. Severability

Any part of this Policy which is prohibited or which is held to be void or unenforceable shall be ineffective to the extent of such prohibition or unenforceability without invalidating the remaining provisions hereof

10. Dispute Resolution

This Policy shall in all respects be governed by and construed exclusively in accordance with the laws of the Democratic Socialist Republic of Sri Lanka and is subject to the exclusive jurisdiction of the appropriate Court holden in Colombo of the Democratic Socialist Republic of Sri Lanka having jurisdiction in relation to all matters pertaining to or arising out of this Policy. In the event this document is translated into any other languages, the English version shall be authoritative.

11. Acceptance

By clicking “I accept”, You expressly acknowledge that You have read, understood, consented and taken steps to thoughtfully consider the consequences of this Agreement, and that You agree to be bound by the terms and conditions of this Agreement, and that You are legally competent to enter into this Agreement with patpat. Additionally, regardless of whether you have clicked “I accept”, your use of patpat Platform would be construed as your acceptance of all terms and conditions of this Policy and all other agreements with You relating to patpat.