PRIVACY POLICY

PRIVACY POLICY FREE-M SERVICES LTD

Effective Date: 01 June 2026

Last Updated: 01 June 2026

FREE-M SERVICES LTD ("FREE-M", "we", "our", "us") is committed to protecting your personal data in accordance with the Mauritius Data Protection Act 2017 ("DPA 2017").

This Policy explains how we collect, use, store, and protect your information when you use our Website or engage our services. By doing so, you acknowledge that your personal data may be processed as described here.

1. DATA CONTROLLER

Company: FREE-M SERVICES LTD BRN: C16139810 Location: Mauritius

Email: freemservicesltd@gmail.com

Website hosted by: Hostinger

Supervisory Authority: Data Protection Commissioner, Mauritius — www.dataprotection.govmu.org

2. PERSONAL DATA WE COLLECT

We may collect and process the following:

Identity data: full name, company name Contact data: email address, phone number, billing or delivery address Transaction data: quotations, orders, invoices, purchase history Artwork and production files: logos, designs, images, brand assets, print-ready files Technical data: IP address, browser type, device information, website usage data Communications data: emails, messages, and correspondence Marketing preferences: subscription status and consent records

We do not knowingly collect personal data from individuals under the age of 18.

3. HOW WE COLLECT YOUR DATA

We collect personal data through:

• Contact forms and email communications

• Quotation requests and order placements

• Artwork and file submissions

• Website analytics and cookies

• Business referrals and publicly available business information

4. PURPOSES OF PROCESSING AND LEGAL BASIS

Processing orders and quotations — Performance of a contract Communicating about orders and deliveries — Performance of a contract Processing artwork and production files — Performance of a contract Complying with legal and tax obligations — Legal obligation Preventing fraud and protecting our business — Legitimate interest Improving our website and services — Legitimate interest Sending marketing communications — Consent (opt-in only)

Where required by law, we will obtain your explicit consent before processing your personal data.

5. ARTWORK AND PRODUCTION FILES

Customers warrant that they own or have obtained all necessary rights, licences, and authorisations for any artwork, logos, trademarks, or files submitted to FREE-M SERVICES LTD.

We retain artwork and production files to support repeat orders, reprints, and ongoing customer relationships. Customers may request deletion of their files at any time by contacting us in writing at freemservicesltd@gmail.com.

FREE-M SERVICES LTD shall not be liable for copyright infringement, trademark disputes, or unauthorised use arising from customer-submitted materials.

6. DATA RETENTION

Customer order and invoice records — 7 years (legal and tax compliance) Quotation records (non-converted) — 2 years Artwork and production files — Retained to support ongoing business relationships; deleted upon written request Marketing consent records — Until consent is withdrawn + 1 year Website analytics data — 13 months (rolling) Dispute and legal records — 5 years after resolution

7. WHO WE SHARE YOUR DATA WITH

We do not sell, rent, or trade your personal data. We may share data only with:

• Service providers who assist in fulfilling orders and operating our business, under strict confidentiality obligations

• Professional advisers including lawyers, accountants, and auditors where necessary

• Regulatory authorities and law enforcement where required by law

8. INTERNATIONAL DATA TRANSFERS

Where personal data is transferred outside Mauritius (for example, via our Hostinger hosting platform), we ensure appropriate safeguards are in place in line with the DPA 2017, including standard contractual clauses or confirmed adequacy of protection in the destination country.

9. YOUR RIGHTS UNDER THE DPA 2017

You have the right to:

Right of Access — Request a copy of the personal data we hold about you. Right to Rectification — Ask us to correct inaccurate or incomplete data. Right to Erasure — Request deletion of your data where we have no lawful basis to retain it. Right to Restrict Processing — Ask us to pause processing in certain circumstances. Right to Data Portability — Receive your data in a structured, machine-readable format. Right to Object — Object to processing based on legitimate interests or direct marketing. Right to Withdraw Consent — Withdraw consent at any time where processing is consent-based.

To exercise any right, contact us at freemservicesltd@gmail.com. We will respond within 21 days as required by the DPA 2017. We may verify your identity before processing your request.

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Commissioner of Mauritius at www.dataprotection.govmu.org.

10. COOKIES

Our Website is built and hosted on Hostinger. We may use:

• Essential cookies: required for the Website to function

• Analytics cookies: to understand Website usage, using anonymised data only

• Preference cookies: to remember your settings

You can manage or disable non-essential cookies through your browser settings. This may affect certain Website features.

11. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. No electronic transmission is completely secure. We will notify you and relevant authorities as required by law in the event of a data breach.

12. MARKETING COMMUNICATIONS

We only send marketing communications where you have explicitly opted in. You may opt out at any time by contacting freemservicesltd@gmail.com with the subject line "Unsubscribe." This will not affect communications related to your existing orders.

13. THIRD-PARTY LINKS

Our Website may contain links to third-party websites. We are not responsible for their content, privacy practices, or security. Users access such websites at their own risk.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes become effective upon publication. Continued use of our Website constitutes acceptance of the updated Policy.

15. CONTACT US

FREE-M SERVICES LTD BRN: C16139810 Mauritius Email: freemservicesltd@gmail.com Data Protection Commissioner of Mauritius: www.dataprotection.govmu.org