Yuccan International Ltd - General Privacy Policy

1. Who We Are and Scope

This Policy applies wherever we operate and to all personal data processed via the Services. Capitalized terms not defined here have the meanings given in our General Terms of Use.

2. Categories of Personal Data We Collect

• Identifiers & contact data: name, email, phone, account identifiers.
• Usage & technical data: IP address, device/browser data, settings, approximate location (derived from IP), log data, diagnostics.
• Content you submit: user content, support inquiries, feedback.
• Transactional data (if applicable): order/plan identifiers and limited billing metadata processed by PCI-compliant providers.
• Inferences/analytics: limited service analytics used to maintain and improve the Services.

3. Sources of Personal Data

• (a) - You (directly) through account registration, forms, or support channels.
• (b) - Your use of the Services (automatic collection via cookies/SDKs/logs).
• (c) - Third-party service providers and integrations (where enabled by you).

4. How We Use Personal Data (Purposes & Legal Bases)

We process personal data to:

• (a) - Provide, operate, maintain, and secure the Services (contract necessity/legitimate interests).
• (b) - Detect, prevent, and respond to fraud, abuse, security incidents, and misuse (legitimate interests/legal obligations).
• (c) - Communicate with you (support, service messages) (contract necessity/legitimate interests).
• (d) - Improve and develop the Services, including analytics and diagnostics (legitimate interests).
• (e) - Comply with legal/regulatory obligations, including export/sanctions compliance consistent with our Terms (legal obligations).
• (f) - Where required by law, we will seek your consent (e.g., certain cookies/marketing in some jurisdictions).

5. Cookies and Similar Technologies

We use cookies, SDKs, and similar technologies for core functionality, security, and analytics. Where required, we obtain consent before setting non-essential cookies. Your browser settings may allow you to block or delete cookies; doing so may affect Service functionality.

6. How We Share Personal Data

• Affiliates and service providers: who process data under written contracts requiring confidentiality and security, solely to provide their services to us.
• Legal/regulatory: to comply with law, enforce our Terms, protect rights, safety, and security.
• Corporate transactions: in connection with mergers, acquisitions, financing, or sale of assets, subject to appropriate protections.

We do not authorize third parties to use personal data for their own independent marketing without your consent.

7. Telephone Number Collection, SMS/MMS, and Voice Communications

This section supplements the general provisions above and provides specific disclosures required by telecommunications privacy laws worldwide regarding the collection of phone numbers and delivery of SMS/MMS or voice communications.

7.1 What We Collect

We may collect your telephone number when you voluntarily provide it through our contact forms, chatbot, or other communication channels. Phone number collection is always optional and is never a condition of purchasing goods or services or submitting a form.

7.2 How We Use Your Phone Number

We may use your phone number to:

• (a) - Respond to your inquiries or service requests via telephone call or SMS.
• (b) - Send appointment or consultation confirmations.
• (c) - Provide service-related updates relevant to your request.
• (d) - Send marketing or promotional messages only if you have provided separate, explicit consent specifically for marketing communications.

7.3 Consent

• (a) - Separate consent required. Consent for SMS/MMS communications is collected separately from other forms of communication consent (e.g., email). We never use pre-checked consent boxes.
• (b) - Affirmative action required. We require your explicit, affirmative opt-in before sending any SMS/MMS messages. Providing your phone number alone does not constitute consent to receive text messages or marketing calls.
• (c) - Marketing vs. non-marketing. Where we offer marketing communications via SMS, consent for marketing messages is obtained through a separate, clearly labelled opt-in mechanism distinct from non-marketing communications consent.
• (d) - Consent is not transferable. Your SMS/MMS opt-in consent cannot be purchased, sold, or transferred to or from any third party.
• (e) - Age restriction. You must be at least 18 years of age to opt in to receive SMS/MMS messages or telephone calls from Yuccan International Ltd. If you are between 13 and 17 years of age, you may only opt in with verifiable parental or legal guardian consent. We do not knowingly collect phone numbers or SMS consent from individuals under 13 years of age.

7.4 No Third-Party Sharing of Mobile Data

7.5 Opt-Out Rights

• (a) - You may revoke your consent to receive SMS/MMS messages at any time by: replying STOP (or END, CANCEL, UNSUBSCRIBE, or QUIT) to any message; emailing [email protected]; calling +64 9 886 4638; or by any other reasonable method.
• (b) - Opt-out requests will be honoured within 5 business days.
• (c) - After opting out, you will receive one final confirmation message. No further SMS/MMS messages will be sent unless you re-subscribe.
• (d) - For assistance at any time, reply HELP to any message or contact us via the channels above.

7.6 Message Frequency and Rates

Message frequency varies based on your interactions with us. Standard message and data rates may apply as determined by your mobile carrier. Yuccan International Ltd is not responsible for carrier-imposed charges.

7.7 Communication Hours

We will only place outbound telephone calls or send SMS/MMS messages between 8:00 AM and 9:00 PM in the recipient's local time, unless the communication is a direct response to an urgent inquiry you initiated, or you have expressly consented to contact outside these hours.

7.8 Do Not Call Compliance

We comply with applicable Do Not Call registers and suppression lists (including the Australian Do Not Call Register and equivalent registers in other jurisdictions). If your number appears on a Do Not Call register, we will not contact you by telephone for marketing purposes unless you have provided separate, specific, express consent.

7.9 Carrier Liability

Mobile carriers are not liable for delayed or undelivered messages. Message delivery is subject to your carrier's network availability, coverage, and technical capabilities.

7.10 Consent Record Retention

We maintain records of SMS/telephone consent (including when consent was given, how it was obtained, what disclosures were presented, and the phone number associated with the consent) for a minimum of five (5) years from the date consent was last relied upon, or as otherwise required by applicable law. These records are maintained to demonstrate compliance with regulatory obligations.

7.11 Applicable Laws

Our telephone and SMS/MMS practices are designed to comply with applicable laws including but not limited to: the New Zealand Unsolicited Electronic Messages Act 2007; the U.S. Telephone Consumer Protection Act (TCPA) and FCC regulations; the CAN-SPAM Act; the EU General Data Protection Regulation (GDPR) and ePrivacy Directive; Australia's Spam Act 2003 and Do Not Call Register Act 2006; Canada's Anti-Spam Legislation (CASL); U.S. A2P 10DLC registration requirements; and CTIA Messaging Principles and Best Practices. Where requirements differ between jurisdictions, the more protective standard applies to you.

8. International Transfers

We operate globally. Where personal data is transferred internationally, we use lawful transfer mechanisms (e.g., Standard Contractual Clauses or equivalent safeguards) and implement appropriate technical and organizational measures to protect your data.

9. Data Retention

We retain personal data only as long as reasonably necessary to provide the Services and for legitimate and lawful purposes (including security, fraud prevention, recordkeeping, and legal compliance). Retention periods vary by category and context.

10. Security

We implement administrative, technical, and physical safeguards designed to protect personal data (including encryption in transit, access controls, and logging). No method of transmission or storage is 100% secure; you are responsible for maintaining the secrecy of your credentials.

11. Your Rights

Your rights depend on where you live and applicable law. Subject to conditions and exceptions, you may have rights to:

• (a) - Access, correct, or delete your personal data.
• (b) - Restrict or object to certain processing, and data portability.
• (c) - Withdraw consent where processing is based on consent.

How to exercise rights: Use the official privacy contact channel [email protected] or send a registered letter/courier to 51 Abbotts Way, Remuera, Auckland 1050, New Zealand. We may request information necessary to verify your identity and jurisdiction before acting on your request, and we will respond within the timeframe required by law.

12. Region-Specific Notices (Summary)

• EU/EEA & UK (GDPR/UK GDPR): You have the rights listed above; you may also lodge a complaint with your local supervisory authority. Where we rely on legitimate interests, we conduct a balancing test. We use appropriate transfer safeguards for international transfers.
• California (CCPA/CPRA): You may have rights to know/access, delete, correct, and to opt-out of certain processing defined by law. You can use an authorized agent subject to verification. We will not discriminate against you for exercising your rights.
• Australia & New Zealand: You may have rights to access and correction. If unresolved, you may contact your local privacy regulator.
• Quebec and other jurisdictions with special rules: Additional rights may apply; contact us using the official channel above.

13. Children's Privacy

The Services are not directed to children below the age at which valid consent can be given in their jurisdiction. We do not knowingly collect personal data from such children; if we learn we have done so, we will delete it.

14. Third-Party Links

The Services may link to third-party websites, content, products, or services. We are not responsible for their privacy practices. Review their policies before providing personal data.

15. Official Notices and Communication (Privacy)

In alignment with our General Terms of Use, we recognize privacy requests and official communications only if sent to:

• Email: [email protected]
• Registered mail/courier: Yuccan International Ltd, 51 Abbotts Way, Remuera, Auckland 1050, New Zealand

Notices are deemed received (a) if sent by email, on the date successfully transmitted; (b) if sent by registered mail/courier, on the date of delivery evidenced by tracking/receipt. Communications sent through any other medium (including social media, chatbots, or employee personal emails) are not valid for legal or contractual purposes.

16. Dispute Resolution and Governing Law

This General Privacy Policy is governed by the same law and dispute resolution framework set out in our General Terms of Use (see “Governing Law; Dispute Resolution; Anti-Forum Shopping”). In summary, New Zealand law applies unless mandatory local law requires otherwise; unresolved disputes are submitted to binding arbitration under ICC/LCIA rules in London, England; courts of the primary jurisdiction may be used to enforce awards where permitted.

17. Changes to This General Privacy Policy

We may update this Policy from time to time. Material changes will be notified via the Services and by email (where appropriate), including effective date information. Continued use after the effective date constitutes acceptance of the updated Policy.

Contact Us

For questions regarding this General Privacy Policy, please call us on +64 9 886 4638 during business hours (9am to 5pm weekdays; Pacific-Auckland time) or use the other contact channels provided in Clause 15 above.

Last updated: February 2026