Last updated: October 2026

Introduction This Privacy Policy describes how OLIM ("we", "us", "our") collects, uses, discloses, and protects personal information in connection with our websites, mobile applications, products, services, communications, and other interactions (collectively, the "Services"). This Policy explains what information we collect, why we collect it, how we use it, with whom we may share it, and the choices you have regarding your information. By accessing or using the Services, you consent to the collection and use of information as described in this Policy.

Scope This Policy applies to personal information we collect from or about individuals located in Canada and other jurisdictions where we operate. It covers information collected directly from you, through your use of the Services, and from third parties. Where required by local law, supplementary notices or regional terms may apply.

Information We Collect We collect the following categories of information:

• Contact and account information: name, email address, postal address, telephone number, username, password, and other account registration details.

• Identifiers and device data: IP address, device identifiers, operating system, browser type, unique device IDs, mobile carrier, and device settings.

• Transaction and payment information: payment card details, billing address, transaction dates, and purchase history (payment card data is processed by our payment processors; we may store limited transaction records).

• Usage and analytics data: pages viewed, pages visited, features used, search queries, session length, crash reports, and other usage metrics.

• Communications content: messages, feedback, support requests, and other content you provide when contacting us or using interactive features.

• Location information: approximate location derived from IP address and, with your consent, precise location from your device.

• Marketing and preference data: communications preferences, marketing opt-ins/opt-outs, and interests.

• Technical and security information: logs, error reports, cookies and similar tracking technologies, and information used to detect and prevent fraud or abuse.

• Sensitive information: we do not intentionally collect sensitive personal information (such as social insurance numbers, financial account passwords, health information, or racial or ethnic origin) except where you voluntarily provide it for a limited purpose and with explicit consent. Where sensitive information is collected and required, we will obtain your explicit consent and apply additional safeguards.

How We Collect Information

• Directly from you when you register, complete forms, make purchases, sign up for newsletters, contact support, participate in promotions, or otherwise provide information.

• Automatically when you use the Services through cookies, web beacons, device identifiers, and similar technologies.

• From third parties such as service providers, partners, analytics providers, advertising networks, public sources, and social media platforms.

• From integrations and connections you enable between the Services and third-party accounts.

Purposes for Which We Use Personal Information We process personal information for legitimate business purposes, including:

• To provide and maintain the Services, process transactions, manage accounts, and deliver requested products and services.

• To communicate with you about your account, orders, updates, and support inquiries.

• To personalise and improve the Services, content, and user experience.

• To send marketing communications, newsletters, and promotional offers where permitted and in accordance with your preferences.

• To analyse usage patterns and performance, and to conduct research and analytics.

• To detect, investigate, and prevent fraud, abuse, security incidents, and other harmful activity.

• To comply with legal obligations, regulatory requirements, and lawful requests from government authorities.

• To manage payments, bookkeeping, billing, and tax requirements.

• For other purposes for which we obtain your consent.

Legal Bases for Processing (Where Applicable) For jurisdictions that require a legal basis for processing (for example under the EU GDPR), our legal bases include:

• Consent: where you have given clear consent for us to process your personal information for a specific purpose.

• Contract: where processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract.

• Legal obligation: where processing is necessary to comply with a legal obligation.

• Legitimate interests: where processing is necessary for our legitimate interests (or those of a third party) and those interests are not overridden by your rights and interests.