PRIVACY POLICY

Last Updated: March 25, 2025

1. INTRODUCTION

Runway Reruns Limited ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.runwayreruns.com) (the "Site") or use our services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site or use our services.

2. INFORMATION WE COLLECT

2.1 Personal Data

We may collect personal data that you provide directly to us, including but not limited to:

• Identity Data: first name, last name, username or similar identifier.

• Contact Data: billing address, delivery address, email address, and phone numbers.

• Financial Data: payment card details (processed securely through our payment processors).

• Transaction Data: details about payments to and from you and other details of products you have purchased from us.

• Profile Data: your username and password, purchases or orders made by you, your preferences, feedback, and survey responses.

• Usage Data: information about how you use our Site and services.

• Marketing and Communications Data: your preferences in receiving marketing from us and our third parties and your communication preferences.

2.2 Automatically Collected Data

When you visit our Site, we may automatically collect certain information, including:

• Technical Data: internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Site.

• Analytics Data: how you interact with our Site, including which pages you visit, the time spent on those pages, and other diagnostic data.

2.3 Cookies and Similar Technologies

We may use cookies and similar tracking technologies to track activity on our Site and hold certain information. The website uses cookies to help personalise your online experience. By accessing RUNWAY RERUNS, you agreed to use the required cookies.

A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie to you.

We may use cookies to collect, store, and track information for statistical or marketing purposes to operate our website. You have the ability to accept or decline optional Cookies. There are some required Cookies that are necessary for the operation of our website. These cookies do not require your consent as they always work. Please keep in mind that by accepting required Cookies, you also accept third-party Cookies, which might be used via third-party provided services if you use such services on our website, for example, a video display window provided by third parties and integrated into our website.

3. HOW WE USE YOUR INFORMATION

3.1 Legitimate Business Purposes

We use your information for various legitimate business purposes, including:

• To process and fulfil your orders, including payment processing and delivery.

• To manage your account and provide you with customer support.

• To personalise your shopping experience and deliver content relevant to your interests.

• To improve our Site, products, services, marketing, and customer relationships.

• To communicate with you, including sending you notifications about your orders, administrative messages, and marketing communications.

• To detect, prevent, and address technical issues, fraud, and other illegal activities.

3.2 Legal Basis for Processing

We process your personal data on the following legal grounds:

• Performance of a contract: Processing necessary for the performance of a contract with you.

• Legitimate interests: Processing necessary for our legitimate interests, provided these interests don't override your fundamental rights and freedoms.

• Consent: Processing based on your consent, which you can withdraw at any time.

• Legal obligation: Processing necessary to comply with legal obligations.

4. DATA PROTECTION AND SECURITY

4.1 Security Measures

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of sensitive data, including payment information.

• Regular security assessments and penetration testing.

• Access controls and authentication procedures.

• Staff training on data protection and security.

• Secure data backup procedures.

• Physical security measures for our facilities.

4.2 Payment Information

All payment transactions are encrypted using industry-standard SSL technology. We do not store complete credit card information on our servers. Instead, we use trusted third-party payment processors who comply with PCI-DSS standards.

4.3 Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. Different retention periods apply to different types of data, depending on the nature of the data and the purposes for which it was collected.

4.4 Data Breach Procedures

In the event of a data breach that compromises your personal data, we will notify you and the relevant supervisory authorities without undue delay, in accordance with applicable law.

5. DATA SHARING AND DISCLOSURE

5.1 Third-Party Service Providers

We may share your personal data with trusted third-party service providers who perform services on our behalf, such as:

• Payment processors.

• Shipping and logistics companies.

• Authentication experts for luxury goods.

• Marketing and analytics providers.

• Customer service providers.

• IT and system administration service providers.

These service providers are contractually obligated to use your personal data only for the purposes for which it was shared and in accordance with our instructions.

5.2 Legal disclosure

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal data.

6. YOUR DATA PROTECTION RIGHTS

Depending on your location and applicable law, you may have the following rights regarding your personal data:

6.1 Right to Access

You have the right to request copies of your personal data that we hold.

6.2 Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

6.3 Right to Erasure

You have the right to request that we erase your personal data, under certain conditions.

6.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

6.5 Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

6.6 Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

6.7 How to Exercise Your Rights

To exercise any of these rights, please contact us using the contact details provided below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

7. CHILDREN'S PRIVACY

Our Site is not intended for children under the age of 18, and we do not knowingly collect personal data from children under 18. If we learn we have collected or received personal data from a child under 18 without verification of parental consent, we will delete that information.

8. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

9. CONTACT US

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact our Data Protection Officer at:

• Email: (info@runwayreruns.com)