Orange Max it - Privacy policy Orange Jordan ("Orange," "we," "us," or "our") is committed to protecting your personal data and privacy when using the Orange Max It application ("App"). This Privacy Notice explains how we collect, use, disclose, and protect your personal data in compliance with Jordan’s Personal Data Protection Law No.24 of 2023 (PDPL) and general best practices. 1. Data Controller Information Orange Jordan, with its registered office at [Al Abdali, The Boulevard, Black Iris St. Central 1&2, Entrance #8, Amman - Jordan P.O. Box 1689- 11118], is the Data Controller responsible for processing your personal data under this Privacy Notice. If you have any questions, complaints, or requests you may contact our Data Protection Officer (DPO) at jude.omeish@orange.com. 2. Categories of Personal Data We Collect We collect the following personal data necessary to provide our services and improve your experience: Category Types of Data Collected Purpose of Collection Account Data Name, Phone number (MSISDN), authentication credentials, date of birth To create and manage your account, ensuring secure login Usage Data App interactions, session duration, clicks, preferences To analyze and improve App performance Device Information Device model, operating system, IP address To enhance security and compatibility Location Data GPS location To provide location-based services such as finding nearby Orange stores Communication Data Customer service inquiries, chat support messages To respond to your requests and improve customer service Marketing Preferences Consent to receive offers To personalize offers and services 3. Purpose and Legal Basis for Processing We process personal data based on the following legal bases: Purpose Legal Basis Providing services (authentication, billing, consumption tracking) Performance of a contract Improving user experience (analytics, service enhancements) Performance of a contract Marketing communications Explicit consent Compliance with legal obligations (fraud prevention, law enforcement requests) Legal obligation Customer support (handling inquiries, complaints) Performance of a contract 4. Data Retention Notice We store your personal data only for as the term that is necessary to fulfill the purposes outlined in this Privacy Notice or as required by applicable Jordanian laws. Upon expiration of the permitted retention periods, your data will be securely deleted or anonymized. 5. Data Sharing and Disclosure Orange does not sell your personal data. However, we may share data in the following cases: Recipient Purpose Orange Affiliates & Partners To authenticate users, provide services, and personalize offers Third-Party Service Providers To assist with technical infrastructure, hosting, and analytics (under strict contractual obligations) and after having signed confidentiality and data processing agreement/s with all third parties. Legal Authorities To comply with legal obligations or protect against fraud If data is transferred outside of the Hashemite Kingdom of Jordan, we ensure adequate safeguards are in place, such as strict data protection contractual clauses. 6. Security Measures We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration, including: Data encryption during transmission and storage Access control mechanisms (role-based access) Regular security audits and penetration testing Anonymization of usage data for statistical analysis Despite our efforts, no online system is 100% secure. If you suspect unauthorized access, please contact our DPO immediately at jude.omeish@orange.com 7. Your Rights Under the PDPL You have rights which you may request to practice upon verifying your ID. These rights are the right to access your data, rectification of your data, erasure of your data, restriction of its processing, objection to its processing. All are subject to legal and technical limitations. If you are unsatisfied with our response to you practicing your rights, you have the right to lodge a complaint with the Jordanian Data Protection Authority. 8. Use of Cookies and Tracking Technologies The Orange Max It App may use cookies and similar tracking technologies for analytics and user experience improvements. Necessary Cookies – Essential for app functionality Performance Cookies – Help analyze app performance Marketing Cookies – Used for personalized offers You can manage cookie preferences via the App Settings. 9. External Links and Third-Party Services The Orange Max It App may contain links to third-party websites or applications. Orange Jordan is not responsible for the privacy policies or practices of these third parties. We encourage you to review their policies before using such services. 10. Changes to This Privacy Notice and Other We may update this Privacy Notice from time to time. You will be notified of any material changes. The latest version will always be available within the App and on our official Orange Jordan website. By using the Orange Max It App, you acknowledge that you have read and understood and authorize this Privacy Notice.