Aomnia Privacy Notice

Operated by InTime Inc (trading as “Aomnia”)

Version: 1.0 

Effective Date: 8 February 2026 

Last Updated: 8 February 2026

0. QUICK SUMMARY (NON-BINDING)

0.1 This summary is for convenience only. If there is any conflict between this summary and the clauses below, the clauses below prevail. 0.2 We collect and use information to (i) create and manage your account, (ii) verify bank-transfer payments, (iii) fulfil and deliver orders, (iv) provide support and resolve disputes, (v) prevent fraud and secure the Platform, and (vi) run analytics and advertising. 0.3 Payments are bank transfer only; we verify using the bank transaction/reference number and related transfer details. 0.4 We share minimum necessary order/delivery information with Vendors and delivery operations to fulfil your order. Vendors see order-by-order details only (no Platform-exported customer lists). 0.5 We keep Proof of Delivery (photo + recipient confirmation such as name/signature/OTP). Records are retained at least until disputes are closed, then archived. 0.6 For pharmacy deliveries, identity is verified at pickup and delivery; prescriptions are checked offline by the pharmacist and recorded in the pharmacy’s system. 0.7 We use analytics and advertising tools, including Google Analytics, Meta Pixel and TikTok Pixel, and we run retargeting/interest-based ads. 0.8 We record customer support phone calls and store WhatsApp communications centrally via the WhatsApp API. 0.9 Some service providers process/store data outside Barbados; we apply safeguards appropriate to the risks. 0.10 Data rights requests: privacy@aomnia.com (target response within 7 days, subject to lawful extensions).

1. DEFINITIONS

1.1 “Aomnia”, “we”, “us” or “our” means InTime Inc trading as “Aomnia”. 1.2 “Platform” means the Aomnia website, applications, and related systems used to provide the marketplace and delivery services. 1.3 “Services” means the services provided through the Platform, including marketplace ordering, payment verification, delivery, customer support, and dispute handling. 1.4 “Customer” means a person who creates an account and uses the Platform to purchase goods or services for delivery in Barbados. 1.5 “Vendor” means a third-party seller or service provider listing goods or services on the Platform. 1.6 “Delivery Operations” means Aomnia’s delivery function and any delivery personnel acting under Aomnia’s control for fulfilment and delivery. 1.7 “Personal Information” or “Personal Data” means information that identifies or can reasonably be linked to an identified or identifiable individual. 1.8 “Processing” means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion. 1.9 “Proof of Delivery” or “POD” means delivery records such as a photo, recipient confirmation (e.g., name/signature/OTP), timestamps, and delivery notes. 1.10 “Bank Transfer Verification Data” means the details used to verify your bank transfer payment (including transaction/reference number, amount, date/time, and verification status). 1.11 “Pharmacy Items” means restricted medicines and OTC items supplied via a pharmacy Vendor subject to additional operational controls. 1.12 “Tracking Technologies” means cookies, pixels, SDKs, and similar technologies used for analytics, advertising measurement, and retargeting.

2. STATUS OF THIS PRIVACY NOTICE

2.1 This Privacy Notice is a standalone customer-facing policy describing how we Process Personal Data in connection with the Platform and Services. 2.2 This Privacy Notice is intended to align with (and not contradict) Aomnia’s Platform Terms of Service and related schedules. 2.3 We draft this Privacy Notice with Barbados’ data protection framework in mind (including the Data Protection Act 2019–29) and relevant electronic transactions and consumer protection principles, without inventing statutory section numbers or limiting any rights you may have.

3. WHO WE ARE AND HOW TO CONTACT US

3.1 Data Controller: InTime Inc (trading as “Aomnia”). 3.2 Registered address: Parish Land, Barbados. 3.3 Principal place of business: Lower Estate, St. George, Barbados. 3.4 Legal email: admin@aomnia.com. 3.5 Customer Support: customersuccess@aomnia.com | Tel: +1 (246) 426-5292. 3.6 Customer service hours: Mon–Thu 7am–7pm, Fri 7am–5pm (Barbados time). 3.7 Office hours: Mon–Fri 8am–5pm (Barbados time). 3.8 Privacy and data rights requests: privacy@aomnia.com.

4. SCOPE, ELIGIBILITY AND CORE OPERATING MODEL

4.1 Barbados-only fulfilment. Purchases and deliveries are for Customers in Barbados only. Vendors may be overseas; delivery remains Barbados-only. 4.2 Adults only (18+). The Platform is intended for adults aged 18 and over. 4.3 No guest checkout. An account is required to place an order. 4.4 Merchant of record. Aomnia is the merchant of record for Customer purchases made through the Platform. 4.5 Bank transfer payments only. The Platform uses bank transfer for payment; we verify payment using Bank Transfer Verification Data. 4.6 Delivery and POD. Aomnia performs delivery and maintains Proof of Delivery. No “leave at door/safe place” deliveries are permitted.

5. PERSONAL DATA WE COLLECT

5.1 Account and Profile Data: name, email, phone number, delivery address(es), login credentials (stored securely), and account preferences/settings. 5.2 Age and Eligibility Data: date of birth (for 18+ eligibility). 5.3 Order and Transaction Data: items ordered, order totals, order status/history, refunds/credits, and related service records. 5.4 Bank Transfer Verification Data: transaction/reference number, amount, date/time, verification status, and any payment proof you provide. 5.5 Delivery Data and POD: delivery address, delivery contact, recipient details, delivery notes, and Proof of Delivery (photo + recipient confirmation such as name/signature/OTP, timestamps, and delivery outcomes). 5.6 Customer Support Data: emails, tickets, messages, and support interactions. 5.7 Call Recordings and Messaging Logs: (a) we record customer support phone calls for quality assurance, training, dispute handling and service improvement; and (b) we Process WhatsApp communications centrally via the WhatsApp API (chat logs are stored on our systems; we do not save information to Customers’ devices). 5.8 Reviews and User Content: verified-purchase reviews, ratings, and content you submit, plus moderation actions taken (e.g., removal of profanity, defamation, or privacy-invasive content). 5.9 Technical and Security Data: IP address, device/browser data, system logs, and security/fraud-prevention signals. 5.10 Analytics and Advertising Data (Tracking Technologies): cookie/pixel identifiers and event data collected through: (a) Google Analytics; (b) Meta Pixel; and (c) TikTok Pixel.

6. HOW WE USE PERSONAL DATA

6.1 We Process Personal Data for the following purposes (using appropriate lawful bases depending on context, including contract performance, legitimate interests balanced with your rights, consent where applicable, and legal obligations): (a) to create and manage your account and provide Platform functionality; (b) to process and fulfil orders and coordinate fulfilment with Vendors; (c) to verify bank transfer payments and maintain records of credits/top-ups; (d) to deliver orders, capture and retain Proof of Delivery, and manage delivery issues and disputes; (e) to provide customer support (including call recording and central WhatsApp logs); (f) to manage disputes and enforce Platform rules (including review moderation); (g) to protect Customers, Vendors, delivery operations and the Platform (fraud prevention, misuse monitoring, security); (h) to measure and improve Platform performance and Customer experience (analytics); (i) to run, measure and improve advertising, including retargeting/interest-based ads where enabled; and (j) to comply with legal and regulatory obligations and respond to lawful requests.

7. DISCLOSURES AND SHARING OF PERSONAL DATA

7.1 General rule. We do not sell Personal Data as a business model. We share Personal Data only as necessary to deliver the Services, operate the Platform, protect users, and comply with law. 7.2 Sharing with Vendors (order-by-order only). Vendors receive minimum necessary information to fulfil an order, such as items ordered, fulfilment notes, Customer name, delivery contact details, and delivery address. Vendors access this information order-by-order within the Platform and do not receive Platform-exported customer lists. 7.3 Sharing with Delivery Operations. Delivery personnel receive the information needed to complete delivery and capture Proof of Delivery, including recipient contact details, delivery address, and POD requirements (OTP/signature/photo). 7.4 Service Providers (processors). We use third-party service providers to support operations (e.g., infrastructure/hosting, communications, analytics, advertising measurement, customer support tools). We do not publicly name our hosting provider or server location. Service providers are expected to protect Personal Data and process it in accordance with our instructions where applicable. 7.5 Legal and safety disclosures. We may disclose Personal Data to regulators, law enforcement, courts, or advisers where required or reasonably necessary to comply with law, protect rights and safety, investigate fraud/misuse, or enforce our policies. 7.6 Third-party links. Third-party sites and services linked from the Platform have their own privacy practices.

8. PHARMACY ITEMS AND SENSITIVE WORKFLOWS

8.1 Pharmacy Items require additional safeguards due to the sensitive nature of the category. 8.2 Offline prescription handling. Prescriptions are checked offline by the pharmacist and recorded in the pharmacy’s system. 8.3 ID verification for delivery. We may verify identity and age at pickup and delivery for pharmacy fulfilment and retain records necessary to evidence safe handover. 8.4 Secure packaging. Pharmacy Items are securely packaged for delivery. 8.5 No controlled substances. Controlled substances are not delivered. 8.6 Pharmacy Vendor. Current pharmacy Vendor: Unity Drug Mart.

9. COOKIES, ANALYTICS AND INTEREST-BASED ADVERTISING

9.1 We use Tracking Technologies for: (a) essential functions (security, sessions, core site functionality); (b) analytics (including Google Analytics) to understand usage and improve performance; and (c) advertising measurement and retargeting (including Meta Pixel and TikTok Pixel) to run and measure interest-based/retargeted ads. 9.2 Where required or appropriate, we will provide cookie notices and preference controls (e.g., cookie banner/settings) for non-essential tracking. 9.3 You may also be able to control interest-based ads through device/browser settings and advertising platform preferences.

10. INTERNATIONAL TRANSFERS

10.1 Some service providers Process or store Personal Data outside Barbados. 10.2 Where cross-border transfers occur, we take reasonable steps to implement safeguards appropriate to the data and risks, including contractual protections, access controls and security measures.

11. DATA RETENTION

11.1 We retain Personal Data only as long as reasonably necessary for the purposes described in this Privacy Notice, including account administration, fulfilment, dispute handling, fraud prevention, and legal/accounting requirements. 11.2 Proof of Delivery. POD records are retained at least until disputes are closed, then archived securely. 11.3 Support records. Call recordings and WhatsApp logs are retained as reasonably necessary for service quality, training, dispute handling and compliance. 11.4 When Personal Data is no longer needed, we delete it, anonymise it, or securely archive it in line with reasonable retention practices.

12. SECURITY

12.1 We use reasonable administrative, technical and physical safeguards designed to protect Personal Data, including role-based access controls, monitoring/logging, and operational controls for delivery proof and regulated items. 12.2 No system is completely secure. If you believe your account is compromised, contact customersuccess@aomnia.com and copy privacy@aomnia.com.

13. YOUR RIGHTS AND REQUESTS

13.1 Subject to applicable law, you may have rights including access, correction, deletion, objection, and restriction of Processing, and withdrawal of consent where consent is the basis for Processing (e.g., certain marketing/cookies). 13.2 How to request. Email privacy@aomnia.com with your full name, the email/phone linked to your account, what you are requesting, and any relevant order numbers. 13.3 Identity verification. We may request additional information to verify your identity before acting on a request. 13.4 Response target. We aim to respond within 7 days, subject to lawful extensions where needed (e.g., complex requests or verification delays).

14. MARKETING COMMUNICATIONS

14.1 We may send service messages necessary to provide the Services (order confirmations, delivery updates, dispute communications). 14.2 We may send marketing communications where permitted. 14.3 You can opt out of marketing at any time using an unsubscribe mechanism (where provided) or by emailing privacy@aomnia.com with “Unsubscribe” in the subject line.

15. CHANGES TO THIS PRIVACY NOTICE

15.1 We may update this Privacy Notice from time to time. 15.2 If changes are material, we will update the Version/Last Updated date and provide notice (e.g., by email or prominent in-Platform notice) at least 7 days before changes take effect where practical. 15.3 Urgent changes required for legal, regulatory or security reasons may take effect immediately, with notice provided as soon as reasonably possible.

16. GOVERNING LAW

16.1 This Privacy Notice is governed by the laws of Barbados.