Privacy Policy of “Yerevan Mall” E-Application

Yerevan, 2026

Please read this Privacy Policy of the “Yerevan Mall” e-application before using it. By registering (signing up) and using the Application, the User agrees to this Policy and undertakes to comply with it.

1. Personal Data Collected

For full registration and use of the Application, we may collect the following personal data from the User:

• Name and surname
• Gender
• Email address
• Telephone number
• Date of birth (if provided)
• Technical data related to the use of the Application (device type, operating system, IP address, usage statistics)
• Location data of the device, if the User has granted the corresponding permission (see section 4)

If payments are made through the Application, payment-related information will be processed by the relevant payment providers. We do not store full payment card details on our own systems.

2. Confidentiality and Legal Basis

We take the confidentiality of our Users’ personal data seriously and apply appropriate organizational and technical measures to protect it.

We strictly adhere to the provisions of the RA Law on Personal Data Protection with respect to the personal data provided by our Users.

We do not sell Users’ personal data, do not illegally provide it to third parties, and do not publish it for commercial purposes.

Personal data may be provided to third parties only:

• In cases prescribed by the legislation of the Republic of Armenia
• To service providers involved in the operation of the Application (e.g. payment systems, SMS/email providers, hosting and IT support), strictly for the purposes mentioned in this Policy

Such parties process the data only on our instructions and are obliged to keep it confidential.

3. Purposes of Processing

We may use the User’s personal data for the following purposes:

Account and Application Functionality

• To create and manage the User’s account
• To provide access to the Application’s features and loyalty program (if applicable)
• To process purchases, reservations, or other transactions and send confirmations

Service and Operational Communication

• To send important service messages related to account status, security, technical updates, and changes to the Application or this Policy
• To provide customer support and respond to User requests

Marketing Communications (Email, SMS, Push)

When you sign up in the Application or provide your contact details, we may use your data to send you marketing communications about Yerevan Mall, including:

• Special offers, discounts, and promotions
• News about events, campaigns, loyalty programs, and partner offers
• Personalized recommendations based on your interactions with the Application

These communications may be sent via email, SMS, in-app notifications, or push notifications.

You can opt out of marketing communications at any time by:

• Using the “unsubscribe” link in emails
• Following the STOP/opt-out instructions in SMS messages (where available)
• Changing notification settings in the Application (where available)
• Contacting us via the contact details provided below

Opting out of marketing does not affect service or transactional messages (e.g. purchase confirmations, security alerts).

Analytics and Improvement

• To analyze usage of the Application and improve its performance, content, and user experience
• To develop new features and services

Legal Obligations and Protection

• To comply with legal obligations, respond to lawful requests from state authorities
• To protect our rights, property, Users, and the security of the Application

4. Location Data

The Application uses the location of the User's device to provide location-based functionality, in particular geo-targeted notifications (geozones).

What we collect:

• Approximate (network-based) and precise (GPS) location of the device
• Events of entering or leaving predefined geographic zones (for example, the territory of Yerevan Mall)

Why we use it:

• To send relevant push notifications when the User is near or inside Yerevan Mall — offers, events, reminders
• To display content relevant to the User's location within the Application
• To analyse aggregated, non-identifying statistics on the use of the Application

How it works:

• Location data is collected only after the User grants location permission at the operating system level (iOS / Android)
• If the User grants "Always" / background permission, geozone monitoring may also operate while the Application is not open. This is used solely to trigger the notifications described above
• The User may withdraw location permission at any time in the device settings, or disable notifications in the Application. This does not restrict the other functions of the Application
• We do not use location data for third-party advertising profiling and we do not sell it

Third-party processor: location and geozone processing is carried out through the push notification platform Pushwoosh (Pushwoosh Inc.), which acts as our data processor and processes the data only on our instructions and for the purposes described above. Pushwoosh privacy policy: https://www.pushwoosh.com/privacy-policy/

Retention: geozone events are stored no longer than necessary for the purposes described above, after which they are deleted or irreversibly anonymized.

5. Data Retention

We store personal data only for as long as necessary to achieve the purposes described in this Policy or as required by applicable law. After the retention period expires, data is deleted or irreversibly anonymized.

6. Security

We apply standard security measures to protect personal data from unauthorized access, loss, alteration, or disclosure. However, no system is 100% secure, and we cannot guarantee absolute protection. Users are advised to keep their login credentials confidential and not share them with third parties.

7. User Rights

Subject to the RA Law on Personal Data Protection, the User has the right to:

• Request confirmation whether we process their personal data
• Request access to their personal data
• Request correction or update of inaccurate or incomplete data
• Request deletion of personal data in cases permitted by law
• Object to or restrict certain types of processing (including marketing)
• Withdraw consent to marketing communications at any time

To exercise these rights, the User may contact us using the contact details provided in the Application or on the official Yerevan Mall website.

8. Cookies and Similar Technologies

If the Application or related web services use cookies or similar technologies:

• They may be used to remember preferences, improve user experience, and perform analytics
• Users can manage cookie settings through their browser or device settings, where applicable

Details on cookie use may be provided in a separate cookie policy.

9. Changes to This Policy

We reserve the right to update or change this Policy from time to time. In case of significant changes, we may notify Users via the Application, website, or by email. Continued use of the Application after changes take effect will be considered as acceptance of the updated Policy.