Privacy Policy

Effective Date: 26th August, 2022

This Privacy Policy (the “Privacy Policy” or “Policy”) sets forth WEB3 LABS GROUP LTD, (“We,” “Us,” or “Our”) privacy practices in accordance with the British Virgin Islands (BVI) Data Protection Act, 2021 (the “DPA”). We respect the privacy of every individual who visits our websites and this Privacy Policy sets out certain provisions to help you understand how we make use of the data that you make available to us when you use any of our services. The information that you make available to us will be handled with appropriate care. This Policy describes our policies on the type of information that we collect about you, the usage, and the disclosure of your information in connection with your use of the services (the “Services” and each a “Service) available through our websites such as the “Nannda” platform service, the website for the production and sale of NFTs (the “Website(s)), our social media pages, emails, web applications, mobile applications and any subsequently acquired and/or developed application, as well as through our online advertisements at other websites and e-mail campaigns.

Please read the entirety of this Privacy Policy carefully before using the Services. By using or accessing any of our Services through any channel or method, and/or by accepting the Terms of Use, you agree and consent to the use, collection, disclosure and other processing of your Personal Data by us under this Privacy Policy. IF YOU DO NOT CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED IN THIS PRIVACY POLICY, PLEASE DO NOT USE OUR SERVICES OR ACCESS OUR WEBSITES.

The Services may contain links to or information about third party websites that are not within our control. We are not responsible for the privacy practices of any external website or mobile application.

We may engage third-party service providers to assist with the provision of the Services. Accordingly, your Personal Data may also be collected, used and processed by our third party service providers. This Privacy Policy therefore applies to your Personal Data collected directly by these service providers in connection with Services. However, this Privacy Policy does not apply to Personal Data collected by third party vendors for their own purposes that is not also shared with us. For example, if you submit Personal Data to create an account to access a website operated by the service provider, your Personal Data will be subject to the privacy policy of that particular service provider and not this Privacy Policy.

1. COLLECTION OF PERSONAL DATA

"Personal Data" or "Personal Information" means data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which an organisation has or is likely to have access.

Please note that in using our Services we may also automatically collect the following information from you:

(a) your Internet Protocol (“IP”) address;

(b) your locations;

(c) information about your browsing activity such as your browser type, Internet service provider, referring/exit pages, the files viewed on the Site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream datal

(d) device information (such as hardware model and serial number); and

(e) any communications between you and another user of our Services

Please note that we may also may collect information through the use of cookies. If you do not wish for your Personal Data to be collected via cookies on the Websites, you may adjust your internet browser settings to disable, block or deactivate cookies, by deleting your browsing history and clearing the cache from your internet browser.

In the event that you provide information relating to a third party to us, you represent and warrant that you have validly obtained the consent, license and permission of the third party to share and transfer his/her Personal Data to us, and for us to collect, store, use and disclose that data in accordance with this Privacy Policy.

2. USE OF PERSONAL DATA

We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent. We use personal information collected via our Website for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations. We indicate the specific processing grounds we rely on next to each purpose listed below.

We use the information we collect or receive: To send administrative information to you. We may use your personal information to send you product, service and new feature information and/or information about changes to our terms, conditions, and policies. To protect our Services. We may use your information as part of our efforts to keep our Website safe and secure (for example, for fraud monitoring and prevention). To enforce our terms, conditions and policies for business purposes, to comply with legal and regulatory requirements or in connection with our contract. To respond to legal requests and prevent harm. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

The Purposes listed may continue to apply even in situations where your relationship with us has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under any contract with you).

We may use and disclose automatically collected information (including aggregated information), which is not Personal Data, for any purpose, except where we are restricted by applicable law. If we combine any automatically collected information with Personal Data or other information which may be used to identify an individual, the combined information will be treated by us as Personal Data in accordance with this Privacy Policy.

3. DISCLOSURE OF PERSONAL DATA

We may share and permit the sharing of your Personal Data with third parties and our affiliates for any of the above mentioned Purposes. In sharing your Personal Data with them, we endeavour to ensure that the third parties and our affiliates keep your Personal Data secure from unauthorised access, collection, use, disclosure, processing or similar risks and retain your Personal Data only for as long as they need your Personal Data to achieve the above mentioned purposes.

We may share your Personal Data with the following categories of third parties:

(a) Our business partners, service providers, professional advisers, vendors and agents who assist us in performing certain aspects of our Services (including processing transactions, carrying out compliance check, data storage, management and analysis, maintenance of the Services, legal, audit, insurance and marketing services). These parties will only have access to your Personal Data to the extent necessary to perform their functions;

(b) Our potential investors, purchasers and commercial counterparties. We may share your Personal Data with any person who wishes to invest in Company or whom we intend to enter into a business combination with (such as a purchase, sale, lease, merger or amalgamation, or any other acquisition, disposal or financing);

(c) Any third party claimants or potential third party claimants;

(d) Financial institutions, your card issuing bank or payment service provider in respect of any issues arising from or in connection with a transaction through our Services; and

(e) Governmental and regulatory authorities: We may share your Personal Data with competent governmental and regulatory agencies in BVI or other countries, including investigating officers and judicial authorities in the relevant jurisdictions.

We may also share your Personal Data with other third parties if you have separately consented to such disclosure. In such a case, any information which we share with such third parties shall be used for the purposes described when we obtained your consent.

We may disclose your Personal Data if required to do so by law or if we believe that such action is necessary to prevent fraud or crime or to protect our Services or the rights, property or personal safety of any person. We may be prevented from obtaining your consent for, or informing you of, such disclosure. Any information which we share in this circumstance shall be used for the purposes required or permitted under the applicable laws or regulations

4. PERSONAL DATA TRANSFER

Your Personal Data may be transferred to other countries for processing, and by using any part of the Services, you consent to the transfer, use and processing of your Personal Data to countries outside of BVI which may have different Personal Data protection rules than in BVI. However, the level of protection that will be applied to the transferred Personal Data will be at least comparable to the protection provided under this Privacy Policy and the DPA and its regulations.

5. PERSONAL DATA RETENTION

We may retain your Personal Data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws. We will cease to retain your Personal Data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the Personal Data was collected, and is no longer necessary for legal or business purposes.

6. PERSONAL DATA PROTECTION

All information collected in connection with any of our Services (including information generated by cookies about your use of the Websites) will be stored electronically on the server of our service provider in BVI with appropriate safeguards and security measures. However, there is no guarantee that information stored by us or on our behalf may not be accessed, collected, used, disclosed, copied, modified or deleted by unauthorised parties by breach of any technical or operational safeguards in place. We will not be keeping physical files of any Personal Data.

No data transmitted via the internet can be guaranteed to be wholly secure during transmission. As such, we cannot warrant the security of any information you transmit to us or which we transmit to you before its receipt and any transmission is at your own risk. It is important that you protect against unauthorised access of your Account and information by choosing your password carefully, and keeping your password and Account secure (e.g. by signing out after using our Services).

You are at all times responsible for your own internet privacy settings. We are not responsible for the functionality, privacy or security measures of any other organisation or third-party websites, applications or services.

7. WITHDRAWAL OF CONSENT

The consent that you provide for the collection, use and disclosure of your Personal Data will remain valid until such time it is being withdrawn by you in writing. you may withdraw consent and request us to stop using and/or disclosing your Personal Data for any or all of the purposes listed above by submitting your request in writing or via email to our Data Protection Officer at the contact details provided below. However, please note that any withdrawal of your consent may have consequences, including your inability to use the Services.

Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we shall seek to process your request within ten (10) business days of receiving it.

Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing our goods or services to you and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us in writing in the manner described above.

Please note that withdrawing consent does not affect our right to continue to collect, use and disclose Personal Data where such collection, use and disclosure without consent is permitted or required under applicable laws.

8. ACCESS TO AND CORRECTION OF PERSONAL DATA

You can manage available communication preferences when you access the Website by updating your account preferences, or, where applicable, by using the “opt-out” or unsubscribe mechanism or other means provided within the communications that you receive from us.

Subject to exceptions under applicable law and regulations, you may request access to your Personal Data that we collected in connection with the Services and information about how we have used and disclosed your Personal Data within a year before your request. Subject to exceptions under applicable law and regulations, you may also request to review, correct or delete any of that Personal Data. Additional rights may also apply under applicable laws. We reserve the right to charge a nominal fee in respect of our costs in processing your request for access to Personal Data.

If you wish to make (a) an access request for access to a copy of the Personal Data which we hold about you or information about the ways in which we use or disclose your Personal Data, or (b) a correction request to correct or update any of your Personal Data which we hold about you, you may submit your request in writing or via email to our Data Protection Officer at the contact details provided below. In order to facilitate processing of your request, it may be necessary for us to request further information relating to your request. To protect your privacy and security, we will take reasonable steps to verify your identity before processing any access or correction request or withdrawal notice under this section.

Please note that a reasonable fee may be charged for an access request. If so, we will inform you of the fee before processing your request.

We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any Personal Data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the DPA).

9. UPDATING YOUR PERSONAL DATA

We generally rely on Personal Data provided by you (or your authorised representative). It is important that the Personal Data you provide to us is accurate, complete and up to date. In order to ensure that your Personal Data is complete, accurate and up to date, please update us if there are changes to your Personal Data by informing our Data Protection Officer in writing or via email at the contact details provided below. In the event you believe that the Personal Data we have about you is inaccurate, incomplete, misleading or out of date, please also inform us.

10. AMENDMENTS AND UPDATES TO POLICY

We reserve the right to update, modify, delete or otherwise make changes to this Privacy Policy at any time. Any changes to this Privacy Policy will be posted to the Website.

Any changes to this Privacy Policy will take effect and be binding on you from the time of posting the changes to the Website. If you continue to use in any Service following any changes to this Privacy Policy, you will be deemed to have accepted the changes and the updated version of this Privacy Policy.

If you do not agree with the changes, you are not allowed to use any part of our Services. Please ensure that you refer to this Privacy Policy on a regular basis to check for any changes. It is your responsibility to regularly review this Privacy Policy (and the applicable conditions).

If any provision of this Privacy Policy shall be held to be invalid, illegal or unenforceable for any reason whatsoever, the validity, illegality and enforceability of the remaining provision of this Privacy Policy shall not in any way be affected or impaired thereby.

11. CONTACT INFORMATION

You may contact our Data Protection Officer if you have any enquiries or feedback on our Personal Data protection policies and procedures, or if you wish to make any request, in the following manner:

WEB3 LABS GROUP LTD

Email: [e-mail]