Introduction

This Privacy Policy explains how Cove (Bermuda) Ltd ("Cove", "we", "us", or "our") collects, uses, shares, and protects personal information when you use Cove.bm, the Cove mobile apps, and related services (together, the "Services"). This Privacy Policy is intended to help you understand:

• What information we collect;
• How we use it;
• When we share it; and
• Your choices and rights.

If you do not agree with this Privacy Policy, do not use the Services.

1. Who We Are

Cove is a Bermuda-based marketplace platform and delivery coordination service. For the purposes of Bermuda's Personal Information Protection Act 2016 ("PIPA"), Cove is generally the "organisation" responsible for personal information we use in operating the Services (for example, account, order, delivery, and support information).

2. Information We Collect

A) Information you provide to us

• Account information: name, email, phone number, password (encrypted/hashed).
• Profile information: saved addresses, preferences, communication settings.
• Order information: items purchased, quantities, special instructions, receipts.
• Support information: messages, emails, call records, complaint details.
• Identity verification info (if needed for fraud prevention): date of birth or photo ID (collected securely when necessary).

B) Information collected automatically

• Device and log data: IP address, browser type, app version, device IDs, OS, timestamps.
• Usage data: pages viewed, clicks, session duration, error logs.
• Approximate location from IP; precise location if enabled in app (e.g., for delivery routing).

C) Information from third parties

• Payment info from processors (we do not store full card numbers).
• Merchant and delivery updates (order status, substitutions, delivery confirmations).
• Analytics and advertising partners (where enabled) for measurement and reporting.

3. How We Use Personal Information

• Provide, operate, and maintain the Services;
• Create and manage your account;
• Process orders and payments;
• Coordinate delivery (sharing info with Merchants and Delivery Partners);
• Communicate about orders, deliveries, and account;
• Provide customer support and resolve disputes;
• Prevent fraud, unauthorized access, and abuse;
• Improve and personalize the Services (e.g., recommendations);
• Send marketing communications (where permitted and based on preferences);
• Comply with legal obligations and enforce our terms.

4. How We Share Personal Information

A) With Merchants

We share order details so Merchants can prepare orders and handle product issues.

B) With Delivery Partners

We share delivery details so Delivery Partners can complete delivery.

C) With Service Providers

Third-party providers for hosting, analytics, communications, support, and payment processing. They must protect personal information and use it only to provide services.

D) For legal reasons

• Comply with a legal obligation or lawful request;
• Protect the rights, safety, and security of Cove, users, Merchants, Delivery Partners, or the public;
• Investigate fraud or security issues.

E) Business transfers

In mergers, acquisitions, financing, reorganization, or asset sales, personal information may be transferred with appropriate safeguards.

5. Cookies and Similar Technologies

We may use cookies, SDKs, pixels, and similar tech to keep you signed in, remember preferences, measure performance, and understand user interaction. You can control cookies via your browser; some features may not function if disabled.

6. Marketing Choices

You can opt out of marketing emails via unsubscribe links or app settings. Non-marketing messages about account, orders, deliveries, and service updates may still be sent.

7. Data Retention

We retain personal information only as long as necessary to provide Services, maintain records, resolve disputes, and comply with laws. When no longer needed, we delete, anonymize, or securely dispose of it.

8. Security

We use reasonable safeguards to protect personal information. No transmission/storage method is completely secure. You are responsible for protecting your password, devices, and logging out of shared devices.

9. International Transfers

Some providers may process/store personal information outside Bermuda. Transfers are protected consistent with PIPA and industry standards.

10. Your Rights and Requests

Depending on law, you may request access, correction, or deletion of personal information. Contact us to make requests; identity verification may be needed. You may also complain to Bermuda's Privacy Commissioner if rights are violated.

11. Children's Privacy

The Services are not intended for children under 13. If a child provides personal information without consent, contact us for appropriate action.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date will change, and additional notice may be provided in the Services.

13. Contact Us

Privacy Officer Email: info@cove.bm