Cookies & Tracking Technologies Policy

Cookies and Tracking Technologies Policy – Kush One Platform

Effective Date: __ / __ / 20__
Last Updated: __ / __ / 20__

Article 1: Scope of the Policy

This Policy explains how the Kush One platform uses cookies and similar technologies when you visit the website or use its applications and digital services.

This Policy forms an integral supplement to the Privacy and Data Protection Policy and the General Terms of Use of the Platform.

Article 2: Definition

Cookies are small electronic files stored on the user’s device or browser to enable certain Platform functions, remember preferences, or analyze usage.

Similar technologies include, depending on the tools used:

1. Local storage units.
2. Pixels and web beacons.
3. Device and application identifiers.
4. Analytics and performance measurement tools.
5. Software development kits within applications.
6. Fraud-prevention and account-protection technologies.

Article 3: Types of Cookies

Necessary cookies
Used to operate and secure the Platform, including:

• Login and session management.
• Saving the shopping cart.
• Processing orders and payments.
• Account protection and fraud prevention.
• Saving privacy choices.

They cannot be disabled through Platform settings when required to provide the requested service.

Preference cookies
Used to save language, location, settings, display mode, and other choices set by the user.

Performance and analytics cookies
Used to understand how the Platform is used, measure visits, performance, and failures, and improve services and user experience.

Advertising and marketing cookies
Used to measure campaigns, personalize advertisements, limit repetition, and understand interaction with them. They may be set by the Platform or independent advertising parties.

Article 4: Purposes of Use

Cookies and tracking technologies may be used for the following purposes:

1. Operating the website and applications.
2. Login and account protection.
3. Saving the shopping cart and preferences.
4. Processing orders and payments.
5. Preventing fraud and unlawful activities.
6. Measuring performance and detecting failures.
7. Analyzing and improving Platform usage.
8. Personalizing content and results.
9. Measuring advertisements and marketing campaigns.
10. Complying with legal and security requirements.

Article 5: Consent

Non-essential cookies are not activated before the Platform obtains the user’s express consent, where consent is legally required or adopted within Platform settings.

On the first visit, the user is offered:

• Accept all cookies.
• Reject non-essential cookies.
• Customize choices by category.

Rejecting non-essential cookies does not affect the ability to use the Platform’s basic functions, although some optional features may not work fully.

Article 6: Withdrawal of Consent

The user may modify choices or withdraw consent at any time through the cookie settings link, account settings, or the application.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Article 7: Persistent and Session Cookies

Cookies may be:

1. Session cookies: deleted when the browser is closed or the session ends.
2. Persistent cookies: retained for a defined period or until deleted by the user.

The Platform does not retain any cookie longer than necessary for its purpose, subject to legal and security requirements.

Article 8: First-Party and Third-Party Cookies

The Platform may use:

1. First-party cookies: set by Kush One to operate its services.
2. Third-party cookies: set by parties providing analytics, advertising, payment, support, or technical protection services.

Processing by third parties is subject to their policies and terms, while the Platform undertakes to select suitable service providers and restrict data use to the agreed service.

Article 9: Analytics Tools

Analytics tools may be used to measure:

• Number of visits.
• Most used pages and products.
• Visit source.
• Duration of use.
• Device and browser type.
• Failures and technical issues.
• Interaction with features and advertisements.

The Platform seeks to minimize the data used and not to use it to identify the user except to the extent necessary and lawful.

Article 10: Targeted Advertising

After obtaining the required consent, browsing and interaction data may be used to display more relevant advertisements and measure campaign results.

Personal data is not sold to advertisers, and an advertiser does not obtain the user’s identity unless the user provides it directly or sharing is necessary and lawful to perform a transaction.

Article 11: Security and Fraud Prevention

Necessary technologies may operate without separate consent when required to:

1. Protect accounts.
2. Prevent unauthorized access attempts.
3. Detect unusual operations.
4. Protect payments.
5. Prevent misuse of the Platform.
6. Preserve evidence and security logs.

These technologies are not used for marketing purposes unless the required consent or legal basis exists.

Article 12: Data That May Be Collected

The technologies used may collect:

• IP address.
• Device or browser identifier.
• Device type and operating system.
• Language and time zone.
• Pages and products visited.
• Date and duration of the visit.
• Referral source.
• Interaction with advertisements.
• Login status.
• Failure and security data.

Data that may identify the user is subject to the Privacy and Data Protection Policy.

Article 13: Managing Cookies from the Browser

The user may delete or block cookies from browser or device settings.

Blocking necessary cookies may prevent login, saving the shopping cart, or using certain basic functions.

The Platform is not responsible for feature failure resulting from blocking settings chosen by the user.

Article 14: Mobile Applications

Platform applications may use device identifiers, software development kits, performance measurement tools, and notifications.

The user may control certain permissions from device settings, including location, notifications, and advertisements, with possible impact on related services.

Article 15: Retention Period

The duration of each cookie or technology is determined according to its purpose. Data is deleted or de-identified when the legitimate need ends, unless retention is required for legal or security purposes or dispute resolution.

Article 16: Data Transfer

Data generated by analytics, hosting, or advertising tools may be processed outside Sudan.

The Platform takes appropriate contractual and organizational measures to protect the data, subject to mandatory laws applicable to the user or the transaction.

Article 17: Cookie Register

The Platform maintains an updated register of the technologies used, including where available:

The register is published or made available through the cookie settings center.

Article 18: Updating Tracking Tools

No new analytics, advertising, or tracking tool may be added before:

1. Defining its purpose.
2. Reviewing the data it collects.
3. Assessing its necessity and risks.
4. Reviewing the provider’s terms.
5. Including it in the tools register.
6. Updating the consent banner where needed.
7. Entering into the necessary data-protection agreements.

Article 19: Children’s Data

The Platform does not use tracking technologies to target advertising at minors, and does not direct its commercial services to persons who lack the required legal capacity.

Article 20: Amendment of the Policy

The Platform may amend this Policy when tools, purposes, or legal requirements change.

Amendments are published with their effective date, and new consent is requested if a material change occurs in the use of non-essential technologies.

Article 21: Contact

Privacy and cookie inquiries should be directed to:

Kush Integrated Solutions Co. Ltd.
Kush One Platform

• Privacy Email: ______________
• Phone: ______________________________
• Registered Address: __________________________
• Data Protection Officer: ____________________