Privacy Policy of the AvenEzer Business Directory In accordance with the GDPR and PIPEDA. Version of October 23, 2026

1. What data we collect We may collect the following categories of personal data: - Identification data: name or company name; email address; phone number (if provided). - Account and profile data: business listings and descriptions, services, photos and logos uploaded by the profile owner, settings. - Business ownership verification data: documents or photos the user provides for the "This is my business" verification procedure. - Payment data: transaction identifiers and payment status (without payment card details or bank details — these are processed by the payment provider). - Consent data: the fact, date and time, and the version of the Terms of Use and of this Policy that the user agreed to at payment. - Profile statistics: the number of profile views and clicks through to contact links (phone, website, email, social networks). - Technical data: IP address; device type, browser, operating system; log files and usage data. - Cookies and tracking: session cookies; analytics and performance cookies.

2. Legal bases for processing (GDPR) For users in the European Union, we process personal data on the following bases: performance of a contract; the user's consent; legitimate business interests; compliance with legal obligations.

3. Purposes of data processing We use personal data to: create and manage accounts; provide the platform's services and features; process payments and keep records of payments and consents; carry out moderation and verification of rights to profiles; show owners the statistics of their profiles; communicate with users; improve functionality and security; meet legal and regulatory requirements; conduct analytics and marketing (with an opt-out option).

4. Data storage and security We apply reasonable administrative, technical and organizational measures to protect personal data. Data is stored only as long as necessary to achieve its purpose or to meet legal requirements.

5. Sharing data with third parties We may share limited personal data with trusted third parties solely for operational purposes, including: PayPal (payment processing); hosting and infrastructure providers; analytics and monitoring tools; user support services. All third parties are required to process data in accordance with applicable data protection law. We do not sell personal data.

6. International data transfers As the Company is based in Canada, personal data may be transferred to and processed outside the user's country of residence. Where applicable, we rely on appropriate safeguards for the lawfulness of such transfers under the GDPR.

7. User rights (GDPR) Users may: access their personal data; request its correction or deletion; restrict or object to processing; request data portability; withdraw consent at any time; lodge a complaint with a data protection authority.

8. Deletion of account and data Users may request deletion of their account or data by contacting us. Certain data — including records of payments and consents — may be retained for legal, accounting, tax purposes, or for dispute resolution.

9. Privacy contact For privacy requests, contact: - Directory questions: info@avenezer-catalog.ink - General and legal questions: info@avenezer.ca - Phone: +1 519-871-5782 - Email subject: Privacy Request