To ensure that you receive the full benefits of our services, and to enable the Company to provide services to you effectively and efficiently, the Company intends to process your personal data as described below.

Purposes	Types of Personal Data	Lawful Basis
To provide access to the system and its general functionality.	- Aggregated Data - Usage Data	- Legitimate Interest
To register, log in, and provide access to the Big Point membership system and its related features and functionalities.	- Identity Data - Identification Document - Contact Data	- Compliance with Legal Obligations - Necessary for Performance of Contract - Legitimate Interest
To process the necessary data for product purchases, order confirmation, and the preparation and management of customer orders.	- Identity Data - Contact Data - Transaction Data - Financial Data*	- Compliance with Legal Obligations - Necessary for Performance of Contract - Legitimate Interest
To send essential service notifications, such as order status updates, delivery alerts, service updates, or system outage notifications, as well as to manage optional notifications activated by users, including benefit-related or marketing alerts.	- Technical Data - Transaction Data - Location Data	- Legitimate Interest (Applicable only for essential notifications, such as updates to policies, terms, or conditions that are necessary for service delivery.) - Explicit Consent
To process and use the necessary personal data for issuing full tax invoices in accordance with tax laws, including verifying the accuracy of purchaser information, preparing and retaining tax documents, submitting required information to relevant authorities as mandated by law, and recording transaction data for accounting and tax audit purposes.	- Identity Data - Identification Document - Contact Data - Transaction Data	- Compliance with Legal Obligations - Necessary for the Performance of a Contract
To process the necessary data for delivering products to customers, including recording and verifying delivery address information, preparing and executing logistics operations, tracking delivery status, and coordinating with delivery service providers or other logistics partners to ensure accurate, timely, and traceable delivery of products.	- Identity Data - Contact Data - Transaction Data - Location Data	- Necessary for Performance of Contract - Legitimate Interest
To notify and facilitate customers in exercising their benefits, including identifying and verifying their identity for the purpose of providing such entitlements.	- Identity Data - Identification Document - Contact Data	- Compliance with Legal Obligations - Necessary for Performance of Contract - Legitimate Interest
To exercise legal rights and comply with legal obligations related to the Company’s products and services.	- Identity Data - Identification Document - Contact Data	- Compliance with Legal Obligations - Necessary for Performance of Contract - Legitimate Interest
To ensure the safety and security of service usage, and to disclose relevant information to competent authorities for monitoring, preventing, and protecting against fraud, criminal activities, or misuse of services.	- Identity Data - Identification Document - Contact Data - Transaction Data - Communication Data	- Compliance with Legal Obligations - Necessary for Performance of Contract - Legitimate Interest
To collect and analyze usage data, behavioral patterns, and interactions with various in app features to assess system quality, improve user experience, enhance product development, and optimize service performance.	- Aggregated Data - Transaction Data - Communication Data - Technical Data - Usage Data	- Legitimate Interest
To contact and process service requests submitted through the contact center system.	- Identity Data - Contact Data - Transaction Data - Communication Data	- Necessary for Performance of Contract - Legitimate Interest

 

*Credit or debit card information provided by users during the payment process is transmitted exclusively through encrypted channels directly to certified payment service providers that comply with the Payment Card Industry Data Security Standard (PCI DSS). The Company’s systems do not store card security codes (CVV/CVC) and do not retain full card numbers. The payment service provider may generate a token, an irreversible substitute for the actual card number, to facilitate secure future transactions. The Company will store only the token and masked card numbers in accordance with the principles of data minimization and the security measures required by law.

In general, the Company does not intend to collect or use information relating to your religion and/or blood type that may appear on a copy of your national identification card. If you submit a copy of your identification card to the Company, please ensure that these details are redacted in advance. However, if you do not redact such information, it will be deemed that you allow to the Company redacting it on your behalf, and the document will remain valid and legally effective even after redaction. In the event that the Company is unable to redact such information due to technical limitations, the Company will collect and use this specific portion of the data solely for the purpose of verifying your identity.