PINIT NOW INC. PRIVACY POLICY

Personal Information Protection Act (British Columbia) – Platform Privacy Notice

Effective Date: September 1, 2025
Last Updated: July 27, 2026

1.    Purpose and Scope

This Privacy Policy explains how PinIt Now Inc. (“PinIt”, “we”, “us”, or “our”) collects, uses, discloses, stores, protects, and retains personal information in connection with the PinIt Platform.

This Policy applies to Customers, Providers, applicants, website visitors, app users, account holders, persons communicating with PinIt, and other individuals whose personal information is handled by PinIt. It applies to our website, mobile application, marketplace, booking tools, messaging tools, payment facilitation tools, verification tools, review tools, customer support, marketing, and related operations.

This Policy is intended to comply with British Columbia’s Personal Information Protection Act and other applicable privacy, electronic commerce, consumer protection, anti-spam, and platform safety requirements.

2.    Accountability and Privacy Officer

PinIt is responsible for personal information under its control. PinIt has designated a Privacy Officer to oversee privacy compliance and respond to access requests, correction requests, withdrawals of consent, complaints, and privacy questions.

Privacy Officer contact: stated above.

PinIt will maintain privacy policies and practices, a complaint response process, and reasonable safeguards appropriate to the sensitivity of the personal information handled.

3.    Personal Information We Collect

The personal information we collect depends on how you use the Platform. We may collect the following categories of information:

• Account information, including name, email, phone number, password credentials, authentication information, account status, language preferences, and communication preferences.
• Customer booking information, including service address, service details, photos, access instructions, preferred dates and times, messages, complaints, reviews, ratings, receipts, refund requests, and dispute information.
• Provider information, including legal name, trade name, business address, business number, tax registration numbers, service categories, service area, licences, permits, certifications, insurance documents, availability, pricing, profile content, payment account information, payout information, identity verification information, background or eligibility screening information where applicable, and performance information.
• Payment and transaction information, including payment method token, payment authorization status, transaction amount, taxes, fees, chargebacks, refunds, payout status, and payment processor records. PinIt generally does not receive full payment card numbers where a third-party payment processor tokenizes payment data.
• Communications and content, including Platform messages, support requests, call notes, emails, chat messages, reviews, ratings, photos, profile information, and content submitted through the Platform.
• Technical and usage information, including IP address, device identifiers, browser type, operating system, app version, log data, cookies, analytics data, referral source, pages viewed, features used, approximate location derived from IP address, and security event data.
• Legal, compliance, safety, and dispute information, including fraud reports, safety complaints, regulatory inquiries, legal claims, investigation records, account enforcement records, and documentation provided in relation to disputes.

PinIt does not knowingly collect personal information from children for account registration. The Platform is intended for adults who are at least 18 years old.

4.    How We Collect Personal Information

We collect personal information directly from you when you create an Account, submit a Provider application, make a Booking, communicate through the Platform, post content, contact support, make a payment, request a refund, open a dispute, or otherwise provide information to PinIt.

We may also collect information from Providers or Customers involved in the same Booking, payment processors, identity verification providers, background screening providers where applicable, insurers, regulators, public sources permitted by law, fraud prevention providers, analytics providers, app stores, and other service providers that support Platform operation.

We may collect technical information automatically through cookies, pixels, SDKs, log files, analytics tools, and similar technologies, subject to applicable consent requirements and browser settings.

5.    Purposes for Collection, Use, and Disclosure

PinIt collects, uses, and discloses personal information for purposes that a reasonable person would consider appropriate in the circumstances, including:

• creating, administering, securing, verifying, and supporting Accounts;
• operating the Platform, displaying Provider profiles, enabling search, matching, ranking, bookings, messages, payments, refunds, reviews, and support;
• facilitating communication and transactions between Customers and Providers;
• processing payments, payouts, Platform Fees, invoices, receipts, chargebacks, refunds, taxes, and accounting records;
• assessing Provider eligibility, licenses, insurance, identity, safety, compliance, and service category suitability;
• monitoring Platform integrity, detecting fraud, preventing circumvention, enforcing contracts, and protecting safety and security;
• responding to complaints, disputes, service issues, legal claims, investigations, regulatory inquiries, and law enforcement requests;
• improving, testing, analyzing, maintaining, and developing the Platform, including search, ranking, quality, safety, and customer support functions;
• sending transactional, administrative, safety, booking, payment, account, and legal notices;
• sending marketing messages where permitted by law and consented to where required;
• conducting business transactions, audits, compliance reviews, insurance claims, financing, restructuring, mergers, acquisitions, or sale of assets; and
• any other purpose disclosed at the time of collection or permitted or required by law.

6.    Consent

PinIt obtains consent to collect, use, and disclose personal information except where consent is not required or where the law permits or requires collection, use, or disclosure without consent.

Consent may be express, implied, deemed, or given through use of the Platform, depending on the sensitivity of the information and the circumstances. For example, when a Customer books a Provider, the Customer consents to PinIt sharing necessary service details with that Provider. When a Provider applies to list Services, the Provider consents to PinIt using submitted information for onboarding, verification, compliance, Platform operation, and payment purposes.

PinIt will not require consent to collect, use, or disclose personal information beyond what is necessary to provide the Platform or for purposes permitted by law as a condition of supplying products or services.

You may withdraw consent on reasonable notice, subject to legal, contractual, operational, fraud-prevention, safety, accounting, tax, dispute, and technological limitations. If you withdraw consent, certain Platform features may no longer be available and PinIt may be unable to provide services to you.

7.    Disclosure and Sharing of Personal Information

PinIt may disclose personal information as reasonably necessary for the purposes described in this Policy, including to:

• Customers and Providers involved in the same Booking, including names, service details, service address, contact information, messages, photos, attendance information, and dispute information necessary for the Booking;
• payment processors, financial institutions, card networks, fraud prevention providers, accounting providers, and payout providers;
• identity verification, background screening, licence verification, insurance verification, and safety providers, where applicable;
• hosting, cloud infrastructure, database, analytics, customer support, messaging, email, SMS, app store, mapping, security, and technology service providers;
• professional advisors, insurers, auditors, consultants, legal counsel, and corporate service providers;
• regulators, courts, tribunals, law enforcement, government authorities, and other persons where PinIt believes disclosure is required or permitted by law, necessary to enforce rights, or necessary to protect safety, security, or legal interests;
• buyers, sellers, lenders, investors, successors, or affiliates in connection with a proposed or completed financing, merger, acquisition, restructuring, sale of shares or assets, or other business transaction; and
• other persons with your consent or as otherwise permitted or required by law.

PinIt does not sell personal information in the ordinary course of business.

8.    Cross-Border Processing and Service Providers

PinIt and its service providers may store, access, or process personal information in British Columbia, elsewhere in Canada, the United States, or other jurisdictions where service providers operate. Personal information processed outside British Columbia may be subject to the laws of those jurisdictions.

PinIt uses contractual and other reasonable measures designed to protect personal information handled by service providers, including requiring service providers to use personal information only for authorized purposes and to maintain safeguards appropriate to the sensitivity of the information.

9.    Cookies, Analytics, and Similar Technologies

PinIt may use cookies, pixels, SDKs, local storage, log files, analytics tools, and similar technologies to operate the Platform, remember preferences, authenticate users, improve performance, measure usage, detect fraud, secure accounts, troubleshoot issues, and understand how Users interact with the Platform.

You may be able to adjust cookie settings through your browser or device. Some Platform features may not function properly if cookies or similar technologies are disabled. Where required by law, PinIt will obtain consent for non-essential cookies or similar technologies.

10. Automated Tools, Ranking, and Platform Integrity

PinIt may use automated tools to help operate the Platform, including search ranking, provider visibility, fraud detection, safety review, payment risk review, identity verification, service category filtering, account status review, dispute triage, spam detection, and content moderation support.

Automated tools may consider information such as location, service category, availability, responsiveness, completion rate, cancellation history, ratings, dispute history, payment risk, account status, and compliance signals. PinIt may also conduct human review where appropriate.

11. Marketing and Commercial Electronic Messages

PinIt may send transactional and administrative messages related to Accounts, Bookings, payments, safety, legal notices, policy updates, and Platform operation.

PinIt will send marketing or promotional commercial electronic messages only where permitted by Canada’s anti-spam legislation and other applicable laws. Where required, PinIt will obtain consent, identify the sender, provide contact information, and include an unsubscribe mechanism. You may unsubscribe from marketing messages at any time, but you may continue to receive transactional, administrative, safety, legal, and account messages.

12. Retention

PinIt retains personal information only as long as reasonably necessary for the purposes for which it was collected, for legal or business purposes, to provide the Platform, complete transactions, manage accounts, handle disputes, prevent fraud, comply with accounting obligations, meet regulatory requirements, enforce agreements, and protect legal rights.

If PinIt uses personal information to make a decision that directly affects an individual, PinIt will retain that information for at least one year after using it so that the individual has a reasonable opportunity to request access, unless a longer retention period is required or permitted by law.

When personal information is no longer required, PinIt will destroy it, securely delete it, anonymize it, or remove the means by which it can be associated with identifiable individuals, subject to backup, legal hold, and technical limitations.

13. Safeguards

PinIt uses reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of personal information, which may include access controls, authentication, encryption or tokenization where appropriate, role-based permissions, logging, monitoring, employee or contractor confidentiality obligations, secure hosting, device security, incident response procedures, and service provider controls.

No method of transmission or storage is completely secure. Users are responsible for protecting their credentials, using strong passwords, keeping devices secure, and promptly notifying PinIt of suspected unauthorized account access.

14. Access, Correction, and Complaints

You may request access to your personal information or request correction of inaccurate or incomplete personal information under PinIt’s control by contacting the Privacy Officer in writing and providing sufficient detail to identify the information requested or correction sought.

PinIt will make reasonable efforts to assist applicants and respond accurately and completely within the time required by applicable law, subject to lawful exceptions, identity verification, fees permitted by law, and extensions permitted by law.

If PinIt refuses access or correction in whole or in part, PinIt will provide reasons where required by law. You may contact PinIt’s Privacy Officer with privacy complaints. You may also have the right to contact the Office of the Information and Privacy Commissioner for British Columbia.

15. Accuracy

PinIt makes reasonable efforts to ensure that personal information is accurate and complete where it is likely to be used to make a decision that affects the individual or is likely to be disclosed to another organization. Users must keep Account and Provider information current and accurate.

16. Children and Youth

The Platform is not intended for children or for account creation by persons under 18 years old. PinIt does not knowingly permit children to create Accounts. If PinIt learns that an Account has been created by a person under 18, PinIt may suspend or delete the Account and related information, subject to legal, safety, and dispute-retention requirements.

If a Booking involves a location where children may be present, Users and Providers must comply with all safety, privacy, supervision, and legal requirements and must not submit or share information about children except as strictly necessary for the Booking and permitted by law.

17. Privacy Breaches and Security Incidents

If PinIt becomes aware of unauthorized access, collection, use, disclosure, copying, modification, disposal, loss, or similar risk involving personal information, PinIt will assess the incident and take reasonable steps appropriate in the circumstances. PinIt will notify affected individuals, regulators, service providers, payment processors, law enforcement, or others where required by law or where PinIt considers notification appropriate to reduce risk or protect individuals.

18. Changes to This Privacy Policy

PinIt may update this Privacy Policy from time to time. Updated versions will be posted on the Platform or otherwise made available. If changes are material, PinIt will provide notice by reasonable means, which may include Platform notice, email notice, or requiring renewed consent where required by law.

Continued use of the Platform after an updated Privacy Policy becomes effective means you acknowledge the updated Policy, subject to any consent requirements under applicable law.

19. Contact

Questions, access requests, correction requests, withdrawals of consent, and complaints should be directed to:

PinIt Now Inc.
Attention: Privacy Officer
1903-120 Milross Avenue, Vancouver, British Columbia, V6A 4K7, Canada
Email: support@pinitnow.com
Phone: +1 604 799 9971