ROOTSY MARKETPLACE INC.

PRIVACY POLICY

Effective Date: November 01, 2025

Last Updated: November 01, 2025

Governing Law: Province of Ontario and the laws of Canada

applicable therein

1. INTRODUCTION

Rootsy Marketplace Inc. (“Rootsy,” “we,” “our,” or “us”)

respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose,

store, and protect personal information obtained through the Rootsy website,

seller dashboard, buyer accounts, and related services (collectively, the

“Platform”).

By accessing or using the Platform, you consent to the

collection, use, and disclosure of your information as described in this

Policy.

2. WHO WE ARE

Rootsy Marketplace Inc. is a federally incorporated Canadian

company headquartered in Ontario.

Rootsy operates an online marketplace that connects Canadian

buyers, sellers, and logistics partners and facilitates transactions through

third-party payment and logistics providers.

3. SCOPE OF THIS POLICY

This Privacy Policy applies to personal information

collected from buyers, sellers, logistics partners, website visitors, and other

users of the Platform.

This Policy does not apply to third-party websites,

services, or platforms that may be linked to or integrated with Rootsy.

4. INFORMATION WE COLLECT

We may collect personal information that you provide

directly, including your name, email address, phone number, mailing address,

billing and shipping details, login credentials, business information, tax or

registration details (for sellers), and payment-related identifiers.

We may also collect information automatically when you use

the Platform, including IP address, browser type, device information, access

times, pages viewed, and usage activity.

In addition, we may receive limited information from

third-party service providers such as payment processors, logistics partners,

and analytics providers, solely to support Platform operations.

5. HOW WE USE YOUR INFORMATION

We use personal information to create and manage user

accounts, process orders and payments, coordinate shipping and delivery,

provide customer support, communicate important updates, prevent fraud,

maintain Platform security, comply with legal obligations, and improve Platform

performance.

We may also use contact information to send optional

marketing or promotional communications, which you may opt out of at any time.

Rootsy does not sell or rent personal information to third

parties.

6. DISCLOSURE OF INFORMATION

We may disclose personal information to trusted third-party

service providers who assist in operating the Platform, including payment

processors, logistics providers, hosting services, and analytics tools.

Such disclosures are limited to what is necessary for

service delivery and are subject to confidentiality and data-protection

obligations.

We may also disclose information where required by law,

court order, regulatory authority, or to protect the rights, safety, or

property of Rootsy, its users, or the public.

7. DATA RETENTION

We retain personal information only for as long as necessary

to fulfill the purposes described in this Policy, comply with legal and

regulatory requirements, resolve disputes, and maintain accurate records.

Transactional and financial records are typically retained

for up to seven years, in accordance with Canadian legal and tax requirements.

When information is no longer required, it is securely

deleted or anonymized.

8. DATA SECURITY

Rootsy uses reasonable administrative, technical, and

physical safeguards to protect personal information against unauthorized

access, loss, misuse, or disclosure.

These measures may include encryption, secure servers,

access controls, and monitoring systems.

However, no method of transmission or storage is completely

secure, and Rootsy cannot guarantee absolute security. Users are responsible

for safeguarding their account credentials.

9. COOKIES & TRACKING TECHNOLOGIES

Rootsy uses cookies and similar technologies to support

Platform functionality, remember user preferences, analyze traffic, and improve

user experience.

You may adjust your browser settings to disable cookies, but

some Platform features may not function properly as a result.

10. YOUR PRIVACY RIGHTS (CANADA)

Under Canadian privacy laws, including PIPEDA, you have the

right to request access to your personal information, request corrections to

inaccurate information, withdraw consent for certain uses, and inquire about

how your information is handled.

Requests may be submitted using the contact information

provided below. Rootsy will respond within a reasonable timeframe as required

by law.

11. INTERNATIONAL DATA PROCESSING

Rootsy primarily stores data in Canada. However, some

third-party service providers may process data outside Canada.

When this occurs, Rootsy takes reasonable steps to ensure

that personal information remains protected through contractual safeguards

consistent with Canadian privacy standards.

12. CHILDREN’S PRIVACY

The Platform is not intended for individuals under the age

of 18.

Rootsy does not knowingly collect personal information from

minors. If such information is discovered, it will be deleted promptly.

13. CHANGES TO THIS PRIVACY POLICY

Rootsy may update this Privacy Policy from time to time to

reflect legal, operational, or technological changes.

Updates take effect upon posting on the Platform. Continued

use of the Platform after changes are posted constitutes acceptance.

14. CONTACT INFORMATION

Privacy Officer

Rootsy Marketplace Inc.

Email: contact@rootsy.ca