Top Banner

Privacy Statement

This Policy was last updated on 20/08/2024.

PLEASE READ THIS PRIVACY POLICY CAREFULLY TO UNDERSTAND HOW WE TREAT YOUR PERSONAL INFORMATION
AND WHAT CHOICES AND RIGHTS YOU HAVE IN THIS REGARD. IF YOU DO NOT AGREE WITH THE TERMS AND
CONDITIONS OF THIS POLICY, YOU SHOULD NOT ACCESS OR USE THE SITE.

Introduction


This site is powered by New Image (also referred to herein as "we," "us," and "our") through its relationship with M-Power
(also referred to herein as the "Store Owner"). We are committed to protecting the privacy and security of the personal
information we collect, use, share, and otherwise process as part of our business. We also believe in transparency, and we are
committed to informing you about how we treat your personal information. We have established this Privacy Policy to inform
you about the privacy practices that we apply to personal information and to inform you about your rights and choices in this
regard.

What processing activities are covered by this Policy? This Policy applies to the processing of personal information when
you visit online.mpower.solutions (the "Site").

Who is responsible for your personal information? If you are a user in the European Union (the “EU”) or European
Economic Area (“EEA”), for purposes of the EU General Data Protection Regulation, 2016/679 (the “GDPR”), if you are a user
in Mexico, for the purposes of the Federal Law on the Protection of Personal Data Held by Private Parties (the “LFPDP”), or if
you are a user in Brazil, for the purposes of the Brazilian General Data Protection Law (the "LGPD"), we act as a data controller
with respect to the personal information described in the "Personal Information for Which New Image is the Controller" section of
this Policy. In this role, we are responsible for implementing the applicable data protection principles and for safeguarding
personal information. The Store Owner acts as the data controller for any other personal information processed by New Image via
the Site. Please see the "Personal Information for Which the Store Owner is the Controller" section of this Policy. New Image and
the Store Owner act as joint controllers with respect to the personal information described in the "Personal Information for
Which New Image and the Store Owner are Joint Controllers"
section of the Store Addendum at the end of this Policy. As
applicable, New Image and/or the Store Owner are responsible for implementing the applicable data protection principles and for
safeguarding personal information.

How do we collect and use personal information?


Personal Information for which New Image is the Controller. As a data controller, we collect and process the following
personal information from you for the purposes set forth below.


Category
Description and Purpose
Account Information
In order to access and use certain features of the Site, you must first complete a
registration. When you create an account and register with us, we collect your
name, work email address, work telephone number, company name, company
address, username, and the password that you create.

We process Account Information to operate the Site, to provide our services to you,
to honor our terms of use and contracts, to ensure the privacy and security of our
Site and services, to maintain our databases and back-ups, to manage our
relationships with you, to communicate with you, and to keep records of our
communications with you. The legal basis for this processing is consent or, where
applicable, our legitimate interests in the proper administration of our Site and
business, the proper management of our customer relationships, and the
performance of a contract between you and us and/or taking steps, at your
request, to enter into such a contract.
Cookies and Similar Technologies
When you visit the Site, we collect cookies and use similar technologies as
described in our "Cookies and Similar Technologies" Policy, which supplements this
Policy. If you choose to disable cookies and similar technologies, some areas and
features of the Site may not work properly.

We process Cookies and Similar Technologies to analyze use of the Site and our
services, to operate the Site, to serve you the content and functionality you
request, to ensure the privacy and security of our Site and services, to develop new
services, to enhance your experience, to track visits to the Site, to provide you with
a more personal and interactive experience on the Site, and for usage analytics
purposes. We rely on your express opt-in consent for the use of marketing,
performance, and analytic cookies and similar technologies. The legal basis for
processing of strictly necessary cookies is our legitimate interests in the proper
administration of our Site and business.

Usage Information
When you visit the Site, we automatically collect information from your browser
and your device, which includes the date and time of your visit as well as your
location, Internet Protocol (IP) address or unique device identifier, domain server,
browser type, access time, and data about which pages you visit.

We process Usage Information to analyze use of the Site and our services, to
operate the Site, to serve you the content and functionality you request, to ensure
the privacy and security of our Site and services, to develop new services, to
enhance your experience, to track visits to the Site, to provide you with a more
personal and interactive experience on the Site, and for usage analytics purposes.
The legal basis for this processing is our legitimate interests in monitoring and
improving our Site and services.

Contact Us Data
If you contact us via the Site, we collect your name, email address, phone number,
country, company name, company address, your preferred contact method, and
the message that you choose to provide.

We process Contact Us Data to operate the Site, to provide our services to you, to
ensure the privacy and security of our Site and services, to maintain our databases
and back-ups, to manage our relationships with you, to communicate with you,
and to keep records of our communications with you. The legal basis for this
processing is consent or, where applicable, our legitimate interests in the proper
administration of our Site and business, the proper management of our customer
relationships, and the performance of a contract between you and us and/or taking
steps, at your request, to enter into such a contract.

Personal Information for which New Image and the Store Owner are joint Controllers. Please see the
"Personal Information for which New Image and the Store Owner are Joint Controllers"section of the Store Addendum at the end
of this Policy.

Personal Information for Which the Store Owner is the Controller. As a data controller, the applicable Store Owner
collects and processes the following personal information from you via its store for the purposes set forth below. New Image acts
only as a processor with respect to this information.

Category
Description and Purpose
Customer Information
When you use a store, the Store Owner assigns you a customer number; enables you to
purchase products; and collects your name, contact information, and purchase history.

Customer Information is processed to provide you with products/services, to manage the
relationships with you, to communicate with you, and to keep records of communications with
you. The legal basis for this processing is the Store Owner’s legitimate interests in the proper
administration of its business, the proper management of its customer relationships, and the
performance of a contract between you and Store Owner and/or taking steps, at your request,
to enter into such a contract.

Is entry of personal information required? We require entry of personal information as a part of the account registration
process. After you are authorized to access the Site, some additional Site features require additional personal information.
You can choose not to provide this additional information, but you will not be able to use those features.

Other Processing Activities. We may process any of personal information identified in this Policy when necessary for:

  • The establishment, exercise, or defense of legal claims, whether in court, administrative, or other proceedings. (The
    legal basis for such processing is our legitimate interest in the protection and assertion of our legal rights, your legal
    rights, and the legal rights of others.)

  • Obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice (The legal basis for this
    processing is our legitimate interest in the proper protection of our business.)

  • Purposes that are consistent with, related to and/or ancillary to the purposes and uses described in this Policy for
    which your personal information was provided to us.

We may process your personal information in connection with any of the purposes and uses set out in this Policy on one or
more of the following legal grounds:

  • Because it is necessary to perform the services you have requested or to comply with your instructions or other
    contractual obligations between you and us;

  • To comply with our legal obligations as well as to keep records of our compliance processes;

  • Because our legitimate interests, or those of a third-party recipient of your personal information, make the processing
    necessary, provided those interests are not overridden by your interests or fundamental rights and freedoms;

  • Because you have chosen to publish or display your personal information on a public area of the Site, such as a
    comment area;

  • Because it is necessary to protect your vital interests;

  • Because it is necessary in the public interest; or

  • Because you have expressly given us your consent to process your personal information in a particular manner.

  • We do not use personal information for making any automated decisions affecting or creating profiles other than as
    described herein.

    How do we share or disclose your personal information?

    When we are acting as the data controller or where permitted by applicable law, we may share your personal information in
    the following contexts. If you are a user in Mexico, we will provide these parties with this Privacy Policy and the purposes for
    which you have consented to data processing. If we are acting as a data processor, disclosures in the following contexts will
    be limited in accordance with the instructions from the data controller.

    Category
    Discosure Contexts
    Corporate Affiliates
    We may share your personal information with our corporate subsidiaries and
    affiliates and with their respective officers, directors, employees, accountants,
    attorneys and agents.

    Acquisitions and Similar Transactions
    We may disclose your personal information in the event of a merger,
    divestiture, restructuring, reorganization, dissolution, or other sale or transfer of
    some or all of our company assets, whether as a going concern or as part of
    bankruptcy, liquidation, or similar proceeding, in which personal information
    held by us is among the assets transferred.

    Disclosures with Your Consent
    We may ask if you would like us to share your personal information with other
    unaffiliated third parties who are not described elsewhere in this Policy. We will
    only disclose your personal information in this context with your consent.

    Legal Obligations and Rights
    We may disclose your personal information in response to subpoenas, warrants,
    court orders or other legal process, or to comply with relevant laws. We may
    also share your personal information in order to establish or exercise our legal
    rights, to defend against a legal claim, and to investigate, prevent, or take
    action regarding possible illegal activities, suspected fraud, safety of person or
    property, or a violation of our contract. We may also disclose personal
    information as needed to protect vital interests.

    Service Providers
    We may share your personal information with our service providers that need
    access to your information to provide operational or other support services on
    our behalf. Among other things, service providers help us to administer the Site;
    support our provision of services requested by you; send marketing promotions
    and communications to you about our services; provide technical support; and
    assist with other legitimate purposes permitted by law.

    Professional Advisors
    We may share your personal information with our insurers and other
    professional advisors, including attorneys and accountants, that need access to
    your information to provide operational or other support services on our
    behalf.
    Deidentified or Aggregated Data
    We may disclose aggregated information about our users, and information that
    does not identify any specific individual, such as groupings of demographic
    data and customer preferences, for new product and marketing development.

    How long do we process your information?

    We retain and use your personal information for as long as is necessary to fulfill the purposes for which it was collected, to
    comply with our business requirements and legal obligations, to resolve disputes, to protect our assets, to provide our
    services, and to enforce our agreements.

    We take reasonable steps to delete the personal information we collect when (1) we have a legal obligation to do so, (2) we
    no longer have a purpose for retaining the information, and (3) if you ask us to delete your information, unless we determine
    that doing so would violate our existing, legitimate legal, regulatory, dispute resolution, contractual, or similar obligations.
    We may also decide to delete your personal information if we believe it is incomplete, inaccurate, or that our continued
    storage of your personal information is contrary to our legal obligations or business objectives.

    To the extent permitted by law, we may retain and use anonymous, de-identified, aggregated information for performance
    reporting, benchmarking, and analytic purposes and for product and service improvement. When we delete data, it will be
    removed from our active servers and databases; but, it may remain in our archives when it is not practical or possible to
    delete it.

    We are required by law to maintain records of consumer requests submitted under the California Consumer Privacy Act and
    how we responded to such requests for at least 24 months. We only use this information for recordkeeping purposes. If you
    are a resident of California, please see the California Privacy Rights section for more information.

    How do we protect your personal information?

    We have put security measures in place to protect the personal information that you share with us from being accidentally
    lost, used, altered, or disclosed or accessed in an unauthorized manner. From time to time, we review our security procedures
    to consider appropriate new technologies and methods.

    While our security measures seek to protect the personal information in our possession, no security system is perfect, and no
    data transmission is 100% secure. As a result, while we strive to protect your information, we cannot guarantee or warrant the
    security of any information transmitted to or from the Site. Your use of the Site is at your own risk. We cannot guarantee that
    your data will remain secure in all circumstances.

    We use reasonable security measures when transmitting personal information to consumers in response to requests under
    the California Consumer Privacy Act. We have implemented reasonable security measures to detect fraudulent identity-
    verification activity and to prevent the unauthorized access to or deletion of personal information.

    The safety and security of your personal information also depends on you. Where you use a password for access to restricted
    parts of the Site, you are responsible for keeping the password confidential. Do not share your password with anyone.

    If a data breach compromises your personal information, we will notify you and any applicable regulator when we are
    required to do so by applicable law.

    Rights and choices about how we use and disclose your information

    Please use the Contact Us details at the end of this Policy to exercise your rights and choices under this Policy. If you would
    like to manage, change, limit, or delete your personal information or if you no longer want to receive any email, postal mail,
    or telephone contact from us in the future, such requests may be submitted via the "Contact Us" details at the end of this
    Policy. If you are exercising a right that is the responsibility of a Store Owner, New Image may direct you to contact the data
    controller who is responsible for responding to your request.

    Communication Preferences. If you no longer wish to receive communications from us via email, you may opt-out by
    clicking the "unsubscribe" link at the bottom of our emails or by contacting us at online@mpower.solutions and providing your
    name and email address so that we may identify you in the opt-out process. Once we receive your instruction, we will
    promptly take action.

    Cookies. You may choose to not allow analytic cookies via the cookies consent banner or set your browser to refuseall or
    some browser cookies or to alert you when cookies are being set. For more information on how to modify your browser
    settings to block or filter cookies, visit https://www.aboutcookies.org/. You may learn more about internet advertising
    practices and related consumer resources at https://www.aboutads.info/consumers/
    , https://www.networkadvertising.org/choices, and https://youronlinechoices.eu/.

    Online Tracking Signals. We do not currently recognize browser settings or signals of tracking preferences, which may
    include "Do Not Track" instructions. "Do Not Track" is a web browser setting that seeks to disable the tracking of individual
    users’ browsing activities. We adhere to the standards set out in this Policy and do not currently respond to "Do Not Track"
    signals on the Site or on third-party websites or online services where we may collect information.

    Accuracy and Updating Your Personal Information. Our goal is to keep your personal information accurate, current, and
    complete. If any of the personal information you have provided to us changes, please update it in your user/account profile,
    or let us know via the "Contact Us" details at the end of this Policy. For instance, if your email address changes, you may wish
    to let us know so that we can communicate with you. If you become aware of inaccurate personal information about you, you
    may want to update your information. We are not responsible for any losses arising from any inaccurate, inauthentic,
    deficient or incomplete personal data that you provide to us.

    Complaints. If you believe that your rights relating to your personal information have been violated, you may lodge a
    complaint with us by contacting us via the "Contact Us" details at the end of this Policy.

    California Residents

    CCPA Notice at Collection. For purposes of the California Consumer Privacy Act ("CCPA"), in collecting the information
    described above, we collect the categories of personal information listed below. If your information is collected in the
    context of a business relationship with us, it may not be covered by the CCPA.

    CCPA Category
    Description
    Identifiers
    When collecting Account Information, we will receive your name, work email
    address, work telephone number, company address, and username.

    When collecting Cookies and Similar Technologies and Usage Information, we will
    receive your Internet Protocol (IP) address or unique device identifier.

    When collecting Contact Us Data, we will receive your name, email address,
    telephone number, and company address.

    We use Identifiers as set forth in the and the "How Do We Collect and Use Personal
    Information"
    and the "How Do We Share or Disclose Personal Information"
    sections of this Policy.
    Categories of personal information
    described in the California
    Customer Records statute
    When collecting Account Information, we will receive your name, work telephone
    number, company name, and company address.

    When collecting Contact Us Data, we will receive your name, email address,
    telephone number, company name, and company address.
    We use Categories of Personal Information described in the California Customer
    Records statute as set forth in the "How Do We Collect and Use Personal
    Information"
    and the "How Do We Share or Disclose Personal Information"
    sections of this Policy.
    Internet or other electronic
    network activity information
    We collect Cookies and Similar Technologies as described in our "Cookies and
    Similar Technologies"
    Policy.

    When collecting Usage Information, we will automatically receive information
    from your browser and your device, which includes the date and time of your
    visit as well as your location, domain server, browser type, access time, and data
    about which pages you visit.

    We use Internet or Other Electronic Network Activity Information as set forth in
    the "How Do We Collect and Use Personal Information" and the "How Do We
    Share or Disclose Personal Information"
    sections of this Policy.

    Geolocation data
    When collecting Account Information and Contact Us Data, we will receive your
    address.

    When collecting Cookies and Similar Technologies and Usage Information we will
    receive your location while using the Site.

    We use Geolocation Data as set forth in the "How Do We Collect and Use
    Personal Information"
    and the "How Do We Share or Disclose Personal
    Information"
    sections of this Policy.

    Audio, electronic, visual, thermal,
    olfactory, or similar information
    When collecting Contact Us Data, we will receive your preferred method of
    contact and the message that you choose to provide.

    We use Audio, electronic, Visual, Thermal, Olfactory, or Similar Information as set
    forth in the "How Do We Collect and Use Personal Information" and the "How Do
    We Share or Disclose Personal Information"
    sections of this Policy.

    Professional or employment-
    related information
    When collecting Account Information and Contact Us Data, we will receive your
    work email address, work telephone number, company name, and company
    address.

    We use Professional or Employment-Related Information as set forth in the forth in the
    "How Do We Collect and Use Personal Information"
    and the "How Do We Share or
    Disclose Personal Information"
    sections of this Policy.

    Data Practices During Last 12 Months

    Personal Information Collected:As described in this Policy, we have collected the categories of personal information
    listed below during the preceding 12 months:

    • Identifiers
    • Categories of personal information described in the California Customer Records statute
    • Internet or other electronic network activity information
    • Geolocation data
    • Audio, electronic, visual, thermal, olfactory, or similar information
    • Professional or employment-related information

    Categories of Sources: We have collected the personal information identified in this Policy from you.

    Business and Commercial Purposes for Collecting: We have collected the categories of personal information listed
    above for the following purposes:

    • Operate the Site;
    • Provide our services to you;
    • Honor our terms of use and contracts;
    • Ensure the privacy and security of our Site and services;
    • Maintain our databases and back-ups;
    • Manage our relationships with you;
    • Communicate with you;
    • Keep records of our communications with you;
    • Analyze use of the Site and our services;
    • Serve you the content and functionality you request;
    • Develop new services;
    • Enhance your experience;
    • Track visits to the Site;
    • Provide you with a more personal and interactive experience on the Site; and
    • Usage analytics purposes.

    Personal Information Sold: We have not sold categories of personal information during the preceding 12 months.

    Personal Information Disclosed for a Business Purpose. We have disclosed for a business purpose the categories of
    personal information listed below during the preceding 12 months:

    • Identifiers
    • Categories of personal information described in the California Customer Records statute
    • Characteristics of protected classifications
    • Internet or other electronic network activity information
    • Geolocation data

    We have disclosed each category of personal information to the following categories of third parties: (1) corporate parents,
    subsidiaries, and affiliates; (2) advisors (accountants, attorneys); (3) service providers (data analytics, data storage, mailing,
    marketing, website and platform administration, technical support); and (4) operating systems and platforms.

    No Financial Incentive


    We do not offer financial incentives or any price or service difference in exchange for the retention or sale of your personal
    information.

    Do Not Sell My Personal Information


    Under the CCPA, you have the right to direct us to stop selling your personal information to third parties and to refrain
    from doing so in the future. For purposes of the CCPA, we do not sell personal information as defined under applicable
    law.

    CCPA Requests to Know and Requests to Delete


    The CCPA gives consumers the right to request that we (1) disclose what personal information we collect, use, disclose, and
    sell, and (2) delete certain personal information that we have collected or maintain. You may submit these requests to us as
    described below, and we honor these rights where they apply.

    However, by way of example, these rights do not apply where we collect or sell a consumer’s personal information if: (1)
    we collected that information while the consumer was outside of California, (2) no part of a sale of the consumer’s
    personal information occurred in California, and (3) no personal information collected while the consumer was in California
    is sold. In addition, de-identified information is not subject to these rights.

    If a request is submitted in a manner that is not one of the designated methods for submission, or if the request is
    deficient in some manner unrelated to our verification process, we will either (1) treat the request as if it had been
    submitted in accordance with the designated manner, or (2) provide you with specific directions on how to submit the
    request or remedy any deficiencies with the request, as applicable.

    Request to Know. As a California resident, you have the right to request: (1) the specific pieces of personal information we
    have collected about you; (2) the categories of personal information we have collected about you; (3) the categories of
    sources from which the personal information is collected; (4) the categories of personal information about you that we
    have sold and the categories of third parties to whom the personal information was sold; (5) the categories of personal
    information about you that we disclosed for a business purpose and the categories of third parties to whom the personal
    information was disclosed for a business purpose; (6) the business or commercial purpose for collecting, disclosing, or
    selling personal information; and (7) the categories of third parties with whom we share personal information. Our
    response will cover the 12-month period preceding our receipt of a verifiable request.

    Request to Delete. As a California resident, you have a right to request the erasure/deletion of certain personal
    information collected or maintained by us. As described herein, we will delete your personal information from our records
    and direct any service providers (as defined under applicable law) to delete your personal information from their records.
    However, we are not required to honor a deletion request if an exemption applies under the law.

    Submitting a Request

    Submission Instructions. You may submit a request to know or to delete via your Account Page or a
    telephone call to +27-11-465-5533 or by email to online@mpower.solutions and providing your
    name and email address so that we may identify you in the opt-out process. Once we receive your instruction, we will
    promptly take action.

    Verification Process. We are required by law to verify the identities of those who submit requests to
    know or to delete. To determine whether the individual making the request is the consumer about whom we have collected
    information, we will verify your identity by matching the identifying information provided by you in the request to the
    personal information that we already maintain about you. As a part of this process, you will be required to provide your
    name, account number, address, and telephone number. We will inform you if we cannot verify your identity.

    • If we cannot verify the identity of the person making a request for categories of personal information, we may deny
      the request. If the request is denied in whole or in part for this reason, we will provide a copy of, or direct you to,
      our privacy policy.
    • If we cannot verify the identity of the person making the request for specific pieces of personal information, we are
      prohibited from disclosing any specific pieces of personal information to the requestor. However, if denied in whole
      or in part for this reason, we will evaluate the request as if it is seeking the disclosure of categories of personal
      information about the consumer.
    • If we cannot verify the identity of the person making a request to delete, we may deny the request.
    • If there is no reasonable method by which we can verify the identity of the requestor to the degree of certainty
      required, we will state this in our response and explain why we have no reasonable method by which we can verify
      the identity of the requestor.

    Authorized Agents. Authorized agents may submit requests via the methods identified in this Policy. If you use an
    authorized agent to submit a request to know or a request to delete, we may require: (1) the authorized agent to provide
    proof that you gave the agent signed permission to submit the request; (2) you to verify your identity directly with us; and
    (3) you to directly confirm with us that you provided the authorized agent permission to submit the request. However, we
    will not require these actions if you have provided the authorized agent with power of attorney pursuant to the California
    Probate Code.

    Excessive Requests. If requests from a consumer are manifestly unfounded or excessive, in particular because of their
    repetitive character, we may either (1) charge a reasonable fee, or (2) refuse to act on the request and notify the consumer
    of the reason for refusing the request. If we charge a fee, the amount will be based upon the administrative costs
    of providing the information or communication or taking the action requested.

    CCPA Non-Discrimination


    You have the right not to receive discriminatory treatment by us due to your exercise of the rights provided by the CCPA.
    We do not offer financial incentives and price or service differences, and we do not discriminate against consumers for
    exercising their rights under the CCPA.

    California Shine the Light


    Under California Civil Code Section 1798.83, California residents who provide personal information in obtaining products
    or services for personal, family, or household use may be entitled to request and obtain from us once a calendar year
    information about the information we shared, if any, with other businesses for direct marketing uses. At present, we do not
    share your personal information with third parties for those third parties’ direct marketing purposes. Please be aware that
    not all information sharing is covered by the "Shine the Light" requirements and only information on covered sharing, if
    any, will be included in our response. As part of the California Online Privacy Protection Act, all users of our Site may make
    any changes to their information at any time by contacting us at online@mpower.solutions.

    Nevada Residents


    You may submit a verified request to us at online@mpower.solutions to request that we not make any sale (as defined under
    Nevada law) of any covered information (as defined under Nevada law) that we have collected or will collect about you.
    Please provide your name and contact information in your request, and we will respond to your request in accordance with
    Nevada law.

    EU/EEA Residents


    If you are located in the EU or EEA, you have the following rights under the GDPR. All requests should be sent to the
    address noted in the "Contact Us" section of this Policy, and we will fulfill requests to the extent required by applicable law.

    Right of Access. To the extent required by law, you have the right to receive confirmation as to whether or not personal
    data concerning you are being processed, and, where that is the case, access to the personal data and the following
    information: the purposes of the processing; the categories of personal data concerned; and the recipients or categories of
    recipient to whom the personal data have been or will be disclosed. We will provide a copy of your personal information in
    compliance with applicable law.

    Right of Rectification. Our goal is to keep your personal information accurate, current, and complete. Please contact us if
    you believe your information is not accurate or if it changes.

    Right to Erasure. In some cases, you have a legal right to request that we delete your personal information when (1) it is
    no longer necessary for the purposes for which it was collected, (2) consent has been withdrawn in certain instances, (3)
    you have objected to the processing in certain instances, (4) the personal information has been unlawfully processed, (5)
    the personal data have to be erased for compliance with a legal obligation; and (6) the personal data were collected in
    relation to the offer of information society services. However, the right is not absolute. When we delete personal
    information, it will be removed from our active servers and databases as well as the Site; but, it may remain in our archives
    when it is not practical or possible to delete it. We may also retain your personal information as needed to comply with our
    legal obligations, resolve disputes, or enforce any agreements.

    Right to Restrict Processing. You have the right to restrict the processing of your data when (1) the accuracy of the
    personal data is contested, for a period enabling the controller to verify the accuracy of the personal data; (2) the
    processing is unlawful and you oppose erasure and request a restriction instead; (3) we no longer need the personal data,
    but you need us to keep it for the establishment, exercise, or defense of legal claims; or (4) you have objected to us
    processing the personal information, pending resolution of the objection.

    Right to Object. In certain circumstances, you have the right to object to the processing of your personal information
    where the processing is necessary for performance of a task carried out in the public interest, for our legitimate interests,
    or for the legitimate interests of others. You also have the right to object where personal data are processed for direct
    marketing purposes or for scientific or historical research purposes or statistical purposes.

    Right to Withdraw Consent. If you have provided your consent to the collection, processing, and transfer of your
    personal information, you may have the right to fully or partially withdraw your consent. Once we have received notice
    that you have withdrawn your consent, in whole or in part, we will no longer process your information for the purpose(s)
    to which you originally consented and have since withdrawn unless there are compelling legitimate grounds for further
    processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
    Withdrawal of consent to receive marketing communications will not affect the processing of personal information for the
    provision of our services.

    Right to Complain. If you believe we have not processed your personal information in accordance with applicable
    provisions of the GDPR, we encourage you to contact us at online@mpower.solutions You also have the right to make a GDPR
    complaint to the relevant Supervisory Authority or seek a remedy through the courts. A list of Supervisory Authorities is
    available at: https://edpb.europa.eu/about-edpb/board/members_en If you need further assistance regarding your rights,
    please contact us using the contact information provided below and we will consider your request in accordance with
    applicable law.

    Residents of Mexico


    If you are located in Mexico, you have the following rights under the LFPDP. All requests should be sent to the address
    noted in the "Contact Us" section of this Policy, and we will fulfill requests to the extent required by applicable law.

    Right of Access. To the extent required by law, you have the right to receive confirmation as to whether or not personal
    data concerning you are being processed, and, where that is the case, access to the personal data and the following
    information: the purposes of the processing; the categories of personal data concerned; and the recipients or categories of
    recipient to whom the personal data have been or will be disclosed. We will provide a copy of your personal information in
    compliance with applicable law.

    Right to Cancellation. In some cases, you have a legal right to request that we delete your personal information when (1)
    it is no longer necessary for the purposes for which it was collected, (2) consent has been withdrawn in certain instances,
    (3) you have objected to the processing in certain instances, (4) the personal information has been unlawfully processed,
    (5) the personal data have to be erased for compliance with a legal obligation; and (6) the personal data were collected in
    relation to the offer of information society services. However, the right is not absolute. When we delete personal information,
    it will be removed from our active servers and databases as well as the Site; but, it may remain in our archives
    when it is not practical or possible to delete it. We may also retain your personal information as needed to comply with our
    legal obligations, resolve disputes, or enforce any agreements.

    Right to Object. In certain circumstances, you have the right to object to the processing of your personal information
    where (1) your situation so requires in order to avoid damage to you, or (2) required to declare your objection or
    revocation of consent, to avoid processing for specific purposes.

    Right to Withdraw Consent. If you have provided your consent to the collection, processing, and transfer of your
    personal information, you may have the right to fully or partially withdraw your consent. Once we have received notice
    that you have withdrawn your consent, in whole or in part, we will no longer process your information for the purpose(s)
    to which you originally consented and have since withdrawn unless there are compelling legitimate grounds for further
    processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
    Withdrawal of consent to receive marketing communications will not affect the processing of personal information for the
    provision of our services.

    Process. You or your representative may establish your legal right to exercise the above rights by matching the identifying
    information provided by you in the request to the personal information that we already maintain about you. As a part of
    this process, you will be required to provide your name, account number, address, and telephone number. Within 20 days
    of your request, we will provide you notice of our determination regarding your ability to exercise these rights. We will
    then act as required under your exercise of rights within the time frame required by law. Where applicable, we will provide
    a copy of your personal information in compliance with applicable law.

    Residents of Brazil


    If you are located in Brazil, you have the following rights under the LGPD. All requests should be sent to the address noted
    in the “Contact Us” section of this Policy, and we will fulfill requests to the extent required by applicable law.

    Right of Access. To the extent required by law, you have the right to receive confirmation as to whether or not personal
    data concerning you are being processed, and, where that is the case, access to the personal data and the following
    information: the purposes of the processing; the categories of personal data concerned; and the recipients or categories of
    recipient to whom the personal data have been or will be disclosed. We will provide a copy of your personal information in
    compliance with applicable law.

    Right of Rectification. Our goal is to keep your personal information accurate, current, and complete. Please contact us if
    you believe your information is not accurate or if it changes.

    Right to Deletion. In some cases, you have a legal right to request that we delete your personal information when (1) it is
    no longer necessary for the purposes for which it was collected, (2) consent has been withdrawn in certain instances, (3)
    you have objected to the processing in certain instances, (4) the personal information has been unlawfully processed, (5)
    the personal data have to be erased for compliance with a legal obligation; and (6) the personal data were collected in
    relation to the offer of information society services. However, the right is not absolute. When we delete personal information,
    it will be removed from our active servers and databases as well as the Site; but, it may remain in our archives
    when it is not practical or possible to delete it. We may also retain your personal information as needed to comply with our
    legal obligations, resolve disputes, or enforce any agreements.

    Right to Object. In certain circumstances, you have the right to object to the processing of your personal information
    where (1) your situation so requires in order to avoid damage to you, or (2) required to declare your objection or
    revocation of consent, to avoid processing for specific purposes.

    Right to Withdraw Consent. If you have provided your consent to the collection, processing, and transfer of your
    personal information, you may have the right to fully or partially withdraw your consent. Once we have received notice
    that you have withdrawn your consent, in whole or in part, we will no longer process your information for the purpose(s)
    to which you originally consented and have since withdrawn unless there are compelling legitimate grounds for further
    processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
    Withdrawal of consent to receive marketing communications will not affect the processing of personal information for the
    provision of our services.

    Process. You or your representative may establish your legal right to exercise the above rights by matching the identifying
    information provided by you in the request to the personal information that we already maintain about you. As a part of
    this process, you will be required to provide your name, account number, address, and telephone number. Within 15 days
    of your request, we will provide you notice of our determination and act as required under your exercise of rights. Where
    applicable, we will provide a copy of your personal information in compliance with applicable law.

    International Transfers of Personal Information


    We are located and established in the United States and, therefore, your personal information may be transferred to, stored,
    or processed in the United States. While the data protection, privacy and other laws of the United States might not be as
    comprehensive as those in your country, we take necessary and appropriate steps to protect the privacy and security of your
    personal information. By using the Site or requesting services from us, you understand and consent to the collection, storage,
    processing, and transfer of your information to our facilities in the United States and those third parties with whom we share
    it as described in this Policy.

    When storing, hosting, or otherwise processing your information (including personal data), we may send such data outside of
    the European Union (EU), the European Economic Area (EEA), Mexico, and Brazil. When we transfer information to the United
    States or other countries, we do so for the purposes set forth in this Policy and in accordance with applicable law. We rely on
    recognized legal bases to lawfully conduct cross-border/international transfers of personal information outside of the EU,
    EEA, Mexico, and Brazil, such as your express informed consent to do so, when transfer is necessary for us to deliver services
    pursuant to an agreement between us and you, or when the transfer is subject to safeguards that assure the protection of
    your personal information, such as the European Commission’s approved standard contractual clauses.

    Any information provided by you or automatically collected from you by a third party will be governed by that party’s privacy
    policy and terms of use. If you are unsure whether a website is controlled, affiliated, or managed by us, you should review the
    privacy policy and practices applicable to each linked website.

    Third-Party Sites and Services


    This Policy only applies to the Site, and it does not apply to any third-party websites or applications.

    The Site may contain links to, and media or other content from, third parties. These links are to external resources and third
    parties that have their own privacy policies. Because of the dynamic media capabilities of the Site, it may not be clear to you
    which links are to external, third-party resources. If you click on an embedded third-party link, you will be redirected away
    from the Site to the external third-party website. You can check the URL to confirm that you have left the Site.

    We cannot and do not (1) guarantee the adequacy of the privacy or security practices employed by or the content and media
    provided by any third parties or their websites, (2) control third parties’ independent collection or use or your information, or
    (3) endorse any third-party information, products, services or websites that may be reached through embedded links on the
    Site.

    Any information provided by you or automatically collected from you by a third party will be governed by that party’s privacy
    policy and terms of use. If you are unsure whether a website is controlled, affiliated, or managed by us, you should review the
    privacy policy and practices applicable to each linked website.

    Children's Online Privacy Protection Act

    The Children’s Online Privacy Protection Act ("COPPA"), as well as other data privacy regulations, restrict the collection, use, or
    disclosure of personal information from and about children on the Internet. Our Site and services are not directed to children
    aged 16 or younger, nor is information knowingly collected from children under the age of 16. No one under the age of 16
    may access, browse, or use the Site or provide any information to or on the Site. If you are under 16, please do not use or
    provide any information on the Site (including, for example, your name, telephone number, email address, or username). If
    we learn that we have collected or received personal information from a child under the age of 16 without a parent’s or legal
    guardian’s consent, we will take steps to stop collecting that information and delete it. If you believe we might have any
    information from or about a child under the age of 16, please contact us using the contact information provided below.

    For more information about COPPA, please visit the Federal Trade Commission's website at:
    https://www.ftc.gov/enforcement/rules/rulemaking-regulatory-reform-proceedings/childrens-online-privacy-protection-rule

    Updates and Changes to this Policy

    We may add to, change, update, or modify this Policy to reflect any changes to how we treat your information or in response
    to changes in law. Should this Policy change, we will post all changes to this Policy on this page. If we make material changes
    to how we treat your information, we will also notify you through a notice on the homepage of the Site for a reasonable
    period of time. Any such changes, updates, or modifications will be effective immediately upon posting on the Site. The date
    on which this Policy was last modified is identified at the beginning of this Policy.

    You are expected to, and you acknowledge and agree that it is your responsibility to, carefully review this Policy prior to using
    the Site, and from time to time, so that you are aware of any changes. Your continued use of the Site after the "Last Updated"
    date will constitute your acceptance of and agreement to such changes and to our collection and sharing of your information
    according to the terms of the then-current Policy. If you do not agree with this Policy and our practices, you should not use
    the Site.

    Contact Us

    For more information, or if you have any questions or concerns regarding this Policy, wish to exercise your rights, or wish to
    lodge a complaint with us, you may contact us using the information below, and we will do our best to assist you. Please
    note, if your communication is sensitive, you may wish to contact us by postal mail or telephone.


    In Writing:New Image
    Attn: Privacy Officer
    24 Red Berry Hill, 4 Crawford Drive
    Norscot, Johannesburg, South Africa, 2196
    By Email:online@mpower.solutions
    Telephone:+27-11-465-5533

    M-Power Soultions. Store Addendum

    This Store Addendum was last updated on 20/08/2024.

    Personal Information for Which New Image and the Store Owner are Joint Controllers. New Image and M-Power
    Solutions act as joint controllers with respect to the following shared instances of cookies and similar technologies running on
    Timken’s stores. For more information and to adjust your preferences please visit Cookies and Similar Technologies.

    Google Analytics. We use a second instance of Google Analytics to collect and process statistical data about the number of
    people using the store and to better understand how they find and use the store. The data collected includes data related to
    your device/browser, your IP address, and on-site activities to measure and report statistics about user interactions on the
    store. The information stored in the cookie is reduced to a random identifier. Any data collected is used in accordance with
    this Policy and Google’s privacy policy. You may learn more about Google Analytics and the cookies used by Google by
    visiting https://www.google.com/policies/privacy/partners/ and https://support.google.com/analytics/answer/6004245. You
    can learn more about Google’s restrictions on data use by visiting the Google Privacy Policy at:
    https://www.google.com/policies/privacy.To opt-out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout
    and install the opt-out browser add-on feature. For more details, visit the "Google Analytics opt-out browser add-on" page.
    Google Analytics relies on the following cookies:

    Cookie
    Description
    Type
    Duration
    _ga
    Used to distinguish users
    Analytics
    2 years
    _gat
    Used to throttle request rate
    Analytics
    1 minute
    _gid
    Used to distinguish users
    Analytics
    1 day