GDPR Compliance Addendum 

Last Updated: January 2026

1. Scope and Compliance

This section applies specifically to users residing in the European Economic Area (EEA) and the United Kingdom, in accordance with the General Data Protection Regulation (GDPR). Online Bazaar FZ-LLC acts as the Data Controller for the personal information collected via www.vipshopica.com.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

3. Your Rights Under GDPR

As a data subject, you have the following rights:

4. International Data Transfers

Since we are located in the United Arab Emirates (UAE), your data will be transferred and stored outside the EEA. We ensure that such transfers are conducted using Standard Contractual Clauses (SCCs) or other legal mechanisms approved by the European Commission to ensure an adequate level of protection.

5. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy, typically 7 years to comply with UAE audit and tax laws, unless a request for erasure is made.

6. Contact our Data Protection Officer (DPO)

For any GDPR-related inquiries or to exercise your rights: