Privacy Policy

Privacy Policy

Effective date: 19 August 2026

This Privacy Policy explains how Mada Line Oman ("Mada Line", "we", "us", or "our"), operated by THE FOUNDATIONS OF PURITY FOR INVESTMENT LLC in the Sultanate of Oman, collects, uses, stores, shares, and protects personal data when users access or use Mada Line services and applications.

This Policy applies to the Mada Line Customer, Pharmacy, Driver, and Consultant applications and related services. The personal data processed varies depending on the application, the user's role, the features used, and the permissions granted. Not every category described below is collected from every user or through every Mada Line application.

1. Personal Data We May Process

Depending on the service and user role, we may process the following categories:

• Account and identification data: account ID, user ID, authentication information, and related account identifiers.
• Contact information: such as name, email address, phone number, delivery address, and other information provided to complete or support an order.
• Device and notification information: device identifiers, application identifiers, and push notification tokens used to authenticate devices and deliver service notifications.
• Location information: precise or approximate location when a customer enables location access, including information used to determine an address, service area, pharmacy, or delivery location.
• Order and purchase information: requested products or medicines, quantities, order history, order status, pharmacy responses, delivery information, and transaction-related records.
• Prescription and health-related information: prescription images, prescription details, medicine-related information, medical cases, and other health information provided when required for the requested service.
• Photos and files: images or files voluntarily uploaded for service functionality, including prescription images submitted by customers and operational receipt images submitted by drivers where applicable.
• Messages and communications: messages exchanged through support or consultation features, including communications between customers and authorized support, pharmacist, or consultant users.
• Other user-provided content: free-text information and operational responses, including pharmacy availability responses, rejection reasons, alternative medicine information, delivery or hub-related information, and similar content required to provide the service.
• Payment and transaction information: information necessary to initiate, confirm, reconcile, or record payments and transactions. Payment credentials may be processed directly by an authorized payment service provider.

2. How We Collect Personal Data

Personal data may be provided directly by the user, generated through use of the service, received from another authorized participant in an order or consultation, or processed through service providers that support Mada Line functionality.

Device permissions such as location, camera, photos, or notifications are used only when relevant to a feature and subject to the permissions and controls provided by the user's device and operating system.

3. How We Use Personal Data

We use personal data as necessary to provide and operate Mada Line services, including to:

• create, authenticate, secure, and manage accounts;
• receive and process medicine, pharmacy, consultation, and delivery requests;
• allow participating pharmacies to review requests and prescriptions when necessary;
• allow authorized consultants or pharmacists to provide consultation or support functionality;
• coordinate order preparation, delivery, and order status;
• process and confirm payments and transaction status;
• send operational, security, order, consultation, and service notifications;
• provide customer support and respond to requests;
• detect, prevent, investigate, or address fraud, misuse, security incidents, or technical problems;
• maintain records required for operational, accounting, dispute-resolution, regulatory, or legal purposes; and
• comply with applicable laws, lawful requests, and regulatory requirements.

Mada Line does not use personal data for third-party advertising tracking and does not sell personal data to data brokers as part of the current Mada Line service.

4. Sharing of Personal Data

We share personal data only when reasonably necessary for the requested service, for security or legal compliance, or with authorized service providers. Depending on the transaction, data may be shared with:

• participating pharmacies that need information to review availability, prescriptions, or prepare an order;
• authorized consultants or pharmacists where the customer uses a consultation or support service;
• delivery personnel or logistics providers that require order and delivery information to complete delivery;
• payment service providers for payment processing and transaction confirmation;
• technology and infrastructure providers supporting authentication, notifications, hosting, maps, communications, and application functionality; and
• governmental, regulatory, judicial, or law-enforcement authorities where disclosure is required or permitted by applicable law.

We seek to limit shared information to what is necessary for the relevant purpose. Service providers handling personal data are expected to apply appropriate confidentiality, security, and data protection safeguards consistent with applicable law and their contractual or service obligations.

5. Payments

Payment information may be submitted to and processed by third-party payment service providers, including providers integrated with Mada Line. Such providers may process payment-card and transaction information according to their applicable terms and privacy practices. Mada Line may receive transaction references, payment status, amounts, and other information necessary to complete and reconcile an order.

6. Location Information

Where location functionality is enabled, location information is used for features such as identifying an address or service area, locating relevant pharmacies, or supporting delivery. Users may control location permission through their device settings. Certain functionality may be limited if location permission is disabled, and manual address entry may be available where supported.

7. Notifications and Device Identifiers

Mada Line applications may use device identifiers and push notification tokens to authenticate devices, maintain service functionality, and deliver order, account, consultation, availability, delivery, and security notifications. Users can manage notification permission through their device settings.

8. Data Retention and Deletion

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy and as required for operational, contractual, accounting, fraud-prevention, dispute-resolution, regulatory, or legal obligations.

When data is no longer required, it may be deleted, securely destroyed, or anonymized, subject to any information that must be retained under applicable law.

Users may request deletion of their personal data or account, subject to legal or regulatory retention requirements. Privacy requests can be submitted through the privacy channels described below and, where available, through the relevant in-application account controls.

9. User Rights and Privacy Choices

Subject to applicable law, users may request access to their personal data, correction or updating of inaccurate data, deletion or blocking of data, a copy of processed personal data, withdrawal of consent, and other rights provided by applicable data-protection law.

Withdrawal of consent does not affect processing lawfully carried out before the withdrawal and may prevent us from providing features that require the affected personal data.

Privacy choices and requests are available at: https://legal.ussus.net/privacy-choices

Account deletion information is available at: https://legal.ussus.net/account-deletion

10. International Data Transfers

Some technology or service providers may process information outside the Sultanate of Oman. Where personal data is transferred outside Oman, we apply applicable legal requirements and appropriate safeguards, including required consent, protection assessments, contractual safeguards, or other measures required by applicable law.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction. No electronic system can be guaranteed to be completely secure, and users should also protect their account credentials and devices.

12. Children's Personal Data

Where Mada Line processes personal data relating to a child or another person for whom guardian consent is legally required, we will apply the consent and protection requirements required by applicable law. A parent or legal guardian may contact us regarding personal data relating to a child under their responsibility.

13. Changes to This Policy

We may update this Privacy Policy when our services, data practices, or legal requirements change. The updated version will be published through our official legal page with an updated effective date where appropriate.

14. Contact Us

For privacy questions, requests, consent withdrawal, correction, or deletion:
Email: privacy@ussus.net

For general support:
Email: support@ussus.net
Support page: https://legal.ussus.net/support

Data Controller / Service Operator:
THE FOUNDATIONS OF PURITY FOR INVESTMENT LLC
Mada Line Oman
Muscat, Sultanate of Oman