PRIVACY POLICY

This Privacy Policy (the "Policy") describes the collection and processing of personal data in accordance with the applicable laws on personal data protection, collected by Dear Our Community Company Limited ("DOC") when you interact with the Website while using our Services (the "Services"). If you do not agree with the terms of this Policy, we recommend that you stop using our Website. This Policy forms an attachment to the Website Usage Policy. If this Policy changes in any way, we will publish those changes on the Website. You must confirm your acceptance of the amended policy by ticking the consent box shown on the Website before continuing to use our Services. When you use the Services on the Website, DOC performs its obligations in the role of a personal data controller and processor.

What data do we collect from you?

- Basic personal data: • Full name; • Year of birth; • Email; • Phone number; • Password; • Occupation. - Customer care information You may voluntarily provide us with personal information while interacting with DOC in connection with customer support and care, including: • Support requests, consultations or questions sent by email or other contact channels. • Information provided when taking part in surveys on the Website. • Audio/video recordings when you join online conferences or webinars and have consented to the recording. • Your reviews and feedback about DOC. - Online behavioural data • Behavioural data when you use and interact with the Website, such as how often you use a feature on the Website. • Usage log statistics on the Website, including but not limited to your number of clicks, the time of your visits, etc., to help us better understand your experience. • Cookie information.

What do we use your personal data for?

• To provide the Services you request. • To process service fees and for accounting and tax purposes as required by law. • To support you, answer your questions and handle technical issues with your account. • To notify you of the latest changes and other important information related to your use of the Services. • To improve our services. • To market and promote our services. • Other purposes where we have obtained your consent.

Who do we share your personal data with?

We may share your personal information in the following cases: • Experts/mentors: shared with the experts/mentors you choose or who are assigned to you for the purpose of delivering courses, consulting or mentoring. The scope of shared information is limited to what is necessary for this purpose. • Service providers: shared with third parties that provide services to us (for example: technology platforms, data hosting, payments, customer care) to support system operations and service delivery to you. • Business partners: shared with affiliated partners where necessary to deliver training programmes, courses or related cooperative activities. • Legal requirements: information provided when requested by a competent state authority or as required by law. • Protection of rights: shared where necessary to protect our lawful rights and interests, or those of users or related third parties. • Mergers and acquisitions: in the event of a merger, transfer or corporate restructuring, personal information may be transferred to the transferee in accordance with the law. We commit to sharing information only to the extent necessary and to applying appropriate measures to keep your personal data safe and secure.

How do we secure your personal data?

We implement appropriate technical and organisational measures to protect personal data, proportionate to the nature and sensitivity of the data and the risks that may arise, including: • Access control: role-based access permissions ensuring that only authorised individuals with a need to know can access personal data. • System and transmission security: reasonable security measures such as data encryption, network protection, remote-access control and other appropriate security technologies. • Data storage and management: personal data is stored in a safe, controlled environment with safeguards against unauthorised access, loss or leakage. • Monitoring and incident detection: system monitoring to detect, prevent and promptly handle unauthorised access to or use of data. • Vendor and third-party management: requiring relevant partners and service providers to comply with equivalent data-security obligations through contracts or legal commitments. • Internal training and awareness: training and raising awareness of personal data protection for staff and related parties. We regularly review and update our security measures to stay aligned with the law and current security practice. However, no system can guarantee absolute safety against every risk. We therefore recommend that you take steps of your own to protect your personal data in addition to DOC's security measures, including but not limited to: using strong passwords, and not using passwords that people who know you could easily guess (such as your full name or date of birth).

Where is your personal data stored?

When you use our Website and Services, your personal data is primarily processed and stored in Vietnam. In certain cases necessary for system operations, service delivery or the use of third-party technology platforms (for example: cloud computing and data hosting services), your personal data may be transferred outside the territory of Vietnam. In those cases, we commit that: • The transfer is carried out in accordance with applicable law; • Necessary security measures are applied to keep the personal data safe; • Data is transferred only to the extent necessary to fulfil the stated purpose.

How long do we keep your data?

Personal data is stored for as long as necessary to serve the purpose for which it was collected, appropriate to the type of data and the way it is processed, and corresponding to how long the user maintains an account or uses the Services. Even after the Services end, personal data may continue to be retained to a reasonable extent and for a reasonable period to: - Fulfil applicable legal obligations, including regulations on tax, accounting, electronic transactions, cybersecurity and other relevant regulations; - Comply with valid requests from competent state authorities; - Resolve disputes, complaints or legal proceedings; - Detect, prevent and handle fraud or violations; - Meet system and information safety and security requirements; - Protect the lawful rights and interests of the parties involved; and - Other lawful and necessary purposes as prescribed by law. When no longer needed for the purposes above, personal data will be deleted, destroyed or anonymised in accordance with applicable regulations.

What rights do you have over your data?

• To be informed about the processing of your personal data; • To consent or refuse consent, and to withdraw consent to the processing of your personal data; • To view, correct or request correction of your personal data; • To request the provision, deletion or restriction of processing of your personal data; to object to the processing of your personal data; • To complain, denounce, initiate legal proceedings and claim compensation for damage in accordance with the law; • To request competent authorities or organisations and individuals involved in processing your personal data to apply measures to protect your personal data in accordance with the law.

How are your complaints resolved?

- You may send complaints directly to DOC at the email address: hello@dearourcommunity.com - DOC reviews and responds within 07 days of receiving the information. - DOC collects further information where needed. - DOC notifies you of its decision on the complaint within 30 (thirty) days from the date sufficient information has been collected.

How can you contact us?

DEAR OUR COMMUNITY COMPANY LIMITED Address: 92A Nguyen Huu Canh, Thanh My Tay Ward, Ho Chi Minh City, Vietnam Phone: +84774934111 Email: hello@dearourcommunity.com