PRIVACY NOTICE FOR CUSTOMERS

We, City Dynamic Co., Ltd., value your right in respect to your personal data, and we are committed to the responsible collection, use, disclosure, transfer and otherwise processing of your personal data as well as to comply with our legal obligations under Thailand’s Personal Data Protection Act B.E. 2562 (2019), we have therefore issued this Privacy Notice for Customers to provide you with information on how your personal data will be processed and handled by us.

1. DEFINITIONS

TERM

DEFINITION

Associated Persons

Any person associated with the Corporate Customers, such as the directors, authorized representatives, personnel, contact persons, etc.

City Dynamic

City Dynamic Co., Ltd.

Competent Authorities

Competent officials or authorities such as the Office of the PDPC, Revenue Department, Royal Thai Police, Department of Lands, courts, or arbitration institutions.

Corporate Customers

Legal entities or organizations which engage with City Dynamic, or have or may have interest in the Property.

Customers

Individual Customers and/or Corporate Customers, as applicable to the specific context.

Data Subject or you

A living individual who can be identified by Personal Data. For the purposes of this Privacy Notice, Data Subject shall mean an Individual Customer or Associated Person whose Personal Data is Processed by City Dynamic.

Individual Customers

Natural persons who access or use our Platform, engage with City Dynamic, or have or may have interest in the Property.

Legal Guardian

Parents or person having parental authority over a Minor.

Minor

A person whose age is below 20 years old, unless a person is legally married pursuant to the applicable law of Thailand.

Office of the PDPC

Office of the Personal Data Protection Committee of Thailand.

PDPA

Thailand’s Personal Data Protection Act B.E. 2562 (2019), including any regulations, rules, orders, notifications, and/or guidelines issued under the PDPA, as amended, supplemented or replaced from time to time.

Personal Data

Any information about an individual which enables the identification of such person, whether directly or indirectly, but not including information of deceased persons.

Platform

Websites, applications, and/or any other platforms which are operated by City Dynamic.

Privacy Notice

This Privacy Notice for Customers, as may be amended or updated from time to time.

Process or Processing

Collection, use, disclosure and/or otherwise processing of Personal Data.

Property

Any real estate, buildings, residences, or premises owned, developed and/or managed by City Dynamic, or between City Dynamic and City Dynamic’s partners.

Special Category of Personal Data

Personal Data pertaining to race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, labor union information, genetic data, biometric data, or any other data that affects the Data Subject in the same manner, as may be prescribed by the Personal Data Protection Committee of Thailand.

Terms

Terms and Conditions for the use of City Dynamic’s Platform which is available at [Link].

2. APPLICATION OF THIS PRIVACY NOTICE

This Privacy Notice applies to all Customers and Associated Persons. If you are a Minor who has not yet reached legal age, you certify that you have informed your Legal Guardian about this Privacy Notice, and where necessary, you will obtain consent from your Legal Guardian for City Dynamic’s Processing of your Personal Data as described in this Privacy Notice. You acknowledge that City Dynamic reserves the right to request the proof of your Legal Guardian’s acknowledgement and/or consent at any time, and City Dynamic reserves the right to suspend or terminate our services or offers to you if the required proof is not provided.

3. CATEGORIES OF PERSONAL DATA WE PROCESS

This Privacy Notice applies to all Customers and Associated Persons. If you are a Minor who has not yet reached legal age, you certify that you have informed your Legal Guardian about this Privacy Notice, and where necessary, you will obtain consent from your Legal Guardian for City Dynamic’s Processing of your Personal Data as described in this Privacy Notice. You acknowledge that City Dynamic reserves the right to request the proof of your Legal Guardian’s acknowledgement and/or consent at any time, and City Dynamic reserves the right to suspend or terminate our services or offers to you if the required proof is not provided.

TERM

DEFINITION

Identification Information

e.g. title, first name, last name, nationality, marital status, date of birth, gender, ID card number, passport number, photograph, other Personal Data on copies of identification documents, documents of Corporate Customers containing Personal Data such as company affidavit, list of shareholders, etc.

Contact Information

e.g. telephone number, address, country of residence, email address, LINE ID, WhatsApp number and/or other contact details.

Personal and Preference Information

e.g. the Property of your interest, unit of interest, budget range, information about your employment (such as your job title, employer/company name), Property that you have purchased, etc.

Information You Submit

Any Personal Data that you choose to provide when you send us a message through the Platform or otherwise during your interactions with us.

Log and Usage Information

Your device type, browser type, operating system name and version, device identifier(s), IP address, date and time you access the Platform, the site you came from and/or the site you visit when you leave the Platform, the frequency with which you access and use the Platform, the pages that you navigate to, the links that you click, and other information about your interactions with the Platform.

Social Media Information

Your social media account name, information that you post on our social media platforms (e.g., comments, images, posts), your interactions with our content on such platforms, your social media profile information, correspondence between you and us via social media platforms, and any other information that you may make available to us on social media platforms.

Heath Information

e.g. health-related data, food allergies, etc.

In cases where we collect your Personal Data beyond what is described in this Privacy Notice, we will inform you about the Processing of such Personal Data and may request your consent in accordance with the requirements of the PDPA. If you hold Thai nationality, please note that we may Process a copy of your ID card. Such copy may contain Special Category of Personal Data, i.e. your religion and/or blood type. Please be informed that City Dynamic does not have any purpose nor intention to Process such Special Category of Personal Data. Therefore, we request that you cross out or otherwise conceal any Special Category of Personal Data on the copy of your ID card before submitting it, except where City Dynamic is required to submit the document to government authorities or other Competent Authorities, which prohibit any alterations to the document, in which case City Dynamic will inform you of such legal requirement. If the copy of the ID card provided to us still contains Special Category of Personal Data, we may cross out or conceal such data ourselves for a mere purpose of complying with our obligation under the PDPA, which permits the Processing of Personal Data only as necessary for lawful purposes.

4. METHODS FOR THE COLLECTION OF YOUR PERSONAL DATA

Generally, we collect Personal Data of Individual Customers and Associated Persons directly from you through various channels, including email, phone, seminars, activities, registration forms and/or our Platform. In certain cases, we may collect your Personal Data from other sources, such as websites or online platforms operated by third parties (e.g. Facebook or LINE), service providers, public sources, or from individuals who may provide your contact information to City Dynamic. In the case of Associated Persons, we may also collect your Personal Data from other individuals of Corporate Customers related to you. Where you provide us with Personal Data of a third party, you warrant that you have informed such individual of the Processing of his or her Personal Data by us as explained in this Privacy Notice. In addition, if consent for the Processing of such third party’s Personal Data is required, you agree to assist us in obtaining valid and enforceable consent from such individual as may be required by the PDPA.

5. PURPOSES FOR PROCESSING YOUR PERSONAL DATA

In general, we will Process your Personal Data for the following purposes:

PURPOSES

CATEGORIES OF PERSONAL DATA

LEGAL BASIS

To enter into contracts with Customers and perform duties under contracts, including the following: • To prepare necessary information and documentation in connection with the sale and purchase transaction, e.g. to prepare sale and purchase agreement with our Customers, etc. • To perform obligations under the agreements with the Customers and any other related persons, e.g. obligations under the Terms or the sale and purchase agreements, etc. • To verify and validate the performance of rights and obligations under agreements, including validation of payment, reservation procedures, ownership transfer, and the provision of other supports and services. • To manage the contractual relationship between City Dynamic and the Customers under the applicable agreements, or to manage relationship with Associated Persons or any persons using the Platform according to the Terms. • To provide relevant services in relation to the Property that you have purchased from City Dynamic.

• Identification Information • Contact Information • Personal and Preference Information • Information You Submit Remark: If you do not provide Personal Data which is necessary for us to enter into, or perform our obligations under, the applicable agreements, we may not be able to enter into such agreements with you or may not be able to fulfil our contractual obligations, whether wholly or partially. For example, City Dynamic may not be able to sell the Property to you, etc.

Performance of a Contract: Where the Processing is necessary to take steps at your request prior to entering into an agreement with you, or to perform our contractual obligations (for Individual Customers). Legitimate Interest: For the Processing of Associated Person which is necessary for, or related to, the transactions or communications between City Dynamic and Corporate Customers, including for the entering into an agreement with Corporate Customers; and for any other Processing activities which cannot be based on performance of a contract.

To communicate and respond to inquiries or concerns, including the following: • To provide information regarding the Property that you are interested in, including contacting you when you submit information on your interest and contact details on the Platform, to schedule an appointment to discuss on details of the Property, arrange for a Property view, or make any other related-arrangements. • To respond to your inquiries, requests or complaints. • To communicate with you on the changes of our Privacy Notice, Terms and any other relevant policies and documents. • To provide you with our marketing and promotional materials and communications – for example, newsletter of new Property, promotions, privileges, services, etc.

• Identification Information • Contact Information • Personal and Preference Information • Information You Submit • Social Media Information

Legitimate Interest: For responding to your inquiries, concerns or complaints. Consent: For sending our direct marketing communications.

To organize and conduct activities, including the following: • To arrange activities or events relating to our Property or services, or for the management of our relationship. • To invite you to attend activities or events organized by City Dynamic, or under collaboration of City Dynamic and our business partners, and to facilitate your registration to attend the activities or events. • City Dynamic may Process your Personal Data to verify your identity or confirm your registration. • City Dynamic may also take your photos, record your voice and/or videos during your participations in the activities or events, and posted them on our social media or the Platform; and/or use them for City Dynamic’s internal purposes. • For certain activities, we may Process your Health Information, such as information about food allergies in order to prepare appropriate meals for your during your participations in the activities or events, or any other health-related data which you may provide to us in order for us to facilitate or accommodate your needs.

• Identification Information • Contact Information • Personal and Preference Information • Information You Submit • Health Information

Performance of a Contract: To the extent that registration to attend activities and events are required, and or where specific conditions for such activities and events are stipulated. Legitimate Interest: Including where City Dynamic takes images of the activities or events without focusing on a specific individual, to Process your Personal Data for our internal purposes, to verify your identity, etc. Consent: Including where we send invitation to you to attend the activities or events organized by us, when we take your image to be publicized on our social media, when we Process your Health Information, etc.

To conduct analysis, surveys and assessments, including the following: • City Dynamic may Process your Personal Data for our assessment and analysis on various aspects in order to improve our business strategy, enhance our services, to gain understanding on Customers’ preferences on the Property, etc. • City Dynamic may conduct assessments or surveys to gather your opinions on various matters, such as satisfaction surveys and market demand surveys. Information obtained will be analyzed and used to enhance and develop City Dynamic’s Property, Platform and services. In certain cases, City Dynamic may also use this information for marketing activities or to provide offers tailored to individual interests.

• Identification Information • Contact Information • Personal and Preference Information • Information You Submit

Legitimate Interest: In general, City Dynamic relies on our legitimate interest to conduct assessment and analyzation, or to conduct certain surveys such as your experience in purchasing a Property with us, etc. Consent: For any surveys or assessments which cannot rely in legitimate interest.

To conduct audits City Dynamic conducts periodic audits on our business operations, whether by our internal auditors and/or external auditors. Your Personal Data may be Processed as part of the audit.

• Identification Information • Contact Information • Personal and Preference Information • Information You Submit • Log and Usage Information • Social Media Information • Health Information

Legitimate Interest

To comply with applicable laws and regulations We may Process your Personal Data to comply with applicable laws, regulations, rules and/or notifications, including orders of the court, orders of officials, and/or any Competent Authorities, such as to respond to your request to exercise your rights under the PDPA, retaining Log and Usage Information as required by the Computer Crime Act, submitting your Personal Data to the Revenue Department for tax compliance, or issuing tax documentation, etc.

• Identification Information • Contact Information • Personal and Preference Information • Information You Submit • Log and Usage Information • Social Media Information • Health Information

Legal Obligation: Where Processing is required under applicable laws or regulations, or orders of courts or Competent Authorities. Explicit consent: Where Special Category of Personal Data is Processed and such Processing cannot rely on a legal basis of legal obligation. Legitimate Interest: For preparatory activities undertaken in connection with compliance with applicable laws.

To establish, exercise, comply or defend legal claims We may Process your Personal Data for the purpose of establishing, exercising, complying with, or defending against legal claims.

• Identification Information • Contact Information • Personal and Preference Information • Information You Submit • Log and Usage Information • Social Media Information • Health Information

Legal Obligation: To establish, exercise, comply or defend our legal claims. Establishment of legal claims: For the Processing of Special Category of Personal Data. Legitimate Interest: For other related activities that cannot rely on legal obligation nor establishment of legal claims as legal bases, such as preparing information or document relating to legal claims, etc.

Cookies City Dynamic uses cookies on the Platform to collect and Process your Personal Data. For more information on the Cookies we use, please refer to the Cookie Policy at [Link].

Log and Usage Information

Legitimate Interest: For strictly necessary cookies. Consent: For other types of cookies.

Remark: If you do not provide Personal Data which is necessary for us to proceed with your request to enter into an agreement with us, or for us to perform our obligations under the agreement with the Customers, City Dynamic may not be able to proceed with your request or may not be able to perform our obligations under such agreement, either in whole or in part – for example, City Dynamic may not be able to provide you with certain benefits which you might be entitled to under the agreement, etc. Similarly, if you do not provide Personal Data which is necessary for City Dynamic to comply with applicable laws or orders, we and/or you may be unable to fulfill the legal requirements. This may affect our ability to Process your Personal Data as needed and could result in non-compliance with, or violation of, such laws or orders. Moreover, we may need to suspend, terminate or delay certain actions to avoid breaching legal requirements – for example, we may not be able to proceed with your request to purchase the Property, or may not be able to provide you with certain benefits, etc.

5. DISCLOSURE OF YOUR PERSONAL DATA

In order to Process your Personal Data for the purposes stated above, City Dynamic may need to disclose your Personal Data to one or more of the following third parties, either within or outside your jurisdiction: (a) to our affiliates and other companies within our corporate group; (b) to third-party vendors, suppliers, and service providers that provide services to us, on our behalf, or directly to you, such as advertising and marketing agencies, real estate agencies, information technology service providers, cloud service providers, auditors, accountants, legal counsels, professional advisors, event organizers, etc.; (c) to any Competent Authorities, government agencies, courts or other tribunals in any jurisdiction; or to any other parties to whom we are required to make disclosure by applicable law, or whom we are permitted by you or your organization to disclose your Personal Data; (d) to prospective buyers, investors, or other relevant third parties in case of the merger or acquisition of our business; and/or (e) to the public, where we publish your images, voice, and/or video recordings in connection with events or activities we organize (only where you have provided the necessary consent or where otherwise lawful).

6. CROSS-BORDER TRANSFER OF PERSONAL DATA

Under specific circumstances, City Dynamic may transfer, disclose, or provide access to your Personal Data to offshore entities for the Processing of Personal Data in accordance with the objectives outlined in this Privacy Notice. The data protection standards in such destination countries may differ from those mandated by the PDPA. Nevertheless, we will ensure that all recipients establish adequate measures and safeguards for personal data protection, consistent with the standards set forth under the PDPA.

7. RETENTION OF THE PERSONAL DATA

(a) City Dynamic generally retains your Personal Data for the duration of your relationship with us, or relationship between City Dynamic and our Customers who you are associated with, and for up to 10 years following the conclusion or termination of that relationship, or our last communication, whichever is applicable. (b) For Log and Usage Information, City Dynamic will retain such data for up to 90 days from the date of collection. Notwithstanding the above, City Dynamic may retain your Personal Data for a longer period if required or permitted by applicable law.

8. YOUR RIGHTS TO PERSONAL DATA

Subject to the conditions and limitations under the PDPA, you have the following rights with respect to your Personal Data: (a) To withdraw your consent at any time where the Processing of your Personal Data is based on your consent; (b) To access and obtain a copy of your Personal Data which is under City Dynamic’s possession, and to request disclosure of the source(s) of any Personal Data collected without your consent; (c) To request to receive your Personal Data from City Dynamic in the format which is generally readable or usable by automatic tools or equipment, and which can be used or disclosed by automated means (if any), and to request City Dynamic to send or transfer your Personal Data in such format to other data controllers as well as to receive Personal Data which City Dynamic sent or transferred to such other data controllers; (d) To request the rectification or completion of your Personal Data to ensure that it is accurate and not misleading; (e) To request the deletion, destruction, or de-identification of your Personal Data; (f) To object to the Processing of your Personal Data, such as when your Personal Data is Processed for direct marketing purposes; and (g) To request the suspension of the use of your Personal Data. We reserve the right not to comply with your request if such non-compliance is justified and permissible under applicable law. In addition, to the extent permitted by applicable law and regulations, we may charge reasonable fees that may arise from processing any of your requests mentioned above. In addition to the rights above, you have the right to lodge a complaint with the Office of the PDPC or other Competent Authorities if you believe that the Processing of your Personal Data by City Dynamic is not compliant with the PDPA or other relevant laws. However, we kindly request that you reach out to us first in case of any concerns so that we can effectively address your issue in a timely manner.

9. CONTACT US

If you have any inquiries in relation to your Personal Data, or you would like to exercise any of your rights under the PDPA, you may contact us at: City Dynamic Co., Ltd. No.140 Wireless Building, Level 6, Unit 6A, Witthayu Road, Lumpini Sub-District, Pathum Wan District, Bangkok 10330, Thailand Email Address: enquiry@uhresidencesbangkok.com

10. CHANGES TO THIS PRIVACY NOTICE

City Dynamic may revise or update this Privacy Notice periodically. Any updates to the Privacy Notice will be posted on the Platform and/or communicated to you through the usual channels or via the contact information provided to City Dynamic, as considered appropriate by City Dynamic. If any amendments, changes, or updates affect the original purposes for which your Personal Data was collected, we will notify you of such changes and obtain your consent if required by law before these changes take effect. We recommend that you review this Privacy Notice regularly to remain informed of any updates. This Privacy Notice shall take effect from 1 December 2025.