PERSONAL DATA PRIVACY POLICY

I. PRIVACY POLICY OVERVIEW

1. THACO AUTO Co., Ltd. (hereinafter referred to as the "Company") acknowledges the importance of and respects the privacy rights regarding personal information ("Information") of visitors to the website and users of the Company's services (website visitors and/or purchasers of products, users of the Company's services are hereinafter collectively referred to as "Customers"; websites, products, and services are hereinafter collectively referred to as "Services"). Acting in good faith, the Company, through this Information Privacy Policy ("Policy"), provides a comprehensive overview to ensure transparency regarding the principles of collection, usage, disclosure, and storage of Customer Information collected by the Company via the methods outlined in Section IV of this Policy.
2. This Policy applies to the Company's Services as a whole. However, from time to time, for specific Services or parts thereof, depending on the particular characteristics and requirements of such Services, the Company may supplement or adjust the contents of this Policy to apply specifically to those Services.
3. This Policy applies when the Customer accesses or uses the Company's Services. By accessing or using the Services provided by the Company at any time, the Customer agrees to the terms stipulated by the Company in this Policy (including any supplements or modifications made from time to time).
4. Depending on the actual situation and security requirements, the Company may adjust this Policy without prior notice or consent from the Customer. When updating the content of this Policy, the Company will revise the "Last Updated" date at the bottom of this Policy. Therefore, before accessing or using the Company's Services, Customers are advised to regularly check the Policy Information for the latest updates. In the event that the Company updates the Policy and the Customer continues to use the Services after such updates, it signifies that the Customer agrees to and is bound by the new terms defined in the updated Policy.

II. PURPOSE OF INFORMATION COLLECTION

1. The Company collects Customer Information primarily to support and maintain contact with the Customer, specifically: a) To notify Customers of promotional information, advertising, or for direct marketing and other trade promotion purposes. b) To maintain communication with Customers and answer Customer inquiries related to the Company's Services. c) To provide support when Customers purchase vehicles and/or use the Company's Services.
2. The Company collects Information for the purposes of controlling and improving Service quality, specifically: a) To control access to and usage of the Company's Services. b) To analyze and optimize the Company's Services. c) To enhance the quality of the Company's Services and/or Services of the Company's subsidiaries and affiliates ("Affiliated Entities").

In addition to the purposes mentioned in Subsections 1 and 2, the Company may also collect Information for other purposes that are not contrary to the provisions of the law.

III. SCOPE OF INFORMATION COLLECTION

1. Customer Information that the Company will collect includes: a) Full name b) Phone number c) Email d) Contact address e) Identity document information f) Service consultation requests
2. For each Service or other specific collection purpose, the Company may, from time to time, request the Customer to provide additional Information to ensure the Customer's use of the Service or to ensure smooth and convenient communication and transactions between the Company and the Customer (e.g., vehicle type owned or preferred by the Customer; license plate number; mileage) and/or other necessary Information.
3. Regarding the scope of Information collection mentioned in this Policy, the Company will always facilitate user choice by establishing features on the Website interface allowing the Customer to decide whether to provide or refuse to provide Information to the Company.
4. Cookie Information: When the Customer accesses the website for the first time, the website will initialize and store data on Cookies to optimize convenience during website navigation based on the Customer's previous behaviors (e.g., language selection, search information, etc.). Simultaneously, this data is used for research and analysis purposes to optimize and enhance the Customer experience. The Cookies collected shall not be used for advertising purposes.

IV. METHOD OF INFORMATION COLLECTION

To ensure that the collected Information is complete and accurate, depending on the case, the Company may choose to use singular or combined methods of collecting Customer Information as follows:

1. Requesting the Customer to Provide Information The Company may request the Customer to provide Information in the following cases: a) Certain Services of the Company allow/request the Customer to create an account or personal profile. To utilize these Services effectively, the Company may require the Customer to provide the Information mentioned in Section III above to meet the Customer's Service usage needs. b) In the event that the Customer requests the Company to answer inquiries related to the Company's Services or requests the Company to provide Services (e.g., ordering automobiles online, requesting car maintenance support), the Company may request the Customer to provide Information to process the Customer's requests quickly and accurately. c) Other cases requiring Information collection depending on the Company's collection needs. d) The Company will always provide options regarding the decision to provide or not provide Information for the Customer. If the Customer chooses not to provide Information, certain Services or transactions may not be executable, or certain transactions may only be accessed and performed under an anonymous mode (Guest).
2. Company Self-Collection of Information a) Collection of Information from Third-Party Sources: The Company may receive Information about the Customer that has been publicly disclosed on the e-commerce websites of any third party or receive Customer Information from a third party when the Company participates in transactions involving the transfer of such Information. b) Collection During Service Execution: During the execution of Services, the Company may also collect Customer Information through other appropriate methods with the Customer's consent to such collection methods. c) Collection During Customer's Use of Services: Some of the Company's Services allow the Customer to communicate with third parties; such communications will be transmitted through, and Information arising during such communication may be stored on, the Company's system.
3. Consolidation of Information The Company may consolidate Customer Information obtained through various collection methods mentioned in this Section as a step to complete Information for the purposes mentioned in this Policy without the prior consent of the Customer. However, the Customer always has the right to choose to adjust their Information in accordance with the provisions of Section X.1 of this Policy.

V. SCOPE OF INFORMATION USE

1. The Company uses the collected Customer Information to: a) Implement measures to improve the Company's Services. b) Establish loyalty support programs or other trade promotion programs. c) Handle issues related to the Customer's use of Services or transactions between the Company and the Customer. d) Send open letters, orders, and thank-you letters. e) Send promotional Information or other Information to the Customer with the Customer's prior consent. f) Notify about the Company's recruitment information if the Customer has subscribed to receive email notifications. g) Evaluate and analyze the market, customers, and the Company's Services. h) Other contents for which the Company is permitted to use Information, provided such use is not contrary to the provisions of the law.

VI. PARTIES WITH ACCESS TO INFORMATION

1. To fulfill the purpose of Information collection mentioned in this Policy, the Company may require support from third parties for data analysis, marketing, customer service support, and/or providing better Services to the Customer. During the support process, Customer Information may be disclosed by the Company to the subjects mentioned below: a) Affiliated Entities of the Company: When the participation of an Affiliated Entity is necessary to execute/complete a transaction established between the Company and the Customer. b) Trusted Business Partners: The disclosure and responsibility for the confidentiality of Customer Information shall be implemented in accordance with the agreement between the Company and the Company's business partners.
2. To develop business operations or in the event of force majeure, the Company may have to reorganize, transfer, dissolve, or declare bankruptcy. In this case, the successors or transferees of the Company may receive Customer Information to replace the Company in continuing to provide and execute Services for the Customer.
3. The Company shall disclose Customer Information to Third Parties or competent authorities when requested by competent authorities or in other cases as prescribed by law, or when the Company has grounds to believe that the disclosure of Information is necessary to protect the rights, property, or safety of the Customer or of the Company/Affiliated Entities of the Company.
4. Other parties with the consent or under the instruction of the Customer.

VII. INFORMATION RETENTION PERIOD

The Company only retains Information about the Customer for the period necessary for the purpose for which the Information was collected, or as required by Contract, or as prescribed by applicable laws.

VIII. THIRD-PARTY LINKS AND PRODUCTS ON THE WEBSITE

1. Certain content, advertisements, and features on the Company's website may be provided by third parties that may or may not be affiliated with the Company. These third parties may collect or receive certain Information about the Customer's use of Services, including through the use of Cookies, Beacons, and similar technologies, and this Information may be collected over time and combined with Information collected across different websites and online services.
2. If the Customer connects with a social networking service, the Company may receive and store authentication Information from that service to enable the Customer to log in, as well as other Information that the Customer allows the Company to receive when connecting with such services.
3. By accessing and/or using the Company's Services, the Customer consents to the storage of Cookies, Beacons, and other local storage technologies. The Customer also consents to the access of Cookies, Beacons, and local storage technologies by the Company and the third parties mentioned above.
4. As stated above, the Company's Services may contain links to websites of other Third Parties not under the Company's control. Therefore, the Company shall not be responsible for the safety or security of any Information collected by such Third Parties, which is not performed on the website interface or where the Company has the right to manage and/or control. The Company advises the Customer to be cautious and review the privacy decisions applicable to the websites and services of the Third Parties that the Customer uses.

IX. CONFIDENTIALITY COMMITMENT

1. The Company is committed to the confidentiality of Customer Information in accordance with the contents stipulated in this Policy and the provisions of the law.
2. The Company will apply appropriate technical and security measures and solutions to protect Customer Information most effectively. However, please note that although the Company implements reasonable methods to protect Customer Information, no website, Internet transmission, computer system, or wireless connection is absolutely secure. Therefore, the Company cannot provide a firm commitment that the Information the Customer provides to the Company will be kept absolutely secure, and the Company cannot be held responsible in the event of unauthorized access or leakage of Customer Information not due to the Company's fault. If the Customer does not agree with the terms described above, the Company recommends that the Customer should not send Information to the Company.

X. RIGHTS AND RESPONSIBILITIES OF THE CUSTOMER

1. Rights a) The Customer is guaranteed the rights and confidentiality regarding Information as committed by the Company under this Policy. b) The Customer has the right to access their Information data and has the right to self-correct errors in their personal data or update/supplement to complete the Information stored on the website. The Customer also has the right to delete personal data on the website or request the Company to stop using personal data for marketing purposes by sending a request to cease receiving notifications and information from the website. c) If the Customer does not wish to receive any advertising information or promotional programs from the Company, they have the right to refuse at any time by sending a request to stop receiving information to the Company's website according to the features instructed at the bottom of the page.
2. Responsibilities of the Customer a) Carefully study this Policy before using or accessing the Company's Services. The Customer's use or access of the Company's Services constitutes confirmation that they have carefully studied and agreed to the entire content of this Policy. b) Provide accurate and lawful Information to the Company when requested and agreed to be provided. The Customer shall be fully responsible (in all cases, without any implication of liability to the Company, whether in part or in whole) if the Information provided by the Customer to the Company is inaccurate, unlawful, and/or the execution of the Service for the Customer is interrupted or impossible; or transactions between the Company and the Customer, between the Company and a Third Party, or between the Customer and a Third Party are interrupted or impossible due to technical factors, transmission lines, system errors, etc., or arising from any material or non-material damage resulting from the use of such inaccurate/unlawful Information. c) Do not use any program, tool, or other form to interfere with the system or alter the data structure of the Service, the website interface, or the existing features of the Company's website. d) Do not distribute, propagate, or encourage any activity aimed at interfering with, sabotaging, or intruding into the data of the website system under the management of the Company. e) Do not propagate or distribute content that violates the law and/or contravenes social ethics on the Company's website. f) Any violation will be handled in accordance with the provisions of the law.