Effective Date: August 30^th, 2025

Servanan International Pte. Ltd. (“OK.com”, “we”, “us”, or “our”) values and protects user privacy. We are highly aware of the importance of your personal information and are committed to protecting such information in a secure and controlled manner by strictly complying with legal and regulatory requirements and referring to proven industry security standards. For this purpose, we have developed the User Privacy Policy (“Policy”) to help you understand in detail how we collect, use, process, share, store, and protect your personal information during your use of our products and/or services and the rights you have in such process. We adopt this Policy to comply with the applicable data protection laws and regulations. Please note that “personal information” in this Policy has the same meaning as "personal data" under GDPR or similar concepts in other privacy protection laws.

Before you start using our products and/or services, it is important that you read this Policy carefully (especially the highlighted terms), and fully understand the content herein. When it comes to additional business functions that require the processing of your non-essential personal information, we will ask for your consent separately. Some of the concepts might seem a little technical, and we've tried our best to explain them in a simple and clear way. Please read and understand this Policy before use. If you have any questions, please contact us.

I. Scope of Application

(1) This Policy applies to the official website (https://OK.com) and all its subsites (collectively, “Website”), products, mobile applications (OK.com App), computer applications, technical support, and other services provided by OK.com (collectively, “products and/or services”).

(2) This Policy does not apply to any third-party websites and their services linked to or from the Website. Please read the relevant privacy policy carefully when using the aforementioned services.

(3) “Personal information” herein refers to information recorded electronically or by other means, which can be used to identify or relate to a natural person, excluding the anonymized data. The type and scope of personal information we collect vary with the products and/or services you use and how you interact with us. Please refer to the specific product or service functions. You have the right not to provide us with this information, but in some scenarios, if you choose not to, we will not be able to provide you with the corresponding products or services or respond to and resolve your problems.

(4) Some services may require you to enable the corresponding permissions on your device. You may refer to “II. How We Collect and Use Your Personal Information” in this Policy to learn about the specific permissions involved with OK.com App. You can also go to “Settings > Application Permissions” on your device to enable or disable the permissions at any time through as needed. In particular, even if we have obtained your access permissions, we will only collect your information when it is necessary for the rendering of relevant functions or services.

(5) For better user experience, we are constantly improving our technology. As a result, we may from time to time introduce new or optimized functions and hence may need to collect and use other personal information or change the purposes or methods of data use. In this regard, we will separately explain to you the scope, purposes, and methods of collection and use of the corresponding information by Policy updates, pop-up windows, page prompts, etc. You will have the right to agree or disagree with such changes, and we will only collect or use your information after obtaining your express consent. During this process, if you have any questions, comments, or suggestions, you can contact us through the contact information provided herein. We will reply to you as soon as possible.

(6) Local-specific addendum also applies to users in those territories and may in some cases set out different standards due to applicable local laws, rules and regulations. If so, the local-specific addendum will govern in the event of a conflict.

II. How We Collect and Use Your Personal Information

We follow the data minimization principle when collecting and using your personal information and do not use your personal information beyond the purposes of the User Agreement and this Policy. We hereby state that OK.com strictly complies with PCI DSS requirements. Sensitive payment account data (such as full card numbers) are not accessed or stored by us. All such payment information is handled exclusively by licensed payment service providers acting as our data processors.

(I) Registration and Account Services

When you register for an OK.com account, you need to provide your email address and phone number. Without this information, you will not be able to complete registration.

Additionally:

1. For account personalization, we may collect your username, user ID, profile picture, registered country/region, and preferred language. Refusal to provide such information will not affect your basic use of the account, but may limit personalized services.
2. If you choose to log in using third-party accounts, we may obtain from such third parties your phone number, registered email, avatar, and usernameto bind with your OK.com account.

(II) Website Posting and Content Services

When you use our website to post content or listings, we may process the following information:

1. Post category, post title, description, images, product price, contact information, approximate address, saved posts.
2. If you are a seller, we may also process the submitted tracking numbersfor logistics.

This information is necessary to enable posting, to review content for compliance (e.g., prohibited items, fraud), and to enhance user safety.

(III) Seller Verification (KYC)

In order to open a seller wallet account, we must conduct KYC verification. Depending on your identity, we may collect:

1. Seller ID on platform.
2. Seller ID document(ID number and scan), document type (passport, driver’s license, national ID), issuing country, document ID, date of birth.
3. Seller legal entity name, trading/DBA name, country, industry category code, store URL(s), primary contact information.

If you do not provide this information, we will not be able to open your seller wallet account.

(IV) Bank Account Binding and Withdrawal

When you bind a bank account or request withdrawals, we may collect and process:

1. Personal and beneficiary information: name, nickname, date of birth, email, address, city, state, postal code, country.
2. Bank details: account name, account number, currency, bank country code, swift code.
3. Entity type(e.g., personal, business).

This information is necessary to process payments to you. Without it, withdrawals cannot be completed.

(V) Buyer Transaction Information

When you make purchases:

1. We collect order-related data such as request ID, merchant order ID, amount, currency, registration date, registration IP address, customer address, email, phone number, business name (if applicable).
2. Order details: product code, description, name, quantity, SKU, type, unit price, product URL.
3. Shipping information: recipient name, shipping address (city, country, postal code, etc.), and phone number.

(VI) Payment and Risk Control

For payment and risk control purposes, we may process:

1. Order ID, user ID, payment ID.
2. Payment method details (via licensed processors), including: card type, brand, BIN, last 4 digits, issuer country, billing name and address, phone number, email.
3. Merchant order ID, payment intent ID, transaction ID, acquirer reference number, authorization code, transaction timestamps.

These are used for fraud monitoring, compliance, and transaction security.

(VII) Buyer–Seller Communication

When buyers and sellers communicate through our platform, we will process the chat messages to ensure the functionality of the communication system and to prevent abuse.

(VIII) Third Party Analytics Service

We use third-party analytics tool -- Google Analytics to assist us with analyzing and improving our service. Google provides some additional privacy options to protect business's data. Click here to learn more.

To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here.

III. Legal Basis for Processing Your Personal Information

We must have a legal basis to process your data. We explain these legal bases below. We also explain the purposes for which we process your data and the categories of data that we use for each purpose.

Phase	Purpose	Personal Information	Legal Basis
Registration and Account Services	To create and manage user accounts; to provide core and personalized services	Email, phone number, username, user ID, profile picture, registered country/region, preferred language, third-party login email and country	Contract, Consent, Legitimate interests
Website Posting and Content Services	To enable posting and listings; to review content for compliance; to protect platform integrity and safety	Post category, title, description, images, product price, contact details, approximate address, saved posts, tracking number	Contract, Consent
Seller Verification (KYC)	To open seller wallet accounts; to verify identity; to comply with AML/KYC obligations	Seller ID, ID document (number, scan, type, issuing country, document ID, date of birth), legal entity name, trading/DBA name, country, industry code, store URLs, primary contact	Legal obligation, Contract
Bank Account Binding and Withdrawal	To process withdrawals and payments to users’ bank accounts	Beneficiary name, nickname, date of birth, email, address, city, state, postal code, country, bank account name, account number, currency, bank country code, SWIFT code, entity type	Contract, Legal obligation
Buyer Transaction Information	To process orders, payments, and deliveries; to provide customer service	Order IDs, merchant order ID, request ID, amount, currency, registration date, registration IP, customer address, email, phone number, business name (if applicable), product code, description, name, quantity, SKU, unit price, product URL, recipient name, shipping address, phone number	Contract, Legitimate interests
Payment and Risk Control	To process payments, prevent fraud, and ensure compliance	Order ID, user ID, payment ID, payment method details (card type, brand, BIN, last 4 digits, issuer country, billing name/address, phone, email), merchant order ID, payment intent ID, transaction ID, acquirer reference number, authorization code, transaction timestamps	Contract, Legal obligation, Legitimate interests
Buyer–Seller Communication	To provide messaging functionality; to prevent misuse and abuse	Chat messages	Consent
Third-Party Analytics (Google Analytics)	To analyze service usage and improve performance	Usage and browsing data (via cookies/Google Analytics)	Legitimate interests, Consent

 

IV. How We Process, Share, Transfer and Disclose Your Personal Information with Third Parties

(I) Processing

We may assign third-party service providers to provide certain functions or modules, and we will share your personal information with such parties in accordance with the “data minimization” principle. We will make an agreement with them on the purpose and duration of the sharing, the manner of processing, the type of personal information and protection measures, and will evaluate and monitor their actions as necessary to protect your personal information.

(II) Sharing

In general, we will not share your personal information with third parties unless we have your express consent or otherwise required by laws and regulations.

We may share your personal information externally in accordance with laws and regulations, or as mandatorily required by government authorities. Only by sharing your personal information can we perform the essential functions of our products and/or services or provide the services you need.

(III) Transfer

We will not transfer your personal information to any third party, except for the following cases.

(1) Transfer with your express consent: We will transfer your personal information to other parties after obtaining your express consent.

(2) In the event of a merger, acquisition or bankruptcy liquidation involving the transfer of personal information, we will require the company or organization as the new holder of your personal information to follow this Policy; otherwise, we will require such company or organization to ask for your authorization and consent again.

(IV) Disclosure

We will only publicly disclose your personal information in the following cases:

(1) With your express consent;

(2) In connection with the fulfillment of a legal obligation, such as in situations where it is mandatorily required by law and related procedures, litigation or government authorities;

(3) Directly related to national security or national defense security;

(4) Directly related to public safety, public health or significant public interest;

(5) Directly related to crime investigation, prosecution, trial, sentence enforcement, etc.;

(6) For the purpose of safeguarding your or any other individual’s life, property and other significant legitimate rights and interests while difficult to obtain your consent;

(7) Where the personal information involved is disclosed by you to the public at your own discretion;

(8) Where it is necessary for the conclusion and performance of a contract or other written document between you and us;

(9) Where your personal information is collected from lawful public disclosures, such as lawful news reports, government information disclosure and other channels;

(10) Other circumstances as stipulated by laws and regulations.

V. Your Rights About Your Information

(I) Access and Rectification

You have the right to access your personal information. If you find errors in your personal information we process, you have the right to ask us to make corrections.

(II) Deletion

You have the right to request us to delete your personal information in the following circumstances:

(1) If our processing of personal information violates laws and regulations;

(2) If we collect and use your personal information without obtaining your consent;

(3) If our processing of personal information violates our agreement with you;

(4) If you no longer use our products or services, or if you cancel your account;

(5) If we no longer provide products or services to you.

If we decide to respond to your request for deletion, we will also simultaneously notify the entities having obtained your personal information from us for prompt deletion, unless otherwise required by law or regulation, or unless such entities have obtained your separate authorization.

After assisting you to delete the relevant information, we may not be able to immediately remove the corresponding data from the backup system due to legal restrictions and limitations of security technology. We will store your personal information safely and limit any further processing of this information, until the backup can be erased or anonymized.

(III) Changing the Scope of Your Authorization and Consent

You may give or withdraw your consent at any time for collection and use of personal information additionally collected, other than that required to provide you with basic business functions.

You can opt out of receiving our emails by clicking “Unsubscribe” at the bottom of any email you get from us. If you want to quit any of our events or programs you have joined, you can click “Contact Us” at the bottom of this page.

After you withdraw your consent, we will no longer process the corresponding personal information. However, this will not affect the processing of personal information that has been previously done based on your authorization.

(IV) Account Cancellation

You can cancel your account at any time by contacting us, or use the Delete Account function in OK.com APP.

After you cancel your account, we will stop providing you with our products and/or services and, at your request, delete your personal information, unless otherwise provided by law or regulation.

You may open a new account at any time after cancelling your account.

(V) Access to Your Personal Information Copies

You have the right to obtain a copy of your personal information. If you want a copy, click “Contact Us” at the bottom of this page.

(VI) Constraint of Automated Decision Making by Information System

In some business functions, we may make decisions based solely on non-manual automated decision-making mechanisms, including information systems, algorithms, and the like. If these decisions significantly affect your lawful rights, you have the right to request an explanation from us and we will provide appropriate remedies.

(VII) Objecting to or Restricting Our Processing of Your Personal Information

You have the right to object to or restrict our processing of your Personal information. For relevant issues, click “Contact Us” on the bottom of this page.

(VIII) Help and Feedback

For security purposes, where there are reasonable doubts concerning the identity of the natural person making the request, you may be required to provide a written request or otherwise prove your identity. We may ask you to verify your identity before we process your request. We will respond within 7 business days after verifying your identity.

In principle, we do not charge a fee for your reasonable requests.

PLEASE NOTE THAT SUCH RIGHTS ARE NOT ABSOLUTE AND MAY BE LIMITED IN ACCORDANCE WITH APPLICABLE LAW. IN SOME CASES, YOUR REQUEST MAY BE REJECTED, AND IN SUCH CASES WE WILL NOTIFY YOU IN WRITING OF THE REASONS FOR THE REJECTION. IF YOU NEED ASSISTANCE, PLEASE CONTACT US.

(IX) Your Other Options

You may have other options in relation to the information that we have about you, depending on your jurisdiction and the applicable data protection laws and regulations. To exercise these options, please contact us.

VI. How We Store and Protect Your Personal Information

We have used security measures that meet industry standards to protect your personal information against unauthorized or accidental access, public disclosure, use, modification, damage, or loss. We will take all reasonably practicable measures, including administrative management, technical support and physical defense measures, to protect your personal information, and will retain your personal information only within the period of time stipulated by laws and regulations. You may contact us for the specific retention periods of information.

Please note that there is no 100% security protection in the Internet environment, and we will do our best to ensure the security of your information.

Your understanding and cooperation are important to us in protecting the personal information and privacy security of you and your associates. Your passwords, verification codes and other information are to be kept by yourself. Please carefully evaluate the physical and electronic environment when you keep, enter and use such information to prevent leakage.

VII. To Whom Could We Disclose Your Personal Information?

Due to the size and complexity of data processing by OK.com, it is not possible to list each recipient of your Personal information individually in this Policy, which is why only categories of recipients are usually listed.

We might share your Personal information with the following recipients or categories of recipients who act as controllers:

• com’s affiliates in the context of group tasks and group personnel development (e.g. OK.com’s subsidiary in the other jurisdictions);
• Public authorities such as police, government and courts when it is required for purposes such as crime investigation, prosecution, trials, and the enforcement of sentences.
VIII. How We Transmit and Transfer Your Personal Information

We provide our products and/or services through resources and servers around the world.

We may also transfer your personal information to third-party service providers and business partners (such as cloud service providers) and your data may therefore also be transmitted to other countries or regions. User data related to OK.com products is primarily stored as per:

Your residence	Server location
US, Canada, UK	US
Other jurisdictions	Singapore

The jurisdictions to which your data is transmitted may or may not protect personal information to the same standards as in your jurisdiction. In such cases, we will ensure that your personal information is adequately and equally protected as required by applicable laws and regulations and this Policy.

When Personal information is transferred from the UK, we take special safeguards to ensure that the protection travels with the data, including the standard contractual clauses approved by the ICO in our contracts with parties that receive information outside the UK. To obtain further information about the safeguards adopted for each international transfer use the contact details in section Contact Us below.

IX. How We Use Cookies and Other Technologies

We analyze data collected through cookies, web beacons, and other tracking technologies, to collect visitor traffic and related data, such as the browser you use and what sites you visit. These technologies allow us to study how and how often you use our applications and services so that we can better meet your needs and measure the effectiveness of advertisement. For more information about how Google Analytics collects and uses data when you use our Site, visit www.google.com/policies/privacy/partners, and to opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.

For more information about the use of cookies, please see our Cookie Policy.

X. Children’s Privacy

OK.com products and/or services are not intended for children under the age of 18. We do not permit registration by and will not knowingly collect personally identifiable information from anyone under 18. If this happens, we will delete the information as soon as possible.

XI. Changes and Updates on This Policy

We may change this Policy from time to time, so please revisit this page periodically. Your continued use of our products and/or services after the revised Policy has become effective indicates that you have read, understood, and agreed to the current version of this Policy. We will not, however, reduce your rights under this Policy without your explicit consent.

In the event that our specific products or services are discontinued, we will notify you in advance through system notifications, announcements, text messages, emails, etc., and process your personal information in accordance with this Policy or relevant documents. If we cease operations permanently, this Policy will become invalid and we will process all your personal information in accordance with applicable regulations.

XII. Contact Us

If you have any questions or suggestions about this Policy or your personal information, or you have any doubts about our collection, use or disclosure of your personal information, please reach us by using the information on our “Contact Us” page, or by sending an e-mail to legal@ok.com. We will reply to you within 7 business days. If you are not satisfied with our response, especially if our information processing has harmed your lawful rights and interests, you can file a complaint to the local competent regulator.

Local Specific Addendum

Canada Addendum

If you are located in Canada and would like to receive written information regarding our policies and practices concerning service providers outside of Canada, you may contact us by the information listed in the Section “Contact Us”. We will assist with any questions related to the collection, use, disclosure, or storage of personal data by these service providers.

When we engage service providers who may have access to your personal data, we require them to uphold privacy and security standards that are equivalent to our own. We ensure this through contracts and other safeguards that protect the confidentiality and integrity of your information and restrict its use strictly to the purposes outlined in this Policy.

Singapore Addendum

The Singapore Personal Data Protection Act (“PDPA”) provides for the establishment of a National Do Not Call (DNC) Registry, which allow individuals to register their Singapore telephone numbers to opt out of receiving marketing phone calls, mobile text messages such as SMS or MMS, and faxes from organizations from 2 January 2014 onwards.

We aim to comply with the requirements of the PDPA and respect your choices. If you have registered your telephone number with the DNC Registry, we will not send you our promotional and marketing messages via phone calls, text messages and faxes. However, if you have previously given us consent to contact you for such purposes, we will continue to do so until you withdraw your consent.

US (California) Addendum

This Addendum (this “Addendum”) applies to users who reside in the U.S. (“users” or “you”). We adopt this notice to comply with the California Consumer Privacy Act (“CCPA”) and other state-level consolidated privacy laws. Any terms defined in the CCPA have the same meaning when used in this notice.

1. Categories of Personal Information We Collected

The personal information we have collected about you in the last 12 months is described in the main body of this Policy. That information corresponds with the following categories of personal information under the CCPA:

Category	Examples
A. Personal and online identifiers	Email address, phone number, username, user ID, profile picture, registered country/region, preferred language, third-party login email and country, recipient name, buyer/seller name or nickname, date of birth, IP address, chat messages
B. Recordkeeping information	Seller ID on platform, seller ID document number and scan, document type (passport, driver’s license, national ID), issuing country, document ID, seller legal entity name, trading/DBA name, industry category code, store URL(s), primary contact, bank account name and number, SWIFT code, bank country code, entity type (personal/business), payment IDs (payment ID, payment intent ID, transaction ID, authorization code, acquirer reference number), order ID, merchant order ID, request ID
C. Commercial information	Post category, title, description, images, product price, contact information in listing, tracking number, saved posts, order details (product code, description, name, quantity, SKU, type, unit price, product URL), buyer transaction info (amount, currency, business name if applicable)
D. Internet or other similar network activity	Registration date, registration IP address, transaction timestamps, usage of website posting functions, buyer–seller communication logs, Google Analytics browsing/usage data
E. Geolocation data	Approximate address in posts, customer address, shipping address (city, state, country, postal code), bank beneficiary address, city, state, postal code, country
F. Sensory information	None collected
G. Other information linked to personal information above	Billing name and address, payment method details (card type, brand, BIN, last 4 digits, issuer country), transaction security and fraud monitoring data, compliance-related data (e.g., KYC results, payment risk assessment)

Some of the categories of personal information listed above are considered sensitive personal information under the CCPA. We do not use or disclose sensitive personal information, as defined by the CCPA, for purposes other than those specified in the CCPA.

We do not knowingly collect personal information from anyone under 18. If this happens, we will delete the information as soon as possible.

1. Categories of Sources

We collect personal information from the following categories of sources:

• We collect information directly from you when you interact with our various products and services.
• Affiliates and joint ventures. We collect information from our subsidiaries, affiliates, and joint venture companies.
• Service providers. We collect information from third-party platforms when you use your social media account to register an account and login.
• Information Use

We may use your information for any lawful purpose, including the following:

• Posts and Orders.We may use your information to enable you to post on the platform, ship products, complete financial transactions, and provide customer support;
• Respond to your inquiries.We may use your information to respond to your questions, including questions about order status;
• Operate and improve our products and services. We may use your information to operate and improve our products and services. Specifically, we may use your posts to train artificial intelligence algorithms, when you choose to upload them and provide consent for this purpose.
• Operate, personalize, and improve the Website.We may use your information to operate, personalize, and improve the Website, including for analytics purposes;
• We may use your information to promote and market our products and services, including to send updates, promotions, advertisements, and marketing materials that may be of interest to you;
• Legal compliance.We may use personal information to comply with the law and to maintain the security of our Website; and
• We may use personal information with your consent, or as otherwise disclosed at the time information is collected.

We may use de-identified information without limitation.

• Categories of Third Parties to Which We Disclose Personal Information

We disclose the personal information we collect to the following categories of recipients for our business and commercial purposes:

• Service providers.We may disclose the personal information we collect to our service providers, such as support system provider, value-added tax (VAT) checker, tax calculation services provider, logistics provider, payment tools provider, email checker, email delivery systems, social media platform (support service), data storage provider, customer relationship management (CRM) system provider, and advertising networks;
• We may disclose the personal information we collect to OK.com’s subsidiaries and affiliates, including in the context of group tasks and group personnel development (e.g., OK.com’s subsidiary in other jurisdictions);
• Government entities. We may provide personal information to U.S. authorities such as police, government, and courts pursuant to a subpoena, court order, governmental inquiry, or other legal process or as otherwise required by law, to protect our rights or the rights of third parties, or to protect the safety or security of any person or entity;
• We may share personal information as part of a corporate sale, merger, or acquisition, or other transfer of all or part of our assets, including as part of a bankruptcy proceeding; and
• We may share personal information with your consent or as otherwise disclosed at the time of data collection or sharing.

OK.com does not sell any personal information.

We may share de-identified information without limitation.

• Your Rights Under CCPA

As a California resident, you may be able to exercise the following rights in relation to the personal information about you, subject to certain exceptions and limitations:

Right to know

You have the right to request that we disclose certain information to you about our collection, use, and disclosure of your personal information over the past 12 months. Once we verify your request, we will disclose to you:

• The categories of personal information we collected, use, and disclose about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting that personal information.
• The categories of third parties with whom we share that personal information.
• If we disclosed your personal information for a business purpose, one list disclosing the business purpose and identifying the personal information categories that each category of recipient obtained.

Right to delete your personal information

You have the right to request that we delete any of your personal information that we collected about you and retained. In some instances, we may decline to honor your request where an exception applies, such as where the disclosure of personal information would adversely affect the rights and freedoms of another California resident.

Once we verify your request, we will delete (and direct our service providers to delete) your personal information from the records, unless an exception applies.

Right to correct inaccurate personal information

You have the right to request we correct any inaccurate personal information we hold about you.

Right not to receive discriminatory treatment

You have a right not to receive discriminatory treatment by us for exercising your privacy rights conferred by the CCPA, including the right not to be retaliated against for the exercise of your privacy rights.

We do not sell or share your personal information under the CCPA, so we do not offer an opt-out right.

To exercise any of the above rights, please contact us using the following information and submit the verifying information, as further described below:

• Online athttps://uspub.ok.com/biz/en/contactus.
• By emailing us at legal@ok.com.

In some cases, we may need to request additional information from you to verify your identity or understand the scope of your request. Generally, we verify your identity by matching the information provided in your request with the information we maintain in our records.

You may designate an authorized agent to submit a request on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide the agent with signed permission to do so and provide proof of your identity, or the agent must have a valid power of attorney. An authorized agent can make a request on your behalf through one of the submission methods noted above. In order for us to process the request, the authorized agent will be required to provide evidence of signed permission and your e-mail address to verify your identity, or proof of valid power of attorney.

1. Retention

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we process personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. Once the retention period expires and if not otherwise required to retain information by law, we will delete or de-identify personal information.

• Your Choices

To opt out of our email marketing, you can use the link provided at the bottom of each marketing message. If you opt out of our email marketing, we will still send you messages related to our transactions and relationship with you, such as order confirmations.

• Updates to This Addendum

We reserve the right to update this Addendum at any time, and we may modify the terms of this Addendum in a timely manner based on updates to our services, technological advancements, data processing practices, and relevant legal requirements. We will provide you with a new Addendum in accordance with applicable laws for any material changes made. We may also inform you from time to time about how your personal information is being processed through other means.