Effective as of 31st May 2024

Thank you for using our mobile application Buz, visiting our website at https://www.buzmenow.com and/or communicating with us via email or text or Buz social media accounts (collectively, the "Services").

For the purposes of data protection and privacy laws, Tiya Pte Ltd and Buz Technology Pte Ltd ("we" or "us") are joint controllers in the processing of your personal information. We are committed to protecting your privacy through our data practices described in our main Privacy Policy.

As residents of certain U.S. states have additional privacy rights, we have detailed them below. To the extent that there is a conflict between the main Privacy Policy and this US Privacy Notice, the latter will control.

We reserve the right to change and may periodically update this US Privacy Notice prospectively effective upon the posting of the revised notice. Where required, we endeavour to notify you of material changes to this US Privacy Notice by posting a notice on Buz. Your continued use of our Services following the posting of changes to this US Privacy Notice or any notification to you shall mean you accept those changes. To the extent any provision of this US Privacy Notice is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary for the remainder to be valid and enforceable.

1. Contact Us

If you have questions about how we collect, use, process or protect your personal information, or if you have any requests in respect of your personal information, we encourage you to contact us through the support features within the Buz app so we can respond more quickly. Alternatively, you may contact:

Name of the joint controller representative: Buz Technology Pte Ltd
Address: 6 Shenton Way, #37-03, OUE Downtown, Singapore 068809
Attn: Data Protection Officer
Email: [email protected]

We will respond to your requests in accordance with applicable laws and may take additional steps to verify your identity before fulfilling your request. These steps may include verifying your account details. You may also designate an authorized agent to act on your behalf but we reserve the right to verify the agent's identity and authority, and may deny any requests in appropriate circumstances.

We endeavour to respond to all requests in a timely manner. For more complex requests, we may charge a fee for processing your request. We will inform you of such fees before proceeding with your request. If you have any unresolved concerns about your privacy rights or personal data protection that we could not address adequately, you may contact your local privacy and personal data protection authority for further assistance.

2. Notice to US Residents

If you are a US resident and a consumer defined under the applicable consumer privacy laws ("U.S. Consumer Privacy Laws") of the state you reside in, you have certain consumer privacy rights. For residents of states without consumer privacy rights, we will consider requests but will apply our discretion with respect to and if and how we process such requests. We will also consider applying state law rights prior to the effective date of such laws, but will do so in our discretion. Capitalized terms used but not defined in this Privacy Notice shall have the meanings given to them under U.S. Consumer Privacy Laws.

Consumers have the right to request:

• the categories of personal information that is processed;
• the categories of sources from which personal information is obtained;
• the purpose for collecting or processing your personal information;
• the categories of third parties with whom we may share your personal information;
• the specific pieces of personal information we have collected about you provided that the data given in the request is reliable enough and allows us to identify the user;
• a list of the categories of personal information disclosed for a business purpose in the prior twelve (12) months, or that no disclosure occurred;
• a list of the categories of personal information sold about you in the prior twelve (12) months, or that no sale occurred. We do not Sell or Share your personal information. If we do Sell or Share, we will explain:
• the categories of your personal information we have Sold or Shared; and
• the categories of third parties to which we Sold or Shared the information, by categories of personal information Sold or Shared;
• that we correct inaccuracies you find in your personal information that we maintain, and we will act upon such a complaint as required by U.S. Consumer Privacy Laws; and/or
• that we delete your personal information that we have collected directly from you and are maintaining, subject to our retention rights under U.S. Consumer Privacy Laws. Please note that deletion of your data may mean the loss of your ability to access our products and Services. We are not required to delete your personal information that we did not collect directly from you.

You may also have where specified by applicable law, the right to request a transportable copy, no more than twice in a 12-month period, of your personal information that we have collected.

To exercise your U.S. Consumer Privacy Laws consumer privacy rights, please contact us according to Section 1 "Contact Us" above.

Any request you submit to us is subject to an identification and residency verification process. We will not respond to your request or provide you with personal information if we cannot verify your identity. Please include in the title of your request "Verifiable consumer request". When submitting a request, you should:

• provide adequate information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. If you are making a request through an authorized agent acting on your behalf, such authorized agent must have authority to submit requests on your behalf, subject to our verification; and
• describe your request with sufficient detail that allows us to understand, evaluate, and respond to it.

The personal information provided in a request will be used for the sole purpose of verifying the requestor's identity or authority to make the request. We will retain such information for the adequate period reasonably needed for the purpose described above and delete them after the purpose is fulfilled.

Consumers may appeal our decision regarding a request by submitting a new request requesting an appeal and referencing the original request.

We will not discriminate against you because you exercise your consumer rights. Save that, depending on the nature and scope of your request, you may not be able to access some or all features on Buz, and we may have to terminate the End-User License Agreement we have with you. We will notify you before completing the processing of your request. Should you decide to cancel your request, please inform us immediately. We will make commercially reasonable efforts to respond to your requests without undue delay and within the time frame permitted by the U.S. Consumer Privacy Laws. We may charge a reasonable fee, or refuse to act upon a request if your request is excessive, repetitive, unfounded, or overly burdensome. If we cannot comply with a request, we will explain the reasons in our response.

We do not engage in Targeted Advertising, Profiling, or Automated Decision Making.

We only process sensitive personal information for purposes that are exempt from consumer choice under the U.S. Consumer Privacy Laws.

Generally, we process your personal information to provide you Services and as otherwise related to the operation of our business, including for one or more of the following Business Purposes: Performing Services; Managing Interactions and Transactions; Security; Debugging; Advertising & Marketing; Quality Assurance; Processing Interactions and Transactions; and Research and Development. We may also use personal information for other Business Purposes in a context that is not a sale or share under U.S. Consumer Privacy Laws, such as disclosing it to our Service Providers, Contractors, or Processors that perform services for us ("Authorised Partners" or "Vendors"), to the consumer or to other parties at the consumer's direction or through the consumer's action; for the additional purposes explained at the time of collection (such as in the applicable privacy policy or notice); as required or permitted by applicable law; to the government or private parties to comply with law or legal process or protect or enforce legal rights or obligations or prevent harm; and to assignees as part of an acquisition, merger, asset sale, or other transaction where another party assumes control over all or part of our business ("Corporate Transaction") ("Additional Business Purposes"). Subject to restrictions and obligations under U.S. Consumer Privacy Laws, our Vendors may also use your personal information for Business Purposes and Additional Business Purposes, and may engage their own vendors to enable them to perform services for us.

We may disclose your personal information for the following purposes, which are not a Sale or Share: (i) if you direct us to disclose personal information; (ii) to comply with a consumer rights request you submit to us; (iii) disclosures amongst our related entities, or as part of a Corporate Transaction; and (iv) as otherwise required or permitted by applicable law.

We do not and have not Sold or Shared your personal information. However, in the last 12 months, we have disclosed the following categories of information in order to provide our Services:

As permitted by applicable law, we do not treat deidentified data or aggregate consumer information as personal information and we reserve the right to convert, or permit others to convert, your personal into deidentified data or aggregate consumer information, and may elect not to treat publicly available information as personal. We will not attempt to reidentify data that we maintain as deidentified. You can refer to "How Do We Use Your Information" in Section 3 of our Main Privacy Policy for more information. There may be additional information we collect that meets the definition of personal information under applicable U.S. Consumer Privacy Laws but are not reflected by a category in our Main Privacy Policy, in which case we will treat it as personal information as required, but will not include it when we describe our practices by personal information category.

We do not share personal information as defined by California Civil Code Section 1798.83 ("Shine The Light law") with third parties for their direct marketing purposes absent your consent. If you are a California resident, you may request information about our compliance with the Shine the Light law by contacting us by email or post (see Section 1 above). Any such request must include "California Privacy Rights Request" in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this email address or mail address. California's "Shine the Light" law, Civil Code section 1798.83, does not apply to us because we do not disclose personal information to third parties for the third parties' direct marketing purposes.

Nevada "consumers" have the right to instruct us not to "sell" "covered information" as those terms are defined by Chapter 603A of the Nevada Revised Statutes. Although we do not currently "sell" "covered information" of Nevada "consumers" as those terms are defined under that law, you may contact us using the contact infromation at Section 1 above and provide your name, Nevada resident address, and email address to be verified and exercise your opt-out rights in the event we do sell covered information under that law in the future. If you change your email address or other contact information, contact us in the same manner to update your contact information to help facilitate your opt-out. Changing your contact information elsewhere (e.g., informational requests, account information, etc.) will not update your Nevada opt-out information and we will only use the information provided to our opt-out program for managing opt-outs. It is your responsibility to keep your opt-out information current. If after opting-out you direct us to share your covered information with others, we will do so regardless of your prior opt-out.

California minors should see "Section 8: Protecting Children's Privacy"of the main Privacy Policy regarding removal of certain content they have posted.