Privacy Policy

INFORMATION ON THE PROTECTION OF YOUR PERSONAL DATA

Who is responsible for your data?

In full compliance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") of the Kingdom of Thailand, and any applicable data protection laws of the jurisdictions in which we operate, we inform you that your personal data will be processed by:

BIOSPHERE SOLUTIONS JV CO., LTD. Thai Company Registration No. 0315567002570 Registered office: 112 Moo 9, Nong Yai Phim Subdistrict, Nang Rong District, Buriram Province 31110, Thailand

(hereinafter referred to as "BioSphere", "we", "us" or "our").

For which purposes is personal data processed?

Your personal data is necessary for us to provide the products and services you have purchased or requested, and will be processed for the following purposes:

• Management and administration of customer, distributor, and partner relationships;
• Verification of business identity for our Authorized Wholesale Partner program;
• Taxation, accounting, and invoicing;
• Processing of payments and trade relations;
• Order fulfillment, logistics, and after-sales support;
• Marketing activities, product updates, and advertising in general;
• Compliance with legal and regulatory obligations.

How long do we keep personal information?

We will retain your information for as long as necessary to fulfill the purposes for which it is being processed, and thereafter for any time limits required under applicable Thai law (including, but not limited to, retention obligations under tax, commercial and accounting legislation), or until you inform us of your wish to have it deleted, whichever is longer.

What is our legal basis for using your personal information?

The legal bases on which we rely include, depending on the context:

• the performance of a contract between you and BioSphere, or steps taken at your request prior to entering into such a contract;
• our legitimate interests in operating, protecting and improving our business and our distribution network;
• compliance with our legal obligations under Thai law and any other jurisdictions where we operate;
• where required, your explicit consent, which you may withdraw at any time.

Who do we share your personal data with?

To comply with the purposes set out above and the requirements of applicable law, your personal information may be shared with:

• Tax and revenue authorities, banks, and public bodies with competence in the relevant field;
• Auditors, accountants, and legal advisors;
• Logistics, shipping and customs partners necessary to deliver your orders;
• Payment processors and financial service providers;
• IT, cloud and software service providers acting as our data processors;
• Affiliated entities and trading brands of BioSphere;
• Authorized distributors and partners, where strictly necessary to fulfill the service you have requested.

Cross-border data transfers

As BioSphere operates across Southeast Asia (Thailand, Vietnam, Laos, Cambodia, and other markets), your personal data may be transferred to, and processed in, jurisdictions outside Thailand. Where such transfers occur, we will ensure that appropriate safeguards are in place in accordance with the PDPA and any other applicable laws.

What are your legal rights in relation to the personal data collected from you?

Under the PDPA and other applicable laws, you have the right to:

• request access to your personal data and obtain a copy of it;
• request the correction of inaccurate or incomplete data;
• request the erasure or destruction of your personal data;
• request the restriction or suspension of processing;
• exercise your right to data portability;
• object to our processing of your personal data;
• withdraw consent at any time, without affecting the lawfulness of any processing carried out before such withdrawal.

To exercise any of these rights, please contact us by email at dynaroot@biospheresolutions.asia, or by writing to our registered office address indicated above, clearly stating which right you wish to exercise.

Right to lodge a complaint

You also have the right to lodge a complaint with the competent supervisory authority — in Thailand, the Personal Data Protection Committee (PDPC) under the Ministry of Digital Economy and Society — if you believe that our processing of your personal information does not comply with the applicable data protection legislation.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or industry practice. The most current version will always be available on our website. Material changes will be communicated through appropriate channels.

Last updated: 2 May 2026 BIOSPHERE SOLUTIONS JV CO., LTD. — Thai Company Registration No. 0315567002570