Artilux Share Transfer Portal — Privacy Policy

1. Who We Are

Artilux is the data controller responsible for the Personal Data processed through the Portal. The Portal is operated on our behalf by Artilux's personnel based in the Republic of China (Taiwan).

2. Personal Data We Collect

“Personal Data” means data that may be used to identify you directly or indirectly. To process a share transfer, we collect the following from the parties to a transfer (the transferor/seller and transferee/buyer) and, where relevant, their representatives:

Identity information

• Full legal name, residential or registered address, and nationality
• Date of birth, where required
• National identity card, passport, or other government-issued identification details

Contact information

• Email address (used for verification and case correspondence) and telephone number

Transaction information

• Number, class, and details of the shares being transferred, and the consideration / transfer price
• The instrument of transfer and any signed or supporting documents you upload

Payment information

• Where a transfer fee applies, details necessary to confirm payment

Technical information

• Login credentials and account activity
• Log data such as IP address, browser type and language, and the date and time of your requests

We collect this data directly from you when you submit a case, verify your participation by email, upload documents, or otherwise interact with the Portal. We may also collect information from other sources to correct or supplement our records and to help prevent or detect fraud.

3. How and Why We Use Your Data

We use your Personal Data to provide the share transfer service and to support our related business functions. Specifically:

We process your Personal Data where it is necessary for the performance of a transaction you have requested, for compliance with our legal obligations, for our legitimate business interests in operating the Portal securely and effectively, and/or on the basis of your consent where required. You can revoke consent at any time, after which we will cease using and processing your Personal Data, subject to our legal retention obligations.

4. Disclosure of Personal Data to Third Parties

We will not rent or sell your Personal Data. We share it only as necessary to provide the service and meet our obligations, with recipients that may include:

• Our authorized administrators and staff, who review and process your case
• Our Cayman Islands registered agent, who completes the offline registration of the share transfer
• The other party to your transfer, to the extent necessary to complete the transaction
• Professional advisers, such as legal, accounting, and compliance advisers
• Service providers who support the operation of the Portal (such as hosting and email providers), under appropriate confidentiality and data protection terms
• Regulators, authorities, law enforcement, or other parties where required by law, in response to lawful requests, or to protect our rights, property, or safety

5. International Transfers

We operate across multiple jurisdictions and engage service providers in various locations. As a result, your Personal Data may be stored, processed, or accessed in countries that may not have the same data protection laws as your country of residence, including the Cayman Islands, Taiwan, and the United States. Where we transfer your Personal Data internationally, we protect it as described in this Policy and apply appropriate safeguards consistent with applicable law. By using the Portal or otherwise providing information to us, you consent to such transfers.

6. Data Retention and Storage

We retain your Personal Data for as long as your account is active and as reasonably necessary to provide the service, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Records relating to completed share transfers and shareholder registers may be retained for an extended period as required under applicable company and record-keeping laws. We may also retain cached or archived copies for a reasonable time. When data is no longer required, we will securely delete or anonymize it.

7. How We Protect Your Data

Security of your Personal Data is of the utmost importance to us. We use industry-standard technical, physical, and organizational measures, including encryption of traffic in transit, access controls, and restricting access to authorized personnel and trusted third parties only. No security measure can prevent all loss, misuse, or alteration, and any transmission is at your own risk. Where we determine it is reasonably necessary, we will notify you and the relevant regulatory bodies of a data breach in accordance with applicable law. You are responsible for keeping your login credentials confidential.

8. Your Rights

Subject to applicable law, you may request to access, correct, delete, or obtain a portable copy of the Personal Data we hold about you, and you may object to or request restriction of certain processing. To make a request, contact us at privacy.contact@artiluxtech.com. We will respond within 30 days. We may need to verify your identity before responding, and in some cases we may limit or deny a request where the law permits or requires us to do so (for example, where we must retain share transfer and shareholder records), where it would infringe the privacy of others, or where we hold no personally identifiable data relating to you.

9. Cookies and Analytics

The Portal uses cookies and similar technologies that are necessary for it to function (for example, to keep you logged in) and may use analytics tools to understand how the Portal is used. For more information about Artilux's use of cookies, please refer to the Artilux Cookie Policy. You can usually set your browser to remove or reject cookies, though some features of the Portal may not function properly as a result.

10. Updates to This Policy

This Policy may be amended or updated from time to time to reflect changes in our practices or in applicable law. We will revise the Effective Date above and, where appropriate, notify you. Your continued use of the Portal after any update constitutes acceptance of the revised Policy.