Yang Gao Group, with offices at 2200 Post Oak Boulevard, Houston, Texas, along with its affiliated companies operating in the fashion, beauty, lifestyle, catering, food & beverage, furniture, hospitality, and club sectors (all collectively referred to as the "Yang Gao Group Companies"), in their capacity as data controllers—a list of which is available by writing to privacy@yanggaogroup.com—inform you of the following regarding the processing of your personal data (“data”) under the applicable privacy laws (“Privacy Law”).

1. Data Processed, Purpose of Processing, and Legal Basis of Processing

The Yang Gao Group Companies process common data (identifiers, personal data, contact data, financial data, localization data, and navigation data) for:

a) Fulfillment of contractual obligations or execution of pre-contractual measures towards the data subject, including:

• Managing the sale of Yang Gao Group products and services and related after-sales services (e.g., exchanges, returns and warranty, customer care and customer service, product delivery, etc.);

• Managing e-commerce and related services such as registration and interaction with our sites and apps, and the use of services reserved for registered users (e.g., Wish List, My Orders, Quick Purchase, etc.);

b) Fulfillment of legal or regulatory obligations, including:

• Managing legal obligations related to sales activities (such as the issuance and storage of invoices), handling requests for exercising rights regarding the processing of personal data, and communication of any data breaches;

c) Legitimate interest of the Data Processors:

• Prevention and prosecution of fraud and abusive behavior (including by third parties) that conflict with current regulations, contractual provisions, rules of fairness, and good faith;

• Managing any claims/complaints and defense in court;

• Carrying out aggregate statistical analysis on an individual basis aimed at measuring the number of conversions of a given advertisement, using the email address provided by you and only if you have consented to profiling cookies.

Yang Gao Group also processes personal data:

d) After you have given your consent:

• For marketing purposes: Sending you information communications about products, services, events, and promotions of the Yang Gao Group Companies. Marketing activities are carried out using your preferred contact methods, which you may modify at any time;

• For analysis purposes: Analyzing, also via automated means, your preferences, habits, and lifestyle, as well as details of purchases made. The data is used to create group and/or individual profiles (“analysis”), market and statistical analyses, including anonymous data organized in aggregate form. If you also provide consent for marketing purposes, we will send you personalized communications based on analysis of your preferences and interests;

• For localization purposes: Allowing you to share your geographical location and reserve a product online at Yang Gao stores, as well as discover the nearest Yang Gao store.

2. Processing Methods

The data is processed with and without electronic tools, based on logic and procedures consistent with the purposes indicated above and in compliance with Privacy Laws, including confidentiality and security profiles.

3. Data Retention

The data is kept as long as is strictly necessary for the pursuit of the purposes for which it is collected and for the fulfillment of applicable legal and regulatory obligations. Retention periods vary based on the purpose of processing. At the expiry of the aforementioned periods, the data will be deleted automatically or anonymized permanently and irreversibly, unless Yang Gao Group Companies are required to store the data for an extended period in order to comply with legal or regulatory requirements.

4. Nature of Data Provision and Consequences in Case of Non-Provision

For the purposes referred to in section 1(a), (b), and (c), the provision of data is necessary, and refusal to provide it would prevent the activities indicated from being carried out. For purposes referred to in section 1(d), data provision is optional, and refusal will not affect your ability to purchase Yang Gao Group products and services.

5. Categories of Subjects to Whom Data May Be Communicated

The data is accessible to Yang Gao Group Companies and authorized staff. It is also shared with service providers for technical and organizational services functional to the purposes indicated above, including shipping, marketing, and payment management companies, acting as Data Processors under our instructions.

The data is communicated to third parties in the following cases:

• When required by applicable laws and regulations;

• In case of extraordinary operations (e.g., mergers, acquisitions, company transfers, etc.).

Some Yang Gao Group Companies and service providers who access the data may be located abroad in third countries. Yang Gao Group evaluates the level of protection in the importing country and takes necessary precautions to ensure an equal level of protection.

6. Data Subject Rights

You may contact Yang Gao Group at any time to exercise your rights under applicable Privacy Laws (e.g., access, correction, deletion, data portability, restriction of processing) by writing to privacy@yanggaogroup.com. You may also lodge a complaint with the competent authority under Article 77 of GDPR.

7. California Privacy Rights

Please refer to this section here.

8. Joint Use - Exclusively for Japan

Please refer to this section here.

9. Data Protection Officer

The Data Protection Officer for Yang Gao Group is established at 2200 Post Oak Boulevard, Houston, Texas, and can be contacted at dpo@yanggaogroup.com.

10. Changes to the Privacy Policy

Yang Gao Group reserves the right to change this Privacy Policy at any time. The revised Policy will be posted on our website, on our intranet, or sent via email or other means of communication.