Golden News Power Bank Privacy Policy Last Updated: 2025-12-29 Effective Date: 2025-12-29 Golden News Power Bank Limited (“we”, “us”, or “our”) is committed to complying with the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong (“PDPO”) and to protecting the privacy of all users (“user”, “you”) of our mobile applications, mini programs, websites, and services (collectively, the “Services”). Please read this Privacy Policy carefully to understand how we collect, use, store, transfer, and protect your personal data when you use our Services (including our website, mini programs, and apps). By using our Services, you agree that we may collect, use, store, transfer, and process your personal data in accordance with this Privacy Policy. About Us and Contact We are Golden News Enterprises Limited, registered in Hong Kong and located at [Room 1003, 10/F., Block A, East Sun Industrial Centre, 16 Shing Yip Street, Kwun Tong, Hong Kong]. If you have any questions about this Privacy Policy or our handling of your personal data, please contact us at: [info@goldennews.com.hk] or [Customer Support Hotline: +852 2377 5555]. Your Privacy Rights You have choices regarding your personal data. Certain personal data is necessary for us to provide the Services and fulfill our contractual obligations. If you choose not to provide required data, some features may be unavailable. Under the PDPO, you may: Data access: Request access to personal data we hold about you. Data correction: Request correction of inaccurate personal data we hold about you. Opt-out of direct marketing: Withdraw consent or object to our use of your personal data for direct marketing at any time. To exercise your rights, please contact us at [info@goldennews.com.hk]. We will respond as soon as reasonably practicable, taking into account the complexity of your request. We may need to verify your identity and your authority to make the request. Depending on your request, we may be unable to continue providing certain Services. If your request conflicts with applicable laws or the rights of others, we may not be able to comply. We may charge a reasonable fee for processing data access requests in accordance with the PDPO, and will notify you of any fee in advance. Account deletion and data erasure: You may email us to request deletion of your personal data. Please note that, for legal or security reasons and due to technical constraints, deletion from backups and archives may not be immediate. We will take appropriate security measures to segregate and protect your data and cease further processing until deletion or anonymization is completed in accordance with our retention schedule and applicable law. Personal Data We Collect A) Data you provide or that is generated when you use the Services Ensuring the charging service functions properly To operate and optimize the charging service and protect account security, we may collect device information and logs, such as device model, operating system, unique device identifiers, battery level, app version, IP address, and diagnostic logs. Where we detect use for fraudulent or illegal purposes, we may take appropriate measures, including suspending service. Registration, verification, and login Phone/email sign-up: When you register or log in with your mobile number or email, we send a one-time code to verify your identity. Third-party login: If you choose to log in with a third-party platform (e.g., Apple, Google, Facebook, WeChat), and consent to the sharing of your information, we will receive certain profile information permitted by that platform (e.g., nickname and avatar) and bind it to your Golden News Power Bank account. Providing the charging service Location data: With your explicit permission, we may collect location data via GPS, IP address, Wi‑Fi access points, cell towers, and device sensors to show nearby rental/return stations, provide navigation, and improve service accuracy. You can change location permissions at any time in your device settings. You may also manually enter a location or scan a QR code to proceed without continuous location access. Camera/QR code scanning: With your permission, we access the camera to scan QR codes to identify rental/return stations and complete transactions. You may adjust camera permissions in device settings. Payments and settlement When you initiate a payment, we send a request to your chosen third-party payment provider. We do not collect your full payment instrument details stored with that provider. To confirm deposits, rentals, and refunds, we may collect transaction metadata such as order ID, payment method, amount, currency, and status. For merchant partners, we may collect settlement details including payout type, bank name, account number, account name, bank region/country, and currency. Deposit-free service (if offered) If you apply for deposit-free rentals, with your authorization we may obtain a credit assessment result from a third-party provider to confirm eligibility. We use only the result for verification and do not independently assess your creditworthiness beyond what is necessary. If you do not consent, some features may be unavailable. Safety and security To protect accounts, transactions, systems, and comply with laws and our policies, and with necessary permissions, we may collect device attributes and connection/status information (e.g., device model, identifiers such as IDFA/Android ID/OAID, SIM-related identifiers, MAC address, carrier, IP, and software/hardware characteristics). We may use and combine information (including data shared by affiliates and partners with authorization or as permitted by law) to detect and prevent fraud, malware, phishing, and other security risks; verify identity; and investigate suspicious activity. Customer support and after-sales When you contact support, we may record communications and use your account and order information to verify identity and resolve issues. B) Personal data obtained from third parties Where identity verification or other features require it and as permitted by law, we may obtain necessary personal data from third parties (e.g., authentication providers). If you do not provide such data, certain Services may be unavailable. C) Changes to purposes As our Services evolve, if we introduce new features reasonably related to rental, payment/settlement, or similar service scenarios, we will collect and use personal data consistent with the original purposes. If a new purpose is not directly related, we will provide a separate notice and obtain your consent where required. How We Use Your Personal Data We use your personal data for the following purposes, in a lawful, necessary, and proportionate manner: Create and manage your Golden News Power Bank account. Communicate with you, respond to inquiries, and handle feedback. Ensure the basic operation and integrity of our Services. Provide the charging Services and related features (including processing orders, payments, refunds, and promotions). Optimize, improve, develop, and enhance the Services. Remember your preferences to streamline your experience. Maintain security for users, Services, and our operations. Improve data management and business operations. Comply with legal and regulatory obligations. With your consent, use your data for direct marketing. Provide products and services related to your use of our apps or mini programs. Disclosure and Sharing of Personal Data We treat your personal data confidentially but may disclose it for the purposes set out in Section 4 to the following parties (within or outside Hong Kong): A) Third-party integrations and SDKs To enable logins, payments, sharing, maps, analytics, push notifications, and stability, we integrate third-party services/SDKs. These partners may collect certain data via their SDKs to provide their functions. We conduct due diligence and ongoing security reviews of such SDKs. Examples (customize as applicable): Apple: Sign in with Apple Data categories: device info, Apple ID-related signals, OS/version, network info, app version Privacy: https://www.apple.com/legal/privacy/ Google: Sign-In and Maps SDK Data categories: device info, browser type/settings, OS, network info, app info, location (for Maps) Privacy: https://policies.google.com/privacy Facebook: Facebook Login Data categories: device info, network info Privacy: https://www.facebook.com/privacy/policy/ WeChat Pay / Alipay / Apple Pay / Google Pay (if enabled) Data categories: device info, network info, account/payment metadata Privacy: https://policies.google.com/privacy?hl=zh-CN (Google Pay), https://render.alipay.com/p/c/k2cx0tg8 (Alipay), https://www.tenpay.com/v3/helpcenter/low/privacy.shtml (WeChat Pay), https://www.apple.com.cn/legal/privacy (Apple Pay) B) Sharing with other parties Our affiliates: We may share personal data with our affiliates for resource efficiency, operational support, customer service, legal assessment, or security of IT platforms, in line with this Policy. Merchant and logistics partners as relevant to your rental or order, to fulfill services (e.g., station operators, venue partners), and to synchronize service status. Transactional/restructuring counterparties: In connection with mergers, acquisitions, financing, or reorganization, we may disclose or transfer personal data subject to confidentiality and this Policy. Law enforcement, regulators, courts, or other authorities where required or expected under applicable laws, regulations, court orders, or binding requests. C) Public disclosure We will only publicly disclose your personal data if: We have your explicit consent; or Required by law, legal process, court order, litigation, or governmental mandate. Direct Marketing Subject to your consent or indication of no objection, we may use your name, contact details (email, phone number, push notifications, in-app messages, SMS/MMS/OTT), and service usage data (e.g., rental history, station locations, order records) to send you marketing communications about our products/services, our affiliates, and selected partners relevant to power bank rental, lifestyle venues, hospitality, entertainment, and similar categories. We may personalize offers and measure campaign performance (e.g., open/click rates). We may also invite you to participate in customer surveys for service improvement. We may share your personal data with: Our affiliates (holding company, subsidiaries, and commonly controlled entities). Business partners connected to the power bank rental ecosystem (e.g., malls, restaurants, bars, hotels, entertainment venues, and other third-party merchants listed from time to time by Golden News Power Bank), for their own direct marketing of specified products/services, only with your consent or where you have not objected, as required by the PDPO. You may opt out at any time at no charge by following in-message instructions or contacting [info@goldennews.com.hk]. If you opt out, we will retain your contact in a suppression list solely to honor your preference. Push Notifications We may send push notifications regarding account or service updates. You may disable push notifications in your device or app settings. Cookies and Similar Technologies We use cookies and similar technologies to ensure our site operates efficiently, remember your preferences (e.g., one-tap login), enhance security, and improve your experience. You can manage or delete cookies in your browser or device settings. Disabling cookies may affect certain features. Security Measures and Data Retention Security: We implement reasonable and appropriate technical, administrative, and physical safeguards to protect personal data against loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, the internet is not entirely secure. Please use strong, unique passwords and contact us immediately at [info@goldennews.com.hk] if you suspect your account or data has been compromised. Retention: We retain personal data only for as long as necessary to fulfill the purposes set out in this Policy, unless a longer retention is required or permitted by law or in the public interest. Once the retention period expires, we will delete or anonymize personal data in accordance with applicable requirements. Third-Party Services and Links Our Services may contain links to or integrations with third-party websites, apps, or mini programs. These operate independently and have their own privacy policies, which we strongly recommend you review. We are not responsible for their content, privacy practices, or service quality. Cross-Border Data Transfers Your personal data may be transferred to, stored, or processed outside Hong Kong for the purposes described in this Policy (e.g., by affiliates, service providers, or cloud providers). We will take reasonably practicable steps to ensure that recipients provide a standard of protection comparable to the requirements of the PDPO, including through contractual safeguards where appropriate. Changes to This Policy We may amend this Privacy Policy from time to time to reflect legal, technical, or business changes. We will notify you by posting the updated Policy in the app/website and, for material changes, by additional notice (e.g., in-app notice or email). By continuing to use the Services after the effective date, you are deemed to have been notified of and agreed to the updated Policy. Last Updated: 2025-12-29