1. Introduction

Lesso Group Holding Limited and its subsidiaries and affiliates ("LESSO" or "we") attach great importance to the protection of personal data. We use cookies and similar technologies to the extent necessary and reasonable to ensure the operation of the site, user experience and personalized services, and we collect personal data with your consent.

This policy explains the collection and processing of data. The data you provide on other LESSO websites, including data collection platforms, is governed by the policies and agreements of these websites.

Personal data is data that allows you to identify a person independently or in combination with other information. They are collected and used in accordance with this Policy.

2. Our role

We are the service provider of the website and the processor of personal data.

When you visit a website, information about you, preferences, or device may be stored on or retrieved from the device to ensure the expected performance of the website and related content.

There is no registration on the website. You can be contacted by message, investor survey, email, or other means. The name, email address, email address, phone number, and other data provided voluntarily are also included in the policy. Legal permission is required before transferring the data to another person.

3. Collected data

The data is used for the purposes specified at the time of collection: presentation of goods and services, research, analysis, maintenance, processing complaints and requests, invitations to promotions and surveys, notification of offers and disclosure of information required by law.

Before using it for a new purpose, we will again request consent to the agreement, notification, or policy update.

We do not sell personal information, but we can provide it if necessary.:

1. Subsidiaries, associates and affiliated companies of LESSO,

2. Agents, contractors, or other suppliers who provide services to us,

3. Agents authorized to process customer data,

4. Auditors, legal and other consultants,

5. If necessary, to the mass media to process complaints or requests.,

6. Persons committed to confidentiality regarding LESSO,

7. In cases provided for by law, dispute resolution or legal requirement of the competent administrative and judicial authorities.

The data may also be shared with other parties with your explicit consent.

The data is stored in secure systems and is accessible only by trained and authorized employees. For more information, see section 5.

4. What are cookies?

Cookies are small text files that, with the user's consent, are stored in the browser or on the device. They remember the settings, recognize the device and improve the viewing quality, and, if allowed, provide personalized advertising.

• Visited domain and IP address,

• Browser type, settings, and operating system,

• Date and time of the visit,

• The address of another website that leads to the site,

• Entry, view, and exit pages, viewed content, and duration.

4.1 types of cookies

The following cookies can be used on the LESSO website.

1) Badly needed cookies

• They are necessary for the normal operation of the site and are not disabled in the system.

• They are usually set during actions such as choosing privacy or filling out a form.

• Blocking them may disrupt basic functions and safe operation.

2) Cookies for increased efficiency and analysis

• Anonymously collects and summarizes data about pages, paths, viewing time, and feature usage.

• They do not contain personally identifiable data and are used for performance-enhancing statistics.

• Unnecessary analytical cookies are used with explicit consent, which can be managed or revoked.

3) Operational cookies

• Keep in mind the preferences for individual services.

• Can be installed by us or other services included in the page.

• If they fail, some personalized services may not work.

4) Advertising cookies

• Collects browsing habits for ads that match your interests.

• Helps you select relevant ads, limit the number of repetitions, and measure effectiveness.

• Browser and device identifiers are used instead of direct identification data.

5) IP addresses and network logs

• Helps to diagnose server problems, manage the site, and improve service.

• An IP address is a digital network identifier of a computer and can be applied to general demographic statistics.

6) third-party cookies

• Analytics, advertising, video, maps, and social platform services may set their own cookies. They are regulated by the privacy policy of the data providers.

• Some suppliers may be located outside of China and process data in other countries. The Group cooperates with suppliers who meet the requirements of data protection, ensuring security under contracts.

4.2 Managing cookie settings

You can manage the settings in the following ways.

1. Block or delete cookies in your browser settings and enable notifications.

2. Change or deselect the selection in the Privacy settings center.

3. On the first visit, select only the necessary cookies.

Blocking all cookies, including necessary ones, may disrupt some functions of the website.

5. Data storage

5.1 Storage location

The data collected by the group is mostly stored on servers in China. Some cloud and analytics services may use servers in other jurisdictions.

5.2 expiration date

• The duration of using cookies, depending on the type, ranges from one session to a maximum of 24 months.

• The personal data provided by you is stored only for the period necessary for this purpose, usually 2 years, unless the law requires or permits another period.

• Anonymous or aggregated data can be stored indefinitely for statistics.

5.3 removal and destruction

After the expiration date or upon your request, the data is securely deleted or anonymized.

You can send a deletion request to the email address specified in section 8.

6. Cross-border data transfer

6.1 Transmission cases

For global services, data may be transferred outside of China, in particular:

• when using foreign cloud providers,

• for the exchange of business data with the group's international subsidiaries, branches and service providers,

• For international legal disclosure obligations or cross-border proceedings.

6.2 security measures

For cross-border transfer, the following may apply:

• Assessment of the security of Chinese cyberspace authorities,

• Agreements on the export of data according to Chinese standards,

• your separate and clear consent,

• Other conditions stipulated by the law and the rules of the competent authorities.

6.3 transfers to third parties

The cross-border transfer of data collected through third-party cookies is governed by its policies and agreements concluded with the group.

7. Policy Updates

The policy may be updated in case of business or regulatory changes. The latest version is published on the website without separate notification. It is recommended to check it regularly.

8. Contact us

For questions and suggestions about policy, custody, or cross-border transfers:

• Phone: 400-168-2128 (around the clock)

• Email address: lessoppgl@lesso.com