This Privacy Policy explains how JUNDAO Securities Company Limited ("JUNDAO Securities", "we", "us" or "our") collects, uses, discloses, retains and protects personal information when you visit our website, use the App or communicate with our support, privacy or legal channels. JUNDAO Securities operates and provides the App and is responsible for personal information processed through it.

1. Information we collect

Depending on how you use the App or communicate with us, we may collect:

• Account and contact information, including your name, email address, residential address, account identifiers and information associated with authorised access.
• Identity and verification information, including identification details and documents or images submitted for account opening and verification.
• Financial and account-opening information, including financial account details, financial circumstances and other information provided in an application.
• Login, operation and interaction records generated when you sign in to or use the App.
• Support and request information that you provide when you contact us or submit a request.

2. Sources of information

We may receive information directly from you, through your use of the App, or from an authorised representative.

3. How we use information

We may use personal information to:

• assess and process account-opening applications and perform identity, eligibility and verification checks;
• manage authorised access and provide account and App functions;
• provide, operate, secure and support the App;
• respond to questions, requests and communications;
• maintain records needed for App operation, security and compliance; and
• meet applicable legal, regulatory and contractual requirements.

4. How we disclose information

We may use necessary hosting and infrastructure service providers to operate and secure the App and website. Where they process information on our behalf, they are required to use it only as needed for those purposes and to apply appropriate safeguards. We may also disclose information where required by applicable law, regulation or valid legal process.

5. International processing

Information may be stored or processed in countries or territories other than where you are located, including where our service providers operate. Where required, we take reasonable steps designed to protect information when it is transferred or processed internationally.

6. Security

We use administrative, technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No transmission or storage system is completely secure, and users should protect their devices, credentials and verification codes.

7. Retention

We retain information for as long as reasonably necessary for the purposes described in this Policy, including to provide the App, maintain records, protect security, resolve disputes and meet legal, regulatory or contractual requirements. When information is no longer required, we take reasonable steps to delete, anonymise or restrict it, subject to applicable retention obligations and backup processes.

8. Your choices and requests

Subject to applicable law and relevant exemptions, you may ask us to access, correct or delete personal information associated with you, or raise a question about how it is handled. We may need to verify your identity and authority before acting on a request.

Account deletion may be initiated directly in the App or requested by email as described on the Delete Account page. Deletion confirmed in the App immediately terminates account access; verified email requests are processed within seven days. Certain records may continue to be retained where required by applicable financial regulatory, legal or other compliance obligations.

9. Website preferences and links

This website may store a language preference on your device. It may also link to third-party websites that operate under their own privacy practices. We are not responsible for the privacy practices of a third-party site solely because we link to it.

10. Children

Our services are not designed for children. If you believe a child has provided personal information to us, please contact us so we can review the circumstances.

11. Changes to this Policy

We may update this Policy to reflect changes in our services, practices or applicable requirements. The updated version will be posted on this page with a revised date.

12. Contact

For privacy questions or requests, contact privacy@jundao-securities.com.