1. Introduction

Aster Chemicals and Energy Pte Ltd, its respective affiliates, subsidiaries, and jointly controlled entities (collectively shall be referred as "Aster," "We," or "Us") respects the privacy of our users ("You"). This Privacy Notice explains how We collect, use, store, maintain, (under certain conditions) disclose, and protect personally identifiable information that You provide while using and/or registering to our website ("Website") and for other purposes as specified herein, to ensure that your Personal Data is protected and processed in accordance with any applicable laws in Singapore concerning personal data, including the Personal Data Protection Act ("PDPA").

For the purpose of this Privacy Notice, "Personal Data" means any information or data of any person who is identified or may be identified individually or combined with other information either directly or indirectly through electronic or non-electronic systems.

By visiting, using and/or registering yourself on our Website, You are deemed to have read, comprehended and agreed to all the contents contained in this Privacy Notice. If You do not agree with any of part or all of the contents of this Privacy Notice, You must leave the Website.

2. Types of Personal Data Collected

We may collect the following types of Personal Data from You:

• Private contact information (such as name, postal or e-mail address, and phone number) only if necessary; and/or
• Business contact and other information (such as job title, department, name of organisation and your dealings with Us on behalf of yourself or the relevant Business Customer, Supplier, Business Partner).

3. Personal Data that We Collect, Store, and Use

We use your Personal Data for the following purposes:

• Business execution - including providing, researching, developing and improving products or services; concluding and executing agreements with Business Customers, Suppliers and Business Partners; recording and settling services, products and materials to and from Aster; managing relationships and marketing such as maintaining and promoting contact with existing and prospective customers, account management, customer service, and development, execution and analysis of market surveys and marketing strategies;
• Organisation and management of the business - including financial management, asset management, mergers, demergers, acquisitions and divestitures, implementation of controls, management reporting, analysis, internal audits and investigations;
• Health, safety and security - including protection of an individual's life or health, occupational health and safety, protection of Aster and staff, authentication of individual status and access rights; and/or
• Legal and/or regulatory compliance - including compliance with legal or regulatory requirements.

and/or for closely related secondary purpose(s), such as:

• storing, deleting or anonymising personal data;
• fraud prevention, audits, investigations, dispute resolution or insurance purposes, litigation and defence of claims; and/or
• statistical, historical or scientific research.

4. Why do We process your personal data?

The personal data covered by this Privacy Notice are only processed:

• in order to take steps at the request of an individual prior to entering into a contract;
• where it is necessary to comply with a legal or regulatory obligation to which Aster is subject to;
• where it is necessary for the purposes of the legitimate interests pursued by Aster, except where such interests are overridden by the interests or fundamental rights and freedoms of the individual/s; and/or
• (only if legally required) with the explicit consent of the individual.

In those cases where processing is based on consent, and subject to applicable local law which provides otherwise, You have the right to withdraw your consent at any time. This will not affect the validity of the processing prior to the withdrawal of consent.

5. Disclosure of Personal Data

We may disclose or transfer your Personal Data to our affiliated company, third-party service providers, professional advisors, banks, public and governmental authorities, and other third party in connection with our business operations. These third-parties are contractually and legally obligated to keep your Personal Data confidential and secure. We may disclose or transfer your Personal Data as required by law or to protect the rights, property, or safety of Aster or others. If We disclose or transfer your Personal Data, We will take reasonable action to give your Personal Data adequate protection.

6. Data Retention

We will retain your Personal Data for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. We will maintain specific records of processing and your Personal Data will be deleted or destroyed after a reasonable time according to the following retention criteria:

• We will retain your Personal Data as long as We have a contractual relationship with You;
• We will retain your Personal Data as long as needed in order to comply with the applicable laws and regulations;
• We will retain usage data for a reasonable period to analyse Website trends and improve our services.

7. Consent, Withdrawal of Consent, and Your Rights

At any time, You can withdraw your consent to our collection, use or disclosure of Personal Data by providing written notification to Us and including your reasons. After confirmation of withdrawal of consent, We will stop collecting, using and disclosing your Personal Data. However, this does not apply if We are required by law to continue doing so or if We carry out legitimate business activities or based on legal objectives to maintain them. In the event You withdraw your consent, We may not be able to continue providing our services and/or granting any access to You and You agree to release Us from liability and will not hold Us responsible for any loss or damage arising from or related to the termination of such services and/or access.

You have certain rights regarding your Personal Data, including as follows:

• The right to access your Personal Data, including obtaining information and a copy of your Personal Data;
• The right to rectification of inaccurate Personal Data: this right entitles You to change, update, correct, and/or rectify any incorrect and/or inaccurate Personal Data;
• The right to erasure of your Personal Data ("right to be forgotten"): this right entitles You to erase, terminate, and/or destroy your Personal Data and We shall no longer entitled to process your Personal Data;
• The right to withdraw your consent: this right entitles You to request Us to stop processing your Personal Data by withdrawing your consent;
• The right to data portability: this right entitles You to receive, use, and/or transmit your Personal Data that You have provided to Us.

You can exercise your rights by contacting Us at the email address provided below and including your reasons.

8. Security

We always protect Personal Data under our possession or control by maintaining reasonable security settings to prevent unauthorised access, collection, use, disclosure, copying, modification, deletion, or similar risks, including but not limited to using SSL (Secure Socket Layer).

We also take appropriate technical and organisational measures to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. Unfortunately, no security measures are foolproof, and We cannot guarantee the complete security of your Personal Data.

9. Cookies

We use cookies and other tracking technologies to help Us improve our Website. Please see our Cookies Notice for more details on how We use cookies and other tracking technologies.

10. Access and Correction of Personal Information

You must ensure the truth, accuracy and completeness of any data or Personal Data that You provide to Us, and if You know or believe that the Personal Data You have provided contains any error or discrepancy, You must immediately correct it. In the event that You cannot correct your Personal Data through the Website, You can immediately submit a request to Us.

In the event that there are material costs that may arise as a result of these access request, You may be required to pay a reasonable fee for access to Personal Data.

11. Enforceability

This Privacy Notice is part of the Terms of Use therefore all provisions in the Terms of Use apply and are an inseparable part of this Privacy Notice.

12. Updates

This Privacy Notice may be changed and/or updated from time to time without prior notice as part of our efforts to adapt to changes in existing laws and regulations. We recommend that You read this Privacy Notice carefully and check back from time to time for any changes. By continuing to access and use the Website, You are deemed to agree to the changes in the existing Privacy Notice. You understand that the most recent version of this Privacy Notice will supersede all previous versions.

13. Contact Us

If You have any questions about this Privacy Notice or your privacy rights, please contact Us at:

• Email: data.privacy@aster.com.sg