1. Respecting your privacy and protecting your personal data BluMaiden collects information to understand your needs better. This helps us to improve our services and the way we communicate with you. We know that privacy is important to you and we strive to be as open and transparent as possible in how we serve you. We conduct our business in compliance with the Personal Data Protection Act (PDPA) and have implemented additional measures to protect your personal information. BluMaiden’s Data Protection Policy aims to help you understand how we collect, use, share and protect your personal information. 2. Ways we collect your personal information We may collect your personal information when you:

• Subscribe to our services
• Use our network and other BluMaiden products or services, including our BabyPass app or website
• Register for a specific product or service (e.g., registering your interest to purchase sample kits)
• Sign up for alerts or newsletters and connect with nutritionists and other professionals through our BabyPass app or website
• Contact us with a question or request for assistance
• Participate in a competition, lucky draw or survey
• Visit our websites and applications (through the use of cookies, mobile advertising IDs and other technologies)

3. The information we collect The information we collect depends on the BluMaiden products and services you use and subscribe to. Here are key examples:

• Your identity – This includes your name, address, telephone number, e-mail address and year of birth as well as service-related information such as bank and credit card details, device ID and IP address and your sequencing results.
• Your interaction with us – For example, a note or recording of a call you make to our contact centre, an email or letter you send to us or other records of any contact you have with us or information that you upload to our BabyPass app or website.
• Your account information – For example, the subscription services you use or other details related to your account.
• Information on your use of our services – For example, the phone numbers you call or send text messages to and vice versa, as well as the date, time and duration of your calls through our BabyPass app or website.
• Your preferences – This is based on what you share with us on how you would like to be contacted, and your preferred products, services and lifestyle activities, for example.
• Information from other organisations – These organisations include fraud-prevention agencies, business directories or individuals we believe you have authorised to provide your personal details on your behalf.

4. How we use your information We may use your information to: Provisioning and administration of services

• Process your orders and activate or deactivate services
• Enable us to process bills and payments
• Respond to enquiries and requests from you or people you have authorised
• Inform you about service upgrades and updates

Market research and service enhancement

• Conduct market research and customer satisfaction surveys to improve our customer service; develop new products and/or services, as well as personalise the services we offer you
• Perform market analysis
• Improve your user experience based on your usage behaviour on our websites and applications

Sharing of rewards and benefits

• Offer rewards and promotions, and share promotional benefits and loyalty programs which you may qualify for
• Provide updates, offers, invitations to events and deliver relevant advertising, including through voice, SMS and digital advertising with your prior consent or if otherwise permitted under local laws and regulations

Security and risk management

• Inform you of service and security issues
• Prevent and detect fraud or other crimes and recover debts
• Conduct internal audits
• Ensure the safety and security of our properties and systems
• Conduct checks against money laundering, terrorism financing and related risks

Legal and regulatory requirements

• Meet legal, regulatory and other requirements including providing assistance to law enforcement, judicial and other government agencies

We will not use your personal data for purposes other than what we have informed you, or which are permitted under local laws and regulations. We will not offer, publish or share your personal data with third parties outside of the BluMaiden group of companies for commercial purposes, without seeking your explicit permission. We will retain your information for only as long as there is a business or legal need. 5. Sharing your information We may share your information with:

• Companies in the BluMaiden group of companies
• Business partners and vendors we work with to deliver services you have subscribed to
• Industry regulators and other government organisations, as required by local laws and regulations
• Research institutions for market analysis purposes

Your information is disclosed to the above only for relevant purposes (please refer to those mentioned in this Policy) or to protect the interests of our customers. In some cases, we encrypt, anonymise and aggregate the information before sharing it. Anonymising means stripping the information of personally identifiable features. Aggregating means presenting the information in groups or segments, e.g., age groups. We will also ensure that overseas organisations we work with observe strict confidentiality and data protection obligations. 6. Protecting your information We have implemented stringent measures to secure and protect your information. These include:

• Safeguards to prevent security breaches in our network and database systems
• Limits on access to information in our systems and the systems of our business partners and vendors
• Strict verification processes to prevent unauthorised access to information

7. Respecting your contact preferences BluMaiden is committed to complying with the Do Not Call (DNC) provisions. We have always been mindful of engaging our customers in a more targeted and relevant way. We may send marketing messages to your Singapore telephone number if:

• you have given us consent, OR
• you have not registered with the national DNC Registry, OR
• the sending of such messages is permissible under applicable laws and regulations.

Our marketing messages aim to update you about our exclusive offers, rewards program and special deals from our preferred partners and advertisers. If you wish to continue receiving such messages or to opt out, you can indicate your preference at any time via by updating your BabyPass profile in the App. Please note that after opting out, you may still continue to receive non-marketing messages, such as product updates and service notices as permitted under applicable local laws and regulations. You may configure your browser setting to disable all cookies and mobile advertising IDs, including cookies and mobile advertising IDs associated with our services. However, it is important to remember that some of our services may not function properly if your cookies and/or mobile advertising IDs are disabled. 8. Questions? Feel free to contact customer service through Babypass App or email reachus@babypass.health You may also refer to our FAQ section for more details through this link https://www.babypass.health/faq 9. General Information We may amend or modify this Policy from time to time, such as in response to changes to legislation. We remain committed to safeguarding your information and being open about our data protection practices. This Policy is to be read together with our BabyPass App User Terms and applies to all products and services provided by BluMaiden and/or its affiliates.