Data Privacy

1. Background

Arkema (China) Investment Co., Ltd. ("Arkema" or "we") respects your privacy and is committed to protecting your personal information. This Privacy Policy ("Policy") explains how we collect, use, store and protect your personal information when you use the Arkema China Customer Portal ("My Arkema") and related services.

This Policy applies to personal information you provide to us through the My Arkema portal (the "Portal") and personal information we automatically collect when you use the Portal.

Arkema France is the data controller for this Portal, with its registered office at 420, rue d'Estienne d'Orves, 92700 Colombes, France.

2. Personal Information We Collect

In the course of your use of the Portal, we may collect the following types of personal information:

• Account Information: Name, email address, company name, job title, and other identifying information required for registration
• Login Information: Account credentials, login records, passwords (stored in encrypted form)
• Usage Data: Your interactions with the Portal, including pages viewed, feature usage, access timestamps, and other technical data
• Order and Transaction Data: Product orders, sample requests, and related transaction records submitted through the Portal
• Communications: Inquiries, feedback, or support requests sent through the Portal
• Device Information: IP address, browser type, operating system version, device identifiers, and other technical parameters

3. How We Use Your Information

We use your personal information for the following purposes:

• Account Management: Creating and maintaining your My Arkema account, verifying your identity, and ensuring account security
• Service Delivery: Processing your product orders, sample requests, and other business needs
• Customer Support: Responding to your inquiries, handling complaints, and providing technical support
• Portal Optimization: Analyzing usage data to improve Portal functionality and user experience
• Security Protection: Detecting and preventing cyber attacks, fraud, and unauthorized access
• Legal Compliance: Complying with applicable legal and regulatory requirements, including China's Personal Information Protection Law (PIPL)

4. Disclosure to Third Parties

We may share your personal information in the following circumstances:

Intra-Group Sharing: Your personal information may be shared within the Arkema Group and its affiliates, with all recipients required to maintain equivalent standards of personal information protection.

Service Providers: We may engage third-party service providers to assist in operating the Portal (such as hosting providers and IT support providers), who are bound by confidentiality agreements and data protection obligations.

Legal Requirements: Where required or permitted by law, we may disclose your personal information to comply with legal processes or respond to requests from government or law enforcement authorities.

5. Cross-Border Data Transfer

Due to the global nature of Arkema Group's operations, your personal information may be transferred to and processed outside the People's Republic of China (including France and other countries where Arkema Group entities are located).

When conducting cross-border data transfers, we will implement one or more of the following safeguards in accordance with the requirements of China's Personal Information Protection Law:

• Passing a security assessment organized by the national cyberspace administration
• Obtaining personal information protection certification from a professional institution
• Entering into a standard contract with the overseas recipient specifying the rights and obligations of both parties
• Other conditions provided by laws and regulations

6. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, use, modification, or disclosure. These measures include, but are not limited to: access controls, encrypted transmission (TLS), data classification protection, employee confidentiality training, and regular security audits.

Despite these security measures, please note that no method of transmission over the Internet or method of electronic storage is 100% secure.

7. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

Account Information: Retained for the duration of your account. After account deletion, we will delete or anonymize your personal information within a reasonable period.

Transaction Records: Retained in accordance with applicable accounting and tax regulations.

Promotional Communications Data: Retained for up to three years from our last contact with you.

8. Your Rights

Under the Personal Information Protection Law of the People's Republic of China, you have the following rights:

• Right to be Informed and Right of Access: To be informed of and access the personal information we hold about you
• Right to Rectification: To request correction of inaccurate or incomplete personal information
• Right to Erasure: To request deletion of your personal information where provided by law
• Right to Withdraw Consent: To withdraw your consent to the processing of your personal information at any time
• Right to Data Portability: To request the transfer of your personal information to a designated third party
• Right to Restrict or Object to Processing: To restrict or object to our processing of your personal information under certain circumstances
• Right to Complain: To lodge a complaint with the relevant data protection supervisory authority

9. Contact Us

If you have any questions, comments, or complaints about this Privacy Policy or your personal information, please contact our privacy team:

Address: Arkema, Direction Juridique, 420, rue d'Estienne d'Orves, 92700 Colombes, France

Email: privacy@arkema.com

If you are not satisfied with our response, you have the right to lodge a complaint with the applicable data protection supervisory authority in your jurisdiction.

10. Policy Updates

We may update this Privacy Policy from time to time. The updated policy will be posted on this page with the "Last Updated" date. We encourage you to review this Policy periodically for any changes.