Rever Automotive Co., Ltd. (the “Company”, “we”, “us”, or “our”) recognizes the importance of protecting personal data and is committed to processing personal data in accordance with applicable personal data protection laws. This Privacy Notice forms part of the Privacy Notice of the Rêver Group, which is available at https://www.revergroup.com/en/privacy-policy. It should be read together with the Rêver Group Privacy Notice, which sets out the general principles and terms applicable to the collection, use, disclosure, and other processing of personal data within the Rêver Group. This Privacy Notice explains how we collect, use, disclose, and otherwise process your personal data in connection with the Company’s business operations.

1. Data Controller Details

Rever Automotive Co., Ltd.

Address: No. 865 Siam@Siam Hotel Building, 9th Floor, Rama 1 Road, Wangmai, Pathumwan, Bangkok 10330

Email: contact@reverautomotive.com

Tel: 02 766 8880

Data Protection Officer

Address: No. 865 Siam@Siam Hotel Building, 9th Floor, Rama 1 Road, Wangmai, Pathumwan, Bangkok 10330

Email: dataprivacy@reverautomotive.com

Tel: 02 766 8880

2. Personal Data We Collect

We may collect and process the following categories of personal data, depending on the nature of our relationship with you:

• Identification data, such as name and surname, and identification details

• Contact information, such as telephone number, email address, and address

• Media-related information, such as photographs, video recordings, and participation records

• Vehicle information, such as vehicle model, VIN, usage, technical and service-related information

• Transaction information, such as booking, purchase, payment, and related records

• Customer interaction data, including inquiries, complaints, and feedback

• Retailer, vendor, and business partner information

• Fleet customer and corporate customer information

• Application and technical data from the Rêver application or other applications or systems

• Cookies and technical information, such as website usage data and online identifiers

• Recruitment information, such as job application details and qualifications

3. Purposes of Processing

We may collect, use, and disclose your personal data for the following purposes:

• to distribute and sell vehicles under the BYD, DENZA, and other brands;

• to prepare booking agreements and vehicle sale contracts;

• to organize promotional activities, marketing campaigns, and public relations content, including loyalty programs, point accumulation, and reward redemption campaigns conducted via the Rêver application or other channels;

• to present, recommend, and offer products, services, privileges, or promotions that may be of interest to you;

• to manage social media platforms and communications;

• to manage internal business operations and reporting;

• to provide application-based services (e.g., Rêver app) to support vehicle owners;

• to coordinate and disclose information to motor insurance companies as required under vehicle sale agreements;

• to manage retailer relationships, including appointments, training, and performance management;

• to support vehicle registration with the Department of Land Transport;

• to manage fleet customers, including meetings, coordination, and performance monitoring;

• to process insurance claims and after-sales services;

• to provide maintenance services, accessories sales, and installation services (e.g., EV chargers);

• to provide roadside assistance and customer support services;

• to conduct customer satisfaction surveys and feedback collection;

• to manage inquiries, complaints, and customer service requests;

• to establish and manage vendor databases and procure new business partners;

• to provide incentives or benefits to retailer sales personnel;

• to monitor and maintain security within the Company’s premises, including through the use of CCTV systems, for the purposes of safety, security, and prevention of unlawful activities;

• to collect, use, and disclose images, photographs, and video recordings taken during events, marketing activities, or other Company-related activities for public relations, promotional, and internal reporting purposes;

• to recruit and consider applicants for employment; and

• to comply with applicable laws, regulations, and legal obligations.

In certain cases, the provision of personal data is necessary for the Company to enter into or perform a contract, to comply with legal obligations, or to provide products and services to you. If you do not provide the required personal data, the Company may not be able to provide certain services or proceed with the relevant transactions.

4. Disclosure of Personal Data

We may disclose your personal data to the following persons or entities, to the extent necessary for the purposes described in this Privacy Notice:

• companies within the Rêver Group and the BYD group for business operations and brand management;

• retailers and automotive distributors;

• government authorities, including the Department of Land Transport;

• insurance companies and insurance-related service providers;

• external service providers, advisors, and consultants; and

• IT service providers and system support providers.

5. Overseas Transfer of Personal Data

We may transfer personal data to overseas recipients as necessary for business operations. In such case, we will implement appropriate safeguards and measures for the transfer or disclosure of personal data in accordance with applicable laws.

6. Retention Period

We will retain personal data only for as long as necessary for the purposes described in this Privacy Notice and to comply with applicable laws. In any event, personal data will be retained for no longer than 10 years from the end of the relevant relationship, unless a longer retention period is required or permitted by law.

7. Rights of Data Subjects

Subject to applicable law, you have the following rights:

• right to access;

• right to rectification;

• right to erasure;

• right to restriction of processing;

• right to object;

• right to data portability;

• right to withdraw consent; and

• right to lodge a complaint with the supervisory authority.

8. Contact Us

If you have any questions about this Privacy Notice or wish to exercise your rights, please contact the Company or the DPO using the contact details set out above.