PRIVACY POLICY

Last updated April 1, 2025

This privacy notice for Reko Technology Co.,Limited (doing business as REKO) ("we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at https://rekoparts.com, or any website of ours that links to this privacy notice
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@rekoparts.com.

SUMMARY OF KEY POINTS

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we receive any information from third parties? We do not receive any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.

In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties. Learn more about when and with whom we share your personal information.

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the privacy notice in full.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• We may collect personal information from you, such as your first and last name, phone number, email address, company name, job title and password when you create an account to log in to our Website or as a Customer or Manufacturing Partner (“Account”).
• We may collect personal information from you, such as your first and last name, phone number, email address, company name, and job title when you engage in conversation with a chatbot ("Bot") or through electronic or non-electronic means.
• When you use support services or access our Website, we will collect all information necessary to complete the transaction that you have requested or authorized, depending on the nature of the Services that you are accessing. Such information may include your name, e-mail address, credit card information, bank account information, social security number and/or tax identification number, billing information and shipping information.
• We retain information on your behalf, in order to maintain and service your Account in order to deliver the Services.
• If you provide us feedback or contact us via email, we will collect your name and email address, as well as any other content included in the email, in order to send you a reply.
• In certain circumstances we may request that you provide us with photocopies of your ID and other related documents for fraud prevention purposes and to verify your identity.
• When you participate in one of our surveys, we will collect the information you provide.
• We may also collect personal information at other points on our Website that state that personal information is being collected.
• If you provide us feedback or contact us via text message ("SMS"), we will collect your name and phone number, as well as any other content included in the SMS, in order to send you a reply.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice: __________.

Information Collected Via Technology:

Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).

Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

HOW DO WE USE YOUR PERSONAL INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• Facilitate the creation of and secure your Account on our network;
• Identify you as a user in our system or within the system of a third-party service provider or an authorized business party who assists us with the delivery of the Services;
• When you create an Account, we may verify your identity through a variety of means. For instance, you may receive e-mail from us to verify ownership of the email address provided when your Account was created;
• We may use your e-mail address information to provide you with administrative email notifications, concerning your Account status or other transactions or activity associated with our delivery of the Services;
• Provide the Services you request;
• Provide improved administration of our Website and Services;
• Respond to your inquires and other requests;
• For fraud protection and/or to verify your identity; and
• Send newsletters, surveys, offers and other promotional materials related to our Services and for other marketing purposes of REKO.

3. WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
  • Send users information about special offers and discounts on our products and services
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

• Sharing with Third Party Service Providers. We may share your personal information with third party service providers to: provide you with the Services that we offer you through our Website; to conduct quality assurance testing; to facilitate the creation of accounts; toprovide technical support; and/or to provide other services to REKO.
• Sharing Customer Personal Information with Manufacturing Partners. In order to manufacture the parts you order via the Services, REKO may subcontract a Customer’s manufacturing project to one of our Manufacturing Partners. As part of this process, we may share your information with our Manufacturing Partners to enable them to manufacture the parts, assemblies and other items disclosed therein.
• Sharing Manufacturing Partner Personal Information with Third Party Business Partners.REKO may also share Manufacturing Partners’ personal information with a limited number of third-party business partners who enable us to deliver the Services for those Manufacturing Partners who enroll in our payment or card programs. These third-party business partners assist us in delivery of the card and payment programs to you. Examples of these third-party business partners include payment processors, credit card network services, and banks or financial institutions. The use of your personal information shared with third party business partners will be governed by their privacy policies.
• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may store some information in the form of so-called “cookies” on your device, such as your computer, to offer a more user-friendly and efficient Website and service. A “cookie“is a small string of information that is saved temporarily or permanently on your computer when you visit the website.

We use:

• “essential cookies” these are essential in order to enable you to move around the Website and use its features, such as accessing secure areas of the Website;
• “functional cookies” which serve the technical operation of our Website and services. These cookies remain on your computer after you close your browser and may be used by your browser on subsequent visits to our Website. If you disable these cookies by means of your browser settings, not all functionalities of our Website and/or services will be accessible; and
• “analytics cookies” to better understand how you interact with our Websites and services, and to improve our Website and services. These cookies remain on your computer after you close your browser and may be used by your browser on subsequent visits to our websites and/or other websites to create personalized ads or for ad measurement.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only retain your personal data for so long as we reasonably need to use it for the purposes set out above unless a longer retention period is required by law (for example for regulatory purposes).No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

HOW DO WE KEEP YOUR INFORMATION SAFE?

• We have put in place commercially reasonable security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.
• We have put in place procedures to deal with any actual or suspected personal data breach.In the event of any such breach, we have systems in place to work with applicable regulators. In addition, in certain circumstances (e.g., where we are legally required to do so) we may notify you of breaches affecting your personal data.
• We will only retain your personal data for so long as we reasonably need to use it for the purposes set out above unless a longer retention period is required by law (for example for regulatory purposes).
• We limit access to your personal data to those employees and other staff who have a business need to have such access. All such people are subject to a contractual duty of confidentiality.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at support@rekoparts.com.

9. WHAT ARE YOUR PRIVACY RIGHTS?

Under certain circumstances, by law you have the right to:

• Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
• Object to processing your personal data. This right exists where we are relying on a Legitimate Interest as the legal basis for our processing and there is something about your particular situation, which makes you want to object to processing on this ground. You also have the right to object where we are processing your Personal Data for direct marketing purposes.
• Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish the accuracy or the reason for processing it.
• Request the transfer of your personal data. We will provide you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent. This right only exists where we are relying on consent to process your personal data ("Consent Withdrawal").

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

• Contact us using the contact information provided.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

If you want to exercise any of the rights described above, please contact us by e-mail at support@rekoparts.com

Do Not Track Signals

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. There is no standard that governs what, if anything, websites should do when they receive these signals. We currently do not take action in response to these signals. If and when a standard is established, we may revise our policy on responding to these signals.

Complaints

If you would like to make a complaint regarding this Privacy Policy or our practices in relation to your Personal Data, please contact us at: support@rekoparts.com. We will reply to your complaint as soon as we can.

If you feel that your complaint has not been adequately resolved, please note that the GDPR gives you the right to contact your local data protection supervisory authority.

Privacy and Third-Party Links

This Privacy Policy applies solely to information collected by our Website and Services. In an attempt to provide you with increased value, we may include third-party links on our Website. These linked sites have separate and independent privacy policies, and we do not have control over and do not review these linked sites. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our Website and welcome any feedback about these linked sites (including if a specific link does not work).

Additional Information

As required by the California Consumer Privacy Act (“CCPA”), below are the categories of personal information about California consumers that REKO collects and discloses, where we determine the means and purposes of data processing. We do not sell personal information. We collect and disclose for a business purpose the following categories of personal information:

• Contact Information and Identifiers, including real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, phone number, account name, gender, age, or other similar identifiers.
• Usage Data, including internet or other electronic network activity information, such as browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement.

California Residents

California law gives California consumers the right to make the following requests:

• The right to opt-out of sale of your personal information. REKO does not sell personal information.
• The right to request a copy of the personal information that we have collected about you in the previous 12 months.
• The right to request deletion of the personal information that we have collected from you, subject to certain exemptions (for example, where the information is used by us to detect security incidents, debugging or to comply with a legal obligation).
• The right to request more details about the personal information we collect and how and why we use and share it, including the categories of personal information we have collected about you, the categories of sources for personal information we collect, the business or commercial purposes for collecting personal information, and the categories of third parties with which we share personal information. You can submit a copy, deletion, or right-to-know request by sending an email to support@rekoparts.com.

10. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at support@rekoparts.com or contact us by post at:

Reko Technology Co.,Limited

Building 8, Kexing Science Park, Qianhai,

Baoan District, Shenzhen China

Post Code: 518102