1. Collection of personal information

2. Storage and custody of customer data

Any personal data customers disclose to the company will be safeguarded with the highest standards. Any use of that data will be subject to the company’s internal procedures for authorization to access that information.

3. Method of data safety and protection

To ensure that customer data is not directly or indirectly accessed by third-parties, the company utilizes the strictest internal IP management platform, data exchanged between the parent company and subsidiaries use a VPN system, ensuring data safety. Additionally, the company utilizes the most advanced firewall systems to prevent unauthorized intruders.

4. Categorization of data

Customer data is categorized into the following categories: Basic data, Account data, Credit data, Investment, and Insurance data. Items in each category are as follows:

• Basic data: includes name, date of birth, personal ID number, telephone number, e-mail address.

• Account data: includes account number and related functional numbers, credit card information, savings account information, trading account information, money market account information, other trading and financial status information, etc.

• Credit data: includes refund, cancellation, comment data, records of refusal and business operation status, etc.

• Investment data: includes investment and investments offered for sale, amounts and time periods, etc.

• Insurance data: includes insurance policy categories, time period information, amounts, payment methods, claims and record of refusals, etc.

5. Purpose for utilization of customer data

In order to provide diversified and professional financial services, the company actively develops new kinds of financial products and services, which are marketed as a part of integrated investment products in order to better meet the financial needs of our customers.

6. Scope and disclosure of customer data

The company operates within the framework as allowed in the Computer Handling of Personal Information Law and other laws relating to financial holding companies and subsidiaries when disclosing customer data with subsidiaries or between subsidiaries. The company also operates within the allowed scope as defined by the regulatory authorities in disclosing customer data to the Joint Credit Information Center, Taiwan Clearing House, National Credit Card Center, Financial Information Service Center, SME Credit Guarantee Fund, its creditors, or other financial institutions that the company has dealings with or domestic financial affairs organizations, and other institutions as stated by law. If necessary, the company may need to disclose customers' personal data to a third-party business solutions provider, in addition to the institutions listed above. The company will not disclose your personal information to any other third-party apart from those listed above or those that customers approve in writing.

7. Update or replacement of customer data

In order to maintain complete and accurate personal data, if a customer's personal information has changed, they may contact the company in person, by telephone, fax, online or other methods approved by the company to update your information.

8. Customer right to not allow sharing of data

If a customer does not wish for the company to use their personal data for internal cross-selling purposes, they may contact one of the company's business locations directly and request in writing that their information not be used for such purposes.

9. These privacy measures effective from October 1, 2002

In order to protect customer privacy, the company will periodically review its policies and make modifications to stay current with changes in regulations or technology and will inform customers of these changes as directed by the regulatory authorities. Customers should contact Yuanta Financial Holdings at the following phone numbers if they should have any inquiries: