Your privacy is important to us. This privacy statement explains the personal data Lassyncy Holding collects, how Lassyncy processes it, and for what purposes. This statement should be read together with the Terms and Conditions of Use for other Lassyncy Holding products and services. Where there is a conflict, this statement will prevail.

2.0 Disclosure of Information

2.1 Any disclosure of your information shall be in accordance with applicable law and regulations. Lassyncy shall assess and review each application for information and may decline to grant such information to the requesting party. 2.2 We may disclose your information to:

1. a) law-enforcement agencies, regulatory authorities, courts or other statutory authorities in response to a demand issued with the appropriate lawful mandate and where the form and scope of the demand is compliant with the law.
2. b) our subsidiaries, associates, partners, software developers or agents who are involved in delivering Lassyncy products and services you order or use;
3. c) Fraud prevention and Anti money laundering agencies, credit-

reference agencies;

1. d) publicly available and/or restricted government databases to verify your identity information in order to comply with regulatory requirements;
2. e) debt-collection agencies or other debt-recovery organisations;
3. f) Survey agencies that conduct surveys on behalf of Lassyncy;
4. g) Emergency service providers when you make an emergency call (or where such disclosure to emergency service providers is necessary for your rescue, health and safety) including your approximate location;
5. h) Any other person that we deem legitimately necessary to share the data with.

3.0 The Use of Cookies

3.1 We may store some information (using "cookies") on your computer when you visit our websites. This enables us to recognise you during subsequent visits. The type of information gathered is non-personal (such as: the Internet Protocol (IP) address of your computer, the date and time of your visit, which pages you browsed and whether the pages have been delivered successfully. 3.2 We may also use this data in aggregate form to develop customised services - tailored to your individual interests and needs. Should you choose to do so, it is possible (depending on the browser you are using), to be prompted before accepting any cookies, or to prevent your browser from accepting any cookies at all. This will however cause certain features of the web site not to be accessible.

4.0 The Use of Hyperlinks

4.1 Our websites may provide hyperlinks to other locations or websites on the Internet. These hyperlinks lead to websites published or operated by third parties who are not affiliated with or in any way related to us and have been included in our website to enhance your user experience and are presented for information purposes only. 4.2 We do not endorse, recommend, approve or guarantee any third- party products and services by providing hyperlinks to an external website or webpage and do not have any co-operation with such third parties unless otherwise disclosed. We are not in any way responsible for the content of any externally linked website or webpage. 4.3 By clicking on a hyperlink, you will leave the Lassyncy webpage and accordingly you shall be subject to the terms of use, privacy and cookie policies of the other website that you choose to visit.

5.0 International Data Transfers

From time to time, we may need to transfer your personal information outside the Republic of Kenya. Where we send your information outside Kenya, we will make sure that your information is properly protected in accordance with the applicable Data Protection Laws.

6.0 Your Rights

Subject to legal and contractual exceptions, you have rights under data protection laws in relation to your personal data. These are listed below: -

1. a) Right to be informed that we are collecting personal data about you;
2. b) Right to access personal data that we hold about you and request for information about how we process it;
3. c) Right to request that we correct your personal data where it is inaccurate or incomplete;
4. d) Right to request that we erase your personal data noting that we may continue to retain your information if obligated by the law or entitled to do so;
5. e) Right to object and withdraw your consent to processing of your personal data. We may continue to process if we have a legitimate or legal reason to do so;
6. f) Right to request restricted processing of your personal data noting that we may be entitled or legally obligated to continue processing your data and refuse your request;
7. g) Right to request transfer of your personal data in [an electronic format].

If you wish to exercise any of the rights set out above, please contact us on info@Lassyncy.co.ke We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. Statement Effective Date 1^st April 2024