Nexology Sdn. Bhd., and its subsidiaries and affiliated companies (collectively "Nexology", "we", "us", and/or "our") are committed to protecting the privacy of individuals who interact with us, such as our website visitors, customers, business partners, leads and prospects, recipients of our marketing communications, end users and event attendees (“you” and/or “your”).

Nexology Sdn. Bhd. is the controller of your personal information as described in this Policy, unless otherwise specified.

This privacy policy (the "Policy" or the "General Privacy Policy") explains how we collect and process your personal information for our own purposes when you:

• visit, interact with, or use any Nexology Services;
• receive communications from, or otherwise interact or communicate with us, including via email, phone or mail, or using our branded social media pages;
• register or take part in our surveys, research, or any offline or online events; and
• apply to a position at Nexology.

When we refer to any combination of the above, we use the term “Services”.

In connection with the provision of specific Services, we may provide additional "just-in-time" disclosures or additional information about our data processing practices. These notices may supplement this Policy or clarify Nexology's privacy practices in the circumstances described or may provide you with additional choices about how Nexology processes your personal information.

This Policy does not apply to the following:

• Customer Personal Data. Customer Personal Data is any personal information that Customer or you submit to us for processing by Nexology Services where Nexology processes the personal information on behalf of the customer. For more information on how Nexology handles Customer Personal Data, please see our Data Processing Addendum.
• Nexology as an employer. Any personal information we collect or process in our capacity as an employer.
• Third party data. Any products, services, websites or content that are offered by third parties through integrations with Nexology Services, which are governed by their own respective privacy policies.

Your privacy on the Internet is of the utmost importance to us. At Nexology, we want to make sure your experience online is both satisfying and safe. If you have any questions at any time please contact Nexology at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information).

When you access or use our Services, you acknowledge that you have read this Policy and understand its content. Your use of our Services and any dispute over privacy is subject to this Policy, and any applicable service terms (including any applicable limitations on damages and the resolution of disputes).

We recommend that you read this Policy in its entirety to ensure you are fully informed. However, in order to simplify the reading, we have included quick links to each section below:

• About Nexology
• The Personal Information We Collect
• How We Use Your Personal Information
• How We Share Your Personal Information
• How Long We Keep Your Personal Information
• Our Commitment To Data Quality
• Our Commitment To Data Security
• Our Commitment To Children’s Privacy
• "Do Not Track" Signals
• Transfers of Your Personal Information
• Your Privacy Rights and Choices
• Third Party Links and Features
• Accessibility
• Changes to This Policy
• How To Contact Us

• About Nexology

Nexology is a global company headquartered in Malaysia. As a tech-enabled services company, our people and technology reduce complexity and accelerate growth. Customer success is at the heart of what we do.

• The Personal Information We Collect

The personal information we collect depends on the context of your interactions with Nexology and the choices you make, the Services and features you use, your location, and applicable laws, but can include the following:

Personal Information You Provide To Us. We collect any personal information you provide when you interact with us, such as when you order products, make requests, register to receive materials, sign up for services and/or apply for a position through our website. This information may vary depending on how you interact and what you choose to share with us, and includes:

• Business contact information: such as your name, address, email address, and phone number.
• Professional information: such as the organization name.
• Authentication information: such as user IDs and passwords.
• Commercial Information: such as products or services purchased.
• Financial information: such as your credit/ debit card information.
• Marketing information: such as your contact preferences.
• Applicant information (if you apply for a job with Nexology): such as your resume, desired pay, education and work history, whether you are over the age of 18, and visa status. You also may choose to provide your gender, ethnicity, veteran status, disability status, and links to your website, blog, portfolio, or LinkedIn profile. You can apply for an open position on our website using sign-in services such as LinkedIn Connect. These services will authenticate your identity and provide you the option to share certain personal information with us such as your name and email address to pre-populate our sign up form. Services like LinkedIn Connect give you the option to post information about your activities on this website to your profile page to share with others within your network.
• Online and offline content: such as when you fill in a form on our website, respond to surveys, provide feedback, make a support inquiry, participate in promotions, or otherwise communicate with us.

We may also record or monitor our telephone or other communications with you, to the extent permitted by applicable law.

Providing your personal information is optional, but it may be necessary for certain Services or features. In such cases, if you do not provide your personal information, we may not be able to provide you with the requested Service or feature.

Through our Services, you can also submit information about other individuals. For example, if you register someone else for a Nexology course, or someone else, other than you, is paying for it, you will need to submit their personal information. In this circumstance, you should first notify the individual and share a copy of this Policy with them.

Personal Information We Collect Automatically. We automatically collect certain types of personal information when you interact with us, such as when you visit our website or interact with emails we have sent you. We use common information gathering tools, such as tools for collecting cookies and similar tracking technologies to automatically collect information that may contain personal information from your computer or mobile device. This information includes:

• Usage and interaction information: such as the full Uniform Resource Locators (URL) clickstream to, through, and from our website (including date and time), content you viewed or searched for, page response times, download errors, length of visits to certain pages, and page interaction information (such as scrolling, clicks, and mouse-overs).
• Log and device information: such as internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data.
• Other identifiers and information contained in cookies and similar tracking technologies as further described in our Cookie Policy.

For more information on our use of cookies and other tracking technologies, review our Cookie Policy.

We do link this automatically collected data to other information we collect about you. We may combine this automatically collected log information with other information we collect about you. We do this to improve the services we offer you, to improve marketing, analytics, or site functionality.

Personal Information We Collect From Other Sources. On occasions, we may source your personal information from a third party or a publicly-available source. We may combine this information with personal information that you provide. This information includes:

• Marketing and sales generation information: such as your name, email address, physical address, phone number and similar contact information, intent (or user behavior data), IP addresses, social media profiles and/or LinkedIn URLs, and web references.
• Recruitment information: such as web and third party references, LinkedIn and social media profile information, employment history, education, credit history and background check results.

Referrals. If you choose to use our referral service to tell a friend about our website, we will ask you for your friend’s name and email address. We will automatically send your friend a one-time email inviting him or her to visit the website. Nexology stores this information for the sole purpose of sending this one-time email and tracking the success of our referral program. Your friend may contact us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information) to request that we remove this information from our database.

Through our "import contacts" feature on our Learndot product we may collect the name, email address, phone number, birthdate, account name, title, and password help text, of specified contacts that you provide in order to create contact records in your particular Learndot instance on your behalf to allow you to designate access to learning content inside of our Learndot product. When you provide us with personal information about your contacts we will only use this information for the specific reason for which it is provided.

If you would like to request that it be removed at any time from our database, please contact us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information).

• How We Use Your Personal Information

We use your personal information for a variety of purposes and on the legal bases described in this Policy or disclosed to you in our Services. If you are located in the Asia, note that we will only process your personal information if we have a legal basis to do so, as provided below.

• Providing Nexology Services. We use your personal information to provide and deliver our Services and process transactions related to our Services, including registrations, purchases, and payments to perform our contract with you. Where we have not entered into a contract with you, we process your personal information in reliance on our legitimate interests in operating and improving our internal operations, systems and Services, and to provide you with the content, products or services you access and request (e.g., to download content from our website).
• Providing support. We use personal information to troubleshoot and diagnose product problems, repair customers’ devices, and provide other customer care and support services, including to help us provide, improve, and secure the quality of our products, services, and training, and to investigate security incidents to perform our contract with you or if we do not have a contract directly with you, in reliance on our legitimate interests in providing you support.
• Communicating with you. We use your personal information to communicate with you about our Services via different channels (e.g., by phone or email) and to respond to your requests to perform our contract with you or if we do not have a contract directly with you, in reliance on our legitimate interests in fulfilling your requests and communicating with you.
• Improving and developing our Services. We use your personal information to improve and develop our Services (including by measuring use, analyzing performance, and fixing errors) in reliance on our legitimate interests in developing and improving our Services, or where required, with your consent. For example, we use data, often in a de-identified form, to develop new features, capabilities, or products, improve the user experience, assess capability requirements, and identify customer opportunities.
• Advertising and marketing. We use your personal information to send you promotional messages, marketing, advertising, and other information based on your preferences, and to personalize, measure, and improve our advertising. This may include information about our products, promotions, or events as necessary for our legitimate interest in conducting direct marketing, or to the extent you have provided your prior consent. We may also use personal information to administer referral programs, rewards, surveys, sweepstakes, contests, or other promotional activities or events sponsored or managed by Nexology or its third-party partners, and to invite you to events and relevant opportunities. Please see "Your Privacy Rights and Choices" Section 11 to learn how you can control the processing of your personal information.
• Processing job applications. We process your personal information if you apply for a job with Nexology, to evaluate your application and make hiring decisions, communicate with you and inform you of current and future career opportunities (unless you tell us that you do not want us to keep your details for such purposes), manage and improve our recruiting and hiring processes, or to conduct reference and background checks where required or permitted by applicable local law. We perform this processing to the extent that it is necessary to comply with our legal obligations, for our legitimate interest in assessing the suitability of our candidates and managing our recruiting process, or, where required by applicable law, with your consent.
• Complying with legal obligations. We process your personal information when cooperating with public and government authorities, courts or regulators in accordance with our legal obligations under applicable laws, to the extent this requires the processing or disclosure of personal information to protect our rights, or is necessary for our legitimate interest in protecting against misuse or abuse of our websites, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes, or to respond to lawful requests.
• For our business purposes. We may use your personal information for other legitimate business purposes in reliance on our legitimate interests, such as to update, expand, and analyze our records; identify new customers; data analysis; to protect, investigate, and deter against fraudulent, unauthorized, or illegal activity; to develop new products; to enhance, improve or modify our Services; to identify usage trends; to determine the effectiveness of our promotional campaigns and free trials; and to operate and expand our business activities.
• Purposes for which we seek your consent. We may also ask for your consent to use your personal information for a specific purpose that we communicate to you.

In carrying out these purposes, we combine data we collect from different contexts or that we obtain from third parties to give you a more seamless, consistent, and personalized experience, to make informed business decisions, and for other legitimate purposes.

• How We Share Your Personal Information

We do not share your personal information with third parties, other than as follows:

We do not share this information with outside parties except to the extent necessary to complete that order. For example we may share your personal information with our third party service providers such as credit card processors, to provide the necessary services we use to operate the Services.

• Affiliates. With our affiliates within the ServiceRocket corporate group and companies we may acquire in the future when they become part of the ServiceRocket corporate group, to the extent such sharing of data is necessary to fulfill a request you have submitted via our Services or for customer support, marketing, technical operations, and account management purposes.
• Service providers. With our contracted vendors, consultants, and other third parties who provide services to us such as IT and system administration and hosting, credit card processing, research and analytics, marketing, customer support, and data enrichment for the purposes described above.
• Third-Party advertising services. We provide ad companies with information that allows them to serve you with more useful and relevant ServiceRocket ads and to measure their effectiveness. For more information about your choices relating to our advertising, see "Your Privacy Rights and Choices" Section 11 for more information.
• Legal obligations. We may also disclose your personal information as required by law such as to comply with a subpoena or bankruptcy proceedings or in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
• Business transfers. In connection with or during negotiation of a merger, financing, acquisition, bankruptcy, dissolution, transaction or proceeding involving sale, transfer, divesture, or disclosure of all or a portion of our business or assets. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of personal information to an unaffiliated third party.
• Consent. With your consent, for example, when you agree to our sharing your information with other third parties for their own marketing purposes, subject to their separate privacy policies.

We may also share aggregated or de-identified usage data with third parties to help us perform analysis and make improvements. Additionally, we may share anonymous usage data on an aggregate basis in the normal course of operating our business; for example, we may share information publicly to show trends in the use of our Services.

Any personal information or other information you choose to submit in communities, forums, blogs, or chat rooms on our websites may be read, collected, and used by others who visit these forums, depending on your account settings.

For further information on the recipients of your personal information, please contact us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information).

• How Long We Keep Your Personal Information

We keep your personal information to enable your continued use of the Services, for as long as it is required in order to fulfill the relevant purposes described in this Policy, or for other essential purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements.

Because these needs can vary for different data types in the context of different Services, actual retention periods can vary significantly. We determine the appropriate retention period for personal information based on the amount, nature and sensitivity of your personal information processed, the potential risk of harm from unauthorized use or disclosure of your personal information and whether we can achieve the purposes of the processing through other means, as well as applicable legal requirements (such as applicable statutes of limitation).

After expiry of the applicable retention periods, your personal information will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of that data.

For further information on applicable data retention periods, please contact us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information).

• Our Commitment To Data Quality

We take reasonable steps to ensure that the personal information our Services collect is accurate, up to date and complete. In circumstances where your personal information has changed, please contact us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information) to enable us to update and correct the information. We may also contact you from time to time to check our record of your personal information is still correct.

• Our Commitment To Data Security

To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the personal information we collect. We use industry standard methods of securing our electronic databases of personal information. Except as provided elsewhere in this Policy, we limit access to personal information in electronic databases to those people in our organization that have a business need for such access. Your privacy is very important to us. However, due to factors beyond our control, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You are solely responsible for protecting your password, limiting access to your devices, and signing out of websites after your sessions. If you have any questions about our security practices, please contact us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information).

• Our Commitment To Children’s Privacy

Our Services are not intended for children under 16 years of age. We do not knowingly collect, process or disclose personal information from children under 16. If you are a parent or guardian and you learn that your children under 16 have provided us with personal information, please contact us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information).

• "Do Not Track" Signals

Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the website does not currently interpret, respond to or alter its practices when it receives “Do Not Track” signals.

• Transfers of Your Personal Information

Personal information we collect may be stored and processed in your region, in Singapore or in any other country where we or our affiliates, subsidiaries or service providers maintain facilities. We take steps designed to ensure that the data we collect under this Policy is processed as described in this Policy and according to applicable law wherever the data is located.

We may transfer personal information from Asia to other countries that may not have the same level of data protection that applies in your jurisdiction. In these cases, we use a variety of legal mechanisms to ensure that the recipient of your personal information offers an adequate level of protection, including entering into the standard contractual clauses for the transfer of European data approved by the European Commission or the appropriate authority, or where required, we will ask you for your prior consent.

• Your Privacy Rights and Choices

Your Rights. Where we are acting as a controller, and depending on your location and subject to applicable law, you may have the following rights regarding the personal information we control about you:

• You can access, correct, update, delete, and deactivate your personal information.
• In addition, if you are a resident of or visitor from Asia, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.
• You can opt out of receiving marketing emails from us at any time. See the "Your preferences for email marketing" below for further information.
• If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
• You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. Contact details for data protection authorities in Asia are available here.

If you would like to exercise your rights (for which we reserve the right to charge you a fee, where permitted by applicable law), please contact us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information). We will review and process your request in accordance with our obligations under applicable law.

Your Preferences for Email Marketing. You may sign-up to receive emails, newsletters or other forms of communications that we may provide from time to time. If you would like to discontinue receiving this content (opt-out), you may update your marketing preferences by using the "Unsubscribe" link found in emails we send to you or at your member profile on our website or by contacting us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information). If you choose to no longer receive marketing information, we may still communicate with you regarding such things as your security updates, product functionality, responses to service requests, or other transactional, non-marketing purposes.

You can also send requests about changes to your information or your contact preferences, including requests to opt-out of sharing your personal information with third parties, by contacting us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information).

Behavioral Targeting / Re-Targeting. As described in this Privacy Policy, Nexology and/or third parties on our digital propert(ies) may use cookies and similar tracking technologies to collect information and infer your interests for interest-based advertising purposes. If you would prefer to not receive personalized ads based on your browser or device usage, you may generally express your opt-out preference to no longer receive tailored advertisements. Please note that you will continue to see advertisements, but they will no longer be tailored to your interests.

To opt-out of interest-based advertising by participating companies in the following consumer choice mechanisms, please visit:

-Digital Advertising Alliance (DAA)’s self-regulatory opt-out page (http://optout.aboutads.info/) and mobile application-based "AppChoices" download page (https://youradchoices.com/appchoices)

-Network Advertising Initiative (NAI)’s self-regulatory opt-out page (http://optout.networkadvertising.org/).

In the mobile environment, most mobile operating systems offer device-based opt-out choices that are transmitted to companies providing interest-based advertising. To set an opt-out preference for a mobile device identifier (such as Apple's IDFA or Android's GAID), visit the device manufacturer's current choice instructions pages, or read more about sending signals to limit ad tracking for your operating system here: http://www.networkadvertising.org/mobile-choices.

Please note that these settings must be performed on each device (including each web browser on each device) for which you wish to opt-out, and if you clear your cookies or if you use a different browser or device, you will need to renew your opt-out preferences.

Testimonials. We display personal testimonials of satisfied customers on our website in addition to other endorsements. With your consent, we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information).

• Third Party Links and Features

Any products, services, websites or content that are offered by third parties (including through integrations with Nexology Services), are governed by their own respective privacy policies. If you submit personal information to any of those third parties, your personal information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any websites you visit.

Social Media Features. Our website includes social media features, such as the Facebook Like button and Widgets, such as the Share this button or interactive mini-programs that run on our website. These features may collect your IP address, which page you are visiting on our website, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing it.

Blogs. Anytime you post on our blog please be aware that you are posting using a third party application and we have no access or control over this personal information.

To request removal of your personal information from our blog, you can either log into the third party application and remove your comment or you can contact the appropriate third party application. Your interaction with these features is governed by the privacy policy of the company providing it.

• Accessibility

We are committed to ensuring this Policy is accessible to individuals with disabilities. If you wish to access this Policy in an alternative format, please contact us at privacy@nexology.solutions (see "How to Contact Us" Section 15 below for more information)

• Changes to This Policy

We may make changes to the General Privacy Policy and Supplemental Disclosures from time to time in response to changing legal, regulatory, technical or business developments. We will take appropriate measures to inform you, consistent with the significance of the changes we make and the requirements under applicable data protection laws.

You can see when this Policy was last updated by checking the "last updated" date displayed at the top of this Policy. All changes shall be effective from the date of publication unless otherwise provided in the notification.

• How To Contact Us

If you have any questions or comments about these disclosures or our practices, please contact us by email at privacy@nexology.solutions