Privacy Policy

1. General Provisions

This Privacy Policy (hereinafter — the "Policy") applies to personal data that LLC "QUALQORE" (hereinafter — "QUALQORE") may obtain about the User while using the QUALQORE website (hereinafter — the "Website").

Before using the Website, the User must read and understand the terms of this Policy.

QUALQORE shall not be responsible for any consequences of the User's disclosure of personal data to third parties if such disclosure was made on a third-party information resource.

The User's consent to the processing of personal data is confirmed by the fact of using the Website and/or by performing actions that clearly express the User's consent, including but not limited to:

• accepting cookies through the respective notification on the Website;

• filling out and submitting any form containing personal data (including fields for name, surname, email address, phone number, or other information);

• sending a request, registering, subscribing, or performing any other action expressing the User's intent.

If the User disagrees with the terms of this Policy, the User must refrain from using the Website.

For the purposes of this Policy, the following terms are used:

• "Website" — the internet resource under the name "QUALQORE" (https://qualqore.com), providing Users with access to information and services offered by QUALQORE;

• "User" — a natural person who accepts the terms of this Policy and uses the Website;

• "Processing of personal data" — any operation or set of operations performed on personal data, including collection, systematization, storage, modification, supplementation, use, provision, transfer, anonymization, and destruction.

2. Types of Personal Data Collected and Processed by QUALQORE

In accordance with the functional purpose of the Website, the following User data are processed automatically and/or manually:

a) personal data voluntarily provided by the User when filling out a contact form on the Website, including:

• name;

• surname;

• email address;

b) data automatically transmitted to QUALQORE during the User's interaction with the Website, including:

• information about the User's computer, such as browser type and version, operating system, IP address;

• data on the User's actions while using the Website, including navigation between pages, time spent on pages, date and time of visits;

• information about cookies and other similar technologies.

3. Purposes of Collecting and Processing Personal Data

The processing of Users' personal data is carried out to provide Users with the ability to use the Website and access its functionalities, including for the following purposes:

• ensuring proper identification and authentication of the User;

• improving the quality and convenience of Website use;

• ensuring security and reliability of the authentication process;

• conducting statistical, analytical, and marketing research (including based on anonymized data);

• analyzing User behavior to optimize content, services, and offers;

• conducting statistical and other studies based on anonymized data.

Personal data are stored for the period necessary to achieve the purposes specified in this Privacy Policy.

4. Conditions for Processing Personal Data

The processing of personal data of Users is carried out in accordance with the Law of the Republic of Uzbekistan "On Personal Data" and other regulatory legal acts in the field of personal data security.

QUALQORE takes all necessary organizational and technical measures to ensure the protection and confidentiality of the User's personal data.

The processing of personal data on the Website is carried out only with the User's consent. It should be noted that in the absence of such consent, the use of certain Website features may be restricted.

QUALQORE may transfer the User's personal data to third parties (to the extent necessary) in the following cases:

• if the User has given consent to such actions;

• with the User's consent, to transfer data to an information resource integrated with the Website, including authentication status and necessary User data;

• if such transfer is required by a court decision or provided for by the legislation of the Republic of Uzbekistan.

The processing of data of Users who are located in the European Union and/or the United Kingdom is carried out in accordance with this Policy and the applicable legislation of the European Union and the United Kingdom, in particular:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("General Data Protection Regulation" or "GDPR");

• Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector ("ePrivacy Directive"), as amended;

• the UK General Data Protection Regulation ("UK GDPR").

The procedures for processing such personal data are detailed in Appendices 1 and 2 to this Privacy Policy.

5. Withdrawal of Consent

The User has the right to withdraw their consent to the processing of personal data at any time by submitting a written or electronic request to QUALQORE.

Such a request may be submitted:

• in person at the QUALQORE office;

• by mail to QUALQORE's registered address;

• or by email to privacy@qualqore.com.

Upon receipt of the withdrawal request, QUALQORE will cease processing and delete the User's personal data within the timeframes and procedures established by the legislation of the Republic of Uzbekistan, except in cases where further processing is permitted without consent in accordance with the law.

6. Amendments to the Policy

QUALQORE reserves the right to amend this Policy at its sole discretion, including, but not limited to, cases where such amendments are caused by changes in the legislation of the Republic of Uzbekistan regulating the processing of personal data and the use of the Website.

The amendments shall take effect three (3) days after their publication on the Website.

If the User disagrees with the amendments, the User must stop using the Website.

Appendix 1: Privacy Policy for EU/UK Users

LLС "QUALQORE" ("we" or "QUALQORE") is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use and share your personal data, and your rights in relation to the personal data we hold. It concerns our processing of personal data of: (i) all users of QUALQORE's website, products and other resources; (ii) our suppliers, service providers, resellers and partners, or other counterparties entering into contracts or communications with QUALQORE; and (iii) all agents acting on behalf of a corporate entity that we interact with.

This Privacy Policy governs privacy issues regarding your use of our website and products, including the collection and processing of your personal information. It outlines how we collect, use, disclose, and protect your information when you sign-up for our products, interact with our website or provide information through alternative means, including, but not limited, filling out any webforms with the link to this Privacy Policy.

1. Identity of the Data Controller and Contact Details

For the purposes of the UK General Data Protection Regulation ("UK GDPR") and EU General Data Protection Regulation ("EU GDPR"), we are the 'data controller' of your personal data. Our company and contact details are below:

LLC "QUALQORE"

Tashkent, Yakkasaroy district, Mukhandislar MFY, Shota Rustaveli street, 53B

privacy@qualqore.com

Since the services provided by QUALQORE do not involve our access to your clients' data or to any other data that we could process as a processor, no separate Data Processing Agreement ("DPA") is required for the use of our website or our products.

However, should you consider that such access may become necessary, or if you wish to enter into a DPA on an optional basis, please contact us at privacy@qualqore.com, and we will provide our template DPA for your review.

2. How We Collect Your Information and the Categories of Personal Data Processed

We may collect and process the following categories of your personal data in a number of ways, for example:

a) Information you give us

This is information about you that you give us by filling in forms on https://qualqore.com and other linked websites, or by concluding a contract with us, or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register to use our website, subscribe or use our services, search for a product, place an order, report an issue to us, or leave the information in other forms for us to contact you. The information you give us may include:

• your identification data (your first and last name);

• your contact details (country, postal address, email address, phone number);

• additional information required for KYC procedures (proof of identity, proof of address, PEP information etc.);

• financial information; and

• corporate information (company, job title, position).

b) Information we collect about you

With regard to your visits to QUALQORE's website or using our products, filling out the relevant webforms, or contacting our customer support services, we will collect the following information:

• account settings, including technical specifications, identifiers and attributes of resources, as well as the settings for services and data;

• reasonable business records of charges, payments, and billing details and issues;

• technical and operational details of your usage of QUALQORE's products to the extent this information constitutes your personal data, such as usage data, operational status, software malfunctions, crash diagnostics, authentication credentials, performance evaluations, and other pertinent technical particulars crucial for the management and upkeep of products and associated software;

• technical information collected using cookies and similar technologies, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;

• other information about your visit to and use of our website, including the full Uniform Resource Locators (URL), clickstream to, through and from our website (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page;

• any phone number used to call our specialists, including customer support; and

• records of your interactions and exchanges with QUALQORE and our partners, including feedback, tickets for customer support or other requests for assistance.

c) Information we receive from other sources or third parties

We may obtain information about you from other sources or third-party service providers who intentionally collect your information as part of their services. This information may include business contact details such as your name, company, telephone number, email address, job title, job function, and social media URLs.

We work closely with a number of third parties who may share your personal data with us (including, for example, business partners, subcontractors in technical, payment and delivery services, analytics providers, other service providers, etc.). When required by law, we will notify you when we receive information about you from them and the purposes for which we intend to use that information.

Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

3. The Purposes and Legal Basis for Processing Your Personal Data

We may process your personal data because it is necessary for the performance of a contract with you, e.g. our terms of service (or in order to take steps at your request prior to entering into a contract). In this respect we use your personal data for the following:

• to interact with you before you become our customer, for example when you express your interest in our services (for example, to send you a proposal or answer enquiries about our services);

• to enter into contracts with you as a customer, partner or other counterparty;

• to respond to your requests, provide you with the information you inquire, and communicate with you about our products and services;

• once you have engaged us and become our customer, to carry out our obligations arising from any contracts entered into with you and to provide you with the information, products and services requested from us;

• to manage our relationship with our existing customers which includes processing information for the purposes of customer administration and performance of the contract with our customers.

We may also process your personal data because it is necessary for our or a third party's legitimate interests. Our "legitimate interests" include our commercial interests in operating our business in a customer-focused, efficient and sustainable manner, in accordance with all applicable legal and regulatory requirements. In this respect, we may use your personal data for the following:

• to manage our relationship with our existing customers which includes processing information for the purposes of customer administration and for purposes tangential to the performance of the contract with our customers;

• to carry out analysis and reporting to build and maintain strong customer relationships;

• to incorporate your information in our databases for the purposes verification of customer identity and solvency, fraud detection and prevention to ensure that we only contract with trustworthy customers;

• to administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

• to ensure that content from our website is presented in the most effective manner for you and for your computer to provide users with a positive user experience;

• for our marketing analytics purposes, including to provide you with information about other services or products we offer that are similar to those that you have already purchased or enquired about to market our products and services and/or to reach out to you using your business contact details we received from third party providers (unless by law we need your consent to send you this kind of marketing material);

• to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you.

We may also process your personal data for our compliance with our legal obligations. In this respect, we may use your personal data for the following:

• to meet our compliance, legal and regulatory obligations, such as compliance with anti-money laundering laws and tax reporting requirements;

• for the prevention and detection of crime;

• to deal and assist with legal claims, requests and investigations, including those made under data protection law, or requests for formal disclosure by competent authorities; and

• to administer and maintain such records as may be required by the applicable regulations and legislation from time to time.

We may also process your personal data where we have your specific or, where necessary, explicit consent to do so. Please note that where our processing of your personal data relies on your consent and where you then withdraw that consent, we may not be able to carry out all or some aspects of our services and/or it may affect the delivery of those services to you. In this respect, we may use your personal data for the following:

• to send you updates, promotional materials, marketing communication, and other relevant communications by electronic means including email, e.g. if you have consented or signed up for our email newsletter;

• to reach out to you using your business contact details we received from publicly available sources or third-party providers (where you originally consented to the use of those contact details by others and ultimately by us);

• to provide you, or permit selected third parties to provide you with information about services or products we feel may interest you by electronic means including email (unless the law allows us to send this material without your consent);

• to allow you to participate in interactive features of our service when you choose (i.e. opt in to do so); and

• to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you (e.g. where this relies on our use of cookies);

• to respond to your requests, provide you with the information you inquire, and communicate with you about our services;

• to make suggestions and recommendations to you and other users of our website about services that may interest you.

Unless otherwise specifically provided by this Privacy Policy - if you are an existing customer, we will only contact you by electronic means with information about services or products similar to those which were the subject of a previous sale or negotiations of a sale to you (relying on our legitimate interests). If you are a new customer/prospect, or where we permit selected third parties to use your data, we (or they) will contact you by electronic means (within the parameters of your consent, or relying on legitimate interests where permissible by law).

4. Sharing Your Information with Others

You acknowledge that we may share your personal information, for the abovementioned purposes, with any member of QUALQORE group, which means our subsidiaries, our parent and holding companies, their subsidiaries, and other affiliates of Gcore group.

We can also share your personal data with:

• credit bureaus, fraud detection agencies, or other relevant entities involved in credit assessment or fraud prevention;

• domain name registries for domain registration purposes;

• debt collection agencies or similar organizations for debt recovery processes;

• law enforcement agencies, regulatory bodies, courts, or other governmental authorities as required by law;

• other customers of the cloud provider, if misuse of services is reported and deemed necessary for enforcement of policies or laws;

• individuals or organizations making claims against misuse of services, as required by law;

• partners or affiliates involved in joint ventures or collaborations related to the our services;

• auditors or legal advisors for compliance and legal purposes;

• third-party service providers engaged in delivering the services, in accordance with this Privacy Policy, ensuring appropriate confidentiality and security measures are maintained;

• third-party providers or vendors when you procured a third-party service through QUALQORE; and

• other entity as described in the Privacy Policy and in accordance with applicable laws.

In certain cases, we may be under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and Conditions, available at https://qualqore.com, and other contracts, or to protect the rights, property and safety of QUALQORE, our customers or other persons or entities. This includes exchanging information with other companies and organisations, lawyers, consultants and auditors for the purposes of fraud protection and credit risk reduction. We will not sell, purchase, provide, exchange or in any other manner disclose your account or transaction data, or personal information about you as a cardholder to any third party, except the payment intermediaries, for instance, acquirer and Visa/Mastercard Corporations. We may use SSL and other security measures to protect such information.

5. Transfer of Data Outside of the UK and/or the European Economic Area

The data that we process may be transferred to, and stored at a destination outside the UK and/or European Economic Area ("EEA") in the context of the processing activities described above. It may also be processed by staff operating outside the UK and/or EEA who work for the companies in Gcore group or for one of QUALQORE suppliers. The staff includes personnel engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you acknowledge that your personal data may be transferred outside of the UK and/or EEA. QUALQORE will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. Furthermore, where required, QUALQORE will put in place appropriate safeguards, such as incorporating standard data protection clauses which are recognised or issued in accordance with the data protection law (as applicable), to ensure that your personal data is adequately protected when it is transferred outside of the UK and/or EEA.

For further details of the protection given to your personal data when it is transferred outside the UK and/or the EEA, you can contact us using the details set out below.

6. Your Rights

Under the UK GDPR and the EU GDPR, you have the following rights in relation to our processing of your personal data:

• to obtain access to, and copies of, the personal data that we hold about you;

• to require us to correct the personal data we hold about you if it is incorrect;

• to require us to erase your personal data in certain circumstances;

• to require us to restrict our data processing activities in certain circumstances (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);

• to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for transmitting that personal data to another data controller;

• to object, on grounds relating to your situation, to any of our processing activities where you feel this has a disproportionate impact on your rights; and

• to complain about the processing of your data to the relevant competent data protection regulator. The data protection regulators do normally recommend that you first try and resolve the complaint with us.

Please note that the above rights are not absolute, and we may be entitled (or required) to refuse requests where exceptions apply. For example, if we have reason to believe the personal data we hold is accurate or we can show our processing is necessary for a lawful purpose set out in this Privacy Policy.

We will usually inform you before processing your data if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to revoke your consent to certain processing activities you approved earlier, for instance, by using the unsubscribe link in our marketing communications. You can also exercise the right at any time by contacting us at privacy@qualqore.com. Where processing is based on consent, you have the right to withdraw your consent at any time.

7. How Long We Keep Your Data

We retain your personal data for no longer than is necessary for the purposes for which it was collected and in accordance with the applicable laws. To determine the appropriate retention period for personal data, we consider the volume, nature, and sensitivity of the personal data, the potential risk of harm from any unauthorised use or disclosure, the purposes for which we process your personal data, whether we can achieve those purposes through other means, and the applicable legal requirements.

For data processed for the implementation, administration and management of the contractual relationship, we usually retain such personal data for a period of ten years following termination or expiration of the relevant contract (contractual relationships). The data of our prospective customers is kept for a maximum of three years from the last contact with them or deleted if they object to the processing. Data collected for the purpose of sending our newsletters is deleted at the request of the data subjects concerned or in the event of unsubscription.

For more information with regard to the retention of your data, please contact us at the email address given below in section 12.

8. Changes to Our Privacy Policy

From time to time this Privacy Policy can be modified by QUALQORE. Such modifications will not apply retroactively.

9. Cookies

We use cookies on our website to improve and personalize your browsing experience. The types of cookies we use, as well as the information collected through them, are described in our separate Cookies Policy (Annex 2). We encourage you to review the Cookies Policy for detailed information on how we use cookies and how you can manage your cookie preferences.

10. Disclaimer on Applicability (EU/UK Data Subjects)

This Privacy Policy applies to the processing of personal data of individuals located in the European Union ("EU") and the United Kingdom ("UK"). Please note that our company is established in Uzbekistan, but our services and website may be accessed globally.

Your location may be determined through technical means such as your IP address (unless you have disabled cookies or similar tools), through information you voluntarily provide in our online forms, or through other internal systems used to reasonably assess location.

If you are physically located in the EU or UK but use a VPN, proxy, or similar technology that prevents us from accurately identifying your location, we will rely on the information available to our systems. In such cases, this Privacy Policy will apply only to the extent that we are reasonably able to identify you as an EU or UK data subject.

11. Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to privacy@qualqore.com.