Nutrition SC Public Company Limited (the “Company”) recognizes the importance of protecting your personal data. As a shareholder and/or director of the Company, we are required to collect, use, and disclose your personal data in accordance with the objectives prescribed by law and the Company’s corporate governance practices, pursuant to the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

1. Categories of Personal Data Collected

The Company may collect the following types of personal data:

• General information : Full name, national identification number, date of birth, address, telephone number, email address
• Financial information : Number of shares held, dividend payment account, dividend payment details
• Corporate information : Position in the Company, record of appointment as a director, director certification or confirmation documents
• Statutory information : Information necessary for shareholder meetings, disclosures to government agencies, and the Stock Exchange of Thailand

2. Purposes of Personal Data Processing

The Company processes personal data for the following purposes:

• To comply with applicable laws governing public limited companies
• To manage shareholding, shareholder meetings, and dividend distributions
• To communicate with shareholders and directors
• To disclose information as required by law to the Stock Exchange of Thailand (SET), the Securities and Exchange Commission (SEC), or other competent authorities

3. Disclosure of Personal Data

The Company may disclose your personal data to third parties including:

• The Stock Exchange of Thailand (SET)
• The Securities and Exchange Commission (SEC)
• Relevant government authorities
• Service providers engaged for shareholder meetings or share registrar services
• Financial institutions involved in dividend distribution

4. Retention Period

The Company will retain your personal data only for as long as necessary to fulfill the purposes stated herein or as required by law, or until the termination of your status as a shareholder or director, unless a longer retention period is required by law.

5. Rights of Data Subjects

Under the PDPA, you have the following rights:

• The right to access your personal data
• The right to request correction, suspension, or restriction of the use of your data
• The right to request deletion or destruction of your data
• The right to object to certain data processing activities

You may exercise your rights by contacting the Company through the channels below.

6. Contact Information

If you have any questions or wish to exercise your rights under the PDPA, please contact:
Company Secretary / Investor Relations / Data Protection Officer