Loxley : Privacy Notice

ATTACHMENT 6

Privacy Notice of Personal Data Protection

for Annual General Meeting of Shareholders for the Year 2023 held on 25 April 2023

of Loxley Public Company Limited ("Annual General Meeting")

Loxley Public Company Limited (the "Company") recognizes the importance of personal data protection of shareholders and proxies who attend the Annual General Meeting as owners of personal data. The Company therefore announced privacy notice personal data protection for this Annual General Meeting of Shareholders so that they are known to shareholders and proxies.

1. Collected Personal Data

The Company will collect and process shareholders' and proxies' personal data which are either directly provided by shareholders or proxies to the Company or which the Company received from Thailand Securities Depository Co., Ltd. (TSD), the Company's registrar, including but not limited to the following information:

• General personal data, e.g. name-surname, date of birth, age, address, telephone number, facsimile number, e-mail address, identification number, passport number, nationality, shareholders' registration number, number and type of shares held, etc.
• Financial information for carrying out any acts in relation to shareholders' rights and benefits, e.g. bank account number, name of bank, cheque number, etc.
• Photo and video recorded at the Annual General Meeting as well as electronic traffic data from attendance registration or recorded at such Meeting.
• Information provided by shareholders and proxies through the Company's Investor Relations channel on the Company's website or other channels designated by the Company.

Supporting documents for registration and proxy forms submitted to the Company by shareholders or proxies may contain sensitive personal data, such as race, blood type and religion not required for the Annual General Meeting. Please be informed that the Company has no intention to collect such sensitive personal data. As such, the shareholders or proxies are requested to erase those sensitive personal data prior to submitting the documents to the Company. The Company reserves its right to erase such sensitive personal data and in such case, it shall not be deemed that the Company has collected the said sensitive personal data.

2. Purposes of Collecting, Use, Processing and Disclosing Personal Data

The Company's purposes for collecting, using, processing and disclosing personal data of shareholders and proxies related to the Annual General Meeting are as follows:

• To convene the Annual General Meeting including sending documents in relation to the Meeting, verifying identity for registration of Meeting attendance, processing voting results, preparing minutes of the Annual General Meeting and any acts in relation to such Meeting.
• To disseminate minutes of the Annual General Meeting or data from photo and video taken or recorded at the Meeting on the Company's website and through printing and electronic media.
• To carry out actions in relation to dividend payment or any other rights and benefits to shareholders.
• To organize the Company's activities including communication through Investor Relations channel or other channels designated by the Company.
• To carry out any acts in compliance with laws or orders of courts, government agencies, regulatory bodies and law enforcement agencies.

3. Persons to Whom Personal Data of Shareholders and Proxies may be Disclosed

To accomplish the abovementioned purposes, the Company may have to disclose personal data of shareholders and proxies related to the Annual General Meeting to the following third parties:

1. • Thailand Securities Depository Co., Ltd. (TSD)
   • Banks or financial institutions
   • The Company's service providers, e.g. service providers for printing, delivering documents, data storage, technology solutions for organizing the Annual General Meeting or any other related services for performing the Company's obligations towards shareholders and proxies under the laws as well as for the Annual General meeting attendance registration, counting quorum, casting votes and counting voting results at the Annual General Meeting.
   • Professional service providers, e.g. legal advisors, doctors and auditors, etc.
   • Investors in general to the extent required by relevant laws or regulations.
   • Courts, government authorities, regulatory bodies, law enforcement agencies, other persons or juristic persons which the Company requires to disclose data in compliance with laws, orders of government authorities, e.g. Securities and Exchange Commission, Stock Exchange of Thailand, Ministry of Commerce, Revenue Department, etc.
2. Personal Data Keeping Period
   The Company will keep personal data related to the Annual General Meeting of shareholders and proxies for as long as necessary given the above mentioned purposes, including for compliance with or making claims according to laws.
3. Rights of Shareholders and proxies as Personal Data Owners
   Shareholders and proxies as owners of personal data related to the Annual General Meeting are entitled to withdraw consent given for or object the collection, use, process or disclosure of personal data, to access or obtain copy of their personal data, request for their personal data to be sent or transferred and request for their personal data to be erased, destroyed, suspended of use or corrected; subject to criteria and procedures as prescribed by laws on personal data protection. However, the Company may reject the requests of shareholders or proxies for justifiable reasons.
4. Contact Details
   Shareholders and proxies who would like to exercise data owners' rights in Item No. 5 may contact the Company at the following address:
   6.1 Data Protection Officer (DPO)

Telephone: [phone], Email: [e-mail], or Scan QR Code Loxley PDPA Center 6.2 Company Secretary Office

Loxley Public Company Limited No. 102 Na Ranong Road, Klong Toei Sub-district, Khlong Toei District, Bangkok 10110 Email: [e-mail]

The Company may update, revise or amend this Privacy Notice of Personal Data Protection through the Company's website, the invitation to the Shareholders' Meeting or the Stock Exchange of Thailand's news disclosure channel in order to comply with laws, regulations or technical requirements.