California Privacy Policy Addendum

We collect personal information about you from a variety of sources. We collect information from you directly [(e.g., when you contact us or create an account with us)], automatically, [(e.g., data collected from cookies),] and from other sources, including commercially available sources, such as public databases (where permitted by law). (1) Information we collect from you The categories of information that we may collect directly from you include the following: Identifiers, such as your name, postal address, email address, telephone number, and user name; Financial, medical, or health information, such as your payment history and any prescriptions or current medical conditions; Protected characteristics, such as your gender or date of birth; Commercial information, such as products or services purchased you have purchased, credit card or bank account information, billing/payment terms, credit limit, or credit status; Internet or other electronic network activity information, such as browsing or search history; Geolocation data, such as precise location; Sensory Information, such as photographs or voice recordings; Professional information, such as employer, job title or professional affiliations; Education information; and Inferences regarding preferences or other characteristics such as consumer preferences for websites. We may also collect information you provide in your communications to us, such as when you participate in message boards or forums, respond to polls or surveys, write a review, or contact us with a question, comment, or request. (2) Information we automatically collect about you We also may collect certain information automatically when you visit and use our websites and services. We collect this information for our legitimate business purposes and to facilitate your use of our websites and services. You may be able to limit our ability to automatically collect certain types of information by adjusting the cookie settings on your web browsers. These categories of information include: Identifiers, such as unique device identifiers, online identifiers, IP addresses, or other persistent identifiers; Commercial information, such as products or services purchased, or other purchasing or consumption histories or tendencies; Internet or other electronic network activity information, the time, date, and duration of your visit to our websites, your browser type and operating system, your Internet Protocol (IP) address, or other device identifiers; Geolocation data, such as precise location; and Audio, electronic, visual, thermal, olfactory, or similar information, such as photographs or voice recordings. We may use cookies, pixel tags, and similar technologies to automatically collect this type of information. Cookies are small bits of information that are stored by your computer’s web browser. Aggregate cookie and tracking information may be shared with third parties. You may be able to decide if and how your computer will accept a cookie by configuring your preferences or options in your Internet browser settings. However, if you choose to disable cookies, you may not be able to use certain services or features on our websites or in connection with our services. Pixel tags are very small images or small pieces of data embedded in images, also known as "web beacons" or "clear GIFs," that can recognize cookies, the time and date a page is viewed, a description of the page where the pixel tag is placed, and similar information from your computer or device. By accessing our websites or using any services, you affirmatively consent to our use of cookies, pixel tags, and similar tracking technologies. We may allow third parties to place and read their own cookies, web beacons, and similar technologies to collect information through our websites and services. We do not control how those third parties use that information. These third parties include service providers who may use these technologies to collect information that helps us with traffic measurement, research, and analytics. Different methods exist for you to prevent tracking of your online activity, including setting "do not track" preferences in your browser to alert websites you visit that you do not want them to collect certain information about you. Please note that, at this time, our websites does not recognize such "do not track" instructions. We will update this Privacy Policy if we recognize "do not track" instructions in the future. (3) Information we collect from other sources We collect the following categories of personal information from other sources: Identifiers, such as email addresses from marketing vendors. Financial, medical, or health information, such as from your healthcare providers; Protected characteristics, such as your gender, age, race, or other protected classifications provided by data supplementation services or healthcare providers; Commercial information, such as sanction lists or risk assessment efforts; Internet or other electronic network activity information. We collect information on your browsing history, search history, and other online activity from the advertising networks in which we participate; and Additionally, we may draw inferences from any of your personal information that we collect to create a profile about you, which may reflect your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. These sources may include: Market Research Other entities Affiliates Business partners Individuals or businesses you direct to share with us

We may use your personal information for the following purposes: (a) Identification and authentication: We use your identifiers to verify your identity when you access your account and to ensure the security of your personal information; (b) Operating our websites and services: We process your personal information to provide products, services, and information you request including through our affiliates; (c) Improving our websites and services: We analyze information about how you use our services to provide an improved experience for all users; (d) Communicating with you: We may use your personal information to communicate updates, promotions, or news about us, including our products, services, or events, through email, direct mail, or otherwise; (e) Marketing: We may use your personal information engage in market research or to build a profile about you and place you into particular marketing segments in order to understand your preferences better and to appropriately personalize the marketing messages we send to you. We may also use your identifiers to send you marketing communications about our websites and services and other products or services that may be of interest to you; (f) Exercising our rights: We may use your personal information to exercise our legal rights where it is necessary to do so, for example to detect, prevent and respond to fraud claims, intellectual property infringement claims or violations of law or our terms and conditions; (g) Complying with our obligations: We may process your personal information to comply with legal or regulatory requirements, where this is explicitly required by law, such as in response to court orders, clinical research, drug safety obligations or to comply with privacy or financial regulations; (h) Customizing your experience: When you use our services, we may use your personal information to improve your experience, such as by providing interactive or personalized elements and providing you with content based on your interests; and (i) Protecting against harm: We may use personal information as necessary to protect the rights and safety of us, you, or others. (j) We may aggregate or de-identify any information collected about you through your use of our services or otherwise, and we may use that aggregated or de-identified information for any purpose.

We may share certain categories of your personal information by disclosing it to our service providers, business partners, or affiliates, or by selling it to third parties. As used in this Policy, the “sale” of personal information refers to sharing your personal information with a third party for monetary or other valuable consideration, subject to certain exceptions under applicable law. (1) Categories of parties with whom personal information is shared (a) Marketing providers: such as e-mail vendors, advertising agencies. (b) Government and regulatory agencies: necessary for our legal and regulatory obligations. (c) Logistics providers: such as travel agencies to arrange contracted services with the Company. (2) Information we disclose In order to achieve our own business purposes, we may disclose your personal information to the following parties: (a) Service providers and business partners: We engage service providers and business partners to assist us with operating and providing you access to our services. These service providers or business partners may perform marketing services, process secure payments, fulfill orders, optimize services, serve online behavioral advertising, send newsletters and marketing messages, support email and messaging services, and analyze information. Some of our service providers or business partners may engage their own service providers or business partners to further assist us. Unless otherwise specified, these companies will only use your personal information in the ways described in this Policy. (b) STCLab companies: STCLab has affiliates around the world. Our affiliates work closely with each other to provide you access to our websites and services and other STCLab products and services from country to country. We may share your personal information among STCLab for marketing purposes, security, optimization of products and services, and internal reporting. Unless otherwise specified, the STCLab group companies will only use your information in the ways described in this Policy. (c) Where required by law or regulation: We may share your personal information with law enforcement agencies, courts, other government authorities or other third parties where we believe necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party. (d) In the context of a transaction: We may share your personal information with potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell or transfer all or a portion of our assets or business. The following categories of your personal information may be shared with these parties: Identifiers; Financial, medical, or health information; Protected characteristics; Commercial information; Internet or other electronic network activity information; Geolocation data; Audio, electronic, visual, thermal, olfactory, or similar information; Professional information; Education information; and Inferences drawn from any of the above information categories.

You may have rights in relation to your personal information under local law. Below is a general description of the rights some consumers may hold. In the event you reside in such a jurisdiction and would like to exercise one of your rights, please contact us at johnlee@stclab.com or at +82-10-9163-8778. Please note that we may require additional information from you in order to honor your request, and we may decline your request as permitted under applicable law. (a) Right to access personal information: Users exercising this right may request access to the categories and specific pieces of their personal information we hold; (b) Right to data portability: Users exercising this right may receive their personal information, when provided electronically, in a readily-useable format; (c) Right to deletion: Users exercising this right can ask us to delete their personal information we have collected; (d) Right to disclosure: Users exercising this right can receive additional information regarding the sources from which we collect information, the purposes for which we collect and share personal information, the information of theirs we hold, and the categories of parties with whom we share their information; (e) Right to opt-out of sales: As permitted by applicable law, we may sell your personal information. Users exercising this right may direct us to stop selling their personal information. You can exercise your right to opt-out here: Do Not Sell My Personal Information; (f) Right to learn about certain disclosures: California law requires certain California businesses to disclose, upon a customer’s written request, (a) a list of the kinds of personal information that the business has disclosed to third parties for direct marketing purposes during the preceding calendar year, and (b) the names and addresses of all of the third parties that received personal information from the business for direct marketing purposes during the preceding calendar year. Businesses must respond to such requests within thirty (30) days, but they are only obligated to respond to one request from a customer in a calendar year. If you are a current customer in California, you may request this disclosure by sending an e-mail request to johnlee@stclab.com listing your name, address, and e-mail address. You must also specifically indicate the nature of your request by including the following language or language substantially similar to it: "I request that you send me your third-party information sharing disclosures as required by California Civil Code Section 1798.83." Alternatively, you may mail your request to STCLab., 99 S ALMADEN BLVD 99 S Almaden Blvd, suite 600, San Jose, CA 95113. (g) Right to be free from discrimination: Users may freely exercise these rights without fear of being denied goods or services. We may, however, provide a different level of service or charge a different rate reasonably relating to the value of your data.

We maintain reasonable technical, physical, administrative, and procedural security precautions to help protect against loss, misuse, unauthorized access, disclosure, alteration, interception, or destruction of the information you provide to us. Please note, however, that no such precautions are 100% effective. As a result, we cannot guarantee or warrant the security of any information you disclose or transmit to us, and we are not responsible for the theft, destruction, interception, or inadvertent disclosure of your Personal Information. Therefore, any transmission of Personal Information is at your own risk. We do not and will not send you emails asking you to provide or confirm personal information except in instances where you are requesting access to or erasure. A technique known as "phishing" attempts to steal personal identity data and financial account credentials from consumers. "Phishers" use "spoofed" emails to lead consumers to sham websites which trick recipients into divulging personal information including credit card numbers, account usernames, passwords, and social security numbers. If you receive email communication purporting to be from our websites or in connection with any of our services, please forward it immediately to johnlee@stclab.com and then delete it from your computer. We reserve the right to deny to any user access and/or use privileges, including without limitation use of any services, features, or functions of one of our sites, if there is a question regarding the identity of the person accessing or attempting to access any services, features, or functions.

If you have questions about this Policy or our use of your personal information in relation to our services, please contact us at:

We may modify or update this Policy from time to time. We encourage you to visit this Policy at least once per year to learn about any changes to the way we collect, use, or disclose your personal information. If we make a material change to this Policy, we will take reasonable steps to notify you, for example by posting a banner on our website. We encourage you to visit this Policy at least once per year to learn about any changes to the way we collect, use, or disclose your personal information.