Privacy Policy Supplement (Investor Relations Website)

1. Data Collection on the IR Site

We collect only the following minimum necessary data on the IR Site (no additional data is collected for marketing or analytical purposes):

• Voluntarily Submitted Data: When you complete investor subscription forms (e.g., email subscription for earnings reports, event registration), we collect only your email address and/or name (if you choose to provide it).
• Automatically Collected Data: No automatically collected data (e.g., IP address, device information, browsing history) is collected on the IR Site—we do not use tracking technologies for user behavior analysis.
• Cookie Data: As outlined in our IR Site Cookie Policy, we only use necessary cookies (session-only, no personal data).

2. Use of Collected Data

All data collected on the IR Site is used exclusively for the following purposes:

• Fulfilling your subscription requests (e.g., sending earnings reports, event invitations to your provided email);
• Responding to your inquiries about investor relations matters;
• Complying with legal and regulatory obligations (e.g., SEC disclosure requirements).

We do not use IR Site data for:

• Marketing or advertising purposes;
• User behavior analysis or profiling;
• Sharing with third parties (except as required by law).

3. Data Retention

• Subscription Data: Retained for as long as you maintain your subscription (you may unsubscribe at any time via the "unsubscribe" link in our emails). Unsubscribed data is deleted within 30 days.
• Cookie Consent Data: Retained for 12 months (to comply with regulatory record-keeping requirements), then automatically anonymized.
• Legal Obligations: Data may be retained longer if required by law (e.g., SEC record-keeping rules).

4. Your Rights (CCPA/CPRA/GDPR)

Under applicable privacy laws, you have the following rights regarding data collected on the IR Site:

• Right to Access: Request a copy of the data we hold about you (only applies to voluntarily submitted subscription data).
• Right to Delete: Request deletion of your subscription data (we will delete it within 30 days of your request).
• Right to Opt-Out: Since we do not sell or share your data, there is no "opt-out of sale" requirement for the IR Site.
• Exercise Rights: To exercise these rights, contact our IR team at ir@ymt360.com (we will respond within 15 business days).

5. Data Security

We maintain appropriate technical and organizational security measures to protect data collected on the IR Site from unauthorized access, disclosure, or alteration. These measures include encryption of subscription data and access controls for IR team personnel.

6. Contact Us

• Investor Relations Email: ir@ymt360.com
• Global Privacy Office: privacy@ymt360.com (for cross-regional privacy inquiries)