Effective Date 8 April 2025

This Hines Singapore Privacy Policy ("Privacy Policy") supplements the information contained in Hines’ standard privacy policy located here and applies to the collection, use, disclosure and/or processing of Personal Data (as defined below) to which the Singapore Personal Data Protection Act 2012 (No. 26 of 2012) ("PDPA") applies.

By interacting with us, submitting information to us (including on or through our website at www.hines.com and all other websites developed, owned or maintained by Hines (collectively, "Site")), using the Site, or signing up for any products and/or services offered by us, you are deemed to have agreed and consented to Hines Singapore Pte. Ltd. and its affiliates ("Companies"), as well as their respective representatives and/or agents ("Representatives") (the Companies and Representatives collectively referred to herein as "Hines", "us", "we" or "our"), collecting, using, disclosing, processing and/or sharing amongst themselves your Personal Data, and disclosing such Personal Data to the Companies' business partners, authorised service providers, vendors, sub-contractors and relevant third parties in the manner and for any of the purposes set forth in this Privacy Policy. If you do not agree to the terms and conditions of this Privacy Policy, do not use the Site.

This Privacy Policy supplements but does not supersede nor replace any other consents you may have previously provided to us in respect of your Personal Data, and your consents herein are cumulative and additional to any rights which Hines may have at law to collect, use, disclose and/or process your Personal Data. This Privacy Policy does not affect any rights which we may have at law in connection with the collection, use, disclosure and/or processing of your Personal Data. This privacy policy applies to the processing of personal data carried out by Hines Group entities in Singapore, including: Hines Singapore Pte. Ltd., Hines Singapore Real Estate Pte. Ltd., HAPP Singapore Master Holdco Pte. Ltd., HAPP Japan I Pte. Ltd., HAPP Japan II Pte. Ltd., HAPP Korea (Namdong) Pte. Ltd., Japan Lifestyle I Pte. Ltd., Japan Lifestyle II Pte. Ltd., Korea West Gate Pte. Ltd., Japan Garden Hills I Pte. Ltd., Japan Garden Hills II Pte. Ltd., Japan Logistics I Pte. Ltd., Japan Logistics II Pte. Ltd., Japan Lifestyle V Pte. Ltd., Japan Lifestyle VI Pte. Ltd., HG APAC Co-Invest A Holdco Pte. Ltd., Japan III Pte. Ltd., Japan IV Pte. Ltd., Japan V Pte. Ltd., Japan VI Pte. Ltd., Korea Sangam Pte. Ltd., Japan Logistics V Pte. Ltd., Japan Logistics VI Pte. Ltd., Miyako Next Holding Pte. Ltd., Miyako Next I Pte. Ltd., Miyako Next II Pte. Ltd, RBF Development 1 Holdings Pte. Ltd, and RBF Development 1 Pte. Ltd (collectively, " Hines Group ").

Hines reserves, in its sole discretion, the right to revise this Policy at any time and if we change our Privacy Policy, we will post the changes on this page and may place notices on other pages of the Site, so that you may be aware of how we collect, use, disclose and/or process Personal Data. Subject to your rights at law, you agree to be bound by the prevailing terms of this Privacy Policy as updated from time to time on our Site. Please check the Site regularly for updated information on the handling of your Personal Data.

YOUR PERSONAL DATA

1. In this Privacy Policy, "Personal Data" means all data that falls within the definition of personal information, personal data, personally identifiable information or similar language under any applicable law relating to the protection, privacy and security, collection, use or disclosure of sensitive or other personally identifiable information, including the PDPA (collectively, "Data Protection Laws").

2. Examples of such Personal Data which we collect and/or which you may provide us include (depending on the nature of your interaction with us):

• contact information (such as name, postal or e-mail address, and phone number);
• your professional information (such as job title, department and name of organisation);
• content you provide (such as job and education history, comments, responses to questions); and/or
• information about your visit and use of our Site and services, including cookies, information about your domain name and IP addresses.

3. To the maximum extent permitted under applicable law, we may anonymise your Personal Data so that it no longer identifies you, in which case we shall be entitled to retain, use, disclose, and/or process such anonymised data without restriction, including for business product related reviews.

4. For the avoidance of doubt, in the event that Data Protection Laws permit Hines to collect, use, disclose and/or process your Personal Data without your consent, such permission granted by the law shall continue to apply.

COLLECTION OF PERSONAL DATA

1. Generally, we collect your Personal Data in the following ways:

• when you submit forms (online or otherwise) relating to any of our products, offerings or services, or submit any online queries (including queries for a quotation or a service);
• when you enter into any agreement or provide other documentation or information in respect of your interactions with us;
• when you register for and/or use any of our products, offerings, services, surveys or contests on websites owned or operated by us;
• when you interact with our staff, for example, via telephone calls, letters, fax, face-to-face meetings, social media platforms and emails;
• when you request that we contact you or request that you be included in an email or other mailing list;
• when you respond to our promotions, initiatives or to any request for additional Personal Data;
• when we receive references from business partners and third parties, for example, where you have been referred by them;
• when your images are captured by us via CCTV cameras while you are within our property and/or premises, or via photographs or videos taken by us or our representatives when you attend our events;
• when we seek information about you and receive your Personal Data in connection with your relationship with us, including for our products, offerings or services or job applications, for example, from business partners, public agencies, your ex-employer, referral intermediaries and the relevant authorities; and/or
• when you voluntarily submit your Personal Data to us for any other reason.

2. When you browse our Site, you generally do so anonymously but please see Hines Cookie Policy below for information on cookies which we have implemented on our Site.

3. You shall ensure that all Personal Data submitted to us is complete, accurate, true and correct. Failure on your part to do so may result in our inability to provide you with the products and/or services which you have requested.

PURPOSES FOR THE COLLECTION, USE, DISCLOSURE AND/OR PROCESSING OF PERSONAL DATA

1. In general, we collect, use, disclose and/or process your Personal Data for the following purposes:

• to contact you about our offerings or services in which you have expressed an interest;
• operating, evaluating and improving our business (including developing new products and services; managing our communications; determining the effectiveness of and optimising our advertising; analysing our products, services, websites, mobile applications and any other digital assets; facilitating the functionality of our websites, and mobile applications and any other digital assets);
• anonymising Personal Data and preparing and furnishing aggregated data reports showing anonymised information;
• enforcing our Terms and Conditions or other legal rights;
• as may be required by applicable laws and regulations, court order, or governmental regulations or requested by any law enforcement authorities, judicial process or governmental agency having or claiming jurisdiction over Hines;
• to fulfil or meet the reason you provided the Personal Data. For example, if you share your name, contact information, employment history and/or education history as part of a job application or to ask a question about our products or services, we will use that Personal Data to respond to your inquiry;
• to provide, support, personalise, and develop our Site, products and services;
• to create, maintain, customise, and secure your relationship with us;
• to process your requests and prevent transactional fraud;
• to provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses;
• to help maintain the safety, security and integrity of our Site, products and services, databases and other technology assets, and business;
• for testing, research, analysis, and product development, including to develop and improve our Site, products and services; and/or
• for purposes which are reasonably related to the aforesaid.

2. In addition, and without prejudice to the generality of the foregoing, if you submit an application to us as a candidate for employment or an internship, or are an existing employee of Hines, we collect, use, disclose and/or process your Personal Data for the following purposes:

• for management and/or evaluative purposes, including without limitation to process your employment application, to conduct pre-recruitment checks, and/or to provide or obtain employee references or other references where relevant for background screening and/or vetting;
• for personnel administration, including to administer benefits and payroll processing, to administer or execute employee remuneration schemes, and/or to his/her employment-related work activities;
• to enter into an employment relationship with you or to appoint you to any office;
• to manage or terminate the employment relationship with you or appoint you, including without limitation role assessment, job compatibility assessment, career progression and/or management of staffing requirements; and/or
• for purposes which are reasonably related to the aforesaid.

3. If you have provided us with your Singapore telephone number(s) and have indicated that you consent to receiving marketing or promotional information via your Singapore telephone number(s), then from time to time, Hines may contact you using such Singapore telephone number(s) (including via voice calls, text, fax or other means) with information about our products and services.

4. In relation to particular products or services or in your interactions with us, we may also have specifically notified you of other purposes for which we collect, use, disclose and/or process your Personal Data. If so, we will collect, use, disclose and/or process your Personal Data for these additional purposes as well, unless we have specifically notified you otherwise.

5. You may withdraw your consent by contacting us using the contact details set out at paragraph 8 below.

DISCLOSURE OF PERSONAL DATA

1. Subject to the provisions of any applicable law, you hereby agree, acknowledge and consent that your Personal Data may be disclosed for any of the purposes listed above in this Privacy Policy (as applicable) to the following entities or parties, regardless of whether they are located overseas or in Singapore:

• amongst Hines and its subsidiaries, affiliates and related corporations (including their respective staff);
• contractors, agents, service providers and other third parties that provide services to Hines, such as IT systems providers, platform providers, financial advisors, consultants (including lawyers and accountants), providers of HR and recruitment services and other goods and services providers (such as providers of marketing services where we are permitted to disclose your Personal Data to them);
• intermediaries, brokers and other individuals and entities that partner with us;
• competent authorities (including any national and/or international regulatory or enforcement body or court or other form of tribunal, where Hines is required to do so by applicable law or regulation);
• any central or local government department and other statutory or public bodies;
• data aggregators;
• our corporate clients;
• any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions (which may extend to any merger, acquisition or asset sale); and/or
• any other party to whom you authorise us to disclose your Personal Data to.

2. We may share information about you in aggregate or anonymised form, for example, information regarding business product related reviews, with the abovementioned entities or parties (e.g. our business partners).

TRANSFERS OUT OF SINGAPORE

1.1 As a global company, Hines may need to transfer your personal information out of the country in which it was originally collected. For personal data to which the PDPA applies, this means transfers out of Singapore. You should be aware that these countries may not have similar data protection laws to Singapore. In such cases, Hines will ensure that there are adequate safeguards in place to protect your personal data with the aim of ensuring that your privacy rights continue to be protected as outlined in this Privacy Policy.

1.2 In relation to data being transferred out of Singapore, for example, adequate safeguards include the following:

• the country that we send the data to has received “specified certification” under the Asia Pacific Economic Cooperation Cross Border Privacy Rules System or the Asia Pacific Economic Cooperation Privacy Recognition for Processors System; or
• there are binding corporate rules, agreements or instruments in place to ensure that the recipient provides a standard of protection over the personal data that is comparable to the standards of protection under the PDPA.

1.3 In other circumstances the law may permit Hines to transfer your personal data outside the EEA, the UK or Singapore. In all cases, however, Hines will ensure that any transfer of your personal data is compliant with the applicable data protection law.

1.4 You can obtain more details of the protection given to your personal data when it is transferred outside the EEA, the UK or Singapore (including a copy of the standard data protection clauses which we have entered into with recipients of your personal data) by contacting us as described below.

KEEPING YOUR PERSONAL DATA ACCURATE AND UP-TO-DATE

We encourage you to contact us as soon as possible to enable us to update any Personal Data we have about you. Incomplete or outdated Personal Data may result in our inability to provide, or delays in providing you with products and services you have requested, or processing any requests and applications you may have made to us.

HINES COOKIE POLICY

We employ cookies and similar tools to enrich your browsing experience, refine site navigation, analyze usage patterns, and bolster our marketing endeavors. If you consent to the activation of these tools on your device, we may collect certain online personal data, such as your device ID or IP address. Additional information on this is provided below for your reference.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance user experience, improve website functionality, and ensure security and compliance. Below, we provide a transparent explanation of the types of cookies we use, their purposes, and how you can manage your preferences.

Cookies are small data files stored on your device that help websites function effectively. Some cookies are session-based, meaning they are automatically deleted when you close your browser, while others are persistent, remaining on your device for a set period.

We transparently inform you about our use of cookies and similar technologies in the sections below. In case you would like to further understand more about these technologies, you can as well set your browser settings to inform you about the cookies or similar technologies downloaded to your device.

1. a) Strictly Necessary Cookies:
   
   These cookies are essential for website security, network management, and overall functionality. They enable key features such as page navigation and access to secure areas of the site.
   
   • Purpose: Ensure website operation and security.
   • Your Control: these cookies are required to provide you with the website services you requested, and can as such not be declined.
2. b) Optional Cookies:
   
   All other cookies, including those for preferences, analytics, marketing, tracking, profiling, and chat functionality, will only be activated if you explicitly consent.
   
   
   • Purpose:
     
     
     • Advertising cookies store consent for personalized advertising, enable storage related to advertising and set consent for sending user data to Google for online advertising purposes;
     • Analytics & customization cookies analyze usage for site optimization and enable storage related to analytics (e.g. visit duration);
     • Performance & functionality cookies facilitate measurement and analytics for improved browsing experience, and enables storage that supports the functionality of the website such as language settings and personalization like video recommendations.
   • Your Control:
     
     
     • These cookies will not be placed on your device unless you opt-in.
     • You can manage your preferences and withdraw consent at any time through our cookie settings.

Regarding your cookie preferences, please note that when you click "Dismiss" on the cookie banner, only

essential cookies necessary for the website’s basic functionality will be enabled.

To get an overview of the types of cookies used on this website, what their purposes are, and how long they are stored, you can click on “cookie preferences” at the footer of the website.

Additionally, we use similar technologies, such as local shared objects, which enhance your browsing experience by storing preferences and optimizing website functionality.

At last, third parties including Google, Meta and X may use cookies, web beacons, and other storage technologies (e.g. Facebook Pixel, X pixel, GA4) to collect or receive information of your online activity and use that information to provide measurement services, target and deliver ads. Please note that this activity is beyond our control. For enhanced protection, you can opt-out of the collection and use of information for ad targeting control so via your browser settings as described below.

Control via your browser settings

Most internet browsers are initially set up to automatically accept cookies. If you do not want our websites to store cookies on your device, you can change your browser settings so that you receive a warning before certain cookies are stored. You can also adjust your settings so that your browser refuses most of our cookies or only certain cookies from third parties. You can also withdraw your consent to cookies by deleting the cookies that have already been stored.

If you disable the cookies that we use, this may impact your experience while on the Unilever website, for example you may not be able to visit certain areas of a website or you may not receive personalized information when you visit a website.

If you use different devices to view and access the Unilever website (e.g., your computer, smartphone, tablet) you will need to ensure that each browser on each device is adjusted to suit your cookie preferences.

The procedures for changing your settings and cookies differ from browser to browser. If necessary, use the help function on your browser or click on one of the links below to go directly to the user manual for your browser.

• Internet Explorer
• Mozilla Firefox
• Google Chrome
• Safari
• Opera

There are also software products available that can manage cookies for you.

You can also use www.ghostery.com to evaluate the use of cookies used on our websites.

To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

Social Media Plug-Ins

We place various social media buttons on our website in the form of a plug-in. Following are the social media buttons used:

• LinkedIn
• Instagram
• Facebook
• X
• Youtube

Please be aware that when you visit a website that integrates social media plug-ins AND you click on a social

media button or link, certain data (such as your IP address, visited sites, and the date and time of access) may

be forwarded to these social media platforms—even if you are not registered or logged in to those services.

If you are already logged into a social media service, the platform may link this data to your user profile,

identifying your username and potentially even your real name.

We do not control the extent, nature, or purpose of such data processing by social media platforms. These

services may create pseudonymized or individualized user profiles based on this data.

If you prefer not to share your data with these platforms, we recommend avoiding interaction with these links or

plug-ins.

For more information on how these social media platforms handle your data, please refer to their individual

privacy policies.

Third -Party Linked Sites

Our website contains links to third-party websites, including social media sites, which may have privacy policies that differ from our own.

We are not responsible for the collection, use, or disclosure of information collected through third-party websites and expressly disclaim any liability related to such data processing. Additionally, we are not responsible for the accuracy, content, or privacy practices of these third-party sites.

Links to external websites are provided for convenience only, and your browsing, use, and interactions with these sites—including those that link to or from our website—are subject to their own rules and policies. We strongly encourage you to review the privacy policy of any website you access through our platform.

Please note that if you provide personal information to us through a social media site or interact with social media content linked to our website, you consent to our use of that information in accordance with this Privacy Policy, as if the information had been submitted to us directly via our website.

THIRD-PARTY INFORMATION

The Site may provide you with links to other web sites. This Privacy Policy does not apply to any information that you may provide to third parties, such as through other sites linked to the Site. Hines is not responsible for those sites and cannot control the content of what is offered on those sites, or links from those sites, or the privacy policy or data security, if any, of those sites.

CONTACTING US – WITHDRAWAL OF CONSENT, ACCESS AND CORRECTION OF YOUR PERSONAL DATA

1. If you:

• have any questions or feedback relating to your Personal Data or about this Privacy Policy;
• would like to withdraw your consent to any use of your Personal Data as set out in this Privacy Policy; or
• would like to obtain access and make correction to your Personal Data records,

please reach out to Hines Group Data Protection Officer (DPO):

2. Please note that if your Personal Data has been provided to us by a third party (e.g. your employer), you should contact that organisation or individual to make such queries, complaints, and access and correction requests to Hines on your behalf.

3. If you withdraw your consent to any or all use of your Personal Data, depending on the nature of your request, Hines may not be in a position to continue to provide its products and services to you, or administer any contractual relationship in place, which in turn may also result in the termination of any agreements with Hines, and your being in breach of your contractual obligations or undertakings. Hines' legal rights and remedies in such event are expressly reserved.

GOVERNING LAW

This Privacy Policy shall be governed in all respects by the laws of Singapore.