WOOK App Privacy Policy

WOOK APP Privacy Policy

Last updated and effective on [__ December 2025]

The WOOK APP Privacy Policy (“Privacy Policy”) includes:

1. INTRODUCTION

2. DEFINITIONS

3. ABOUT US

4. COLLECTION AND PROCESSING OF PERSONAL DATA

5. LEGAL BASIS FOR PROCESSING PERSONAL DATA

6. HOW WE SHARE YOUR INFORMATION

7. HOW WE STORE YOUR INFORMATION

8. HOW WE PROTECT YOUR INFORMATION

9. YOUR RIGHTS AS A DATA OWNER

10. UPDATES TO THE PRIVACY POLICY

11. SEPARABILITY

12. HOW TO CONTACT US

1. INDTRODUCTION

PT Wook Global Technology (“WOOK” or “we”), together with the WOOK parent company and all affiliated companies of the parent company (collectively referred to as the “WOOK Group”), provides and operates an electronic commerce (e-commerce) platform that enables you to conduct purchase and sale transactions of WOOK Group products as well as other products officially marketed by the WOOK Group, and to use various features and services provided by us (the “WOOK App”).

This Privacy Policy of the WOOK App (the “Privacy Policy”) sets out how we process any information and personal data that we collect from you, about you, or that you provide to us (“Personal Data Processing”), in connection with your use of services for the purchase of WOOK Group products and other products officially marketed by the WOOK Group through the WOOK App, via a WOOK Account, as applicable from time to time to all customers, including you.

This Privacy Policy constitutes a legally binding privacy policy between you and the WOOK Group. By clicking the “Agree” button below, you are deemed to have read, understood, and agreed to all provisions of this Privacy Policy, and to have granted your consent to the Personal Data Processing in accordance with this Privacy Policy. In particular, you agree and consent to us carrying out the Personal Data Processing of your personal data as set forth herein.

If you do not agree to this Privacy Policy, including the Personal Data Processing of your personal data, please refrain from accessing, browsing, or using the WOOK Account or the WOOK App.

You are also entitled to withdraw your consent to this Privacy Policy, including the Personal Data Processing of your personal data, by submitting a written notice to us through the contact information provided in this Privacy Policy or through other mechanisms made available via any official communication channels used by WOOK or the WOOK Group.

The withdrawal of consent to this Privacy Policy may result in the suspension or termination of part or all of your access to the WOOK App, restrictions on the use of your WOOK Account, temporary or permanent deletion of your WOOK Account, or the termination of the legal relationship between you and the WOOK Group. All rights and obligations that have arisen prior to the withdrawal of consent shall remain valid and binding.

Upon receipt of your notice of withdrawal of consent to this Privacy Policy, we will provide an explanation of the potential consequences that may arise, so that you may determine whether you wish to proceed with such withdrawal.

We implement this Privacy Policy in accordance with the applicable laws and regulations in the jurisdictions where WOOK conducts its business activities. In certain circumstances, we may provide additional privacy policies that apply specifically to certain features or services of the WOOK App or to your WOOK Account. Such additional privacy policies shall form an integral part of this Privacy Policy and must be agreed to by all customers, including you, as amended from time to time.

2. DEFINITIONS

2.1. WOOK Account means your identity on the WOOK App obtained after completing registration on the WOOK App in accordance with the provisions of this Privacy Policy.

2.2. You means a customer of the WOOK Group who has registered on the WOOK App and holds a WOOK Account for the purpose of purchasing WOOK Group products for distribution to consumers.

2.3. Affiliate Company means any entity that directly or indirectly controls, is controlled by, or is under common control with the WOOK Group, whether currently or in the future. “Control” means the power, directly or indirectly, to influence the management or operations of an entity through ownership, voting rights, contractual arrangements, factual relationships, or other means recognized by applicable law.

2.4. Personal Data means data used by us to identify and contact you or your appointed legal representative(s) in relation to the accuracy and ownership of such data, in accordance with the applicable laws and regulations of Indonesia.

2.5. Applicable Laws and Regulations of Indonesia mean all legal provisions governing this Privacy Policy, including the Personal Data Processing and any additional privacy policies (if any and where required), as well as other relevant and binding legal provisions within the territory of the Republic of Indonesia, including but not limited to Laws, Government Regulations, Ministerial Regulations, regulations or decisions of governmental authorities or agencies, and any implementing regulations issued by the competent authorities and in force from time to time during the validity of this Privacy Policy and until a new privacy policy is issued.

2.6. Our Primary Entity Information is as follows: Shenzhen Woke Technology Co., Ltd., established on 6 May 2014, with contact number +86 755-2943-6803, and registered address at the entire 11th Floor, ZhongDiandiFu Building, Zhenhua Road, Fuqiang Community, Huaqiang North Street, Futian District, Shenzhen, People’s Republic of China.

3. ABOUT US

3.1 WOOK APP is an application provided by WOOK together with Shenzhen Woke Technology Co., Ltd., its parent company and affiliated companies.

3.2 Basic information about our main operating entity: Shenzhen Woke Technology Co., Ltd. was established on May 6, 2014, with the contact number 0755-23766853, and its registered address is at the 11th floor, Zhongdian Building, Zhenhua Road, Fuqiang Community, Huaqiang North Road, Futian District, Shenzhen.

4. COLLECTION AND PROCESSING OF PERSONAL DATA

4.1 Types of Personal Data We Collect from You

To the extent permitted by the Applicable Laws and Regulations of Indonesia, we may process, collect, use, store, and transfer various types of Personal Data, consisting of general and special/sensitive Personal Data, relating to you, which we classify as follows:

(1) Identity Data, such as your name, the name of the WOOK Account administrator, password, personal identification documents (passport, ITAS, and/or ITAP for foreign nationals; Indonesian identity card (KTP) and/or driver’s license (SIM) for Indonesian citizens; or other officially issued identification documents by the Government of Indonesia), your position or title, date of birth, gender, place of birth, and nationality. We may also request identification documents and other identity details from you if the WOOK Account is not managed directly by you or is managed by legal representative(s) appointed by you.

(2) Contact Data, such as your telephone or mobile phone number, store address, store photographs, type and category of your business, and email address.

(3) Technical Data, such as Internet Protocol (IP) address, internet device identifiers or media access control (MAC) addresses of the device you use, and the operating system of the device used to access the WOOK App.

(4) Transaction and Financial Data, such as the payment method selected by you, bank account details (where required), tax documents (Taxpayer Identification Number/NPWP, SPPKP, or Non-Taxable Entrepreneur Statement Letter), as well as other transaction and financial information required by us from time to time during the effectiveness of this Privacy Policy.

(5) Other relevant Personal Data, whether of a general or specific nature.

4.2 How We Obtain Your Personal Data

The Personal Data we obtain may be provided directly by you or by your appointed representative(s) (for example, when you register for a WOOK Account on the WOOK App or when you contact us or our representative(s)). We may carry out Personal Data Processing (including collecting and using Personal Data) in various forms and for various purposes, as permitted under the Applicable Laws and Regulations of Indonesia, as follows:

4.2.1 Account Registration and Login

(1) You may provide us or our representative(s) with your Identity Data, Contact Data, and Transaction and Financial Data. If you refuse to provide such data, the registration of a WOOK Account through the WOOK App cannot be processed, and we will be unable to provide you with a WOOK Account.

(2) You may grant permission and access to Technical Data through the device you use to register a WOOK Account on the WOOK App.

4.2.2 Completion and Update of Your WOOK Account Information

(1) You may optionally add your date of birth to complete your Identity Data. Failure to provide such information will not affect your use of our products/services. Your date of birth may be changed once. For further changes, please contact us through the online customer service as referred to in Section 11 (Contact Us).

(2) You may amend or update the Identity Data you have provided to us through a re-verification process of your identity.

4.2.3 Search, Browsing, and Content Viewing

(1) You may use search, browsing, viewing, and other features on product detail pages, live streaming services, and other content within the WOOK App, for the purpose of providing a continuous and consistent user experience, displaying content more relevant to you, and understanding product compatibility with various types of devices used by customers, including you. For these purposes, we need to record certain information as follows:

a. Your device information, such as device name, model, unique device ID, type and version of operating system, and IP address; and

b. Log information, including but not limited to your WOOK Account activity history such as searches, clicks, views, saves, additions to cart, downloads, activity time, and accessed pages or products, which may vary depending on the type of activity performed.

(2) When you watch live streaming on the WOOK App, we may provide your user code, username, and IP address to the organizer and/or appointed agent to enable you to participate in live interactions and prize draws, and to display service content that is more appropriate to your circumstances.

(3) When you use interactive features such as commenting, liking, participating in prize wheel draws, or using the shopping cart while watching live streaming, we will collect records and content of your interactions.

(4) Refusal to provide such information will only result in your inability to use the relevant functions and will not affect your use of other services/products.

4.2.4 Transactions

(1) When you purchase products through the WOOK App, we need to collect order information, including order time, order number, order status, product information, payment information (payment amount, payment method, payment status, third-party payment channel virtual account), and delivery address information (recipient name, delivery address, contact number), for the purposes of performing and completing transactions, ensuring transaction security, providing order tracking services, customer service, and after-sales services. For convenience, you may add frequently used delivery addresses (recipient name, delivery address, contact number).

(2) After an order is successfully placed, where the product requires delivery by a logistics service provider, the relevant logistics service provider will collect and use your delivery address information (recipient name, delivery address, contact number) during the delivery process to ensure the product is delivered safely and accurately to you.

(3) When you apply for after-sales services (such as repair, return, or exchange of goods) and such services require third parties (for example, for collection or delivery of goods), the relevant third parties will collect and use after-sales information, including product information, shipping information (sender name, delivery address, contact number, pickup time), delivery address information (recipient name, delivery address, contact number), order information, and other information necessary for the completion of after-sales services, in order to expedite the resolution of your after-sales request.

(4) For the purposes of providing after-sales services and resolving disputes, we need to be informed of and to confirm the progress and status of deliveries and after-sales services. You agree that we may collect information relating to delivery and after-sales progress from the relevant third parties. We are committed to protecting the security of your Personal Data and require such third parties to maintain confidentiality and to use the data solely for delivery and after-sales purposes, and they are prohibited from disclosing it to any other party for any other purpose.

4.3 Access to and permissions for sensitive Technical Data such as location, camera, photo album/storage, microphone, and calendar are not enabled by default and will only be used when specific functions are activated after we have obtained your separate consent. Even if you grant such permission, we will not collect or use such Technical Data where the relevant function is not required.

4.4 If there are products or services that require the collection of your Identity Data that have not been explained in this Privacy Policy, or if the use of your Identity Data exceeds the purposes notified at the time of collection and is not directly or reasonably related thereto, we will notify you again to obtain your consent in accordance with the Applicable Laws and Regulations of Indonesia.

5. LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA

We process your Personal Data solely in accordance with the Applicable Laws and Regulations of Indonesia and other relevant legal provisions, including actions of obtaining, collecting, processing, analyzing, storing, displaying, disclosing, transmitting, disseminating, and safeguarding the confidentiality of your Personal Data, for specific purposes of Personal Data Processing, which include the following:

5.1 Fulfillment of Contractual Obligations

For the purpose of fulfilling contractual obligations that you have agreed to (namely, our Terms of Use) when you register for, access, or use the WOOK App, we use your Personal Data to:

(1) provide you with a WOOK Account; and

(2) enforce our Terms of Use and policies.

5.2 Legitimate Interests

We use your Personal Data where necessary to pursue legitimate interests—whether our interests, your interests, or the interests of the WOOK Group—provided that such interests do not conflict with the Applicable Laws and Regulations of Indonesia.

5.3 Compliance with Legal Obligations

We may use your Personal Data where necessary to comply with legal obligations. This includes circumstances in which we are required to take action to safeguard the safety of customers, including you, or to comply with legally valid requests, such as orders from law enforcement authorities or courts.

5.4 Performance of Tasks in the Public Interest

We may use your Personal Data where necessary to perform tasks in the public interest as required by the Applicable Laws and Regulations of Indonesia or to comply with lawful requests and to carry out valid legal processes.

5.5 Other purposes relevant to the business needs of WOOK and/or the WOOK Group. If you do not agree to any such purpose of processing your Personal Data, you must notify us in writing at least thirty (30) business days in advance.

6. HOW WE SHARE YOUR INFORMATION

6.1 When we cooperate with our business partners (including the WOOK Group, Affiliate Companies, and external third parties, as referred to below), we adhere to the principles of confidentiality and specified purposes.

Where we engage our business partners to process your Personal Data, we will enter into agreements with such business partners governing the purposes, duration, methods of processing, types of Personal Data, protective measures, as well as the rights and obligations of the parties in relation to the Personal Data Processing, and we will supervise the Personal Data Processing activities carried out by such business partners. If we and our business partners jointly determine the purposes and means of processing your Personal Data, we will agree on the respective rights and obligations of each party, and such agreement shall not affect your right to request either party to exercise your rights. In the event of a violation during the processing of your Personal Data that results in loss or damage to you, we and our business partners shall be jointly liable in accordance with the Applicable Laws and Regulations of Indonesia.

6.2 Our business partners include, but are not limited to, the following categories:

(1) third-party companies providing live streaming services;

(2) third-party companies providing delivery or logistics services;

(3) business partners supplying goods;

(4) other service providers; and

(5) other parties that enter into cooperation arrangements or transactions.

7. HOW WE STORE YOUR INFORMATION

7.1 Storage Location: We store your Personal Data collected about you in Indonesia. We may carry out cross-border transfers of Personal Data where strictly necessary. In the event that Personal Data is transferred to another party acting as a personal data processor and/or personal data controller outside the territory of the Republic of Indonesia, we will ensure that the country in which the recipient of the Personal Data is located provides a level of personal data protection that is equivalent to or higher than that stipulated under Indonesian personal data protection laws, or we will ensure that the recipient of the Personal Data provides adequate and binding personal data protection. For the avoidance of doubt between us and you, by providing your consent to this Privacy Policy, you have agreed to the transfer of your Personal Data outside the territory of the Republic of Indonesia in accordance with this Privacy Policy.

7.2 Retention Period: We retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected, for a minimum period of ten (10) years from the date you close or deregister your WOOK Account on the WOOK App (retention period), or for a longer period as required or permitted by the Applicable Laws and Regulations of Indonesia. We will cease to retain your Personal Data, or remove the means by which such Personal Data can be associated with you as an individual, as soon as it is deemed that the purpose for which the Personal Data was collected no longer requires its retention, there is a request from you to delete your account, and retention is no longer necessary for business or legal purposes.

8. HOW WE PROTECT YOUR INFORMATION

8.1 The confidentiality of your Personal Data is of utmost importance to us. We will take all reasonable measures to protect and secure your Personal Data against unauthorized access, collection, use, or disclosure, and against unlawful processing, accidental loss, destruction, damage, or similar risks. However, data transmission over the internet is not completely secure. While we use our best efforts to protect your Personal Data, you acknowledge that we cannot guarantee the integrity and accuracy of any Personal Data transmitted over the internet, nor can we guarantee that your Personal Data will not be intercepted, accessed, disclosed, altered, or destroyed by unauthorized third parties due to factors beyond our control. You are responsible for maintaining the confidentiality of your account details and must not share your account details, including your password and one-time password (OTP), with any party. You are also responsible for safeguarding the security of the device you use.

8.2 You acknowledge that the systems and communication networks you use to access our services may involve security risks beyond our control. Accordingly, we strongly recommend that you take proactive measures to protect the security of your Personal Data, including but not limited to using strong and complex passwords, changing passwords periodically, and refraining from disclosing your account password and related personal information to any other party.

9. YOUR RIGHTS AS A DATA SUBJECT

9.1 Requesting Information, Rectification, and Deletion

(1) Account information: You may view your account information (store name, owner name, mobile phone number, store address, national identity card number, tax identification number, address as stated on the national identity card, store photographs, business category, photographs of general taxable entrepreneur qualification certificates, photographs of tax cards, invoice issuer, and date of birth) through the menu “Me” – “Settings” – “Account Profile”, and you may correct or delete certain portions of such information.

(2) Usage information: You may view your usage information (including, but not limited to, browsing history, collection history, order information, address information, and other related data) on your personal space page, and you may correct or delete certain portions of such information.

(3) For your Personal Data within our products/services that you are unable to access through the methods described above, you may contact us through the methods provided in Section 12 of this Privacy Policy.

(4) If you discover any inaccuracies in your Personal Data that we are processing, you are entitled to submit a request for rectification through the feedback and error-reporting channels we provide and to request that we make the necessary corrections. However, for security and identification purposes, you may not be able to amend certain initial registration information provided at the time of registration.

(5) You may directly request us to delete your Personal Data if any of the following conditions occur, except for data that has been anonymized or as otherwise provided under applicable laws and regulations:

- our processing of your Personal Data violates applicable laws and regulations;

- we collect and use your Personal Data without your consent;

- our processing of your Personal Data violates our agreement with you;

- you close or deactivate your WOOK App account; or

- we cease our services and operations.

9.2 Withdrawal of Authorization

(1) You may withdraw authorization for access to location, camera, gallery, microphone, Bluetooth, and other permissions through your device settings or via “Me” – “Settings” – “Privacy Permission Settings”.

(2) For the use by business partners or for the transfer and public disclosure of your Personal Data, you may withdraw your authorization by contacting us, the relevant partner, or the recipient, unless otherwise stipulated by applicable laws and regulations or as provided in this Privacy Policy.

(3) You may stop us from collecting your Personal Data through your device by uninstalling the WOOK App.

(4) Certain products/services require the processing of your Personal Data in order to function. After you withdraw authorization, we will no longer be able to provide the relevant products/services or process the related Personal Data. However, the withdrawal of authorization will not affect processing that has already been carried out based on your consent prior to such withdrawal. When you update the application version, we will not change the authorization status you have set without your consent.

9.3 Account Closure / Deregistration

You may submit a request for account deregistration by contacting online customer service or through other methods announced by us. Upon deregistration of your account, you will no longer be able to log in to or use the WOOK App with such account; all rights and benefits obtained but not yet used, including benefits that would have expired in the future, will be forfeited; all content, information, data, and records associated with such account will be deleted or anonymized (unless otherwise required by applicable laws and regulations or supervisory authorities); and the WOOK App account cannot be restored after the deregistration process has been completed.

9.4 Response to Your Requests

After successfully verifying your identity as the data subject, we will review your request as soon as practicable and complete the process within the time period stipulated by applicable laws and regulations. If you are dissatisfied or have any questions, you may contact us through the methods set out in Section 12 of this Privacy Policy.

In principle, we do not charge fees for reasonable requests. However, for repetitive requests that exceed reasonable limits, we may charge certain fees as appropriate. For requests that are technically difficult to fulfill, not required to be responded to under applicable laws and regulations, or where fulfillment of your request would violate legal provisions, we may refuse such request and provide an explanation.

10. UPDATES TO THIS PRIVACY POLICY

We will update the provisions of this Privacy Policy in line with updates to our products/services and applicable laws and regulations. Without your explicit consent, we will not reduce your rights as guaranteed under the then-effective Privacy Policy. After this Privacy Policy is updated, we will notify you by placing a prominent notice, sending notifications, or through other means that allow you to become aware of the latest version of this Privacy Policy in a timely manner.

11. SEVERABILITY

If any provision of this Privacy Policy is held to be invalid, unlawful, or unenforceable by a court or other competent authority, such provision shall be severed from the remaining provisions of this Privacy Policy. The remaining provisions shall continue in full force and effect to the extent permitted by applicable law.

12. HOW TO CONTACT US

12.1 If you have any questions, complaints, or suggestions regarding this Privacy Policy or the protection of Personal Data, you may contact us through the following means:

(1) contacting WOOK App online customer service to submit feedback;

(2) sending an email to our customer service mailbox at CustomerService@wook.id

; or

(3) sending a written correspondence to: Technology Department (Recipient), 11th Floor, Zhongdian Fortune Building, Zhenhua Road, Fuqiang Community, Huaqiang North Street, Futian District, Shenzhen, Postal Code: 518000.

12.2 After verifying your identity as a Personal Data subject, we will review your request as soon as practicable and complete the processing within the time period stipulated by applicable laws and regulations. However, in the following circumstances relating to Personal Data, we may be unable to fulfill your request:

(1) requests relating to the fulfillment of our obligations as required under applicable laws and regulations;

(2) requests directly related to national security and national defense;

(3) requests directly related to public security, public health, or significant public interests;

(4) requests directly related to criminal investigations, prosecutions, trials, or the enforcement of criminal judgments;

(5) where there is sufficient evidence indicating malicious intent or abuse of rights on your part;

(6) where obtaining the consent of the data subject is difficult, but the processing is necessary to protect significant legitimate rights and interests, including but not limited to the safety of life and property of the data subject;

(7) where fulfilling your request may cause serious harm to your legitimate rights and interests, or to those of other individuals or organizations; or

(8) where the request relates to trade secrets.