PRIVACY POLICY

Last updated: 24 July 2026

PACE Development Corporation Public Company Limited (“PACE”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit our website, contact us, enquire about our projects or otherwise interact with us through the website.

1. Who we are

PACE is the data controller responsible for the personal data described in this Privacy Policy.

PACE Development Corporation Public Company Limited 152 Kian Gwan Building 3, 4th Floor, Wireless Road, Lumpini, Pathumwan, Bangkok 10330, Thailand Telephone: +66 (0) 2 118 9599 Email: info@pacedev.com

2. Personal data we may collect

Depending on how you use the website, we may collect the following categories of personal data:

• Identity and contact data, such as your name, email address, telephone number and any contact details you provide.

• Enquiry and correspondence data, including the content of messages, project interests, service preferences and records of our communications with you.

• Recruitment data, if you apply for a position, such as your résumé, employment history, education, qualifications and other information included in your application.

• Technical and usage data, such as IP address, device type, browser type, operating system, referring page, pages viewed, date and time of access, and website interaction data.

• Cookie and preference data, including language choices and consent preferences.

• Other information you choose to provide when communicating with us.

We do not intend to collect sensitive personal data through the website. Please do not provide sensitive personal data unless it is necessary and we have requested it. If sensitive personal data is provided, we will process it only where permitted by law.

3. How we collect personal data

We may collect personal data:

• directly from you when you contact us, submit an enquiry, apply for a position or otherwise communicate with us;

• automatically through cookies, server logs and similar technologies when you use the website; and

• from service providers, business partners, publicly available sources or another person acting on your behalf, where permitted by law.

4. How and why we use personal data

We may process personal data for the following purposes:

• to respond to enquiries and provide information about PACE and its projects;

• to take steps at your request before entering into a contract, or to perform a contract with you;

• to manage our relationship and communications with you;

• to process recruitment enquiries and applications;

• to operate, maintain, secure and troubleshoot the website;

• to understand website usage and improve our content, services and user experience;

• to prevent fraud, misuse, security incidents and other unlawful activity;

• to send news, project updates or marketing communications where you have consented or where otherwise permitted by law;

• to comply with legal and regulatory obligations; and

• to establish, exercise or defend legal claims.

Depending on the activity, we rely on one or more lawful bases permitted under applicable data protection law, including your consent, steps necessary before entering into or performing a contract, compliance with a legal obligation, and our or another person’s legitimate interests where those interests do not override your rights.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal will not affect processing that was lawful before your withdrawal.

5. Cookies and similar technologies

The website may use cookies and similar technologies to make the website function, remember preferences, understand usage and improve performance.

Strictly necessary cookies may be used without optional consent where permitted by law. Analytics, advertising or other non-essential cookies will be used only in accordance with applicable requirements and your consent choices. You can manage available preferences through the cookie controls on the website and through your browser settings.

More information about the specific cookies used, their providers and retention periods should be provided in a separate Cookie Policy or cookie preference panel before non-essential cookies are enabled.

6. How we disclose personal data

We may disclose personal data only where necessary to:

• companies within the PACE group and relevant project entities;

• website hosting, content management, information technology, security, analytics, communications and other service providers acting on our instructions;

• professional advisers, auditors, insurers and financial institutions;

• business partners involved in a project or service you have asked about;

• government authorities, regulators, courts or law enforcement agencies where required or permitted by law; and

• a prospective buyer, seller or adviser in connection with a corporate transaction, subject to appropriate confidentiality protections.

We do not sell personal data.

7. International transfers

Some service providers may process personal data outside Thailand. Where personal data is transferred internationally, we will use appropriate safeguards required by applicable law, such as transferring to a jurisdiction with adequate protection, using approved contractual safeguards, obtaining consent where appropriate, or relying on another lawful transfer mechanism.

8. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, reporting, security and dispute-resolution requirements. Retention periods differ depending on the type of data, the relationship involved and applicable legal obligations.

When personal data is no longer required, we will delete it, anonymise it or securely dispose of it in accordance with our retention procedures.

9. Security

We use reasonable organisational, technical and physical measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorised access, disclosure or misuse. No method of transmission or storage is completely secure, but we regularly review safeguards appropriate to the nature of the data and associated risks.

10. Your rights

Subject to applicable law and any lawful exceptions, you may have the right to:

• request access to and a copy of your personal data;

• request correction of inaccurate or incomplete personal data;

• request deletion, destruction or anonymisation of personal data;

• request restriction of processing;

• object to certain processing, including direct marketing;

• request data portability where applicable;

• withdraw consent at any time where processing is based on consent; and

• lodge a complaint with the Personal Data Protection Committee or another competent authority.

To exercise a right, please contact us using the details in Section 14. We may need to verify your identity before responding. We will handle requests within the period required by applicable law.

11. Children’s privacy

The website is not directed to children, and we do not knowingly collect personal data from children without the consent or other legal basis required by law. If you believe a child has provided personal data to us inappropriately, please contact us.

12. Third-party websites

The website may contain links to websites or services operated by third parties. Their privacy practices are governed by their own notices, and we are not responsible for their content or privacy practices. We encourage you to review the relevant privacy notice before providing personal data.

13. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, the website or applicable law. The updated version will be posted on this page with a revised “Last updated” date. Where required, we will provide additional notice or obtain consent.

14. Contact us

For questions, requests or concerns about this Privacy Policy or our handling of personal data, please contact: