The security of your personal information is important to us. We use reasonable and appropriate physical, technical, and administrative industry safeguards to protect information from unauthorized access, use, loss, misuse or unauthorized alteration

Last Updated: February 26, 2024

Introduction

Web Entertainment System ltd. is the owner and operator of www.ciaofan.com and all affiliated websites

and mobile versions (the “Site” or we, us, our, ours, etc.). We respect your privacy and are committed to

protecting it through this Privacy Policy (the “Policy”).

This Policy describes the types of personal

information we may collect from you, the user, (you, your, yours, etc.) or that you may provide to us when

you use the services offered by us on the Site (the “Services”), and our practices for collecting, using,

keeping, protecting, and disclosing your personal information.

Please read this Policy carefully to understand our practices regarding your personal information and how

we will treat it. If you do not agree with this Policy, your sole choice is to leave the Site.

By accessing or using the Site, you agree to this Policy and consent to our collection, use, disclosure, retention, and protection of your information as described in this Policy.

We reserve the right to revise, amend, or modify this Policy at any time and in any manner.

We will consider your continued use of the Site after we make changes to this Policy as your acceptance of the changes, so you must periodically revisit this Policy and check the “Last Updated” date above. If changed,

this Policy has been updated or edited, and the updated or edited version supersedes any prior version immediately upon posting.

www.ciaofan.com is a platform where customers can support and engage with Creators. This privacy policy applies to Customers, Creators, Account Managers / Agencys / Talent Rep, and all users of our platform,

and is part of our Terms of Use.

By using our platform, you agree that your personal information that you provide directly to us or that we collect through your use of the platform, may be transferred to and stored on the servers located in the United States or European Union and handled as described in this Policy.

1. How old do you have to be to use the Services?

We prohibit anyone under the age of eighteen (18) from accessing the Site or using the Services.

We do not knowingly market to or collect or solicit any information from or about anyone under the age of eighteen

(18). If you are under the age of eighteen (18), you must not submit information to us and must immediately leave the Site.

If we learn that we have collected information from or about a person under

the age of eighteen (18), we will delete that information as quickly as possible. If you believe that we might have such information, please contact us at support@ciaofan.com.

2. What types of information do we collect about you?

We may collect several types of “personal information” from and about users of the Site, including any information that personally identifies you or that could be reasonable linked to you or your household,

including your name; alias; username or other unique personal identifier, and password; postal, billing, and shipping address; email address; IP address; telephone number; social security number; driver’s license,

passport. However, this Policy does not apply to personal

information that has been de-identified or that is otherwise publicly available.

We, or our contractors, may collect, store, and/or maintain biometric verification documents you provide to us or upload to the site; voiceprint, or scan of face geometry, from any content or , may collect, store.

3. How do we collect your personal information?

We collect your personal information directly from you when you provide it to us, such as through:

The account registration process;

Your profile information or other posts;

Your purchases and other financial transactions;

Your search queries;

Your linked social media accounts;

Your responses to any surveys we ask you to complete; and

Your other communications and interactions with us, whether by contact form, phone, mail, email, text, or other means, including on third-party social media platforms.

We also collect your personal information automatically from your computer device or mobile phone and through cookies, web beacons, and other tracking technologies.

This Policy does not apply to information collected by us offline or through any other means, or by any third party that is linked to or accessible through the Site.

4. Do third parties collect my personal information on the Site?

Third parties including users, advertisers, content or application providers, and third-party plug-ins may provide materials to the site which use cookies, web beacons, or other tracking technologies to collect your

personal information, including information about your online activities over time and across different websites and other online services. Those third parties may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control third-party tracking technologies or how third parties use them.

Your use of third-party plug-ins are governed by the user terms

and privacy policy of the third party that provided that plug-in. If you have any questions about an advertisement or plug-in, you should contact the responsible provider directly.

Please be aware that we do not operate, control, or endorse third-party websites that may be linked on the Site, nor are we responsible for the content or privacy practices of third-party websites. We disclaim any

responsibility for your personal information on third-party websites, and we do not make any warranties or representations that any third-party website (or even this Site) will function without error or interruption, that defects will be corrected, or that any third-party websites or their servers are free of viruses or other problems that may harm your computer. We encourage you to be aware when you leave the Site and to read the privacy policies of any third-party website that collects your personal information.

5. How do we use your personal information?

We may use your personal information:

To provide you with access to the Site and use of the Services;

To speed up the Services, such as by automatically updating your account information;

To recognize you when you return to the Services;

To personalize the Services according to your preferences and individual interests;

To notify you about changes to the Services and our policies;

To carry out our obligations and enforce our rights arising from any contracts between you and us,

including this Policy and our Terms of Service;

To monitor and analyze traffic and usage trends related to the Services;

To verify the integrity and security of the Services;

To improve the Services and provide customer service;

To investigate and prevent unauthorized or prohibited uses of the Services;

For marketing or advertising purposes; and

For any other purpose with your consent.

6. Do we share your personal information with third parties?

We may share publicly available information and de-identified information with third parties without restriction. However, we may only disclose your personal information to:

Our subsidiaries, affiliates, contractors, service providers, and other third parties as necessary to provide

the Services to you;

Potential buyers or other successors in the event of a merger, joint venture, assignment, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of assets including bankruptcy, liquidation, or similar proceeding;

Law enforcement authorities, government agencies, and private litigants, such as in response to lawful criminal, civil, or administrative process or discovery requests, subpoenas, court orders, writs, or reasonable requests of authorities or persons with the reasonable power to obtain such process; Any other party as necessary to identify, contact, or bring legal action against someone who may be violating our policies;

Any other party as necessary to protect the rights, property, or safety of us, our users, or the general public,

including but not limited to disclosures for the purposes of fraud protection and credit risk reduction; and

Any other party with your consent.

7. What choices do you have over your personal information?

We strive to provide you with choices about the personal information you provide directly to us. You can always delete or restrict any personal information that you provided directly to us. In the case of personal

information contained in your content, you may (i) change the privacy settings associated with the content and/or your account, or (ii) delete the content containing the personal information from your profile. In all

other cases, we will delete any personal information that you have provided directly to us, if you request to permanently delete your account. However, we may retain your personal information for any use set forth herein. Further, we may refuse to accommodate any change if we believe doing so would violate any law or legal requirement or cause the information to be incorrect.

We also strive to provide you with choices about the personal information that we collect from you automatically. You may refuse to accept cookies by activating the appropriate setting on your browser. To

learn how you can manage your other cookies, visit www.allaboutcookies.org/manage-cookies/. However, if you select this setting you may be unable to access certain parts of the Site. Unless you have adjusted your browser setting so that it will refuse cookies, we will issue cookies when you access the Site.

Do Not Track (“DNT”) is a privacy preference that you can set in your browser. DNT is a way for you to

inform websites and services that you do not want certain information about your browser history collected over time and across websites or online services. However, we do not recognize or respond to any

DNT signals as the Internet industry works toward defining exactly what DNT means, what it means to comply with DNT, and a common approach to responding to DNT. For more information, visit www.allaboutdnt.com.

We do not control third parties’ collection or use of your personal information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way.

8. How long do we retain your personal information?

Except as otherwise permitted or required by applicable law or regulation, we will retain your personal information only for as long as necessary to fulfill any use of your personal information set forth herein.

However, we reserve the right to retain publicly available information and de-identified information for any legitimate business purpose without further notice to you or your consent.

9. Is my personal information secure?

We are committed to data security, and we have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, change, and disclosure. All information you provide to us is stored on our secure servers behind firewalls. However, you understand and agree that the transmission of your personal information over the Internet is not completely secure.

While we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted through the Site. Any transmission of personal information is at your own

risk. We are not responsible for circumvention of any privacy settings or security measures used by the Site.

10. No Third-Party Rights

This Policy does not create rights enforceable by third parties or require disclosure of any personal

information relating to users of the Services.

11. International Users

This Policy is intended to cover collection of personal information within our home jurisdiction. Some

countries may require stricter privacy policies than those described in this Policy. If you are accessing the Site from a foreign country, you understand and agree that your personal information may be transferred to, stored, and processed in our home jurisdiction or the jurisdiction of the third parties described herein, and that the data protection and other laws of our home jurisdiction or the jurisdiction of such third parties

might not be as comprehensive as those in your country.

Our Website obtains the categories of personal information listed above from the following categories of sources:

Directly from you. For example, from forms you complete or products and services you purchase. Indirectly from you. For example, from observing your actions on our Site. Third parties, for example, our business partners.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following purposes:

To fulfill or meet the reason you provided the information. For example, if you share your name and

contact information to ask a question about our products or services, we will use that personal information

to respond to your inquiry. If you provide your personal information to purchase a product or service, we

will use that information to process your payment. We may also save your information to facilitate new

product orders.

To provide, support, personalize, and develop our Website, products, and services.

To create, maintain, customize, and secure your account with us.

To process your requests, purchases, transactions, and payments and prevent transactional fraud.

To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.

To personalize your Website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website, third-party sites, and via email or text message (with your consent, where required by law).

To help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business.

For testing, research, analysis, and product development, including to develop and improve our Website, products, and services.

To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

As described to you when collecting your personal information or as otherwise stated in the CCPA.

To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or

similar proceeding, in which personal information held by us about our Website users is among the assets

transferred.

To verify your identity.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Sharing Personal Information We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

We share your personal information with the following categories of third parties:

Service providers.

Internet cookie data recipients, like Google Analytics.

Disclosures of Personal Information for a Business Purpose

Service providers.

Internet cookie data recipients, like Google Analytics.

Sales of Personal Information

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request

(see Exercising Access, Data Portability, and Deletion Rights), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship

with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.

Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.

Debug products to identify and repair errors that impair existing intended functionality.

Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.

Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render

impossible or seriously impair the research’s achievement, if you previously provided informed consent.

Enable solely internal uses that are reasonably aligned with consumer expectations based on your

relationship with us.

Comply with a legal obligation.

Make other internal and lawful uses of that information that are compatible with the context in which you

provided it.

Exercising Access, Data Portability, and Deletion Rights To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us at either:

support@ciaofan.com

www.ciaofan.com

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your

minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we

collected personal information or an authorized representative.

Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a verifiable consumer request does not require you to create an account with us.

We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Response Timing and Format we endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we

require more time (up to 45 days), we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the twelve (12) month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request,

if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity

without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why

we made that decision and provide you with a cost estimate before completing your request.

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Site and update the notice’s effective

date. Your continued use of our Site following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this notice, the ways in which web entertainment system ltd. collects and uses your information described below and in the Privacy Policy, your choices and rights regarding that use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Email: support@ciaofan.com

Website: www.ciaofan.com

Information You Provide Through Your Account

This is information that you provide to us through text fields, such as your name, payment information and benefits. The information we collect differs depending on if you make an account, become a customer, or become a Creator

Email address

Username

Password

State and Country of Residence

You may also sign up using a Facebook or Twitter account. We will ask permission to access basic information from your Facebook or Twitter account, such as your name, email, and profile picture. You can

choose to stop sharing that information with us at any time by going to Facebook or Twitter to remove Ciaofan’s access to that account and your ability to log in.

You also have the option to add more information to your public profile, such as a location, social media links and an about section, which we store along with any comments or messages you submit on Ciaofan Customers

A customer is someone who joins www.ciaofan.com membership platform to support a Creator's content.

As a customer you must provide your payment information to our payment processors. At this time, www.ciaofan.com does not receive your full card number.

Payment processors provide us with a token that represents your account, your card's expiration date, card type and the last four digits of your card number. If you are required to provide your name and email address to the payment processor, then they also

provide us with that information.

Creators

A Creator is someone who creates and provides content for their customers through www.ciaofan.com membership platform.

To become a Creator, you must create a page that describes what you are creating and any benefits you are offering. To receive payouts you have to create an account with one of our payment options.We may also require your bank account information to process payouts. You must also provide us with additional information for tax purposes. Depending on your location you may have to fill out a form with some combination of your:

Legal name

Address

Social security number or employer identification number

Country of citizenship

Foreign tax identification number

Date of birth

Your nonprofit registration number, if you are a nonprofit business

Additional Information We Collect

Automatically Collected Information

We collect information automatically as you navigate the site or through our third party analytics providers.

We may store usage information such as the type of device you use to access www.ciaofan.com, your operating system, browser type, IP address, and device ID, the pages you visit or request, links clicked, referring sites, user interactions and your search terms. We also derive your location from your selfdisclosed country, your IP address, and from your payment card.

Forums and Messaging

When you participate in a forum, we collect the comments you make as well as record how many times users visit, the activity on the site, where users have replied, with whom they've communicated, private messages, IP address, and from which location the user was last logged in.

User Surveys From time to time, we may solicit your participation in user surveys. To the extent that you participate, we will store your responses. Event Information At in-person events, we may request information from you. This is done to better tailor the event experience to those in attendance. This information may include your name, email address, payment details, mobile phone number and QR code, social media and other online accounts you maintain, details around the types of works you create, and survey or feedback responses.

Information Collected by Third Parties

We use Cookies on our website that collect information to allow us and third parties to understand your use of Ciaofan. Please see our Cookie Policy for more information on our use of cookies on ciaofan.

Social Media Features and Widgets

We use social media features, including the Facebook Like button and widgets, such as the Share button or similar interactive mini-programs that run on www.ciaofan.com. If you provide your social media information to us, we may use it to interact with you on these social networks. These features may collect your IP address and other personal data including which page you are visiting on our site and may set a cookie to enable the feature to function properly.

Social media features and widgets are either hosted by a third party or hosted directly on www.ciaofan.com. Your interactions with these Features are governed by the privacy policy of the company providing it. For more information on the technologies used by these social networks, please refer to their specific privacy notices listed below:

Facebook: https://www.facebook.com/about/privacy

Twitter: https://twitter.com/privacy

YouTube: https://policies.google.com/privacy

Instagram: https://help.instagram.com/155833707900388

How We Use Your Information

We process your information to:

verify your identity to comply with federal laws

provide www.ciaofan.com services to you allow you to sign in to your account

allow you to join a Creator's membership program on www.ciaofan.com

process a Creator's membership payments

send you emails relevant to your usage, as controlled by your email preferences

reply to your questions

market www.ciaofan.com to you, as controlled by your email preferences

understand how you use the service and create better tools for Creators to serve customers

conduct research and development to improve www.ciaofan.com and develop future products

prevent fraud and abuse on www.ciaofan.com

By becoming a customer of a Creator, you agree to have the following information shared with that

Creator:

your name and email address, and other profile information you've provided

any messages you send Creators through www.ciaofan.com

all information about your payment, including amount and start date, but not your full payment card information some aggregated and anonymized data about how you use www.ciaofan.com that cannot be linked back to

you or to any individual user Information We Share with the Public

The following information is publicly accessible:

your profile, and your social media links and location if you add that information the Creators you support any posts, likes, or comments you make your aggregated or anonymized usage data in blog posts, press releases, or in other ways to share information about ciaofan’s usage. Aggregated or anonymized data cannot be linked back to any individual

Www.ciaofan.comuser. monthly payment value and goals that Creators choose to make public number of customers Your Preferences and Rights over Data The Settings link is located by clicking on your avatar or profile at the top right hand of your screen. Settings lets you see your account preferences. You can see and adjust your settings by viewing your preferences and, if you wish, by changing your selections.

Accessing or Updating the Information in Your Account

Disabling or Deleting Your Account

You can disable your account if you go to your account settings while you are logged into www.ciaofan.com. When you disable your account, we immediately remove your ability to log in. Even if an account is disabled, some information may be retained by our analytics providers on their own servers.

To delete a previously-disabled account, please contact support@ciaofan.com.

Turning off Email Notifications

You can change your email notifications in your email settings. While this allows you to stop many notification emails, we will still send some critical service emails.

Compliance with EU Privacy Laws and Privacy Shield

www.ciaofan.com is an international company that complies with the General Data Protection Regulation

(GDPR). We act as Data Controllers, as defined under the GDPR, and process personal data based on our legitimate interests, and for contractual necessity in providing you the Service as described in "How We Use

Your Information." We also process and share personal information based on notification and users' consent, which our users may revoke at any time. We apply the same principles of privacy protection to all of our users, not just to data subjects in the EU and UK.

Exercising Your Data Rights

Users in certain locations may have certain rights under the General Data Protection Regulation (GDPR) regarding data that www.ciaofan.com controls as a Data Controller as defined under the GDPR, including:

the right of access to their personal data;

the right to correct or rectify any inaccurate personal data;

the right to restrict or oppose the processing of personal data;

the right to erase or delete their personal data;

the right to personal data portability; and

the right to opt-out of the sale of personal information.

You can exercise rights over your data on www.ciaofan.comin the following ways:

By emailing ciaofan: support@ciaofan.com

By physical mail: Web entertainment system LTD

(Company house : Number 10088314)

(8 Gainsborough road – Leytonstone )

E 11 1HT London office 9