Effective Date: September 17, 2026

NAM VIET PHAT FOOD CO., LTD, operating the Rolio Coffee website and related digital services (“Rolio Coffee”, “we”, “us”, or “our”), respects your privacy and is committed to protecting personal information in accordance with applicable privacy and data protection laws.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, interact with our services, contact us, subscribe to communications, participate in promotions, create an account, make a purchase, or communicate with us regarding Rolio Coffee products or business opportunities.

1. Data Controller

For purposes of applicable data protection laws, the data controller is:

NAM VIET PHAT FOOD CO., LTD
No. 33/23, Street No. 10, Binh Minh 2 Quarter, Di An Ward, Ho Chi Minh City, Vietnam

Email: info@rolio.com.vn

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through:

• Rolio Coffee websites
• Contact forms
• Customer accounts
• Newsletter subscriptions
• Product inquiries
• Distributor and business partnership inquiries
• Promotions and campaigns
• Where-to-Buy functions
• E-commerce and online ordering functions, where available
• Customer service communications
• Analytics, advertising and measurement technologies
• Social media and embedded third-party services

Third-party websites and platforms linked from our website are governed by their own privacy policies.

3. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of information.

3.1 Information You Provide

This may include:

• Name
• Email address
• Telephone number
• Country or region
• Postal or billing address
• Company name
• Job title
• Business information
• Distributor or retailer information
• Account credentials
• Product interests
• Order and transaction information
• Inquiry details
• Communications with us
• Marketing preferences
• Information submitted through promotions, surveys or forms

3.2 Information Collected Automatically

When you use our website, certain information may be collected automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Language settings
• Approximate location derived from IP address
• Pages visited
• Referral URLs
• Session duration
• Click activity
• Interaction with website features
• Advertising identifiers
• Cookie identifiers
• Device identifiers
• Technical and security logs

4. How We Use Personal Information

We may process personal information for the following purposes:

• Provide and operate our website
• Respond to inquiries
• Process orders and transactions
• Manage customer accounts
• Provide customer support
• Respond to distributor, importer and retailer inquiries
• Manage business partnerships
• Send requested communications
• Send newsletters and marketing communications where permitted
• Personalize website experiences
• Measure website performance
• Understand visitor behavior
• Improve products, content and services
• Conduct advertising and campaign measurement
• Create advertising audiences where legally permitted
• Detect fraud, abuse and cybersecurity threats
• Maintain website security
• Enforce our terms and policies
• Maintain business and accounting records
• Comply with applicable laws and regulatory requirements

5. Legal Bases for Processing

Where GDPR, UK GDPR or similar laws apply, we process personal information under one or more of the following legal bases:

Consent

For activities such as certain marketing communications, non-essential cookies and personalized advertising.

Contractual Necessity

Where processing is necessary to provide products or services requested by you or to take steps before entering into a contract.

Legitimate Interests

Where necessary for legitimate business purposes, including website security, customer service, business development, service improvement and certain analytics activities, provided those interests are not overridden by your rights.

Legal Obligation

Where information must be processed or retained to comply with applicable law.

6. Cookies and Similar Technologies

We use cookies, pixels, tags, SDKs and similar technologies.

These may include:

• Strictly necessary cookies
• Functional cookies
• Analytics cookies
• Performance cookies
• Advertising cookies
• Social media technologies

Depending on website configuration, services may include:

• Google Analytics
• Google Tag Manager
• Google Ads
• Meta Pixel
• TikTok Pixel
• LinkedIn Insight Tag
• Microsoft Clarity
• Hotjar
• YouTube
• Google Maps
• Social media integrations

Non-essential cookies will be managed through our cookie consent system where required by applicable law.

Visitors may manage preferences through Cookie Settings.

Additional information may be provided in our separate Cookie Policy.

7. Advertising and Targeted Marketing

We may work with advertising and analytics partners to measure campaigns, understand audiences and deliver advertising.

Information used for these purposes may include:

• Cookie identifiers
• Device identifiers
• IP address
• Website interactions
• Pages viewed
• Advertising activity

Under certain privacy laws, disclosure of such information to advertising platforms may be legally characterized as “sale,” “sharing,” or targeted advertising, even where no monetary payment is exchanged.

Where required, users may opt out through:

Your Privacy Choices / Do Not Sell or Share My Personal Information

or through the website Cookie Settings.

For covered California businesses, browser-based Global Privacy Control (GPC) signals must also be treated as an opt-out where applicable.

8. Email Marketing

Where permitted by law, we may send:

• Product updates
• Brand news
• Promotions
• Events
• New product announcements
• Coffee-related content
• Business communications

You may unsubscribe at any time using the unsubscribe link included in marketing emails.

Transactional or legally required communications may still be sent where necessary.

9. CRM and Business Inquiries

Information submitted through contact forms, distributor inquiries or partnership requests may be stored in our customer relationship management systems.

This information may be used to:

• Respond to inquiries
• Maintain business relationships
• Follow up on opportunities
• Provide requested materials
• Manage commercial discussions
• Maintain business records

Access is limited to authorized personnel and approved service providers.

10. How We Share Personal Information

We may disclose personal information to third parties where reasonably necessary.

These may include:

• Website hosting providers
• Cloud infrastructure providers
• CDN providers
• CRM providers
• Email marketing providers
• Payment processors
• E-commerce providers
• Analytics providers
• Advertising platforms
• Cybersecurity providers
• IT service providers
• Customer support providers
• Logistics providers
• Professional advisers
• Auditors
• Legal advisers
• Government or regulatory authorities

Service providers may process information only for authorized purposes and subject to applicable contractual and legal safeguards.

11. International Data Transfers

Our website serves users internationally.

Personal information may therefore be processed in countries other than the country in which it was originally collected.

Where required by applicable law, we use appropriate safeguards for international data transfers, which may include:

• Adequacy decisions
• Standard Contractual Clauses
• Contractual safeguards
• Other lawful transfer mechanisms

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Unless a longer period is legally required, indicative retention periods may include:

We may retain information longer when required for legal claims, fraud prevention, accounting, regulatory or compliance obligations.

13. Data Security

We implement reasonable administrative, technical and organizational measures designed to protect personal information against:

• Unauthorized access
• Loss
• Misuse
• Alteration
• Disclosure
• Destruction

However, no internet transmission or information storage system can be guaranteed to be completely secure.

14. Your Privacy Rights

Depending on your jurisdiction, you may have rights including:

• Access your personal information
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Opt out of direct marketing
• Opt out of targeted advertising
• Opt out of certain sale or sharing
• Lodge a complaint with a supervisory authority

European and UK privacy frameworks provide rights including access, correction, erasure, restriction, objection and data portability, subject to applicable conditions and exceptions.

To exercise a privacy right, contact:

info@rolio.com.vn

We may request information reasonably necessary to verify your identity before processing certain requests.

15. California Privacy Rights

If you are a California resident and the CCPA applies to our activities, you may have rights including:

• Right to know
• Right to access
• Right to delete
• Right to correct
• Right to opt out of sale or sharing
• Right to limit certain uses of sensitive personal information
• Right to non-discrimination

California law also recognizes opt-out rights relating to sharing information for cross-context behavioral advertising.

Requests may be submitted to:

info@rolio.com.vn

Where applicable, the website will also provide:

Do Not Sell or Share My Personal Information / Your Privacy Choices

16. Children and Minors

Rolio Coffee does not knowingly solicit or collect personal information directly from individuals under the age of 16 through:

• Account registration
• Newsletter subscriptions
• Contact forms
• Promotions
• Marketing registration
• Targeted advertising programs

Individuals under 16 should not submit personal information through these features.

If we become aware that personal information has been collected directly from an individual under 16 contrary to this policy or applicable law, we will take reasonable steps to delete it.

This privacy rule relates to personal information collection and does not by itself determine which Rolio Coffee products may be suitable for particular age groups.

In the United States, COPPA imposes additional obligations where a service is directed to children under 13 or where the operator has actual knowledge that it is collecting personal information from a child under 13.

17. Social Media and Embedded Content

Our website may include content or functions provided by third-party platforms such as:

• Facebook
• Instagram
• TikTok
• LinkedIn
• YouTube
• Google Maps

These providers may collect information according to their own privacy practices.

Where legally required, non-essential embedded technologies will not be activated until appropriate consent has been obtained.

18. Third-Party Links

Our website may contain links to third-party websites, stores, retailers, distributors or social media services.

We are not responsible for the privacy practices of independent third parties.

We encourage users to review their privacy policies before providing personal information.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Legal or regulatory changes
• New website functions
• Changes in technology
• New service providers
• Changes in our processing activities

When material changes are made, we will update the Effective Date and provide additional notice where required by law.

20. Contact Us

For questions about this Privacy Policy or our handling of personal information, contact:

NAM VIET PHAT FOOD CO., LTD
No. 33/23, Street No. 10
Binh Minh 2 Quarter
Di An Ward
Ho Chi Minh City
Vietnam

Email: info@rolio.com.vn

Brand: ROLIO COFFEE

Effective Date: September 17, 2026