Personal Data Processing Consent

For use of the Maydon Rent app

Version dated 3 november 2026

I, an individual providing this consent through the Maydon Rent app (hereinafter, the App) or by any other means that allows my intent (expression of will) to be confirmed (hereinafter, the User), voluntarily give MAYDON PARTNERS LLC consent to the processing of my personal data to the extent and for the purposes set out below.

OPERATOR AND SUBJECT OF CONSENT
1.1. Operator: MAYDON PARTNERS LLC, TIN 312567545. Address: Republic of Uzbekistan, Tashkent, Sergeli district, Kukhna Kumarik MFY, TKAD, building 1A. Email: info@maydongroup.com. Phone: +998 99 288‑88‑88.

1.2. This consent relates to the provision of the Maydon Rent app and the functions I have selected. It does not replace the negotiation of a lease agreement, does not give the Operator authority to participate in rent payments, and does not constitute consent to the use of my data for unrelated purposes.

PERSONAL DATA
2.1. To the extent necessary for the functions I have selected, this consent covers the following categories of data described in section 2 of the Privacy Policy:

2.2. Account data and contact details: full name, username, phone number, email address, date of birth, address and profile photo, if provided for a selected function; account identifier, status and settings, registration date and my role.

2.3. Identification and authority data: PINFL (personal identification number of an individual), individual TIN, passport number and necessary documents; full name, position, basis and confirmation of a representative's authority; affiliation with an organisation, access rights and participation in its account. This information is used only where necessary for a selected function.

2.4. Property data (real estate offered for rent) and offer data: address, cadastral details, coordinates and characteristics of the real estate, photos and floor plans, my listings, applications, preferences, saved offers and views. The coordinates of the real estate do not constitute permission to track my movements.

2.5. Lease and document data: details of the parties and representatives, of the Property and of the terms being negotiated, drafts, documents and attachments, negotiation history; particulars included in the materials; information about the signatory, the signature image, the signature and its certificate, and the execution status, if provided by me or obtained on my instruction from an independent service.

2.6. Correspondence and requests: messages, files, information on sending, delivery and reading, replies and the outcome of a request; confirmations of consents and of their withdrawal. When a paid function is used: the amount, date, purpose and status of the fee payable to the Operator itself for the App and of its refund.

2.7. Necessary technical information: IP address, access and device identifiers, device type, operating system and browser, App version, access time, actions and errors, as necessary for operation, security and confirmation of my intent.

2.8. This consent does not cover biometric identification, genetic data, health information or background location tracking. The profile photo and signature image are not used for biometric recognition on the basis of this consent. I provide data of other persons only where there is a lawful basis and to the extent necessary.

PURPOSES AND METHODS OF PROCESSING
3.1. I permit processing for maintaining the account and providing access; confirming information and authority within a selected function; posting and searching for rental offers; communication, working with documents and information on arrangements; saving settings; support, error correction and protection of rights; ensuring the operability and security of the App. Where the App is used on a paid basis, accounting for the fee payable to the Operator itself is permitted. Rent payments are carried out without the Operator's participation.

3.2. For these purposes, collection, systematisation, storage, updating, modification, supplementation, use, provision and transfer to the recipients referred to in section 4, depersonalisation and destruction of data, with or without the use of automated means, are permitted. Public dissemination is permitted solely for listing information that I have separately selected and confirmed for publication.

3.3. Data may be obtained from me, from my actions in the App, from the other party to the lease being negotiated or an authorised representative, and from an independent service selected by me where there is a lawful basis. Processing necessary for the performance of a contract or of a legal obligation may have a separate basis, as set out in the Privacy Policy.

RECIPIENTS AND DATA PROTECTION
4.1. Data may be provided to the party to the lease indicated by me and to that party's representative for interaction in connection with the lease; to authorised members of an organisation; to an independent service selected by me for the requested function; and to contractors engaged by the Operator for the operation of the App, support and information protection. Access is limited to what the relevant task requires. Data are provided to state bodies and courts in cases established by law.

4.2. The public part of a listing is available to other users and visitors of the App in the scope confirmed by me upon publication. Passport data, PINFL, bank details, non-public documents and correspondence are not subject to public dissemination on the basis of this consent. The Operator ensures the confidentiality of the other data, the necessary protective measures and the notifications of transfer required by law. Recipients do not acquire any right to use my data for advertising that has not been agreed.

4.3. Storage and processing outside the Republic of Uzbekistan and cross-border transfer are permitted only subject to the conditions established by law. Where separate consent is required, the Operator requests it before the transfer and provides the necessary information. Categories of data subject to mandatory storage in the Republic of Uzbekistan are stored within its territory.

TERM AND WITHDRAWAL OF CONSENT
5.1. This consent is valid from the moment it is confirmed until the relevant purposes are achieved, my account is terminated or the consent is withdrawn, whichever occurs first. Thereafter, processing on the basis of this consent ceases. If certain data must be retained on a separate lawful basis, they are used only to the extent necessary and within the period of such basis, as provided for in the Privacy Policy.

5.2. I have the right to withdraw this consent in full or in respect of a particular purpose by the same means by which it was given, or by a written request, including an electronic one, sent to info@maydongroup.com or to the Operator's postal address. To identify the request, I state a means of contact and information that makes it possible to locate my account or the affected transaction. Withdrawal takes effect prospectively.

5.3. If a selected function cannot be provided without the relevant data and there is no other lawful basis for processing, withdrawal may make that function unavailable. The Operator explains such a consequence. Refusal of optional processing does not restrict functions that do not require such data. Data for which no lawful basis remains are subject to destruction.

MY RIGHTS AND SEPARATE PERMISSIONS
6.1. I have the right to obtain information on the composition, sources, purposes, grounds, methods and periods of processing and on the recipients of my data, as well as on cross-border transfer; to demand rectification, supplementation, temporary suspension of processing or destruction where there are lawful grounds; to withdraw consent; and to apply to the authorised state body or a court. The procedure for requests and the applicable time limits are set out in the Privacy Policy.

6.2. I have the right to decline to provide optional information, not to publish a listing and not to provide a document to the other party. The scope of information placed publicly is determined by my separate action upon publication. Refusal does not restrict functions for which the relevant information or its disclosure is not required.

6.3. Advertising mailings and personalised marketing offers are not covered by this consent and require a separate voluntary choice. Opting out of advertising does not affect the core functions of the App; necessary messages concerning my actions, security and requests are sent on the relevant lawful grounds.

CONFIRMATION
7.1. I confirm that I have read this consent and the Maydon Rent Privacy Policy and understand the stated purposes, scope of processing, rights and withdrawal procedure. Consent is expressed by a separate, unambiguous action that allows its provision to be confirmed. Merely reading the Policy or using the App does not replace such an action.

7.2. The Operator has the right to record the information necessary to confirm my consent: its text or version, the date, the method of confirmation and the link to my account. A change to the Policy or to the text of the consent does not in itself broaden the scope of the permission I have given.