Vista Musical Instruments – Privacy Policy

Effective Date: 7 October 2026

1. Introduction

This Privacy Policy explains how Vista Musical Instruments Pte. Ltd. (“VMI”) collects, uses, shares,
and stores personal data across our websites, mobile apps, and services (the “Services”), including VMI Account.
Personal data is information that identifies you directly or indirectly. VMI is the controller of your VMI Account and
the shared services described here.

2. Your VMI Account

VMI Account works across participating VMI brands and services. We use your account details, sign-in information,
preferences, and membership information to provide your account and benefits, wherever you create or use it.

3. VMI Account and Brand Stores

Brand stores may be operated by local VMI group entities and use providers such as Shopify and Stripe. Each store is
responsible for its orders, payments, and other store data under its own terms and privacy policy. When you use VMI
Account with a store, we exchange the account, membership, and relevant purchase information needed to provide your
account and benefits.

4. Information We Collect

• Account and profile information: Your name, email address, country, sign-in details, preferences,
  and membership information.
• Content and communications: Information you upload or send to us, including support requests.
• Usage and transaction information: How you interact with our Services and relevant purchase or
  subscription activity, including transaction values.
• Device and storage information: Identifiers, IP address, browser and operating-system information,
  and cookies or similar technologies. Our
  Cookie Policy explains website storage and your choices.

We use Amplitude to understand use of our Services. Where measurement is permitted, we may associate your interactions
across participating VMI group brands and services that use VMI Account with a pseudonymous account identifier. This
information remains personal data. We do not send names, email addresses, sign-in credentials, or payment-card details
to Amplitude through this integration. We also use Google Analytics on our corporate website and Firebase Analytics in
VMI Connect.

5. How We Use Your Information

• Provide your account, membership benefits, and other Services.
• Personalise and improve our Services and understand how they are used.
• Provide support and communicate updates and offers.
• Protect our Services, prevent fraud, and meet legal obligations.

Where the GDPR or UK GDPR applies, we rely on our contract with you to provide your account and benefits; our
legitimate interests to administer, protect, and improve our Services where permitted by law; legal obligations for
required records; and consent where required for optional measurement or marketing. Accepting account terms does not
itself give consent to optional measurement or marketing.

6. Sharing Your Information

We do not sell your personal data. We may share it with:

• VMI group entities and participating brand stores: For the purposes described in this policy.
• Service providers: For hosting, authentication, communications, analytics, payments, and commerce,
  including Amplitude, Google, Stripe, and Shopify, under contracts that protect your data.
• Authorities and other parties: Where required by law or necessary to protect rights and users.
• Business transfers: In connection with a merger, acquisition, or restructuring.

7. Data Storage, Transfers & Security

Your information may be processed in Singapore and other countries where VMI or its providers operate. Where required,
we use appropriate transfer safeguards, such as standard contractual clauses, under applicable privacy laws including
the Singapore PDPA, GDPR, and UK GDPR. Our Amplitude project is hosted in Europe, but other processing may take place
elsewhere. Contact us for a copy of applicable transfer safeguards. We use technical and organisational measures to
protect your information.

We keep information for as long as needed for the purposes described here, considering your account status, legal
requirements, security and support needs, and unresolved disputes. Cookie and browser-storage periods are described
separately in our Cookie Policy. Contact us for retention details or deletion requests.

8. Children’s Privacy

Our Services are not intended for children under 13. If we become aware of personal data collected from a child under
13, we will delete it. Parents can contact us with concerns.

9. Third-Party Links

External websites and services have their own privacy practices. Please review their policies before sharing your
information.

10. Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or receive a portable copy of your data;
restrict processing; and withdraw consent at any time without affecting earlier lawful processing. You may also
complain to your local data protection authority, including the
UK Information Commissioner’s Office.

Right to object: You may object to processing based on legitimate interests and to direct marketing.

You can update or delete your VMI Account at
account.vistamusic.com. Some analytics, support, or legally required
records may remain; contact us to request deletion of remaining personal data. Stores manage their own records under
their policies.

You can opt out of marketing using the unsubscribe link in our emails and accept or decline optional website
measurement through the consent banner where shown. Choices vary by Service; see our Cookie Policy. For withdrawal,
objections, or other privacy requests, including mobile-app analytics, contact
support@vistamusic.com.

11. Changes to This Privacy Policy

We may update this policy and will publish changes here with an updated effective date.

12. Contact Us

For privacy questions or requests, contact Vista Musical Instruments Pte. Ltd. at
support@vistamusic.com.

Our UK GDPR representative is Vista Musical Instruments UK Limited, The Portland Building, 27-28
Church Street, Brighton, East Sussex, BN1 1RB, United Kingdom. You can also contact it at
support@vistamusic.com.