Wells Fargo International Privacy Notice –Mainland China
This Notice applies to customers in the mainland of the People’s Republic of China (“China”).
Effective: 28 June 2023
Our Wells Fargo entities listed in Section 10 with which you and/or your organization have a relationship or otherwise share
Personal Data with (“we”, “our”, “us” or “the Company”) provides this privacy notice ("Notice") to describe our practices asa data controller regarding the collection, storage, use, disclosure, and other processing of Personal Data as defined below.
If you or your organization has a relationship or otherwise share Personal Data with a Wells Fargo entity in any country otherthan China, a different privacy statement at https://www.wellsfargo.com/privacy-security regarding that Wells Fargo
entity's practices will govern those collection and processing activities.

1. Types of Personal Data Collected
Outside the United States, we primarily have relationships and accounts only with corporations and other legal entities.
However, we may collect information about individual representatives ("Individuals") of our customer organizations(“Customers”) such as the Individual's:•

Work contact details: such as name, work address, phone number, mobile phone number, email address, and online
contact details, including but not limited to unique identification and password for access to our website, mobile
applications, and/or social media features.

•

Position description: such as employer, title, position held, duties, and length of employment.

•

Authentication data: such as national ID/passport, driver’s license, other governmental identification information,home address and telephone number, documents that verify address, date of birth, country of domicile, documentsthat verify employment, marriage certificate (if the Individual acts as a personal guarantor), and signatureauthorization.

•

Financial data: such as salary and other income, sources of wealth, assets and documents that verify assets, credit
reports retrieved from local financial regulator or credit agency, financial relationships, and financial transactions.

•

Background check data: such as background check information including credit and criminal checks and screening,to the extent required or permitted by local law.

•

Surveillance data: such as images and voices captured by CCTV video and audio surveillance equipment installedaccording to local law onto the business premises of a Wells Fargo entity in your jurisdiction, if you visit the businesspremises.

•

Electronic and voice communications data: such as content, data and recordings relating to business
communications with Wells Fargo through all applicable communication channels, including email, text, instantmessage or chat and/or telephone communications, voice recordings, video recordings, transcriptions, IP addressand session identification, and presentations hosted by Wells Fargo.

© 2023 Wells Fargo Bank, N.A. All rights reserved.
IPN CHN2311 (Rev 28/06/23)

Collectively, the above categories of data constitute “Personal Data”. Amongst the above Personal Data, some of them areconsidered as sensitive Personal Data under privacy laws in China, such as information revealing the aspects of specificidentity (e.g., governmental identity documents), political affiliations, undisclosed criminal records, financial accounts,
personal whereabouts, etc. The processing and transfer of sensitive Personal Data is necessary to achieve the purposes
described in Section 2, and will be conducted in a way that would have the least impact on personal rights and interests.
Unless stated otherwise, references to Personal Data in this Notice include sensitive Personal Data.
We may collect Personal Data directly from the Individual, Customers, including through interactions with the Bank and useof Bank systems, private lists, and publicly available sources. We will process your Personal Data in physical and electronic
form and will do so in a way that adequately safeguards your Individuals’ personal rights and interests in accordance with
China’s data protection laws. You and your Individuals have the right to refuse to consent to providing Personal Data.
However, processing of this information is necessary, and failure to provide this information may result in Wells Fargo being
unable to provide or continue to provide the requested services to the Customer where Personal Data is necessary to provide
the requested services.

2. Purposes of Collection and Use
The purposes of collection and use of Personal Data are:2•

To provide the services requested by our Customers, perform obligations under our agreements, and carry out
related business functions, including performing data and transaction processing, conducting credit checks,
handling Customer inquiries, including communicating, presenting, and meeting with a Customer, and managing theCustomer relationship, we collect and use Personal Data including work contact details, position description,authentication data, financial data, background check data, and electronic and voice communications data.

•

To comply with legal obligations, regulations, regulatory guidance or codes of practice applicable to the Company
and its Affiliated Entities (defined below) in the United States and/or any relevant jurisdictions, including but notlimited to complying with “know your customer” obligations based on applicable anti-money laundering and antiterrorism requirements, economic and trade sanctions, customer due diligence, fraud prevention and information
security, suspicious activity reporting, operating whistleblowing systems or channels, foreign exchange andinternational trade, tax reporting, public security and other applicable laws, regulations, ordinances, and obligations,complying with any requests from any regulator or authority to the extent permitted by applicable law, performing
risk management to facilitate compliance with the above, we collect and use Personal Data including work contact
details, position description, authentication data, financial data, surveillance data, background check data, andelectronic and voice communications data.

•

To confirm a person’s authority as a representative or agent of a Customer with which the Company or its
Affiliated Entities have entered or intend to enter into various arrangements, including but not limited to deposit
contracts, loan contracts, contracts for foreign exchange transactions, contracts for derivative transactions, andletters of credit, we collect and use Personal Data including work contact details, position description, backgroundcheck data, and authentication data.

•

To conduct recordkeeping and otherwise manage the business (for example, to monitor or facilitate compliancewith Wells Fargo’s internal policies, to maintain or upgrade Wells Fargo’s technology or systems, to protect thebusiness, rights or property of any Wells Fargo Group entity (defined in Section 3) by raising any legal claim, defense
or proceedings, to support the conduct of audits, supporting business transfers, combinations, restructuring,
dissolutions or similar activities relating to any Wells Fargo Group entity, etc.), we collect and use Personal Data
including work contact details, position description, authentication data, financial data, surveillance data,
background check data, and electronic and voice communications data.

IPN CHN2311 (Rev 28/06/23)

3. Disclosure of Personal DataYour Personal Data may be disclosed or transferred as follows to the recipients below for the purposes listed in Section 2 (ineach case to the extent necessary and on a need-to-know basis).
•

Affiliated Entities. The Company has Affiliated entities operating in the United States and around the world("Affiliated Entities"), including the group parent in the United States, Wells Fargo & Company (collectively, theCompany and our Affiliated Entities are the "Wells Fargo Group"). We may disclose Personal Data to our AffiliatedEntities on a worldwide basis. Non-exhaustive lists of Affiliated Entities can be found in the following Wells Fargo &Company 10-K filings (Exhibits 21) made with the US Securities and Exchange Commission, available at thefollowing hyperlinks:ohttps://www.sec.gov/Archives/edgar/data/72971/000007297123000071/wfc-1231x2022xex21.htm

ohttps://www.sec.gov/Archives/edgar/data/72971/000007297115000449/wfc-12312014xex21.htm•

Beneficiaries, counterparties, and other parties related to a transaction. The Wells Fargo Group may disclose
Personal Data to beneficiaries, counterparties, or other parties related to a transaction on a worldwide basis toprovide the services requested by our customers and to comply with legal obligations and regulations.

•

Service providers. The Wells Fargo Group may disclose Personal Data to information technology providers or otherservice providers around the world that act under our instructions regarding the processing of such data ("Entrusted
Persons"). Entrusted Persons will be subject to contractual obligations to implement appropriate administrative,
technical, physical, and organizational security measures to safeguard Personal Data, and to process Personal Data
only as instructed. The Wells Fargo Group may also disclose Personal Data to independent external auditors,
accountants, advisers, consultants or other service providers around the world that may not be acting as an
Entrusted Person. Such service providers will be subject to any necessary contractual obligations regarding theprotection and processing of such Personal Data.

•

Legal requirements. Subject to applicable law, the Wells Fargo Group may disclose Personal Data if required or
permitted by applicable law or regulation, including laws and regulations of the People’s Republic of China, UnitedStates and other countries or regions, or in the good faith belief that such action is necessary to: (a) comply with alegal obligation or in response to a request from any regulatory, governmental, law enforcement or other publicauthorities wherever the Wells Fargo Group may do business; (b) protect and defend the rights or property of any
Wells Fargo Group entity; (c) act in urgent circumstances to protect the personal safety of Individuals, Customers,
and contingent resources/employees of any Wells Fargo Group entity or others; or (d) protect or defend against any
legal liability. In addition, to the extent permitted by applicable law, the Wells Fargo Group may share your Personal
Data with U.S. regulators and with other self-regulatory bodies to which we are subject, wherever the Wells Fargo
Group may do business.

•

Business transfers, combinations and related activities. As we develop our business, the Wells Fargo Group mightsell, buy, acquire, obtain, exchange, restructure or reorganize businesses or assets. In the event of any actual or
proposed sale, merger, reorganization, transaction, restructuring, dissolution or any similar event involving ourbusiness or assets, Personal Data may be shared with the relevant entity or may be part of the transferred assets
and will be subject to any necessary contractual obligations to ensure the protection of Personal Data.

The recipients of Personal Data identified in this Section 3 may be located in the United States and other jurisdictions that
may not provide, or require recipients to provide, the same level of data protection as your home jurisdiction. We haveprovided a list of the offshore recipients which we transfer Personal Data to in Section 11. To the extent required byapplicable law, we have taken steps to establish appropriate data transfer agreements or otherwise address cross-borderdata transfer restrictions, and comply with requirements under applicable law. These measures enable us to transfer and use
Personal Data in a secure manner anywhere in the world where we have an establishment, or where we have contracted third
parties to provide us with services.

3

IPN CHN2311 (Rev 28/06/23)

Where required by China’s privacy laws, we enter into Standard Contract(s) issued by China’s cyberspace authority with
offshore recipients to comply with legal requirements concerning transfers of Personal Data out of China. Our Customers’
Individuals could be third-party beneficiaries to such Standard Contract(s), unless they expressly object within 30 days fromthe date of this Notice. At the request of our customers’ individuals, we may provide them with a copy of such Standard
Contract(s) to the extent required by law. Requests or questions concerning these Standard Contract(s) may be directed tous using the contact details in Section 8.

4. Consents
To the extent that consent is required by applicable law, you expressly consent (including providing separate consent whererequired by applicable law) to the collection, use, disclosure (including cross-border transfer), and other processing of
Personal Data as described in this Notice by providing Personal Data to the Wells Fargo Group or authorizing our Customer
to provide such information to us. Where you directly or indirectly provide any Wells Fargo Group entity with the Personal
Data of any individuals, you must have first informed such individuals about our data privacy practices by providing themwith a copy of this Notice, and obtained all required informed consents (including separate consents) from such individuals
to permit the activities described in this Notice, before providing their Personal Data to the Wells Fargo Group. You expressly
waive the bank secrecy or confidentiality laws and obligations, if any, of the jurisdiction or jurisdictions where you and theaccounts are located to the extent permitted by applicable law.
You may revoke consent at any time by notifying us at the address provided in Section 8 of this Notice. Prior uses anddisclosures will not be affected (unless required by applicable law), and we may otherwise continue to process Personal Dataas permitted or required by law. Revocation of consent may result in our inability to provide or continue to provide therequested services to the Customer.

5. Information Management, Security Control Measures, andRetention Periods
The Personal Data will be safely stored in the databases of Wells Fargo. Appropriate measures are taken so that Personal
Data can be kept accurate, and up-to-date, which will be in accordance with the applicable security requirements. In an effort
to prevent the loss, misuse, unauthorized access, disclosure, alteration or destruction of Personal Data, Wells Fargo will takeappropriate legal, technical, physical and organizational security measures to protect Personal Data. We will keep Personal
Data no longer than necessary to: i) fulfill the purposes outlined in this Notice; ii) comply with legal or regulatory obligations
to which Wells Fargo is subject; or iii) perform a contract duly established with you or in order to take steps at your request
prior to entering a contract. We have implemented appropriate records retention policies to retain Personal Data only tothe extent permitted by applicable laws. We may need to hold Personal Data beyond retention periods in response to anaudit, investigation, or other legal matter. These requirements also apply to our third party service providers. Where requiredby law, Wells Fargo will anonymize data for additional processing.
While registering with our website, mobile applications, or social media features (each, a "Site"), we may provide you with aunique identification and password for accessing our products and services. We encourage you to choose your password
wisely such that no intruder or third party can obtain any unauthorized access to the Site. We also encourage you to keep
your password confidential and not have any written or other record of the password that can be accessible by an intruder
or third party.

4

IPN CHN2311 (Rev 28/06/23)

6. Data Subject Rights and Choice for Marketing Materials
Data Subject Rights
Your Individuals may have certain rights in relation to Personal Data we hold about them. They may have the right to access,supplement, correct and obtain a copy of any Personal Data held about them. They may also have the right to object to or
restrict processing of their Personal Data, request for deletion of their Personal Data, request for an explanation of our rulesof processing their Personal Data, request for the transfer of their Personal Data to another entity where relevant
requirements are met, and to withdraw their consent to the processing of their Personal Data. In addition, your Individuals
may have the right to request for an overview of entities involved in the processing of their Personal Data, including theidentity of certain recipients of their Personal Data and/or the countries where their Personal Data is being processed.
Requests must be submitted by the Individual in writing to the address listed in Section 8 below. After we have verified theIndividual's identity, we will endeavor to respond promptly to valid data subject requests and take the other actions
requested as specified by local law. Where permitted by law, we may charge an appropriate fee to cover the costs of
responding to the request. These rights may not be absolute, and exceptions may be applicable. If Wells Fargo is not able toaccommodate the request, the requestor will be provided with reasons for the denial.
Choice for Marketing Materials
If you do not want to receive marketing and sales materials from Wells Fargo by direct mail, telephone or email, please follow
the “unsubscribe” instructions provided in those communications or submit a written request to the address listed in Section
8 below. We will comply with your request within a reasonable period of time after receiving it or within the time periodrequired by local law.

7. Complaints
You may have a right under applicable law to make a complaint if you think we have not adhered to this Notice or any
applicable privacy law in handling your Personal Data. If you would like to make a complaint, please submit your complaint inwriting to the contact details in Section 8. We will respond to a written complaint within 30 days. If you are not satisfied
with our response, you may be able to pursue your complaint with the data protection authorities in China.

8. Customer Inquiries
Please direct all requests regarding your Personal Data, or any questions regarding this Notice, to the following:
APAC Regional Privacy Officer
138 Market St, #30-01 CapitaGreen, Singapore, 048946
Telephone: (65) 6395 6900
privacy.apac@wellsfargo.com
Your comments are valuable to us and we assure you that we will do our best to address them.

9. Modifications
This Notice may be modified as a result of amendments to the law or regulations or due to other reasons. In such case, anamended Notice will be posted on our website at http://www.wellsfargo.com/privacy-security/. The page providing the
Notice shall contain a date as to when the Notice was last updated.

5

IPN CHN2311 (Rev 28/06/23)

10. Wells Fargo entities in China covered by this Notice
Entity Name

Address

Wells Fargo Bank, N.A. - Beijing, People’s No. 7 Jinrong Street Units F722-F723, 7/F, Winland International FinanceRepublic of China
Center Xicheng District, Beijing, People’s Republic of China
Wells Fargo Bank, N.A. - Shanghai, People’s No. 100, Century Avenue Unit 30, 32/F, Shanghai World Financial Centre
Republic of China
Pudong New District Shanghai, People’s Republic of China
Wells Fargo CDF Commercial Factoring Unit 1501-3, 1501-4, 1501-5, 15/F Capital Square No. 268 Hengtong Road,(China) Company Limited - Shanghai Branch Jing'an District, Shanghai, People’s Republic of China

11. List of Offshore Recipients of Personal Data
Name of the
Offshore Recipient

Contact Details

Offshore recipients
The Company’s
can be contacted
Affiliated Entities
through the APAC
(defined in Section 3)
Regional Privacy
such as Wells Fargo & Officer using theCompany, etc.
contact details in
Section 8 above

6

IPN CHN2311 (Rev 28/06/23)

Type of Personal
Data Transferred

Processing Purpose

Types of Personal
Purposes listed in
Data listed in Section Section 2 above
1 above

Processing Means

Retention Period

Collection, storage, As specified inuse, processing,
Section 5 abovetransfer and deletion

Method/Procedure
to Exercise Rights
Data subject rights
can be exercised bycontacting us using
the details in
Section 8 above.