1. Consent to the Collection, Use, and Disclosure of Personal Data I acknowledge that I have read and understood the Privacy Policy (the “Policy”) of NOT A HOTEL Inc. and its affiliates and subsidiaries (the “Company”), and consent to the collection, use, and disclosure of my personal data in the Policy for the purposes set out in the Policy. 2. Transfer of Personal Data outside Singapore I fully recognize and understand that the Company may transfer my personal data to relevant parties outside Singapore in accordance with the Policy for the conclusion or performance of the purposes set out in the Policy. I [have been provided with a reasonable summary in writing of the extent to which the personal data transferred outside of Singapore would be protected to a standard comparable to the protection under the Personal Data Protection Act 2012, and] hereby consent that the Company conduct such transfers in accordance with the Personal Data Protection Act 2012. 3. Do Not Call Registry In the event that I have registered my Singapore telephone number(s) with the Do Not Call Registry and wish to withhold or withdraw my consent to the Company in respect of receiving telephone calls and/or SMS, I endeavor to provide sufficient notice to the Company of such as soon as reasonably practicable. 4. Notes on the Provisions of Personal Data I agree that my consent will remain in place until my withdrawal by officially notifying the Company in writing at privacy@notahotel.com.

1. I fully recognize and understand that you will collect and process my personal data, including sensitive personal information (the same shall apply hereafter) in accordance with the Privacy Policy ([link], the “Privacy Policy”), and I hereby agree to your collection and processing of my personal data. 2. I fully recognize and understand that you may transfer my personal data to relevant party outside the PRC in accordance with the Privacy Policy, and I hereby agree to such transfer of my personal data. 3. I hereby confirm that the consent given in 1. and 2. above is a declaration of my true intention, and that in the process of giving the consent in 1. and 2. above, there is no reason whatsoever, such as threat or misdirection by any third party, that may invalidate or revoke the consent for the collection and processing of my personal data.