Safety & accessibility

TITLE IV – ACCESSIBILITY & SECURITY 4.1 Digital Accessibility Policy Mijay Group BUSINESS LOGISTICS LIMITED is committed to making its platform accessible to the widest possible audience, including people with disabilities. This commitment is in accordance with the recommendations of the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA, and applicable legal obligations. 4.1.1 Accessibility Measures Implemented • Properly tagged HTML5 semantic structure (headings, lists, ARIA landmarks); • Color contrast respecting minimum ratios (4.5:1 for text, 3:1 for graphic elements); • Navigation entirely achievable with the keyboard without the need for a mouse; • Alternative text (alt attribute) on all images containing information; • Subtitles available for video content (training courses); • Compatibility with common screen readers (NVDA, JAWS, VoiceOver); • Text size resizable up to 200% without loss of content or functionality; • Labeled forms with clear instructions; • Session durations can be extended on demand. 4.1.2 Limitations & Non-conformities Some advanced features (interactive dashboards, data visualization modules, some third-party training content) may have accessibility limitations that are currently under investigation. We are working to address these as part of our continuous improvement plan. 4.1.3 Accessibility Contact If you experience difficulty accessing a service or content on the platform due to a disability, please contact us at: contact@mijaygroup.com, specifying "Accessibility" in the subject line. We are committed to responding within 10 business days and proposing an alternative access method. 4.2 Platform Security Policy 4.2.1 Security Architecture The platform's security is based on a multi-layered approach that includes: • Web Application Firewall (WAF) to filter malicious requests; • DDoS (Distributed Denial of Service) protection provided by the hosting provider; • Intrusion Detection and Prevention System (IDS/IPS); • Network segmentation and isolation of environments (production, development, staging); • Automatic data backup (daily, weekly, monthly) with remote storage; • Logging of all sensitive operations with timestamps; • Valid and automatically renewed SSL/TLS certificate; • HTTP security headers (HSTS, CSP, X-Frame Options, X-Content Type Options). 4.2.2 User Account Security To protect your account, Mijay Group BUSINESS LOGISTICS LIMITED strongly recommends the following practices: • Use a unique password of at least 12 characters, including uppercase letters, lowercase letters, numbers, and special characters; • Enable two-factor authentication (2FA) available in your account settings; • Never share your login credentials with anyone; • Always log out after use on a shared device; • Immediately report any suspicious login activity to contact@mijaygroup.com Mijay Group BUSINESS LOGISTICS LIMITED implements a policy of temporarily locking the account after 5 failed authentication attempts, with notification to the user. 4.2.3 Payment Security All payments are processed through PCI DSS (Payment Card Industry Data Security Standard) Level 1 certified providers. Mijay Group BUSINESS LOGISTICS LIMITED does not have access to any unencrypted credit card data. The payment process uses tokenization of sensitive data. An anti-fraud scoring system analyzes each transaction in real time. Any suspicious transaction may result in additional verification (3D Secure, manual verification) or temporary account blocking. 4.2.4 Security Incident Management In the event of a confirmed or suspected personal data breach, Mijay Group BUSINESS LOGISTICS LIMITED undertakes to: 12. Contain the incident as quickly as possible; 13. Notify the competent supervisory authority within 72 hours (GDPR) or 24 hours (PIPL); 14. Inform the individuals concerned as soon as possible when the risk is high; 15. Document the incident and the corrective measures implemented; 16. Take preventive measures to avoid recurrence. 4.3 Vulnerability Management Policy Mijay Group BUSINESS LOGISTICS LIMITED maintains a vulnerability management program that includes: • Application security testing (SAST/DAST) integrated into the development cycle; • Penetration testing (pentest) performed at least annually by a qualified provider; • A security patch management process with SLAs defined according to criticality (critical: 24 hours, high: 7 days, medium: 30 days); • A responsible disclosure program: anyone who discovers a vulnerability is encouraged to report it to contact@mijaygroup.com before any public disclosure. 4.4 Acceptable Use of the Platform It is strictly forbidden to use the platform to: • Introduce, distribute, or upload viruses, Trojan horses, spyware, or any other malicious code; • Attempting unauthorized access to restricted areas of the system; • Conducting load tests, port scans, or intrusion attempts without prior written authorization; • Collecting data from other users through automated means (scraping); • Engaging in fraudulent transactions, money laundering, or financing illegal activities; • Transmitting illegal, defamatory, abusive, obscene, or infringing content; • Impersonating another user, an employee of Mijay Group BUSINESS LOGISTICS LIMITED, or a third party. Any violation of these rules will result in the immediate suspension of the account and may be subject to legal action in accordance with applicable Chinese laws (Network Security Law, Criminal Code of the PRC). 4.5 Business Continuity Plan Mijay Group BUSINESS LOGISTICS LIMITED maintains a Business Continuity Plan (BCP) and a Disaster Recovery Plan (DRP) to ensure service availability in the event of a major incident. The recovery objectives are as follows: Indicator Objective RTO (Recovery Time Objective) – Recovery time Less than 4 hours for critical services RPO (Recovery Point Objective) – Maximum data loss Less than 1 hour (hourly backups of transactional data) Guaranteed monthly availability (SLA) 99.5% (excluding scheduled maintenance) Maintenance notification at least 24 hours before intervention Compensation in case of SLA exceedance: Credit to the customer account according to contractual terms TITLE V – SUPPLEMENTARY PROVISIONS 5.1 Anti-Money Laundering & Counter-Terrorist Financing (AML/CFT) Mijay Group BUSINESS LOGISTICS LIMITED is subject to legal obligations regarding anti-money laundering and counter-terrorist financing, in accordance with applicable Chinese laws and the recommendations of the FATF (Financial Action Task Force). In this capacity, Mijay Group BUSINESS LOGISTICS LIMITED may: • Verify the identity of its clients (KYC – Know Your Customer procedures) when opening an account or for transactions exceeding certain thresholds; • Request supporting documentation regarding the origin of funds for certain transactions; • Report any suspicious transactions to the relevant authorities; • Refuse to engage with individuals listed on international sanctions lists (OFAC, UN, EU). The user agrees not to use the platform to launder money, finance illegal activities, or circumvent international sanctions. Any violation will result in the immediate closure of the account and a report to the authorities. 5.2 Anti-Counterfeiting Policy Mijay Group BUSINESS LOGISTICS LIMITED undertakes not to facilitate the marketing of counterfeit products or products infringing the intellectual property rights of third parties. As part of the sourcing process, it is the Client's responsibility to ensure that the products ordered comply with the applicable intellectual property rights in the country of destination. Mijay Group BUSINESS LOGISTICS LIMITED disclaims all liability in the event of customs seizure of counterfeit goods ordered by a Client. The Client is solely responsible for the legal and financial consequences of such an infringement. Any rights holder wishing to report an infringement of their rights may contact: contact@mijaygroup.com with the subject line "Intellectual Property Report". 5.3 Environmental Policy & CSR Mijay Group BUSINESS LOGISTICS LIMITED is committed to reducing the environmental impact of its activities, in particular through: • The digitization of documents (contracts, invoices, training certificates); • Raising awareness among customers and suppliers about modes of transport with a lower carbon footprint; • Optimizing loads to reduce the number of trips; • Prioritizing accommodation providers using renewable energy sources. 5.4 Changes to the Terms and Conditions Mijay Group BUSINESS LOGISTICS LIMITED reserves the right to modify these General Terms and Conditions of Sale, General Terms and Conditions of Use, Legal Notices, or any other policy at any time. Modifications take effect upon their publication on the platform. Registered users are notified of substantial changes by email at least 15 days before they take effect. Continued use of the platform after this period constitutes acceptance of the new terms and conditions. In case of disagreement, the user may close their account in accordance with the procedures set out in Article 3.8. 5.5 Entire Agreement These General Terms and Conditions of Sale/Terms of Use, the Data Protection Policy, the Legal Notices, and any specific contract signed with the Client constitute the entire agreement between the parties and supersede all prior agreements, negotiations, or proposals relating to its subject matter. If any provision of these Terms and Conditions is declared invalid or unenforceable by a court of competent jurisdiction, such invalidity shall not affect the validity of the remaining provisions, which shall remain in full force and effect. 5.6 Assignment Mijay Group BUSINESS LOGISTICS LIMITED may assign all or part of its rights and obligations under this Agreement to a third party (including in the context of a merger, acquisition, change of control, or restructuring), provided that it informs users within a reasonable timeframe. Users may not assign their rights and obligations under this Agreement without the prior written consent of Mijay Group BUSINESS LOGISTICS LIMITED. 5.7 Transaction Archiving In accordance with Article L.134-2 of the French Consumer Code and applicable Chinese law, Mijay Group BUSINESS LOGISTICS LIMITED archives contracts concluded electronically for amounts exceeding €120 (or equivalent) for a period of 10 years. These archives are accessible upon request at: contact@mijaygroup.com 5.8 Applicable Law & Jurisdiction These Terms and Conditions and all legal documents of the platform are governed by the laws of the People's Republic of China, including: • The Electronic Commerce Law (2019); • The Consumer Protection Law (2013, as amended); • The Contract Law (2020 – Civil Code of the PRC); • The Network Security Law (2017); • The Personal Information Protection Law – PIPL (2021). Any dispute relating to these Terms and Conditions shall be subject to the exclusive jurisdiction of the courts of [City Name], unless otherwise required by mandatory law applicable to the consumer due to their place of residence. The parties agree to first seek an amicable solution within 60 days. For users residing in a Member State of the European Union, the mandatory rights conferred by the legislation of their country of residence remain applicable. 5.9 Contact & Complaints Email address: contact@mijaygroup.com Website: https://mijaygroup.com Postal address: Room 2502C, 25/F, 148 Electric Road, North Point, Hong Kong Data Protection Officer (DPO): contact@mijaygroup.com Payment complaints: contact@mijaygroup.com (subject: "Payment Dispute No. [Order]") Security report: contact@mijaygroup.com (subject: "Security Incident") Accessibility: contact@mijaygroup.com (subject: "Accessibility") Intellectual Property: contact@mijaygroup.com (subject: "IP Report") Document created on March 30, 2026 — Version 1.0 Mijay Group BUSINESS LOGISTICS LIMITED — https://mijaygroup.com Governing Law People's Republic of China