ORYVEN SOLUTIONS PTE. LTD. · UEN 202643771N

Cookie Policy

Edition 1.0 · Effective 28 September 2026

1. Scope and relationship to the Privacy Policy

This Cookie Policy explains the use of cookies and similar technologies on Oryven Solutions Pte. Ltd.'s website and applicable online services. It complements our Privacy Policy, which explains personal-data purposes, recipients, international processing, retention and individual rights. Particular applications and embedded services may have different technical configurations, as identified in the applicable technology register.

The categories below explain possible functions, not a claim that every category is currently deployed. Schedule A records the current public marketing website configuration reviewed on 28 September 2026. Separate product applications and future integrations require their own review.

2. Cookies and related technologies

A cookie is a small item of information stored or read by a browser for a website. Session cookies are generally associated with a browsing session; persistent cookies can remain for a specified period. Browser settings, session restoration and other behaviour can affect when stored information is removed.

Similar technologies include local or session storage, tracking pixels, tags and software identifiers. A cookie policy must not overlook an optional tracker merely because it uses a pixel or a server-side event instead of a traditional browser cookie. Some essential server logs operate separately from cookies and are addressed in the Privacy Policy.

A first-party technology is supplied through the visited service; a third-party technology involves another provider. A provider can receive information when an embedded map, booking tool, form, video or other resource is loaded, sometimes before the visitor actively uses it. Whether any such resource is deployed must be verified rather than assumed.

3. Purposes and categories

A single technology may perform several functions. It must not be placed in the necessary category merely because one of its uses is useful to Oryven. Where functions cannot be separated, its activation must respect the applicable optional purposes and choices.

4. Information that may be processed

Depending on the technology, information can include a session identifier, consent selection, IP address, browser or device characteristics, timestamps, referring pages, pages visited and interaction events. Such information may be personal data where it identifies a person alone or with other available information. A technical identifier is not automatically anonymous.

The technology register explains the actual identifier, provider, scope, purpose, storage period and control. It must also distinguish browser/device storage lifetime from any longer period for which related information is held on a server. Removing a browser cookie does not necessarily delete data already held by a provider.

5. Consent and meaningful choices

For optional analytics, advertising and other non-essential tracking, Oryven's operating standard is prior opt-in. This is a design choice for these services, not a statement that every cookie on every Singapore website legally requires the same consent mechanism. Necessary processing still requires an appropriate assessment under applicable law.

Where optional tracking is offered, the choice mechanism will allow you to accept or reject optional categories and change your choice later. Rejection must be as accessible as acceptance, and optional categories must not be preselected. Continuing to browse, failing to change browser settings, or accepting the Terms and Conditions is not treated as blanket consent to optional tracking.

Before optional technologies are introduced, the controls must prevent the relevant scripts, embeds and events from operating until the required choice is made. A visual banner without effective blocking is not the intended standard. Optional marketing must not be made a condition of obtaining a service that does not need it.

6. Changing or withdrawing a choice

Where optional tracking is offered, use the cookie-settings control on that property to change your selection. The current public marketing website does not offer optional tracking or a cookie-preference control. A change applies to subsequent optional processing within the scope of the relevant control; it does not invalidate processing that occurred lawfully before the change.

Choices may be browser-, device- or property-specific. Deleting storage, switching browsers or using a different device can require a new selection. We may retain a limited consent record to demonstrate and respect the choice. We will not use a refusal record to resume advertising or treat the refusal as consent.

Where a provider's own cookie cannot be removed by Oryven's control, the register or accompanying guidance should explain the relevant provider and available removal options. Oryven's settings do not promise to alter every independent third-party account or device preference.

7. Browser controls and embedded services

Most browsers provide options to inspect, block or remove stored cookies and similar information. Available controls vary. Disabling a required session or authentication technology can prevent a requested function from operating. Blocking all cookies does not necessarily prevent every form of network logging or server-side processing.

An optional embedded service should not load tracking merely because its placeholder is displayed. Where appropriate, a separate choice may be requested before it loads. Enabling a customer-selected integration can also involve processing governed by the integration provider's terms. Our responsibility for our own collection and disclosure is not removed by describing a provider as third party.

8. Providers, transfers and retention

The current register must identify the actual providers and relevant privacy information rather than copy another company's cookie list. Where a provider processes personal data, its role, purpose and international processing must be assessed in line with the Privacy Policy and applicable agreements.

Storage periods should be limited to the relevant purpose and reviewed when technologies change. Session storage, persistent cookies, consent evidence and server records can have different lifetimes; those differences must be documented. A legal preservation requirement may affect related records without authorising continued optional tracking.

9. Changes and contact

A material new optional purpose or provider must be reflected in the notice and choice mechanism before activation, with a new choice where required. The current approved edition will display its effective date. Previous approved editions and evidence of changes should remain available through Oryven's controlled records.

Questions or concerns may be directed to the Data Protection Officer, Oryven Solutions Pte. Ltd., 7 Temasek Boulevard, #12-07, Suntec Tower One, Singapore 038987, at dpo@oryvensolutions.com. Personal-data requests are handled as explained in the Privacy Policy.

Schedule A. Actual technology register

Source review dated 28 September 2026: the five public marketing pages and their authored JavaScript contain no cookie writes, local or session storage, IndexedDB, optional analytics or advertising tags, or third-party script/iframe embeds. This is a source-level review, not a full browser, hosting-platform or server-side audit; it does not establish that every hosting response is cookie-free.

A1. Property-level record

A2. Record for each actual technology

A3. Release record

Approved for publication on 28 September 2026 with the review scope above. No optional tracking activation or consent-blocking test is claimed because no optional tracking is implemented in the reviewed authored code. Reassess the register and test consent, rejection and withdrawal before introducing any optional technology. Hosting-level or application-level technologies must be assessed separately when applicable.