privacy

PRIVESTIA WEBSITE PRIVACY NOTICE 1. Important information and who we are Purpose of this privacy notice This privacy notice describes how Privestia Limited (and certain affiliates) treats personal information we collect through your use of www.privestia.co.uk website. This privacy notice is not intended to override any other privacy notice we provide you in specific circumstances. If you have any questions about this privacy notice or how we treat your personal information, please contact us at: info@privestia.co.uk Third-party links This website may include links to third-party websites with their own privacy notices. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and we encourage you to read their privacy notices carefully. If you are in the European Union or European Economic Area you can find out more about your rights in relation to your personal information that we handle. 2. What personal information do we collect? We may collect, use, store, transfer, and share different kinds of information about you through our website, such as: • Technical Information, including your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform on the devices you use to access this website. • Usage Information, namely, information about how you use our website including how long you spend on it, which pages you visit, and we can determine links that led you to our website. We also may collect, use, and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal information but does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Information to calculate the percentage of users accessing a specific website feature. 2 Rev.11.13.19 3. How is your personal information collected? We collect personal information through: • Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Information about your equipment and browsing. We collect this personal information by using cookies and server logs. • Third parties or publicly available sources. We may receive personal information about you from various third parties as set out below. • Technical Information through the tools ensuring functionality and security of the website and web analytics tools. 4. How do we use your personal information? We will only use your personal information when the law allows us to. We use your personal information to ensure functionality and security of the website through the use of web analytics tools (cookies). When you visit our website, you will have the opportunity to accept or reject certain cookies. You can also set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Some web browsers may transmit “do-not-track” (DNT) signals. We currently do not respond to DNT settings in your web browser. We use cookies only for administering the website and ensuring website security. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. 5. How do we share your personal information? We may share your personal information with the parties set out below: • External Third Parties: • Analytics. We may use analytics tools provided by Google to help us understand how people use our website. You can learn more about how Google collects and uses information as a part of its tools HERE. • Protection of our clients and services. We may disclose your personal information to third parties such as law enforcement if we believe disclosure is necessary under applicable law or appropriate to prevent harm or loss, or in connection with an investigation of suspected or actual illegal activity. 3 Rev.11.13.19 6. How long do we use your personal information for? We will only retain your personal data for as long as necessary to fulfill any lawful purposes we collected it for. In most cases, this will mean that we keep personal information about you for the period of two years. 7. How do we secure your personal information? We use reasonable technical, administrative and physical security measures to protect your personal information. We of course cannot guarantee that any information, during transmission through the Internet or while stored on our systems or otherwise in our care, will be absolutely safe from unauthorized access or use. 8. Children’s privacy Our services are not directed at individuals under the age of 18. We do not knowingly collect information from children under the age of 18. 9. Changes to this privacy notice We may change this privacy notice from time to time and will make it available on this website. If you are also an investor in Privestia, when the changes to the privacy policy affect you materially, we will update you by posting the changed privacy notice on the Investor Reporting Portal with a new “Last Updated” date or other method that is your designated communication preference. 10. Information Collected from Individuals in the European Union and European Economic Area Purposes for which we will use your personal information The table below describes how we may use your personal information and on what basis. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal information on more than one basis depending on the purpose for which we are using your information. Please contact us if you have questions or would like further information. Purpose/Activity Type of information EU legal basis for processing To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) • Technical • Usage • Your consent and necessity for our legitimate interests of running and safeguarding our business, providing administration and IT services, ensuring network security, and preventing fraud (Art. 6/1/a and 4 Rev.11.13.19 Art. 6/1/f GDPR) To use data analytics to improve our website, products/services, marketing, investor relationships and experiences • Technical • Usage • Consent and necessity for our legitimate interests to keep our website secure, functional, updated, and relevant (Art. 6/1/a and Art. 6/1/f GDPR). Your legal rights You have various rights under the European Union General Data Protection Regulation in relation to the personal information we hold about you. These include: • the right to request access to your personal information and obtain a copy of the information we hold about you; • the right to correct your personal information that we hold where it is incomplete or inaccurate; • the right to have your personal information erased where there is no good reason for us continuing to use or retain it; • the right to request that your personal information is used only for restricted purposes; • if the lawful basis for processing your personal information is either our or a third party’s legitimate interests, the right to object to your personal information being processed; • the right to require certain of your personal information to be transferred to you or a third party; and • the right to lodge a complaint with the relevant data protection authority in your jurisdiction  If you wish to exercise any of these rights, please contact info@privestia.co.uk  We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or detailed. In this case, we will notify you and keep you updated. 5 Rev.11.13.19 Cookies We use cookies to administer the website (Art. 6/1/a and Art. 6/1/f GDPR). The table below describes the names of the cookies, the provider, the purpose, the type and if EU personal data is processed: Name Provider Purpose Expiry Type EU Personal Data cookie_notice_accepted Digital Factory Indicates whether user has accepted the terms of the cookie notice. Temporarily stores “Yes” or “No” response until user ends its session. Session Necessary for site functionality No personally identifiable information is stored. X-Mapping Riverbed This cookie is necessary for proper operation of the website. Session Necessary for site functionality No personally identifiable information is stored in the cookie. _ga Google Used to distinguish users. 24 hours Traffic measurement analysis Google Analytics, set with the AnonymiseIP Flag to true, meaning that the last octet of your IP address won't be logged, making it anonymous. No other user identifiable pieces of data are captured.] See also Google Privacy Policy Google Used to distinguish users. Two years Traffic measurement analysis Google Analytics, set with the AnonymiseIP Flag to true, meaning that the last octet of your IP address won't be logged, making it anonymous. No other user identifiable pieces of data are captured. See also Google Privacy Policy 6 Rev.11.13.19 Granting of your consent You can consent to the use of cookies by clicking “ACCEPT” in the pop-up window. Revocation of your consent You can revoke your consent to third-party tracking technologies at any time with effect for the future by blocking cookies using your browser’s settings. The links below will take you to the ‘Help' sections for each of the major browsers so that you can find out more about how to manage your cookies (these sites are in English). Internet Explorer https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-managecookies (opens in a new window) Firefox http://support.mozilla.org/en-US/kb/Cookies (opens in a new window) Google Chrome http://support.google.com/chrome/bin/answer.py?hl=en&answer=95647 (opens in a new window) Safari https://www.apple.com/legal/privacy/en-ww/ (opens in a new window) Scroll down to section: Cookies and Other Technologies Safari iOS https://support.apple.com/en-us/HT201265 (opens in a new window) Android https://support.google.com/chrome/answer/95647? (opens in a new window) Blackberry http://uk.blackberry.com/legal/privacy-policy.html#types-info-d (opens in a new window) Devices connected to your Microsoft Account https://account.microsoft.com/account/privacy?refd=account.live.com&destrt=privacydashboard&lang=en-GB (opens in a new window)