Privacy Policy & Data Governance Mandate

Effective Date: June 2026

1. Executive Introduction

At Vortex Capital Holdings, we recognize that the protection of sensitive investor information is not merely a legal obligation—it is a cornerstone of our professional reputation and corporate governance framework. This Privacy Policy serves as a formal data governance mandate detailing our standards for the collection, processing, storage, protection, and lawful use of information entrusted to us by investors, partners, and visitors.

We are committed to maintaining a secure, transparent, and accountable financial ecosystem. Our operational practices are designed to align with internationally recognized privacy principles, including the General Data Protection Regulation (GDPR) (EU) 2016/679, applicable anti-money laundering regulations, financial compliance standards, and industry best practices for information security.

By accessing our platform, creating an account, utilizing our services, or otherwise interacting with Vortex Capital Holdings, you acknowledge and accept the practices described within this Privacy Policy and Data Governance Mandate.

2. Legal Basis for Processing

Vortex Capital Holdings processes Personal Data only where a lawful basis exists. We maintain strict controls to ensure that all information processing activities remain compliant with applicable regulations and contractual obligations.

• Contractual Necessity: Data processing is required to establish client accounts, execute transactions, administer investments, and provide requested services.
• Regulatory Compliance: We are obligated to conduct Know-Your-Customer (KYC), Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), sanctions screening, and related compliance procedures.
• Legitimate Business Interests: We process information to secure our infrastructure, improve platform performance, prevent fraud, monitor risk exposure, and protect the interests of clients and stakeholders.
• Legal Obligations: Certain records must be retained and processed in accordance with financial reporting, taxation, and regulatory requirements.
• User Consent: Where required by law, we obtain and rely upon user consent for specific processing activities.

3. Comprehensive Data Inventory

To facilitate secure investment operations and maintain regulatory compliance, we collect and maintain a comprehensive data profile including, but not limited to:

• Identity Documentation: Full legal names, dates of birth, government-issued identification documents, residential addresses, nationality information, and proof-of-age verification.
• Financial Intelligence: Deposit records, withdrawal records, transaction histories, portfolio allocations, account balances, investment performance metrics, payment information, and historical ledger data.
• Technical Authentication: IP addresses, browser configurations, device identifiers, operating system information, encrypted session credentials, login history, and security event logs.
• Communication Records: Customer support interactions, compliance communications, email correspondence, verification submissions, and service-related notifications.
• Operational Analytics: Usage patterns, platform activity, risk indicators, and engagement metrics utilized to improve service quality and operational efficiency.

4. Institutional Security Protocols

Vortex Capital Holdings employs a comprehensive, multi-layered security architecture designed to safeguard client assets, sensitive information, and operational systems against unauthorized access, misuse, disclosure, alteration, or destruction.

Our security framework includes:

• Encrypted data transmission protocols.
• Advanced access-control systems and authentication safeguards.
• Continuous infrastructure monitoring and threat detection.
• Secure cloud-hosted environments and redundant backup systems.
• Periodic vulnerability assessments and security audits.
• Employee confidentiality agreements and restricted-access policies.
• Fraud monitoring systems and transaction surveillance mechanisms.

Access to sensitive information is granted only to authorized personnel whose responsibilities require such access and who are subject to strict confidentiality obligations.

5. Operational Use & Strategic Optimization

Information collected by Vortex Capital Holdings is utilized to support the delivery of secure and efficient financial services, including:

• Account Administration: Establishing, maintaining, and servicing client accounts.
• Investment Operations: Processing transactions, facilitating account activity, and providing portfolio management services.
• Risk Management: Detecting suspicious behavior, preventing fraud, and protecting platform integrity.
• Strategic Analytics: Conducting operational analysis to improve products, services, and user experiences.
• Institutional Reporting: Delivering performance summaries, account statements, market intelligence, and investment reporting.
• Regulatory Compliance: Maintaining records and fulfilling statutory reporting obligations.

6. Data Sharing & Global Sovereignty

Vortex Capital Holdings adheres to principles of confidentiality and data minimization. We do not sell personal information to third parties.

Information may be shared only when necessary for legitimate operational purposes, including:

• Authorized Service Providers: Technology vendors, compliance providers, payment processors, and professional service firms operating under contractual confidentiality obligations.
• Regulatory Authorities: Financial regulators, courts, law enforcement agencies, and governmental authorities where disclosure is legally required.
• Professional Advisors: Auditors, accountants, legal counsel, and compliance consultants supporting our business operations.
• Business Successors: In connection with mergers, acquisitions, restructuring activities, or asset transfers, subject to applicable confidentiality protections.

7. International Data Transfers

Given the global nature of financial markets and digital infrastructure, information may be transferred, stored, or processed in jurisdictions outside your country of residence.

Where such transfers occur, Vortex Capital Holdings implements appropriate safeguards designed to ensure that personal information remains protected and processed in accordance with applicable privacy regulations and internationally recognized standards.

8. Explicit User Rights

Subject to applicable laws and regulations, users may exercise the following rights:

1. Right of Access: Request information regarding personal data held by the Company.
2. Right to Portability: Receive eligible information in a structured and machine-readable format.
3. Right of Rectification: Request correction of inaccurate or incomplete information.
4. Right to Restrict Processing: Request limitations on certain processing activities where legally applicable.
5. Right to Object: Object to specific forms of processing under applicable law.
6. Right to Erasure: Request deletion of eligible information, subject to mandatory legal and regulatory retention requirements.
7. Right to Withdraw Consent: Withdraw consent where consent serves as the legal basis for processing.

9. Data Retention Policy

Personal information is retained only for as long as necessary to fulfill contractual obligations, satisfy legal and regulatory requirements, resolve disputes, enforce agreements, and support legitimate business operations.

Retention periods may vary depending upon the nature of the information, applicable financial regulations, taxation requirements, and compliance obligations.

10. Cookies & Website Technologies

Our platform may utilize cookies, analytical tools, and related technologies to enhance website functionality, maintain security, analyze user engagement, and improve service delivery.

Users may control cookie preferences through browser settings, although certain website functions may be impacted if such technologies are disabled.

11. Governance Contact Information

Should you require clarification regarding our privacy practices or wish to exercise your rights, please direct correspondence to:

General Support: [email protected]
Compliance Division: [email protected]
Attn: Data Protection Officer (DPO)

12. Policy Amendments

Vortex Capital Holdings reserves the right to amend, revise, or update this Privacy Policy and Data Governance Mandate periodically to reflect changes in regulatory requirements, operational practices, technological developments, or legal obligations.

The most current version will remain available through our official platform. Continued use of our services following any update constitutes acceptance of the revised terms.

Final Provision: This document constitutes the formal data governance agreement between you and Vortex Capital Holdings. We remain committed to maintaining the highest standards of confidentiality, transparency, security, and regulatory responsibility. Your continued engagement with our platform signifies your acknowledgment and acceptance of these policies.