1. Disclaimer

This information has been provided in good faith and from sources believed to be reliable, but no guarantee is given as to its accuracy. Past performance is no guarantee of future returns, and investors may get back less than the amount originally invested. The value of investments can go down as well as up.

The information contained in this document is provided for information purposes only and does not constitute investment advice. Potential investors are reminded to seek professional advice before investing.

Dissemination of this information is strictly prohibited, and the content remains the property of Capital Bridge Investments Limited, a company incorporated in the Dubai International Financial Centre and regulated by the Dubai Financial Services Authority.

Capital Bridge Investments Limited is regulated by the DFSA for the provision of Managing a Collective Investment Fund and Advising on Financial Products, which are restricted to the management and provision of advice in respect of Qualified Investor Funds (QIFs).

All communications and services are directed exclusively at Market Counterparties and Professional Clients. Persons other than Market Counterparties and Professional Clients, such as Retail Clients (as defined in the DFSA Rulebook), are NOT the intended recipients of our communications or services.

Capital Bridge Investments Limited is a company established in the DIFC pursuant to the DIFC Companies Law, with registration number CL8499.

2. Privacy Notice

Effective Date:

Introduction

Capital Bridge Investments Limited (“CBIL”, “we”, or “us”) is committed to protecting the privacy and security of your personal information (“PI”), including sensitive personal information (“SPI”). This Privacy Notice explains how we collect, use, disclose, and protect your PI, as well as your rights concerning your data.

This Notice is aligned with the requirements of the Dubai International Financial Centre (DIFC) Data Protection Law No. 5 of 2020 and other relevant regulations.

Information We Collect

PI refers to any information that relates to an identifiable individual. We may collect the following types of PI, depending on our relationship with you and the services we provide:

• Identification Data: Full name, title, gender, marital status, date of birth, passport number, national identification number, signature.
• Contact Data: Personal and business address, telephone number, email address.
• Electronic Monitoring Data: To the extent permitted by law, we may record and monitor your electronic communications with us, including telephone conversations, email, and instant messaging.
• Financial Data: Account number, account statements, investment history.
• Professional Information: Position/job title, business address, business telephone number, business email address.
• Services Data: Payment details, details of services provided to or by us.
• Sensitive Personal Information: In limited circumstances, we may collect information about criminal convictions and offenses (when legally required) and political affiliations (to determine if you are a politically exposed person).

How We Collect Information

We collect PI in several ways, including:

• Directly from you when you use our services or interact with us.
• From your organization or entity if they are a client or vendor of CBIL.
• Throughout our relationship with you, as your details or the services we provide change.
• From public sources/registers and third parties (e.g., credit reference agencies, World-Check).
• From visits to our websites or online services.

Providing certain PI may be necessary for us to deliver the requested services. If you do not provide this information, we may be unable to provide those services.

How We Use Your Information (Purposes of Processing)

We process your personal data for the following lawful purposes:

• Providing and managing services: To deliver the financial services you’ve requested, including account management, transaction processing, and client reporting.
• Client onboarding and due diligence: To conduct necessary checks, including anti-money laundering (AML), anti-terrorism financing (ATF), sanctions screening, and fraud prevention, as required by DIFC regulations.
• Compliance with legal and regulatory obligations: To comply with applicable laws and regulations in the DIFC and other relevant jurisdictions.
• Marketing and communication: To send you marketing communications and service updates (with your consent).
• Research and analysis: To improve our services and understand client needs.
• IT security and operations: To ensure the security and integrity of our systems and data.

Lawful Basis for Processing

We process your personal data based on one or more of the following lawful bases:

• Contractual necessity: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legal obligation: Processing is necessary to comply with a legal obligation to which we are subject.
• Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
• Consent: You have given clear consent for us to process your personal data for a specific purpose.

Your Rights

Under the DIFC Data Protection Law, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request that we correct any inaccurate or incomplete personal data.
• Right to erasure: Request that we erase your personal data in certain circumstances.
• Right to restriction of processing: Request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability: Request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: Object to the processing of your personal data in certain circumstances.
• Right to withdraw consent: Withdraw your consent at any time where we rely on consent to process your data.

To exercise any of these rights, please contact us using the details below.

User Control & Preferences

You have the right to control your personal data and preferences. You can update your contact information, communication preferences, and marketing consent at any time by contacting us using the details provided below.

Data Sharing

We may share your personal data with:

• Third Parties: When required by law or for legitimate business purposes (e.g., auditors, regulators, tax authorities, technology providers), subject to appropriate safeguards.

International Data Transfers

We may transfer your data outside the DIFC, including to countries with potentially different data protection laws. We will only transfer your data to jurisdictions deemed adequate by the DIFC Commissioner of Data Protection or implement appropriate safeguards, such as Standard Contractual Clauses or Binding Corporate Rules.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Notice or longer as required by law.

• Client data: Retained for at least 6 years after the termination of our relationship with you.
• AML/KYC data: Retained for at least 6 years after the termination of our relationship with you.
• Marketing data: Retained until you withdraw your consent or for up to 1 year after our last interaction.

Data Security

We implement appropriate technical and organizational measures to safeguard your data against unauthorized access, misuse, loss, or disclosure, including encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms:

• We will notify the DIFC Commissioner of Data Protection within 72 hours of becoming aware of the breach.
• We will inform affected individuals without undue delay if the breach poses a high risk to their rights and freedoms.

Cookies and Similar Technologies

Our website may use cookies and similar technologies to enhance your browsing experience. You can manage your cookie preferences through your browser settings. Disabling cookies may impact the functionality of our website.

Updates to this Notice

We may update this Privacy Notice periodically. Please check our website for the latest version. We will notify you of any material changes through appropriate channels.

Contact Us

If you have questions or concerns about this Privacy Notice, please contact our Data Protection Contact Person:

• Email: contact@cbi-difc.com
• Address: Capital Bridge Investments Limited; Liberty House, Suite #708; DIFC, Dubai
• Phone: +971 4 553 9800

You may also contact the DIFC Commissioner of Data Protection:

• Email: commissioner@dp.difc.ae
• Phone: +971 4 362 2222

Complaints

If you have concerns about how your personal data is processed, please contact us at contact@cbi-difc.com You also have the right to lodge a complaint with the DIFC Commissioner of Data Protection or another competent authority.