We may collect and process the following categories of personal data:

• Identity Data: Full name, title, date of birth, nationality, gender, passport details, national ID numbers, and other identification documents.
• Contact Data: Residential address, email address, telephone number, and other contact information.
• Financial Data: Bank account details, investment portfolios, payment history, financial status, tax identification numbers, and credit history.
• Technical Data: IP address, browser type, time zone settings, operating system, platform, and other technology on the devices you use to access our website.
• Usage Data: Information about how you use our website, products, and services.
• Marketing and Communications Data: Preferences in receiving marketing from us and your communication preferences.
• KYC and AML Data: Information collected as part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance, including background checks.

We collect your personal data in a variety of ways, including:

• Direct interactions when you fill in forms, correspond with us by email, phone, post, or otherwise.
• Automated technologies as you interact with our website (via cookies and similar technologies).
• Third parties or publicly available sources, such as financial institutions, credit reference agencies, identity verification services, and regulatory databases.

We may share your personal data with:

• Our affiliates and subsidiaries for internal administrative purposes.
• Third-party service providers who provide services such as IT, compliance support, payment processing, auditing, and legal services.
• Regulatory authorities, law enforcement agencies, courts, or government bodies when required to comply with legal or regulatory obligations.
• Business partners where you have provided your consent or when it is necessary for the performance of a contract.

All third parties are required to respect the security of your personal data and to treat it in accordance with the law. We do not allow our service providers to use your personal data for their own purposes.

Given the global nature of our business, your personal data may be transferred to, and processed in, countries outside the European Economic Area ("EEA") that may not provide the same level of protection for personal data as within the EEA.

Whenever we transfer your personal data outside the EEA, we ensure that a similar degree of protection is afforded to it by ensuring appropriate safeguards are implemented, such as:

• The use of Standard Contractual Clauses approved by the European Commission.
• Ensuring that the country has been deemed to provide an adequate level of protection by the European Commission.

We have implemented appropriate technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include secure servers, encryption, access controls, and regular security assessments.

However, the transmission of information via the internet is not completely secure. Whilst we strive to protect your personal data, we cannot guarantee the security of data transmitted to our website; any transmission is at your own risk.

We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we retain personal data for a minimum of five (5) years after the termination of a client relationship, in line with regulatory obligations.

We may send you marketing communications about our products and services if you have provided your consent or if you are an existing client and such communications relate to similar products and services.

You can opt-out of receiving marketing communications at any time by following the unsubscribe instructions in any marketing email or by contacting us at gdrp@normaxcapital.com.

Our website uses cookies and similar technologies to enhance user experience and analyse website traffic. For detailed information on the cookies we use and the purposes for which we use them, please refer to our Cookie Policy.

We reserve the right to update or amend this Privacy Policy at any time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We encourage you to review this Policy periodically.

Any changes to this Policy will become effective upon posting the revised Policy on our website. Your continued use of the website and our services after any such changes have been posted constitutes your acceptance of the revised Policy.