Date Protection in the Cayman Islands — Privacy Notice
This privacy notice explains the manner in which the company collects, processes and maintains personal data about investors of the company pursuant to the Data Protection Law, 2017 of the Cayman Islands, as amended from time to time and any regulations, codes of practice or orders promulgated pursuant thereto (“DPL”).
The company is committed to processing personal data in accordance with the DPL. In its use of personal data, the company will be characterized under the DPL as a ‘data controller’, whilst certain of the company’s service providers, affiliates and delegates may act as ‘data processors’ under the DPL. These service providers may process personal information for their own lawful purposes in connection with services provided to the company.
By virtue of making an investment in the company, the company and certain of the company’s service providers may collect, record, store, transfer and otherwise process personal data by which individuals may be directly or indirectly identified.
Your personal data will be processed fairly and for lawful purposes, including (a) where the processing is necessary for the company to perform a contract to which you are a party or for taking pre-contractual steps at your request (b) where the processing is necessary for compliance with any legal, tax or regulatory obligation to which the company is subject or (c) where the processing is for the purposes of legitimate interests pursued by the company or by a service provider to whom the data are disclosed. As a data controller, we will only use your personal data for the purposes for which we collected it. If we need to use your personal data for an unrelated purpose, we will contact you.
We anticipate that we will share your personal data with the company’s service providers for the purposes set out in this privacy notice. We may also share relevant personal data where it is lawful to do so and necessary to comply with our contractual obligations or your instructions or where it is necessary or desirable to do so in connection with any regulatory reporting obligations. In exceptional circumstances, we will share your personal data with regulatory, prosecuting and other governmental agencies or departments, and parties to litigation (whether pending or threatened), in any country or territory including to any other person where we have a public or legal duty to do so (e.g. to assist with detecting and preventing fraud, tax evasion and financial crime or compliance with a court order).
Your personal data shall not be held by the company for longer than necessary with regard to the purposes of the data processing.
We will not sell your personal data. Any transfer of personal data outside of the Cayman Islands shall be in accordance with the requirements of the DPL. Where necessary, we will ensure that separate and appropriate legal agreements are put in place with the recipient of that data.
The company will only transfer personal data in accordance with the requirements of the DPL, and will apply appropriate technical and organizational information security measures designed to protect against unauthorized or unlawful processing of the personal data and against the accidental loss, destruction or damage to the personal data.
If you are a natural person, this will affect you directly. If you are a corporate investor (including, for these purposes, legal arrangements such as trusts or exempted limited partnerships) that provides us with personal data on individuals connected to you for any reason in relation to your investment into the company, this will be relevant for those individuals and you should inform such individuals of the content.
You have certain rights under the DPL, including (a) the right to be informed as to how we collect and use your personal data (and this privacy notice fulfils the Company’s obligation in this respect) (b) the right to obtain a copy of your personal data (c) the right to require us to stop direct marketing (d) the right to have inaccurate or incomplete personal data corrected (e) the right to withdraw your consent and require us to stop processing or restrict the processing, or not begin the processing of your personal data (f) the right to be notified of a data breach (unless the breach is unlikely to be prejudicial) (g) the right to obtain information as to any countries or territories outside the Cayman Islands to which we, whether directly or indirectly, transfer, intend to transfer or wish to transfer your personal data, general measures we take to ensure the security of personal data and any information available to us as to the source of your personal data (h) the right to complain to the Office of the Ombudsman of the Cayman Islands and (i) the right to require us to delete your personal data in some limited circumstances.