1. Introduction

Guardstone Technology ("we," "us," or "our") is committed to protect the privacy and data privacy rights, as well as to employ reasonable measures to protect the confidentiality of personal information entrusted to us by our clients, investors, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with applicable privacy laws and regulations. As an investment company, we understand the sensitive nature of financial information and maintain the highest standards of data protection and confidentiality.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

Identity Information:

• Full name, date of birth, nationality
• Government-issued identification numbers
• Photographs for identity verification
• Digital signatures

Contact Information:

• Mailing address, email address, phone numbers
• Emergency contact information
• Preferred communication methods

Financial Information:

• Bank account details and routing information
• Investment account information
• Income and net worth documentation
• Tax identification numbers
• Credit history and references
• Investment objectives and risk tolerance

Professional Information:

• Employment details and income verification
• Business affiliations and directorships
• Professional licenses and certifications

2.2 Automatically Collected Information

When you visit our website or use our digital services, we may automatically collect:

• IP addresses and device identifiers
• Browser type and version
• Operating system information
• Website usage patterns and preferences
• Cookies and similar tracking technologies

3. How We Use Your Information

3.1 Investment Services

• Opening and maintaining investment accounts
• Processing transactions and managing portfolios
• Providing investment advice and recommendations
• Conducting investment research and analysis
• Generating account statements and reports

3.2 Compliance and Legal Obligations

• Verifying identity and conducting due diligence
• Complying with anti-money laundering (AML) requirements
• Meeting Know Your Customer (KYC) obligations
• Regulatory reporting and record-keeping
• Preventing fraud and financial crimes

3.3 Customer Service and Communication

• Responding to inquiries and providing support
• Sending account updates and important notices
• Providing investment education and market insights
• Conducting client satisfaction surveys

3.4 Business Operations

• Risk management and internal controls
• System maintenance and security monitoring
• Business continuity planning
• Statistical analysis and reporting

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information in the following circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in custodial and clearing services, technology and data processing services, professional services (legal, accounting, audit), and marketing and communications services. All service providers are contractually required to maintain confidentiality and use information only for specified purposes.

4.2 Legal and Regulatory Requirements

We may disclose information when required by court orders, subpoenas, or legal process; regulatory authorities and government agencies; law enforcement investigations; and compliance with securities laws and regulations.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the business transaction, subject to confidentiality obligations.

4.4 Consent

We may share information with your explicit consent or as directed by you.

5. Data Security

We implement comprehensive security measures to protect your personal information:

5.1 Technical Safeguards

• Encryption of data in transit and at rest
• Multi-factor authentication systems
• Secure firewalls and intrusion detection
• Regular security updates and patches
• Secure data centers with physical access controls

5.2 Administrative Safeguards

• Employee background checks and training
• Access controls based on job responsibilities
• Regular security audits and assessments
• Incident response procedures
• Business continuity and disaster recovery plans

5.3 Physical Safeguards

• Restricted access to facilities and equipment
• Secure storage of physical documents
• Proper disposal of sensitive materials
• Environmental controls and monitoring

6. Your Rights

You have the right to:

• Access your personal information
• Request corrections to inaccurate data
• Opt out of marketing communications
• Request deletion of certain information

7. Data Retention

We retain your information as long as your account remains active, as required by law or regulation, or as necessary for business purposes.

8. Contact Information

For privacy questions or concerns, contact us at:

GUARDSTONE TECHNOLOGY INVESTMENT COMPANY LIMITED
Business Address: Vistra Corporate Services Centre, Wickhams Cay II, Road Town, Tortola, VG1110, British Virgin Island

9. Updates

We may update this Privacy Policy periodically. Changes will be posted on our website with the effective date.