Privacy and Data Protection

At Crownstone Financial, your privacy is a priority. We are committed to maintaining the integrity, confidentiality, and security of the personal information collected in the normal course of our business. Accordingly, we comply with applicable federal and state privacy laws governing the collection, use, and disclosure of personal information.

This Privacy Policy describes the types of information we collect, how we use and protect that information, and the circumstances under which it may be shared.

In the normal course of business, we may collect personal information from a variety of sources, including:

• Information provided by you:

Information submitted directly by you, such as through client information sheets, know-your-customer (KYC) documentation, inquiries, or other communications. This may include your name, contact details, employment information, assets, and income.

• Account and transaction information:

Information received from you or from third parties in connection with authorized transactions, including financial institutions, custodians, brokers, banks, or other service providers.

Crownstone Financial does not sell, rent, or trade the personal information of current or former clients to third parties or advertisers.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required to comply with applicable legal, regulatory, or contractual obligations.

Authorized Disclosures

We may disclose personal information when necessary to:

• Administer, process, or enforce a transaction or engagement you have requested or authorized

• Provide services or support related to a financial product or advisory engagement

• Maintain records in accordance with legal or regulatory requirements

• Respond to subpoenas, court orders, legal proceedings, law enforcement requests, or governmental inquiries

Service Providers and Authorized Representatives

We may share personal information with third-party service providers who perform functions on our behalf, such as technology, compliance, legal, or professional services, provided such parties are contractually obligated to maintain the confidentiality and security of the information.

We may also disclose information to individuals or entities legally authorized to act on your behalf, such as attorneys, trustees, or other designated representatives, or to co-owners of jointly held accounts where applicable.

Security Measures

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, or disclosure. These measures include, where appropriate, secure systems, encrypted data, access controls, and internal policies limiting access to personal information to those who require it to perform their professional responsibilities.