Privacy and Data Protection

At Crownstone Financial, your privacy is a priority. We are committed to maintaining the integrity, confidentiality, and security of personal information collected in the normal course of our business and to handling such information in accordance with applicable privacy and data-protection requirements.

This Privacy Policy describes the types of information we collect, how we use and protect that information, and the circumstances under which it may be shared.

In the normal course of business, we may collect personal information from a variety of sources, including:

• Information provided by you:

Information submitted directly by you, such as through client information sheets, know-your-customer (KYC) documentation, inquiries, or other communications. This may include your name, contact details, employment or business information, and financial information relevant to an engagement, such as assets, and income.

• Transaction and engagement information:

Information received from you or, where authorized or otherwise permitted, from third parties in connection with an actual or prospective advisory engagement, including information provided by financial institutions, custodians, banks, professional advisers, counterparties, or other relevant parties.

When you use our website, certain technical information may be collected automatically through cookies and similar technologies for website functionality, security, and related purposes. For additional information, please review our Cookie Policy.

Crownstone Financial does not sell, rent, or trade the personal information of current or former clients to third parties or advertisers.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required to comply with applicable legal, regulatory, or contractual obligations.

Authorized Disclosures

We may disclose personal information when necessary to:

• Administer, process, or enforce a transaction or engagement you have requested or authorized

• Provide services or support related to an advisory engagement or authorized transaction

• Maintain records in accordance with legal or regulatory requirements

• Respond to subpoenas, court orders, legal proceedings, law enforcement requests, or governmental inquiries

Service Providers and Authorized Representatives

Crownstone Financial may share personal information with third-party service providers that support our business operations, including technology, compliance, legal, accounting, and other professional service providers. Such information is shared only as reasonably necessary for the services being provided and is subject to appropriate confidentiality and data-protection obligations, where applicable.

We may also disclose information to individuals or entities legally authorized to act on your behalf, such as attorneys, trustees, or other designated representatives.

Security Measures

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, or disclosure. These measures may include, where appropriate, secure systems, access controls, and policies and procedures designed to limit access to personal information to authorized persons with a legitimate business need.