Please read this Privacy Policy and Personal Information Collection Statement ("Policy") carefully. It provides important information about how we and our affiliates ("we," "us," or "our") collect, use, handle, store, share, transfer, transmit, delete, or otherwise process ("process") Personal Data and other information collected through our websites ("Site (s)") and services ("Services"). Your local data privacy laws and regulations may apply based on your jurisdiction.

This Policy outlines how IKS CAPITAL S.A. de C.V., operating through iks-capital.com, protects and manages your personal data. It covers:

• The data we collect when you sign up for, use, or interact with our applications, products, services, or websites (collectively referred to as "Services").
• Our data management practices from the start of your engagement.
• Your options regarding data management.

This Policy applies to all information collected when you access and use our Services. By continuing to use our Services, you agree to the practices described in this Policy.

We are committed to protecting your privacy in accordance with applicable laws and regulations of El Salvador and international standards, including GDPR best practices. We follow industry standards to safeguard your Personal Data and other information against unauthorized or accidental processing, access, modification, disclosure, destruction, loss, or other misuse through reasonable security measures.

This Policy outlines our data protection standards and measures to ensure adequate protection of your Personal Data and your rights regarding its processing. We will process your Personal Data only according to this Policy and applicable laws and regulations.
In the event of a data breach involving unauthorized processing of Personal Data in our possession or control, we will notify the relevant authorities as required by applicable laws and regulations.

We collect information necessary for your use of the Site(s) or Services:
Personal Data: Information that can directly or indirectly identify an individual and their business, such as name, email address, mailing address, phone number, date of birth (for identity verification), business/company name, address, registration number, identification documents required for KYC/KYB procedures, information on the source of funds and capital, credit card number(s), and billing information. Business information is not considered Personal Data if used for business-to-business transactions. We tokenize your credit card details for secure storage.

Transaction Data: Information about your transactions with or through us, including IP address, cookie information, and page requests, which we automatically record.

Third-Party Data: Information related to your payment recipient ("Recipient") required for processing payments or complying with regulations, such as the Recipient's name, bank account number, and related documentation. You must obtain the Recipient's consent to provide their information to us and ensure its accuracy and compliance with relevant laws.

We process your Personal Data and other provided information for the following purposes, within or outside your jurisdiction, as permitted by applicable laws and regulations: to process your application, transactions, or communications with third parties via the Services; to manage and administer your use of the Site(s), Services, and your Account; to customize your experience and provide faster access to your Account; to respond to transactions, service issues, and unusual Account activities; to enforce our Services Agreement or applicable end-user license agreements; to protect the rights, property, or safety of users; for identification and verification purposes, including AML/KYC/KYB compliance; to maintain and update software and provide support for the smooth operation of Services; to facilitate customer service and respond to inquiries; to conduct research, analysis, and development activities; to perform audits and surveys for internal and statutory reporting; for direct marketing with your consent; to comply with legal processes or regulatory requirements; for statistical and research purposes; to carry out due diligence and screening activities; to prevent fraud, unlawful activities, or misconduct; and for disaster recovery and other purposes notified at the time of obtaining consent.

We process your Personal Data and other provided information for the following purposes, within or outside your jurisdiction, as permitted by applicable laws and regulations: to process your application, transactions, or communications with third parties via the Services; to manage and administer your use of the Site(s), Services, and your Account; to customize your experience and provide faster access to your Account; to respond to transactions, service issues, and unusual Account activities; to enforce our Services Agreement or applicable end-user license agreements; to protect the rights, property, or safety of users; for identification and verification purposes, including AML/KYC/KYB compliance; to maintain and update software and provide support for the smooth operation of Services; to facilitate customer service and respond to inquiries; to conduct research, analysis, and development activities; to perform audits and surveys for internal and statutory reporting; for direct marketing with your consent; to comply with legal processes or regulatory requirements; for statistical and research purposes; to carry out due diligence and screening activities; to prevent fraud, unlawful activities, or misconduct; and for disaster recovery and other purposes notified at the time of obtaining consent.

We use your Personal Data for:

• Verifying your identity.
• Protecting the legal rights, property, and safety of our Services and users.
• Providing, maintaining, and improving our Services.
• Sharing data with merchants or counterparties in case of a payment or transaction dispute.

We do not rent, sell, transfer, or disclose your Personal Data to non-affiliated parties, except with third-party service providers and data centers for background checks, customer screening, and identity verification; with employees on a need-to-know basis; with third parties under confidentiality arrangements to fulfill the purposes stated in this Policy or as required by law; to investigate, prevent, or address illegal activities, fraud, or threats to safety; with prospective parties during due diligence for business acquisitions or mergers; as required by law or regulatory authorities; for statistical and demographic purposes, excluding Personal Data; and to Recipients for payment or transaction identification.

With your consent, we use your contact information and preferences to provide marketing information about us, our affiliates, and third-party business partners in financial, asset management, and technology services. You may opt out of direct marketing anytime, and we will stop sending you such information and notify our affiliates and partners to stop using your data for direct marketing.

Use of Cookies: We use cookies to collect information for record-keeping and to improve your Site experience. Persistent cookies save your login information, while session cookies gather usage patterns and are deleted when you log off and close your browser.

Third-party Cookies and Remarketing: Third-party advertisers may place cookies on your browser to provide targeted advertising. We use third-party cookies like Google Analytics to analyze Site usage.

Other Third-party Information: Third parties may collect your Personal Data through payment gateways, custodians, or software applications. We do not control third-party data processing and encourage you to read their policies.

Cookie Settings: You can disable cookies through browser settings, but this may affect the full functionality of the Site(s) and Services.

We retain your Personal Data as long as necessary to provide the Site(s) or Services and comply with legal, regulatory, or accounting requirements. If your Account is inactive for more than five years, we will erase your Personal Data but may retain non-personal information.

You have the right to request information about and access to your Personal Data, request corrections, and opt out of direct marketing. For updates or corrections, edit your Account profile or contact our Data Protection Officer at privacy@iks-capital.com.

By using our Site(s) or Services and providing your Personal Data, you consent to its processing for the purposes stated in this Policy. You may withdraw your consent by contacting us. Note that certain Personal Data is mandatory for registering an Account and using the Site(s) or Services. By providing your email, you consent to receiving service-related emails. You can opt out of marketing emails at any time.

We may update this Policy periodically. Significant changes will be communicated via email or a notification on our Site.