Privacy Policy

Last updated: June 16, 2026

Introduction

This Privacy Policy explains how FUNDEXA CORPORATION PTY LTD ACN 605 836 673 ("Fundexa", "FUNDEXA IM", "we", "us" or "our") collects, uses, discloses, stores, transfers and protects personal information through the FUNDEXA Investment Meetings platform https://investmentmeetings.com , website, applications and related services ("Platform").

This Privacy Policy is intended to operate globally and has been drafted with reference to applicable privacy and data protection laws, including: Privacy Act 1988 (Cth) (Australia); General Data Protection Regulation (EU) 2016/679 ("GDPR"); UK General Data Protection Regulation ("UK GDPR"); California Consumer Privacy Act, as amended ("CCPA"); Other applicable privacy, data protection and consumer protection laws.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. WHO WE ARE

FUNDEXA Investment Meetings ("FUNDEXA IM") is a global digital marketplace that connects: Listed companies; Private companies; Investor relations advisers; Roadshow consultants; Corporate communications professionals; Capital markets advisers; Brokers; Other authorised marketplace participants.

FUNDEXA IM facilitates introductions, communications, bookings and commercial relationships between marketplace participants but does not itself provide investment advice, securities dealing services or investor relations consulting services.

For the purposes of applicable privacy laws, Fundexa is generally the controller, organisation or entity responsible for determining how personal information collected through the Platform is processed.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to: (a) visitors to the Platform; (b) registered users; (c) Companies; (d) Consultants; (e) Brokers; (f) prospective users; (g) service providers; and (h) any individual whose personal information is processed through the Platform.

This Privacy Policy applies regardless of where a user is located, subject to any additional rights or protections required by applicable local laws. Where local privacy laws grant stronger protections than this Privacy Policy, those protections will prevail to the extent required by law.

3. DEFINITIONS

In this Privacy Policy:

Account means a registered user account on the Platform.

Company means any listed company, private company, issuer, investment manager, fund manager or corporate entity using the Platform.

Consultant means an investor relations adviser, roadshow consultant, communications adviser, capital markets adviser or other professional service provider registered on the Platform.

Personal Information means information relating to an identified or identifiable natural person and includes personal data, personal information and similar concepts under applicable laws.

Platform means the FUNDEXA IM websites, applications, systems, software and related services.

Processing means any collection, recording, storage, use, disclosure, transfer, analysis, deletion or handling of Personal Information.

Stripe means Stripe, Inc. and its affiliates acting as payment processor, identity verification provider and compliance services provider.

User means any individual or entity using the Platform.

4. INFORMATION WE COLLECT

The categories of Personal Information we collect depend upon how the Platform is used.

4.1 Identity and Contact Information: We may collect: Full name; Business name; Company name; Job title; Email address; Telephone number; Business address; Country of residence; Professional profile information; LinkedIn profile information (where provided).

4.2 Account Information: We may collect: Username; Password credentials (stored in encrypted form); Authentication records; Account preferences; Account settings; Verification status; User role classifications.

4.3 Company Information: Where Users represent a Company, we may collect: Company name; Exchange listing details; Ticker symbols; Registered office information; Industry classification; Corporate website information; Investor relations information; Company profile content.

4.4 Consultant Information: Consultants may provide: Professional biography; Qualifications; Areas of expertise; Industry experience; Geographic coverage; Service offerings; Languages spoken; Professional credentials; Profile photographs; Client references (where voluntarily provided).

4.5 Booking and Marketplace Information: We may collect information relating to: Roadshow requests; Consultant proposals; Bookings; Engagement details; Project requirements; Investor meeting schedules; Messaging activity; Ratings and reviews; Transaction history.

4.6 Communications Information: We may collect: Emails; Platform messages; Support enquiries; Feedback submissions; Survey responses; Customer service interactions.

4.7 Payment Information: Payment processing is generally handled by Stripe. We may receive limited payment-related information including: Transaction identifiers; Payment status; Billing information; Subscription records; Fee payment history. Fundexa generally does not store complete payment card information.

4.8 Verification Information: Users are required to verify email addresses before accessing Platform functionality. Identity verification may be conducted through Stripe or other approved providers. Verification-related information may include: Verification status; Verification identifiers; Identity verification outcomes; Compliance review results.

4.9 Technical Information: When Users access the Platform, we may automatically collect: IP addresses; Device identifiers; Browser type; Operating system; Language settings; Time zone information; Network information; Device characteristics.

4.10 Usage Information: We may collect information regarding how Users interact with the Platform, including: Pages viewed; Features used; Search activity; Session duration; Clickstream data; Navigation patterns; Referral sources.

4.11 Cookies and Similar Technologies: We use cookies, pixels, local storage technologies and similar technologies to collect information regarding: Authentication; Security; Platform functionality; Analytics; User preferences; Performance monitoring. Additional information regarding cookies is provided in our Cookie Policy.

5. SOURCES OF INFORMATION

We collect Personal Information from a variety of sources.

5.1 Information Provided Directly by Users: Most information is collected directly when Users: Register Accounts; Complete profiles; Submit roadshow requests; Communicate through the Platform; Make payments; Contact support; Participate in surveys.

5.2 Information From Organisations: Where a User acts on behalf of a Company or Consultant organisation, information may be provided by authorised representatives of that organisation.

5.3 Information From Third Parties: We may receive information from: Stripe; Analytics providers; Authentication providers; Marketing providers; Public databases; Compliance screening providers; Professional networking platforms; Business information providers.

5.4 Publicly Available Sources: We may obtain information from publicly available sources including: Corporate websites; Stock exchange announcements; Regulatory filings; Professional directories; Public business records.

6. HOW WE USE PERSONAL INFORMATION

We use Personal Information for legitimate business and operational purposes.

6.1 Platform Operation: We use information to: Create and manage Accounts; Authenticate Users; Provide Platform functionality; Facilitate bookings; Enable communications; Operate marketplace services.

6.2 User Verification: We use information to: Verify email addresses; Authenticate identities; Prevent fraud; Maintain Platform integrity; Enforce Terms of Use.

6.3 Marketplace Facilitation: We use information to: Match Companies and Consultants; Display profiles; Process bookings; Facilitate communications; Support transaction management.

6.4 Customer Support: We use information to: Respond to enquiries; Investigate issues; Resolve disputes; Provide technical assistance.

6.5 Security and Fraud Prevention: We use information to: Detect suspicious activity; Prevent abuse; Monitor compliance; Protect Platform security; Investigate violations.

6.6 Legal and Regulatory Compliance: We use information to: Comply with applicable laws; Respond to lawful requests; Maintain records; Enforce contractual rights; Protect legal interests.

6.7 Platform Improvement: We use information to: Improve functionality; Develop new features; Analyse performance; Conduct research; Improve user experience.

7. LEGAL BASES FOR PROCESSING

Where required by applicable law, Fundexa processes Personal Information on one or more lawful bases. These include:

7.1 Contract Performance: Processing necessary to provide the Platform and fulfil contractual obligations.

7.2 Legitimate Interests: Processing necessary for legitimate business interests including: Platform operation; Fraud prevention; Security; Service improvement; Risk management.

7.3 Legal Obligations: Processing required to comply with legal, regulatory or governmental obligations.

7.4 Consent: Processing undertaken with User consent where required by applicable law. Users may withdraw consent where legally permitted.

8. MARKETPLACE-SPECIFIC PROCESSING

Because FUNDEXA IM operates a marketplace, certain information is intentionally made available to other Users.

For example: Consultant profiles may be visible to Companies; Company profiles may be visible to Consultants; Booking information may be shared with relevant counterparties; Communications may be delivered to intended recipients.

Users acknowledge that information intentionally published through profiles, proposals, reviews, roadshow requests and marketplace interactions may be viewed by authorised marketplace participants.

9. EMAIL VERIFICATION AND ACCOUNT SECURITY

9.1 Mandatory Email Verification: To maintain the security and integrity of the Platform, Users must verify their email address before accessing restricted Platform functionality. Verification may be completed through email confirmation links, verification codes or other verification methods approved by Fundexa.

9.2 Re-Verification: Fundexa may require Users to re-verify their email address where: (a) suspicious activity is detected; (b) account security concerns arise; (c) account ownership is disputed; (d) material account information changes; or (e) Fundexa reasonably determines re-verification is necessary.

9.3 Failure to Verify: Fundexa may suspend, restrict or terminate access to Accounts that fail to complete required verification procedures.

9.4 Security Responsibilities: Users are responsible for maintaining accurate contact information and securing access to their accounts. Users must promptly notify Fundexa of any suspected unauthorised access, credential compromise or account misuse.

10. IDENTITY VERIFICATION AND STRIPE SERVICES

10.1 Third-Party Verification: Fundexa may utilise Stripe and other approved service providers to facilitate identity verification, payment processing, fraud prevention and compliance activities.

10.2 Verification Data: Verification providers may collect and process information including: (a) government-issued identification documents; (b) business registration information; (c) payment information; (d) photographs or biometric verification information; (e) sanctions screening information; (f) fraud prevention information; and (g) other information reasonably required for verification purposes.

10.3 Independent Processing: Identity verification providers process information in accordance with their own privacy policies, legal obligations and contractual arrangements. Users acknowledge that Fundexa does not control the independent processing activities of third-party verification providers.

10.4 Verification Outcomes: Fundexa may receive information relating to: (a) verification status; (b) verification success or failure; (c) risk assessments; (d) compliance outcomes; and (e) account eligibility determinations. Fundexa generally does not receive or retain all underlying verification documents submitted to third-party providers.

11. PAYMENT PROCESSING

11.1 Payment Services: Payment services may be provided through Stripe or other approved payment providers.

11.2 Information Collected: Payment providers may collect: (a) payment card information; (b) bank account information; (c) billing addresses; (d) tax information; (e) transaction records; and (f) payment authentication information.

11.3 Limited Access by Fundexa: Fundexa generally receives only information necessary to: (a) confirm payment status; (b) administer subscriptions; (c) calculate commissions; (d) facilitate bookings; (e) manage disputes; and (f) comply with legal obligations.

11.4 Fraud Prevention: Payment-related information may be used to detect, investigate and prevent: (a) fraudulent transactions; (b) account abuse; (c) money laundering activities; (d) sanctions violations; and (e) other unlawful activities.

12. COMMUNICATIONS

12.1 Platform Communications: Users may communicate through messaging systems, notifications, email communications and support channels provided by the Platform.

12.2 Service Communications: Fundexa may send communications necessary to: (a) administer Accounts; (b) verify identities; (c) confirm bookings; (d) provide customer support; (e) deliver security notifications; (f) communicate policy changes; and (g) fulfil contractual obligations. These communications may be sent regardless of marketing preferences.

12.3 Communication Monitoring: To the extent permitted by law, Fundexa may monitor, retain, review or analyse communications where reasonably necessary to: (a) maintain Platform functionality; (b) investigate complaints; (c) resolve disputes; (d) detect fraud; (e) enforce Platform policies; or (f) comply with legal obligations.

12.4 Retention of Communications: Communications may be retained for operational, legal, regulatory, security and dispute resolution purposes. Retention periods may vary depending upon applicable laws and business requirements.

13. COOKIES AND TRACKING TECHNOLOGIES

13.1 Use of Cookies: Fundexa uses cookies and similar technologies to operate, secure and improve the Platform.

13.2 Types of Technologies Used: Technologies may include: (a) cookies; (b) web beacons; (c) tracking pixels; (d) local storage; (e) session identifiers; and (f) similar technologies.

13.3 Purposes: These technologies may be used for: (a) authentication; (b) account security; (c) remembering preferences; (d) analytics; (e) performance monitoring; (f) functionality enhancement; (g) fraud prevention; and (h) marketing activities.

13.4 Cookie Management: Users may control cookie preferences through browser settings and consent mechanisms where required by applicable law. Disabling cookies may affect Platform functionality.

13.5 Cookie Policy: Additional information regarding cookies is available in the FUNDEXA IM Cookie Policy.

14. ANALYTICS AND PERFORMANCE MONITORING

14.1 Analytics Services: Fundexa may use analytics providers to understand Platform usage and improve services. Analytics providers may include: (a) Google Analytics; (b) AWS analytics services; (c) product analytics platforms; (d) performance monitoring tools; and (e) similar technologies.

14.2 Information Analysed: Analytics may involve: (a) page visits; (b) session duration; (c) user interactions; (d) search behaviour; (e) referral information; (f) device information; and (g) technical performance data.

14.3 Aggregated Data: Fundexa may generate anonymised or aggregated information that does not reasonably identify individuals. Such information may be used for business intelligence, reporting, research, product development and benchmarking purposes.

15. ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

15.1 Use of AI Technologies: Fundexa may use artificial intelligence, machine learning and automated systems to support Platform functionality.

15.2 Purposes: AI technologies may be used for: (a) search functionality; (b) consultant matching; (c) recommendation engines; (d) content moderation; (e) fraud detection; (f) risk assessment; (g) customer support; (h) analytics; (i) compliance monitoring; and (j) operational efficiency.

15.3 Human Oversight: Where appropriate, Fundexa may incorporate human review processes in connection with significant decisions affecting Users.

15.4 No Sole Reliance: Fundexa does not generally rely solely upon automated processing to make decisions producing legal effects or similarly significant impacts without appropriate safeguards where required by law.

15.5 Continuous Improvement: Information may be used to improve AI systems, security systems and operational processes, subject to applicable legal requirements.

16. MARKETING COMMUNICATIONS

16.1 Marketing Activities: Fundexa may send information regarding: (a) Platform updates; (b) new services; (c) events; (d) industry insights; (e) promotions; and (f) marketplace opportunities.

16.2 Consent Requirements: Where required by applicable law, marketing communications will only be sent with appropriate consent or another lawful basis.

16.3 Opt-Out Rights: Users may opt out of marketing communications through: (a) unsubscribe links; (b) account settings; (c) contacting Fundexa; or (d) other mechanisms provided by Fundexa.

16.4 Service Communications Unaffected: Opting out of marketing communications does not prevent Fundexa from sending operational, transactional, legal or security-related communications.

17. MARKETPLACE DATA AND INTERACTIONS

17.1 Profile Visibility: Information included in public or marketplace-facing profiles may be visible to authorised Users of the Platform.

17.2 Search and Discovery: Profile information may be indexed, categorised, searched and displayed to facilitate marketplace matching and engagement opportunities.

17.3 Booking Information: Information relating to bookings, projects, roadshows and engagements may be shared with relevant counterparties where necessary to facilitate Platform services.

17.4 User Responsibility: Users are responsible for determining what information they voluntarily publish or share through the Platform. Fundexa cannot guarantee that information intentionally disclosed to other Users will remain confidential unless separately protected by contractual arrangements between those Users.

18. DISCLOSURE OF PERSONAL INFORMATION

18.1 General Disclosure Principles: Fundexa may disclose Personal Information where reasonably necessary to: (a) operate the Platform; (b) provide services requested by Users; (c) facilitate marketplace transactions; (d) comply with legal obligations; (e) protect legitimate business interests; or (f) protect the rights, property or safety of Fundexa, Users or third parties.

18.2 Disclosure to Other Users: Because FUNDEXA IM operates as a marketplace, certain information may be disclosed to other Users to facilitate engagement opportunities. Examples include: (a) Consultant profile information displayed to Companies; (b) Company profile information displayed to Consultants; (c) booking-related information shared between counterparties; (d) communications exchanged through Platform functionality; and (e) reviews, ratings and marketplace activity intentionally published by Users.

18.3 Service Providers: Fundexa may disclose Personal Information to third-party service providers assisting with: (a) cloud hosting; (b) infrastructure management; (c) payment processing; (d) identity verification; (e) cybersecurity; (f) analytics; (g) customer support; (h) email delivery; (i) software development; (j) fraud detection; and (k) legal and compliance services.

18.4 Professional Advisers: Fundexa may disclose information to: (a) lawyers; (b) accountants; (c) auditors; (d) insurers; (e) consultants; and (f) other professional advisers.

18.5 Legal and Regulatory Disclosures: Fundexa may disclose Personal Information where required or authorised by law, including disclosures to: (a) courts; (b) tribunals; (c) regulators; (d) law enforcement agencies; (e) tax authorities; (f) government agencies; and (g) self-regulatory organisations.

18.6 Corporate Transactions: Fundexa may disclose Personal Information in connection with: (a) mergers; (b) acquisitions; (c) financing transactions; (d) restructures; (e) asset sales; or (f) corporate reorganisations. Users acknowledge that Personal Information may form part of assets transferred in such transactions.

19. AWS HOSTING AND INFRASTRUCTURE

19.1 Cloud Hosting: The Platform is hosted using Amazon Web Services ("AWS") infrastructure.

19.2 Hosting Regions: Personal Information may be processed or stored in AWS environments located in: (a) Australia; (b) the United States; (c) the European Union; and (d) other jurisdictions utilised by Fundexa or AWS from time to time.

19.3 Security Controls: AWS infrastructure incorporates physical, administrative and technical security measures designed to protect information against unauthorised access, misuse and loss.

19.4 Third-Party Infrastructure: Fundexa may also utilise third-party providers integrated with AWS infrastructure to support Platform functionality.

20. INTERNATIONAL DATA TRANSFERS

20.1 Global Operations: Fundexa operates a global marketplace and Users acknowledge that information may be transferred across international borders.

20.2 Transfer Locations: Information may be transferred to countries including: (a) Australia; (b) United States; (c) United Kingdom; (d) member states of the European Economic Area; (e) Singapore; (f) Hong Kong; and (g) other jurisdictions where service providers operate.

20.3 Transfer Safeguards: Where required by applicable law, Fundexa will implement reasonable safeguards for international transfers, which may include: (a) contractual protections; (b) standard contractual clauses; (c) adequacy mechanisms; (d) data protection assessments; and (e) other lawful transfer mechanisms.

20.4 User Acknowledgement: Users acknowledge that privacy laws may differ between jurisdictions and consent to cross-border processing where permitted by law.

21. DATA RETENTION

21.1 Retention Principles: Fundexa retains Personal Information only for as long as reasonably necessary to: (a) provide services; (b) comply with legal obligations; (c) resolve disputes; (d) enforce agreements; (e) protect legal rights; (f) maintain business records; and (g) support security and compliance activities.

21.2 Retention Factors: Retention periods may vary depending on: (a) the nature of the information; (b) legal requirements; (c) regulatory obligations; (d) contractual obligations; (e) operational needs; and (f) security considerations.

21.3 Account Closure: Where Accounts are closed, Fundexa may retain information where reasonably necessary for: (a) compliance purposes; (b) fraud prevention; (c) dispute resolution; (d) legal defence; or (e) record-keeping requirements.

21.4 Anonymisation: Where appropriate, information may be anonymised or aggregated for research, analytics and business purposes.

22. SECURITY OF PERSONAL INFORMATION

22.1 Security Program: Fundexa maintains a security program designed to protect Personal Information against: (a) unauthorised access; (b) misuse; (c) disclosure; (d) alteration; (e) destruction; and (f) accidental loss.

22.2 Security Measures: Security measures may include: (a) encryption; (b) secure authentication; (c) access controls; (d) role-based permissions; (e) monitoring systems; (f) security testing; (g) incident response procedures; and (h) vendor management controls.

22.3 User Responsibilities: Users are responsible for: (a) safeguarding credentials; (b) maintaining device security; (c) protecting account access; (d) promptly reporting security incidents.

22.4 No Absolute Guarantee: While Fundexa employs commercially reasonable safeguards, no system can guarantee absolute security.

23. DATA BREACHES AND INCIDENT RESPONSE

23.1 Incident Management: Fundexa maintains procedures for identifying, assessing and responding to security incidents.

23.2 Investigation: Where a suspected incident occurs, Fundexa may investigate: (a) the nature of the incident; (b) affected systems; (c) affected information; (d) potential risks; and (e) remediation measures.

23.3 Notifications: Where required by applicable law, Fundexa will notify affected individuals and regulators of eligible data breaches within applicable legal timeframes.

24. GDPR RIGHTS (EUROPEAN ECONOMIC AREA)

Users located in the European Economic Area may have rights including:

24.1 Right of Access: To obtain information regarding Personal Information processed by Fundexa.

24.2 Right to Rectification: To request correction of inaccurate information.

24.3 Right to Erasure: To request deletion of Personal Information in certain circumstances.

24.4 Right to Restrict Processing: To request limitations on processing activities.

24.5 Right to Data Portability: To receive certain information in a structured and machine-readable format.

24.6 Right to Object: To object to certain processing activities.

24.7 Right to Withdraw Consent: Where consent is relied upon, Users may withdraw consent at any time.

24.8 Right to Lodge Complaints: Users may lodge complaints with competent supervisory authorities.

25. UK GDPR RIGHTS

Users located in the United Kingdom may exercise rights substantially similar to those available under GDPR. Complaints may be submitted to the UK Information Commissioner's Office or other competent authorities.

26. AUSTRALIAN PRIVACY RIGHTS

26.1 Access Requests: Australian Users may request access to Personal Information held by Fundexa.

26.2 Correction Requests: Australian Users may request correction of inaccurate, incomplete or outdated information.

26.3 Complaints: Users may submit privacy complaints to Fundexa. Where complaints cannot be resolved, Users may contact the Office of the Australian Information Commissioner.

27. UNITED STATES PRIVACY RIGHTS

27.1 Applicable Rights: Users located in jurisdictions providing statutory privacy rights may be entitled to: (a) access information; (b) correct information; (c) delete information; (d) obtain information regarding disclosures; (e) exercise opt-out rights where applicable.

27.2 Non-Discrimination: Fundexa will not unlawfully discriminate against individuals who exercise privacy rights provided under applicable law.

27.3 Verification: Fundexa may verify identity before responding to privacy rights requests.

28. EXERCISING PRIVACY RIGHTS

28.1 Requests: Users may exercise applicable privacy rights by contacting Fundexa using the details provided in this Privacy Policy.

28.2 Verification: Fundexa may require reasonable verification of identity before processing requests.

28.3 Response Timeframes: Fundexa will respond within timeframes required by applicable law.

28.4 Limitations: Certain requests may be refused where permitted by law, including where compliance would: (a) infringe the rights of others; (b) conflict with legal obligations; (c) compromise security; or (d) otherwise fall within applicable exemptions.

29. CHILDREN'S PRIVACY

29.1 Business Platform: FUNDEXA IM is a business-to-business marketplace intended exclusively for professional and commercial users. The Platform is not directed to children and is not intended for individuals under eighteen (18) years of age.

29.2 No Knowing Collection: Fundexa does not knowingly collect Personal Information from individuals under the age of eighteen (18).

29.3 Removal of Information: If Fundexa becomes aware that Personal Information relating to a child has been collected without appropriate legal authority, Fundexa may take reasonable steps to delete such information.

30. THIRD-PARTY WEBSITES AND SERVICES

30.1 External Links: The Platform may contain links to third-party websites, services, applications or resources. Fundexa does not control and is not responsible for the privacy practices, content, security or policies of third-party websites.

30.2 Independent Privacy Practices: Users accessing third-party services do so at their own risk. Third-party providers may collect, process and store information under their own privacy policies and legal obligations.

30.3 Third-Party Integrations: The Platform may integrate with third-party providers including: (a) Stripe; (b) AWS; (c) analytics providers; (d) customer support providers; (e) email delivery providers; (f) authentication providers; (g) productivity tools; and (h) other technology providers. Users should review the privacy policies of those providers independently.

31. REGIONAL PRIVACY NOTICES

31.1 Local Rights: Certain jurisdictions provide additional privacy rights or impose additional disclosure requirements. Where applicable law grants Users greater rights than those described in this Privacy Policy, those rights shall prevail to the extent required by law.

31.2 European Economic Area: Users located within the EEA may exercise rights available under GDPR and related legislation.

31.3 United Kingdom: Users located in the United Kingdom may exercise rights available under the UK GDPR and Data Protection Act 2018.

31.4 Australia: Australian Users may exercise rights available under the Privacy Act 1988 (Cth) and Australian Privacy Principles.

31.5 United States: Users located in applicable US states may exercise rights granted by relevant state privacy legislation.

31.6 Other Jurisdictions: Fundexa will take reasonable steps to comply with mandatory privacy obligations applicable in jurisdictions where it operates.

32. CROSS-BORDER BUSINESS OPERATIONS

32.1 International Marketplace: FUNDEXA IM is operated as a global marketplace. Users acknowledge that information may be processed across multiple jurisdictions as part of normal Platform operations.

32.2 International Participation: Marketplace participants may be located in different countries and regions. Certain information intentionally shared through the Platform may therefore become available to users located outside a User's home jurisdiction.

32.3 User Responsibility: Users are responsible for ensuring they possess authority to disclose information through the Platform and that such disclosure complies with applicable laws and contractual obligations.

33. CHANGES TO THIS PRIVACY POLICY

33.1 Updates: Fundexa may update this Privacy Policy from time to time.

33.2 Reasons for Updates: Changes may occur due to: (a) legal developments; (b) regulatory changes; (c) new Platform features; (d) changes to business operations; (e) technological developments; or (f) security requirements.

33.3 Publication of Updates: Updated versions of this Privacy Policy will be published through the Platform.

33.4 Material Changes: Where required by law, Fundexa will provide notice of material changes before they become effective.

33.5 Continued Use: Continued use of the Platform following publication of an updated Privacy Policy constitutes acknowledgement of the updated Privacy Policy.

34. PRIVACY COMPLAINTS PROCESS

34.1 Contacting Fundexa: Users who have concerns regarding the handling of Personal Information should first contact Fundexa directly.

34.2 Investigation: Fundexa will investigate complaints in a reasonable and timely manner.

34.3 Additional Information: Fundexa may request information necessary to: (a) verify identity; (b) understand the complaint; (c) investigate relevant facts; and (d) determine an appropriate resolution.

34.4 Escalation Rights: Where a complaint cannot be resolved directly with Fundexa, Users may have the right to refer complaints to applicable regulators, supervisory authorities or dispute resolution bodies.

35. CONTACT DETAILS

For privacy enquiries, requests, complaints or questions regarding this Privacy Policy, please contact:

Privacy Officer, FUNDEXA CORPORATION PTY LTD, ACN 605 836 673, FUNDEXA Investment Meetings (FUNDEXA IM), 39 Martin Place, Sydney, NSW, 2000, Australia. Email: info@fundexa.com

Users may contact Fundexa regarding: (a) access requests; (b) correction requests; (c) deletion requests; (d) data portability requests; (e) consent withdrawal requests; (f) privacy complaints; and (g) general privacy enquiries.

36. REGULATORY CONTACTS

36.1 Australia: Users located in Australia may contact the Office of the Australian Information Commissioner (OAIC).

36.2 United Kingdom: Users located in the United Kingdom may contact the Information Commissioner's Office (ICO) where applicable.

36.3 European Economic Area: Users located within the European Economic Area may contact their local data protection authority.

36.4 United States: Users located in relevant US jurisdictions may contact applicable state privacy regulators where permitted by law.

37. INTERPRETATION

37.1 Relationship With Terms of Use: This Privacy Policy should be read together with: (a) the Terms of Use; (b) the Cookie Policy; (c) Consultant Terms; (d) Company Terms; and (e) any other applicable Platform policies.

37.2 Inconsistencies: To the extent of any inconsistency between this Privacy Policy and applicable law, applicable law shall prevail.

37.3 Severability: If any provision of this Privacy Policy is determined to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

38. ACKNOWLEDGEMENT

BY ACCESSING OR USING THE PLATFORM, USERS ACKNOWLEDGE THAT: (a) THEY HAVE READ THIS PRIVACY POLICY; (b) THEY UNDERSTAND HOW THEIR PERSONAL INFORMATION MAY BE COLLECTED, USED, DISCLOSED, STORED AND TRANSFERRED; (c) THEY UNDERSTAND THAT FUNDEXA IM OPERATES AS A GLOBAL MARKETPLACE; (d) THEY UNDERSTAND THAT INFORMATION MAY BE PROCESSED IN AUSTRALIA, THE UNITED STATES, THE EUROPEAN UNION AND OTHER JURISDICTIONS; (e) THEY UNDERSTAND THAT THIRD-PARTY PROVIDERS INCLUDING AWS AND STRIPE MAY PROCESS INFORMATION ON FUNDEXA'S BEHALF; AND (f) THEY CONSENT TO THE PROCESSING OF PERSONAL INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY TO THE EXTENT PERMITTED BY APPLICABLE LAW.