We may collect and process the following categories of personal information:

• Identification details (e.g., full name, date of birth, nationality, identification documents)
• Contact information (e.g., phone number, email address, postal address)
• Financial and transactional data related to your accounts and investment activities
• Usage data (e.g., IP address, browser type, pages visited, Platform usage statistics)
• Communication records (e.g., emails, phone conversations, and other correspondence)

We process your data to:

• Provide investment services and manage your relationship with us
• Comply with our legal and regulatory obligations under the Corporations Act 2001 (Cth), the Privacy Act 1988 (Cth), and the requirements of the Australian Securities and Investments Commission (ASIC)
• Facilitate account access via our Platform
• Process transactions and generate reporting, confirmations, and statements
• Improve our website, services, and client experience
• Prevent fraud, money laundering, and other financial crimes
• Respond to inquiries or requests submitted via our contact channels

We will never sell your personal data to third parties. However, we may share your information with:

• Regulatory and supervisory authorities (e.g., ASIC, AUSTRAC, and the Office of the Australian Information Commissioner (OAIC))
• External service providers (e.g., custodians, IT and hosting providers, professional advisors)
• Law enforcement or governmental bodies if required by law or regulation
• Other entities within the same corporate group, subject to applicable confidentiality rules

In certain cases, your data may be processed or stored in jurisdictions outside of Australia. Where applicable, we ensure such transfers comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (in particular APP 8), including taking reasonable steps to ensure overseas recipients handle your personal information in accordance with those principles.

We retain your personal data for as long as necessary to fulfill the purposes outlined above, to comply with legal and regulatory requirements, and to defend or exercise our legal rights. Once data is no longer needed, it will be securely deleted or anonymized.

As an individual, you have the right to:

• Request access to and receive a copy of your personal data
• Request correction of incomplete or inaccurate information
• Request deletion or restriction of your personal data, subject to legal obligations
• Object to certain types of data processing
• Withdraw your consent where processing is based on consent

We implement robust technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, secure servers, access controls, and regular security reviews.

Our website uses cookies and similar tracking technologies to enhance user experience, improve website functionality, and collect usage analytics. You may adjust your browser settings to disable cookies, although this may affect the performance of some features on our site.

Whitechapel Securities may amend this Privacy Policy from time to time to reflect changes in legal requirements or business practices. The most current version will always be available on our website www.wcsec.com. We recommend reviewing this policy periodically.

For any questions, concerns, or requests related to this Privacy Policy or how your personal data is processed, please contact:

Whitechapel Securities,
L24, Three International Towers,
300 Barangaroo Avenue,
Sydney,
NSW, Australia,
+61 2 7258 2740,
info@wcsec.com