Terms and Conditions and Privacy Policy

Effective date: 01/01/2026

1. About Uraeus

This website is operated by Uraeus Ltd, a company incorporated in the Republic of Cyprus under registration number HE 449948, with its registered office at Avensia Court 2, Unit K1, 22 Grigori Afxentiou Avenue, 6023 Larnaca, Cyprus ("Uraeus", "we", "us" or "our").

Contact email: legal@uraeus.net

2. Scope of these Terms

These Terms & Conditions govern access to and use of the Uraeus website, including its content, contact forms and other publicly available functionality (the "Website").

By accessing or using the Website, you agree to these Terms. If you do not agree to these Terms, you must not use the Website.

These Terms govern the Website only.

Any investment, acquisition, financing, joint venture, commercial relationship, professional service, technology project or other transaction involving Uraeus or any company in which Uraeus has an interest will be governed exclusively by the relevant definitive agreements entered into between the applicable parties.

Where a separate written agreement conflicts with these Terms, the separate written agreement will prevail in relation to the subject matter covered by that agreement.

3. Nature of Uraeus's Business

Uraeus is a Cyprus-based holding and investment company.

Uraeus may acquire, establish, hold, finance, develop, manage, support, restructure or dispose of interests in companies, projects, intellectual property, technologies and other assets.

Its areas of interest may include, among others:

• artificial intelligence and related technologies;

• finance, payments and related financial technologies;

• software development and technology businesses;

• telecommunications; and

• other businesses, technologies and investment opportunities considered appropriate by Uraeus from time to time.

Uraeus's investment strategy, investment criteria, portfolio and areas of interest may change at any time without notice.

The Website is intended to provide general corporate information about Uraeus and its activities. It does not constitute an investment platform, trading platform, crowdfunding platform, payment service, banking service, brokerage service, regulated investment service or public investment fund.

4. No Offer, Solicitation or Investment Advice

Nothing contained on the Website constitutes or should be construed as:

• an offer to sell or issue securities, financial instruments or interests in any company or investment vehicle;

• an invitation or solicitation to purchase, subscribe for or dispose of securities or financial instruments;

• an invitation to provide capital, deposits or other funds to Uraeus;

• investment, financial, legal, tax, accounting or other professional advice;

• an investment recommendation;

• an assurance regarding the value or future performance of any investment, company, sector or asset; or

• the establishment of an advisory, fiduciary, agency or client relationship.

Any investment or other transaction involving Uraeus will be made only on the basis of appropriate due diligence, approvals and definitive legal documentation.

You should obtain independent professional advice before making investment, financial, legal, tax or commercial decisions.

5. Portfolio and Investment Information

The Website may contain information concerning:

• companies in which Uraeus has invested;

• companies affiliated with Uraeus;

• businesses being developed or supported by Uraeus;

• sectors in which Uraeus is interested;

• completed, proposed or potential transactions; or

• technologies, markets and investment themes.

Such information is provided for general informational purposes only.

A reference to a portfolio company, investment or transaction does not mean that Uraeus currently owns the same interest that it owned when the information was first published.

Investments may subsequently be increased, reduced, restructured, transferred or disposed of.

Nothing on the Website constitutes a representation that any investment has been profitable or that comparable investments will be available or successful in the future.

Past performance, where referred to, is not indicative of future results.

6. Forward-Looking Information

The Website may contain statements concerning expectations, strategies, plans, market opportunities, anticipated developments, future investments, business performance or other future events.

Such statements are inherently uncertain and may depend on assumptions, estimates and circumstances outside Uraeus's control.

Actual outcomes may differ materially from statements or expectations appearing on the Website.

Uraeus has no obligation to update forward-looking information except where required by applicable law.

7. Eligibility and Authority

You may use the Website only if you are legally capable of entering into binding obligations.

Where you access or use the Website on behalf of a company, fund, partnership, institution or other organisation, you represent that you have authority to act on its behalf.

The Website is intended primarily for business and professional users and is not directed at children.

8. Permitted Use

You may use the Website for lawful purposes, including:

• obtaining information about Uraeus;

• obtaining general information concerning its portfolio and investment activities;

• contacting Uraeus regarding a potential investment or business opportunity;

• contacting Uraeus regarding a potential acquisition, partnership or commercial relationship;

• submitting legitimate corporate or investment information requested by Uraeus;

• submitting a legitimate employment application; and

• accessing materials that Uraeus has made publicly available.

You are responsible for ensuring that any information you provide through the Website is accurate and that you are legally entitled to provide it.

9. Prohibited Use

You must not:

1. use the Website unlawfully, fraudulently or in a manner that infringes another person's rights;

2. introduce malware, malicious software, harmful code or other technologically harmful material;

3. attempt to obtain unauthorised access to the Website, its servers, systems, databases or connected infrastructure;

4. interfere with the availability, operation, integrity or security of the Website;

5. conduct unauthorised vulnerability scanning, penetration testing, security testing or similar activity;

6. engage in excessive scraping, crawling, data mining or automated extraction from the Website without Uraeus's prior written permission;

7. impersonate another person or organisation or misrepresent your identity, authority or affiliation;

8. use Website content in a manner that infringes Uraeus's or a third party's intellectual-property rights;

9. remove copyright, trademark or proprietary notices;

10. submit malicious, defamatory, unlawful, misleading or infringing material;

11. submit credentials, passwords, source code, trade secrets, special-category personal data, regulated information or other highly confidential material through a general contact form unless specifically requested by Uraeus;

12. use Website information to misrepresent a relationship, endorsement, investment or affiliation with Uraeus;

13. use information concerning Uraeus or its portfolio companies for unlawful market manipulation, fraud or other unlawful purposes; or

14. use the Website in a manner reasonably likely to damage Uraeus, its portfolio companies, systems, reputation or legitimate business interests.

10. Intellectual Property

The Website and its contents, including text, graphics, photographs, logos, trademarks, designs, layouts, databases, software, documents, presentations and other materials, are owned by or licensed to Uraeus and are protected by applicable intellectual-property laws.

Uraeus grants you a limited, non-exclusive, non-transferable and revocable right to access and use the Website solely for legitimate informational and business purposes.

No intellectual-property rights are transferred to you.

Except to the extent expressly permitted by mandatory law, you may not without Uraeus's prior written consent:

• reproduce or republish Website content;

• modify or create derivative works;

• commercially exploit Website content;

• systematically extract or reuse Website data;

• distribute substantial parts of the Website;

• reverse engineer Website software; or

• use Uraeus trademarks, trade names, logos or branding.

"Uraeus" and associated names, marks and logos are trademarks or trade names of Uraeus or its licensors where applicable.

11. Information and Investment Proposals Submitted to Uraeus

Information submitted through the Website will be processed in accordance with Uraeus's Privacy & Cookie Notice.

You retain ownership of materials that you submit to Uraeus.

You grant Uraeus the limited rights reasonably necessary to receive, store, review, analyse and internally distribute such materials for the purpose for which they were submitted.

Submission of an investment proposal, business plan, pitch deck, technology description or other information does not:

• require Uraeus to review or respond to the material;

• require Uraeus to pursue an investment or transaction;

• create a partnership, agency, fiduciary or advisory relationship;

• constitute an offer or commitment by Uraeus;

• restrict Uraeus from considering or investing in other businesses, including businesses that may compete with the submitter; or

• create confidentiality obligations unless such obligations have been expressly agreed in writing.

Unless a confidentiality or non-disclosure agreement has been executed, general enquiries and unsolicited investment submissions should not be assumed to be confidential.

You should therefore not provide trade secrets, source code, passwords, proprietary algorithms or other highly sensitive information through a general Website form.

12. Due Diligence and Transactions

Any decision by Uraeus to investigate, finance, acquire or invest in a company, business, asset or project will be subject to such due diligence, internal approvals, regulatory considerations and definitive documentation as Uraeus considers appropriate.

Discussions, correspondence, meetings, preliminary proposals, indications of interest or information exchanged through or as a result of the Website do not create a legally binding obligation unless expressly stated in a written agreement executed by authorised representatives of the relevant parties.

Uraeus may discontinue discussions concerning any proposed transaction at any time unless otherwise agreed in writing.

13. Third-Party Websites and Services

The Website may contain references or links to:

• portfolio-company websites;

• affiliated companies;

• technology providers;

• professional advisers;

• news publications;

• social networks; or

• other third-party websites and services.

Uraeus does not control third-party websites or services and is not responsible for their availability, security, accuracy, content, terms or privacy practices.

A link or reference does not constitute an endorsement unless expressly stated.

Your use of third-party websites and services is subject to the terms and privacy policies of the relevant third parties.

14. Privacy and Cookies

Uraeus processes personal data in accordance with its Privacy & Cookie Notice.

The Website may use strictly necessary cookies and similar technologies required for security and operation.

Analytics, preference, advertising or other non-essential technologies will be used only in accordance with applicable law and, where required, your choices through the Website's cookie-management facility.

15. Website Availability and Security

Uraeus may modify, update, suspend, restrict or discontinue all or part of the Website where reasonably necessary, including for maintenance, security, legal, strategic or operational reasons.

Uraeus uses reasonable measures intended to protect the Website but does not warrant that the Website will always be:

• available;

• uninterrupted;

• error-free;

• complete;

• secure; or

• free from malware or other harmful components.

You are responsible for maintaining appropriate security measures on your own devices, networks and systems.

16. Accuracy of Information

Uraeus takes reasonable care in preparing Website content but does not warrant that all information is complete, accurate, current or suitable for a particular purpose.

Information concerning investments, companies, technologies, markets, personnel and transactions may become outdated.

Website content should not be treated as an authoritative record of Uraeus's investments, legal structure, ownership interests or financial position.

Where information is material to a business, investment or other decision, it should be independently verified.

17. Disclaimers

To the maximum extent permitted by applicable law, the Website and its publicly available content are provided on an "as is" and "as available" basis.

Uraeus excludes implied warranties concerning the Website, including warranties relating to accuracy, completeness, merchantability, fitness for a particular purpose and non-infringement, except where such warranties cannot lawfully be excluded.

No Website content creates a binding:

• offer;

• investment commitment;

• financing commitment;

• warranty;

• representation;

• service level;

• regulatory assurance; or

• contractual obligation

unless expressly incorporated into a written agreement executed by Uraeus.

18. Limitation of Liability

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for fraud, fraudulent misrepresentation, wilful misconduct or death or personal injury caused by negligence where applicable.

Subject to the preceding paragraph and to the maximum extent permitted by law, Uraeus will not be liable for:

• indirect or consequential loss;

• loss of profit;

• loss of revenue;

• loss of business;

• loss of anticipated savings;

• loss of investment opportunity;

• loss of goodwill;

• loss or corruption of data;

• business interruption;

• investment or commercial decisions made in reliance on Website information;

• third-party websites or services;

• unauthorised or unlawful use of the Website; or

• inaccuracies or omissions in publicly available Website information.

Where you use the Website for business purposes, Uraeus's aggregate liability arising from or relating to your use of the Website will not exceed EUR 1,000.

This limitation does not govern investments, acquisitions, financings or other transactions entered into under separate definitive agreements. Liability relating to such transactions will be governed by the applicable agreement.

Nothing in these Terms affects any mandatory rights available to a consumer under applicable law.

19. Indemnity for Business Users

Where you use the Website in the course of business, you will indemnify Uraeus against third-party claims, losses and reasonable costs arising directly from:

• your unlawful use of the Website;

• material submitted by you that infringes third-party rights;

• unauthorised security testing or interference with the Website; or

• your material breach of these Terms.

This section does not apply to the extent that a claim was caused by Uraeus.

20. Suspension and Enforcement

Uraeus may restrict or block access to the Website where it reasonably believes that a user:

• has breached these Terms;

• presents a security, legal or reputational risk;

• is using the Website fraudulently or abusively;

• is attempting unauthorised extraction of Website content; or

• is interfering with the Website or other users.

Uraeus may preserve relevant information and report suspected unlawful conduct to competent authorities where legally permitted or required.

21. Changes to these Terms

Uraeus may amend these Terms to reflect changes to:

• the Website;

• Uraeus's business;

• its investment activities;

• applicable law;

• security requirements; or

• operational practices.

The current version and effective date will be published on the Website.

Material changes may be communicated through an appropriate Website notice.

Changes to these Terms do not retroactively amend separately executed agreements.

22. Governing Law and Jurisdiction

These Terms and any non-contractual obligations arising from them are governed by the laws of the Republic of Cyprus.

Where you use the Website in the course of business, the courts of the Republic of Cyprus will have exclusive jurisdiction.

Where you are a consumer, this provision does not deprive you of mandatory legal protections or jurisdictional rights available under the law applicable to you.

23. General Provisions

If any provision of these Terms is invalid or unenforceable, it will be modified to the minimum extent necessary to make it valid and enforceable or, where that is not possible, severed. The remaining provisions will continue in effect.

A failure by Uraeus to enforce a provision does not constitute a waiver of that provision.

You may not assign rights arising under these Terms without Uraeus's prior written consent.

Uraeus may assign or transfer its rights and obligations in connection with a corporate reorganisation, merger, financing, acquisition, disposal or transfer of the relevant business, subject to applicable law.

These Terms do not create a partnership, joint venture, agency, fiduciary relationship or employment relationship between you and Uraeus.

24. Contact

Questions concerning these Terms may be addressed to:

Uraeus Ltd

Avensia Court 2, Unit K1

22 Grigori Afxentiou Avenue

6023 Larnaca

Cyprus

Email: legal@uraeus.net

Effective date: 01/01/2026

1. About This Notice

This Privacy & Cookie Notice explains how Uraeus Ltd ("Uraeus", "we", "us" or "our") collects, uses, stores, discloses and otherwise processes personal data in connection with its Website, business activities, investment activities and related communications.

Uraeus respects the privacy of individuals whose personal data it processes and is committed to handling personal data in accordance with applicable data-protection legislation, including Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), and applicable Cyprus data-protection legislation.

This Notice applies principally to:

• visitors to our Website;

• individuals who contact us;

• representatives of companies and organisations that interact with us;

• founders, shareholders, directors and representatives of potential investment or acquisition targets;

• advisers and counterparties;

• job applicants;

• representatives of portfolio or affiliated companies; and

• other individuals whose personal data we process in connection with our legitimate corporate and investment activities.

2. Data Controller

The controller responsible for the processing described in this Notice is:

Uraeus Ltd

Registration number: HE 449948

Avensia Court 2, Unit K1

22 Grigori Afxentiou Avenue

6023 Larnaca

Cyprus

Privacy contact email: legal@uraeus.net

Where a particular portfolio company, subsidiary or other entity determines independently why and how personal data is processed, that entity may be a separate controller and its own privacy notice may apply.

3. Nature of Our Business

Uraeus is a Cyprus-based holding and investment company.

Its investment interests may include companies, technologies and projects operating in sectors including:

• artificial intelligence;

• finance, payments and related financial technologies;

• software development and technology;

• telecommunications; and

• other sectors identified by Uraeus from time to time.

Because of the nature of our activities, we may process business and professional information concerning individuals associated with existing or prospective investments, acquisitions, partnerships and commercial relationships.

4. Personal Data We May Collect

Depending on how you interact with us, we may collect the following categories of personal data.

4.1 Identity and Contact Information

This may include:

• name;

• business address;

• email address;

• telephone number;

• job title;

• company or organisation;

• country of residence or business location; and

• other contact information provided to us.

4.2 Business and Professional Information

This may include:

• employer or business affiliation;

• professional role;

• directorships;

• professional biography;

• education and experience where relevant;

• business interests;

• ownership or shareholding information;

• professional relationships;

• publicly available professional information; and

• correspondence concerning business matters.

4.3 Investment and Transaction Information

Where you contact Uraeus concerning an investment, acquisition, financing, partnership or other transaction, we may process information such as:

• pitch decks and investment proposals;

• business plans;

• corporate structure information;

• information concerning founders, shareholders, directors or key employees;

• financial or operational information associated with identifiable individuals;

• ownership and beneficial-ownership information;

• information required for due diligence;

• information concerning negotiations or proposed transactions;

• correspondence and meeting notes; and

• documentation reasonably required to assess or complete a transaction.

Not all information contained in corporate or transaction documentation constitutes personal data. This Notice applies only to information relating to identified or identifiable natural persons.

4.4 Communications

We may process communications sent to or received from you, including:

• emails;

• contact-form submissions;

• correspondence;

• meeting invitations;

• telephone or video-call information; and

• records or summaries of business discussions.

4.5 Recruitment Information

If you apply for employment or another professional position, we may process:

• your name and contact information;

• curriculum vitae or résumé;

• employment history;

• education;

• qualifications;

• professional references;

• portfolio or work samples;

• interview information; and

• other information submitted as part of your application.

4.6 Website and Technical Information

When you access our Website, certain technical information may be processed automatically, including:

• IP address;

• browser type and version;

• device type;

• operating system;

• referring website;

• pages accessed;

• date and time of access;

• approximate geographic information derived from IP address;

• Website interaction data;

• security logs; and

• cookie or similar technology identifiers.

4.7 Compliance and Due-Diligence Information

Where appropriate and lawful in connection with a potential investment, acquisition, corporate transaction or other relationship, we may process information required for legal, regulatory, compliance or risk-management purposes.

This may include information concerning:

• identity;

• directorships;

• ownership and beneficial ownership;

• corporate affiliations;

• sanctions or restricted-party screening;

• conflicts of interest;

• litigation or insolvency information where relevant;

• fraud-prevention information; and

• other information reasonably required for legal or transaction due diligence.

Such information may be obtained directly from you, from the relevant organisation, from professional advisers or from lawful public or commercial sources.

5. Information We Ask You Not to Submit

General contact forms and ordinary email channels are not intended for highly sensitive information.

Unless Uraeus has specifically requested such information and appropriate safeguards are in place, please do not send us:

• passwords or authentication credentials;

• complete payment-card information;

• source code;

• trade secrets;

• detailed medical information;

• biometric or genetic information;

• information concerning sexual orientation;

• political or religious information;

• criminal-conviction information; or

• other special-category personal data.

If sensitive information is relevant to a legitimate due-diligence, employment or legal process, appropriate arrangements should be made with Uraeus before submitting it.

6. How We Obtain Personal Data

We may obtain personal data directly from you, from organisations with which you are associated, from third parties, from publicly available sources and automatically through the Website.

Directly from you

For example, when you:

• contact us;

• complete a Website form;

• send us a business or investment proposal;

• communicate with our team;

• attend a meeting;

• apply for employment; or

• enter into a business relationship with us.

From organisations with which you are associated

For example, from:

• your employer;

• a company in which you are a shareholder or director;

• a potential investment target;

• a portfolio company;

• an adviser;

• a business partner; or

• another transaction participant.

From third parties

We may receive information from:

• lawyers;

• accountants;

• auditors;

• investment or transaction advisers;

• recruitment agencies;

• due-diligence providers;

• professional service providers; and

• other lawful sources.

From publicly available sources

Where appropriate for legitimate corporate and investment purposes, we may obtain professional or corporate information from sources such as:

• corporate registers;

• company websites;

• professional networking platforms;

• regulatory publications;

• press publications;

• sanctions databases; and

• other legitimate publicly accessible sources.

Automatically through the Website

Technical and usage information may be generated automatically by our Website infrastructure, security systems, cookies and similar technologies.

7. Purposes and Legal Bases for Processing

We process personal data only where an appropriate legal basis applies.

Depending on the circumstances, these legal bases may include:

• performance of a contract;

• taking steps at your request before entering into a contract;

• compliance with a legal obligation;

• our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms; and

• your consent, where consent is required.

7.1 Responding to Enquiries

We process your contact and communication information to respond to enquiries, arrange discussions, provide requested corporate information and communicate about potential business relationships.

Our legal basis may be our legitimate interests in communicating with persons interested in Uraeus or, where applicable, taking steps at your request before entering into a contract.

7.2 Evaluating Investment and Business Opportunities

We may process personal and professional information to:

• review investment proposals;

• evaluate potential acquisitions;

• evaluate companies, technologies or assets;

• conduct preliminary commercial analysis;

• arrange meetings;

• assess management teams;

• analyse potential partnerships; and

• determine whether Uraeus wishes to pursue a transaction.

Our legal basis is generally our legitimate interests in identifying, evaluating and pursuing legitimate investment and corporate opportunities.

7.3 Conducting Due Diligence

We may process personal data to conduct:

• legal due diligence;

• financial due diligence;

• commercial due diligence;

• technical due diligence;

• compliance reviews;

• conflict checks;

• sanctions screening;

• fraud prevention;

• ownership verification; and

• other transaction-related investigations.

Depending on the circumstances, our legal basis may include legitimate interests, compliance with legal obligations or taking steps in connection with a proposed contract or transaction.

7.4 Managing Investments and Corporate Interests

We may process personal data in connection with:

• ownership of portfolio companies;

• shareholder matters;

• board representation;

• corporate governance;

• financing;

• restructuring;

• strategic support;

• reporting;

• acquisitions and disposals; and

• management of our corporate group and investments.

The legal basis will generally be our legitimate interests in managing our investments and corporate affairs, performance of contractual obligations or compliance with legal obligations.

7.5 Business Administration

We may process personal data to:

• maintain business records;

• administer contracts;

• manage suppliers and advisers;

• process correspondence;

• maintain corporate records;

• manage accounting and financial matters; and

• operate Uraeus efficiently.

Our legal basis may be legitimate interests, performance of a contract or compliance with legal obligations.

7.6 Website Operation and Security

We process technical information to:

• operate and maintain the Website;

• protect the Website and our infrastructure;

• prevent malicious activity;

• identify security incidents;

• troubleshoot technical problems; and

• maintain appropriate audit and security logs.

Our legal basis is generally our legitimate interests in maintaining a secure and reliable Website and protecting Uraeus, its users and its systems.

7.7 Website Analytics

Where analytics technologies require consent under applicable law, we will use them only after receiving the required consent.

Analytics may be used to understand:

• Website traffic;

• Website performance;

• visitor interactions;

• popular content; and

• ways of improving the Website.

Where consent is the relevant legal basis, you may withdraw that consent through our cookie-management mechanism.

7.8 Recruitment

We process applicant information to:

• evaluate applications;

• communicate with candidates;

• conduct interviews;

• assess qualifications;

• obtain references where appropriate; and

• make recruitment decisions.

The legal basis may include taking steps at your request before entering into an employment contract and our legitimate interests in recruiting suitable personnel.

7.9 Legal Claims and Protection of Rights

We may process information where necessary to:

• obtain legal advice;

• establish, exercise or defend legal claims;

• investigate misconduct;

• enforce contracts;

• protect our intellectual property;

• prevent fraud; or

• protect Uraeus's legitimate legal and commercial interests.

7.10 Compliance with Law

We may process or disclose information where necessary to comply with:

• applicable laws;

• court orders;

• regulatory requirements;

• lawful requests from authorities;

• accounting requirements;

• tax requirements; or

• other binding legal obligations.

7.11 Corporate Transactions

Personal data may be processed in connection with:

• investments;

• acquisitions;

• disposals;

• mergers;

• reorganisations;

• joint ventures;

• financings;

• restructurings; or

• transfers of companies or assets.

Our legal basis is generally our legitimate interests in conducting legitimate corporate and investment transactions and, where applicable, compliance with legal obligations.

8. Legitimate Interests

Where we rely on legitimate interests, those interests may include:

• operating and developing Uraeus;

• evaluating investments and acquisitions;

• protecting our assets;

• managing portfolio companies;

• maintaining business relationships;

• conducting due diligence;

• preventing fraud and security incidents;

• managing legal and commercial risks;

• improving our Website;

• establishing and defending legal claims; and

• conducting legitimate corporate transactions.

Where required, we balance these interests against the rights and interests of affected individuals.

9. Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Examples where consent may be relevant include certain non-essential cookies or electronic communications where applicable law requires consent.

10. Cookies and Similar Technologies

Our Website may use cookies and similar technologies.

A cookie is a small data file stored on or accessed from your device when you visit a website.

10.1 Strictly Necessary Cookies

These cookies may be required for:

• core Website functionality;

• security;

• fraud prevention;

• network management;

• cookie-preference storage; and

• technical operation.

Where such technologies are strictly necessary to provide the Website, they may operate without separate consent to the extent permitted by applicable law.

10.2 Analytics Cookies

Analytics technologies may help us understand how visitors use the Website.

Where consent is required, analytics cookies will not be activated until you have provided the necessary consent.

10.3 Preference Cookies

Preference technologies may remember selections you make, such as language or other Website preferences.

Where required by law, they will be used only with your consent.

10.4 Marketing or Advertising Technologies

If Uraeus introduces advertising, retargeting or similar technologies, such technologies will be activated only in accordance with applicable legal requirements and the choices offered through the Website's cookie-management facility.

10.5 Managing Cookies

You may manage non-essential cookies through our Website's cookie-consent facility where available.

You may also configure your browser to block or delete cookies, although disabling strictly necessary technologies may affect Website functionality.

Details of specific cookies, providers, purposes and retention periods should be presented through the Website's cookie-management facility or cookie declaration.

11. Disclosure of Personal Data

We may disclose personal data where reasonably necessary to the following categories of recipients.

Uraeus Group and Portfolio Entities

Information may be shared with subsidiaries, affiliated entities, portfolio companies or relevant Uraeus personnel where appropriate for legitimate corporate or investment purposes.

Professional Advisers

Information may be shared with:

• lawyers;

• accountants;

• auditors;

• tax advisers;

• corporate service providers;

• investment advisers;

• consultants; and

• other professional advisers.

Service Providers

We may use third-party service providers that support functions including:

• website hosting;

• cloud infrastructure;

• email;

• cybersecurity;

• document management;

• communications;

• analytics;

• IT administration;

• data storage; and

• recruitment.

Where appropriate, service providers acting as processors are subject to contractual obligations concerning the protection of personal data.

Transaction Participants

Information may be disclosed to potential:

• buyers;

• sellers;

• investors;

• co-investors;

• lenders;

• financing providers;

• joint-venture partners;

• acquisition targets; or

• other transaction counterparties

where reasonably necessary for due diligence, negotiation or execution of a legitimate transaction.

Authorities and Other Legal Recipients

Information may be disclosed to:

• courts;

• law-enforcement bodies;

• regulators;

• tax authorities;

• government authorities; or

• other persons

where required or permitted by applicable law.

12. International Transfers

Uraeus is established in Cyprus, which is part of the European Union.

Some service providers, counterparties or recipients may be located outside the European Economic Area ("EEA").

Where personal data is transferred outside the EEA to a country that has not been recognised as providing an adequate level of data protection, we will use an appropriate transfer mechanism where required by law.

Such mechanisms may include:

• European Commission adequacy decisions;

• European Commission Standard Contractual Clauses;

• other legally recognised safeguards; or

• applicable statutory derogations in appropriate circumstances.

Additional safeguards may be implemented where required.

You may contact us for further information concerning the safeguards applicable to relevant international transfers.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted for legal, accounting, regulatory, dispute-resolution or legitimate business purposes.

The appropriate retention period depends on factors including:

• the nature of the information;

• why it was collected;

• whether a business relationship exists;

• whether an investment or transaction proceeded;

• legal limitation periods;

• accounting or tax requirements;

• potential disputes;

• security requirements; and

• applicable legal obligations.

For example:

• general enquiry information may be retained for a reasonable period after the enquiry has concluded;

• investment proposals and transaction information may be retained for a reasonable period to maintain appropriate corporate records, evaluate future opportunities and address possible legal issues;

• information concerning completed investments may be retained for the life of the investment and for an appropriate period thereafter;

• recruitment information may be retained for a reasonable period following completion of the recruitment process; and

• Website security logs may be retained for a period reasonably required for security and incident investigation.

Where information is no longer required, we may delete, anonymise or securely archive it as appropriate.

14. Security

Uraeus uses organisational and technical measures intended to protect personal data against:

• unauthorised access;

• unlawful processing;

• accidental loss;

• destruction;

• alteration; and

• unauthorised disclosure.

Measures may include, as appropriate:

• access controls;

• authentication;

• encryption;

• secure infrastructure;

• backup procedures;

• security monitoring;

• confidentiality obligations; and

• restrictions on access according to business need.

No internet transmission or information-storage system can be guaranteed to be completely secure.

15. Your Data-Protection Rights

Subject to the conditions and limitations provided by applicable law, you may have the following rights.

Right of Access

You may request information concerning whether we process your personal data and obtain a copy of relevant personal data.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete information.

Right to Erasure

In certain circumstances, you may request deletion of personal data.

This right is not absolute and may not apply where continued processing is necessary for legal, contractual or other lawful purposes.

Right to Restriction

In certain circumstances, you may request that processing of your personal data be restricted.

Right to Data Portability

Where applicable, you may have the right to receive certain personal data in a structured, commonly used and machine-readable format and to transmit it to another controller.

Right to Object

Where processing is based on legitimate interests, you may object to processing on grounds relating to your particular situation.

We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.

Direct Marketing

Where personal data is processed for direct marketing, you may object to that processing at any time.

Withdrawal of Consent

Where processing is based on consent, you may withdraw consent at any time.

Right to Complain

You have the right to lodge a complaint with the competent data-protection supervisory authority.

In Cyprus, the competent authority is the Office of the Commissioner for Personal Data Protection.

You may also contact Uraeus first so that we have an opportunity to address your concern directly.

16. Exercising Your Rights

Requests concerning personal data may be sent to:

legal@uraeus.net

To protect personal data, we may need to take reasonable steps to verify your identity before responding to a request.

We may also request sufficient information to identify the processing to which your request relates.

We will respond within the period required by applicable law.

Certain rights are subject to exceptions and limitations. If we cannot comply fully with a request, we will explain the reason where required by law.

17. Automated Decision-Making

The Website is not intended to make decisions about individuals based solely on automated processing that produce legal effects or similarly significant effects.

If Uraeus introduces processing involving legally significant solely automated decision-making, relevant individuals will be provided with any additional information required by applicable law.

18. Children's Privacy

The Website is intended for corporate, professional and investment-related purposes and is not directed at children.

We do not knowingly seek to collect personal information from children through our general Website functionality.

If you believe that a child has submitted personal data to us inappropriately, please contact us.

19. Third-Party Websites

Our Website may contain links to websites operated by portfolio companies, service providers, business partners or other third parties.

Uraeus is not responsible for the privacy practices of third-party websites.

When you leave our Website, you should review the privacy notice applicable to the third-party service you use.

20. Portfolio Companies

Portfolio companies and other businesses in which Uraeus holds an interest may operate independently and may act as separate data controllers.

Unless expressly stated otherwise, Uraeus is not responsible for the independent processing activities of a portfolio company merely because Uraeus owns an interest in that company.

Questions concerning processing performed by a portfolio company should generally be directed to that company.

21. Changes to This Notice

We may update this Privacy & Cookie Notice from time to time to reflect changes in:

• our Website;

• our investment and corporate activities;

• the personal data we process;

• our service providers;

• applicable law;

• regulatory guidance; or

• our internal practices.

The latest version will be published on the Website together with its effective date.

Where appropriate, material changes may also be communicated through an additional Website notice.

22. Contact Us

Questions concerning this Notice or our processing of personal data may be addressed to:

Uraeus Ltd

Avensia Court 2, Unit K1

22 Grigori Afxentiou Avenue

6023 Larnaca

Cyprus

Email: legal@uraeus.net