Privacy Policy

This Privacy Policy ("Policy") describes how OAKMONT STRATEGY LTD, a company incorporated under the laws of the Republic of Seychelles with registration number 249909, having its registered office at 306 Victoria House, Victoria, Mahe, Seychelles (the "Company", "we", "us", or "our"), collects, uses, stores, and otherwise processes personal data in connection with the operation of its website (the "Website") and the conduct of its business activities. This Policy should be read together with the Company's Terms of Use.

1. DEFINITIONS

In this Policy, the following expressions shall have the meanings set out below:

1.1 "Company", "we", "us", "our" means OAKMONT STRATEGY LTD, registration number 249909, registered office at 306 Victoria House, Victoria, Mahe, Seychelles.

1.2 "Data Subject", "you", "your" means any individual or entity accessing or using the Website or otherwise providing personal data to the Company.

1.3 "Personal Data" means any information relating to an identified or identifiable natural person, as defined under applicable data protection law.

1.4 "Processing" means any operation or set of operations performed on Personal Data, including collection, storage, use, disclosure, transfer, or deletion.

1.5 "Website" means the website operated by the Company at its current domain address, including all pages and features accessible thereon.

1.6 "Processor" means a natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Company.

2. SCOPE AND APPLICATION

2.1 This Policy applies to all Personal Data collected or processed by the Company through the Website or in the course of its business activities, including but not limited to data submitted through enquiry forms, email correspondence, and contractual engagements.

2.2 This Policy applies to natural persons whose Personal Data is processed by the Company. It does not apply to data relating solely to legal entities.

2.3 The Company operates on a business-to-business basis. Where Personal Data is provided to the Company by a corporate client on behalf of its representatives or employees, the Company shall process such data in accordance with this Policy and any applicable data processing agreement.

3. DATA CONTROLLER

3.1 The Company acts as the data controller in respect of all Personal Data collected through the Website and in the course of its direct business operations.

3.2 The Company can be contacted in relation to any data protection matter at its registered office at 306 Victoria House, Victoria, Mahe, Seychelles, or by email at the address published on the Website.

4. PERSONAL DATA COLLECTED

The Company may collect the following categories of Personal Data:

4.1 Identification and contact data, including name, job title, company name, email address, and telephone number, provided voluntarily through the Website's contact form or by direct correspondence.

4.2 Technical and usage data collected automatically when you access the Website, including IP address, browser type and version, operating system, referring URL, pages viewed, and time spent on the Website.

4.3 Correspondence data, comprising the content of any communications sent to the Company by email or through the Website.

4.4 Contractual and business data relating to prospective or existing clients, including information provided in the course of service engagements, due diligence, and contract administration.

5. LEGAL BASIS FOR PROCESSING

The Company processes Personal Data on the following legal bases:

5.1 Legitimate interests, where processing is necessary for the purposes of the legitimate interests pursued by the Company or a third party, including responding to enquiries submitted through the Website, conducting pre-sales communications, and operating the Website securely and effectively, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the Data Subject.

5.2 Contractual necessity, where processing is necessary for the performance of a contract to which you are a party or for taking pre-contractual steps at your request.

5.3 Compliance with a legal obligation, where processing is required to comply with a legal or regulatory obligation to which the Company is subject.

6. PURPOSES OF PROCESSING

The Company processes Personal Data for the following purposes:

6.1 To respond to enquiries submitted through the Website or received by direct correspondence, and to provide information about the Company's services.

6.2 To negotiate, enter into, perform, and administer service agreements with clients and prospective clients.

6.3 To operate, maintain, and improve the Website, including analysing usage patterns and monitoring the technical performance of the Website.

6.4 To comply with applicable legal and regulatory obligations, including record-keeping requirements.

6.5 To protect the rights, property, and safety of the Company, its clients, and third parties.

7. COOKIES AND TRACKING TECHNOLOGIES

7.1 The Website may use cookies and similar tracking technologies to collect technical and usage data as described in Clause 4.2. Cookies are small data files stored on your device that enable the Website to recognise your browser and retain certain information.

7.2 The Company uses only such cookies as are necessary for the operation of the Website or for the purpose of analysing Website traffic on an aggregated and anonymised basis. The Company does not use cookies for targeted advertising or behavioural profiling.

7.3 You may configure your browser to refuse cookies or to alert you when cookies are being sent. If you disable cookies, certain features of the Website may not function correctly.

8. DISCLOSURE OF PERSONAL DATA

8.1 The Company does not sell, rent, or otherwise transfer Personal Data to third parties for commercial purposes.

8.2 The Company may disclose Personal Data to third-party service providers engaged as Processors to assist in the operation of the Website or the delivery of services, including hosting providers, email service providers, and IT support providers. Such Processors are engaged under contractual obligations of confidentiality and are permitted to process Personal Data only on the Company's instructions and for the purposes set out in this Policy.

8.3 The Company may disclose Personal Data to professional advisers, regulatory authorities, or law enforcement bodies where required by applicable law, court order, or regulatory requirement, or where necessary to protect the rights or safety of the Company or third parties.

8.4 In the event of a merger, acquisition, restructuring, or sale of all or part of the Company's business, Personal Data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

9. INTERNATIONAL TRANSFERS OF PERSONAL DATA

9.1 The Company is incorporated in the Republic of Seychelles and may engage service providers and subcontractors located in other jurisdictions. Personal Data may accordingly be transferred to, stored in, or processed in countries outside the country in which it was collected.

9.2 Where Personal Data is transferred to a country that does not provide a level of data protection equivalent to that in the country of collection, the Company will implement appropriate safeguards, which may include standard contractual clauses or other lawful transfer mechanisms as recognised under applicable data protection law.

10. DATA RETENTION

10.1 The Company retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or reporting obligations.

10.2 Personal Data submitted through the Website for the purpose of an enquiry will be retained for a period sufficient to respond to the enquiry and, where a business relationship is established, for the duration of that relationship and a period of up to five (5) years thereafter, unless a longer retention period is required by applicable law.

10.3 Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with the Company's internal procedures.

11. DATA SECURITY

11.1 The Company implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction, having regard to the nature of the data and the risks involved in its processing.

11.2 Notwithstanding the foregoing, no method of transmission over the internet or electronic storage is completely secure. The Company cannot guarantee the absolute security of Personal Data and shall not be liable for any unauthorised access or use of Personal Data that is beyond its reasonable control.

11.3 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, the Company will take appropriate steps in accordance with applicable law, which may include notifying the relevant supervisory authority and, where required, the affected Data Subjects.

12. RIGHTS OF DATA SUBJECTS

Subject to applicable data protection law, you may have the following rights in respect of your Personal Data:

12.1 Right of access - the right to request confirmation as to whether the Company processes your Personal Data and, if so, to obtain a copy of that data together with information about the purposes and circumstances of such processing.

12.2 Right to rectification - the right to request correction of any inaccurate or incomplete Personal Data held by the Company.

12.3 Right to erasure - the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where there is no other lawful basis for its continued processing.

12.4 Right to restriction - the right to request that the Company restricts the processing of your Personal Data in certain circumstances.

12.5 Right to data portability - the right, in certain circumstances, to receive your Personal Data in a structured, commonly used, and machine-readable format.

12.6 Right to object - the right to object to the processing of your Personal Data where such processing is based on the legitimate interests of the Company.

To exercise any of the above rights, please contact the Company in writing at the address set out in Clause 3.2. The Company will respond to all requests within a reasonable period and in any event within the timeframe prescribed by applicable law.

13. AMENDMENTS TO THIS POLICY

13.1 The Company reserves the right to amend this Policy at any time by publishing a revised version on the Website. The revised Policy will state the date on which it takes effect.

13.2 Your continued use of the Website following publication of any amended Policy shall constitute your acknowledgement of the revised terms. Where processing is based on legitimate interests or contractual necessity, amendments to this Policy do not require your active consent and take effect on the date stated. If you do not wish to be subject to the amended Policy, you should discontinue use of the Website and may submit a request to the Company in accordance with Clause 12.

13.3 Where amendments are material, the Company will take reasonable steps to bring such amendments to your attention by means of a notice on the Website.

14. GOVERNING LAW AND JURISDICTION

14.1 This Policy and any dispute or claim arising out of or in connection with it or its subject matter or formation (including non-contractual disputes or claims) shall be governed by and construed in accordance with the laws of England and Wales.

14.2 Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Last Updated: April 2026

Issued by: OAKMONT STRATEGY LTD

Registered Office: 306 Victoria House, Victoria, Mahe, Seychelles

Registration Number: 249909

Contact Email: info@oakmont-strategy.com