DRAFT: pending securities counsel review
Legal

Privacy policy

Draft for counsel review · Effective date: [DATE] · Last updated: 24 September 2026

This policy explains what personal information [LEGAL ENTITY NAME] ("Invest Global", "we", "us") collects through investglobal.io, why we collect it, how long we keep it, and the choices and rights you have. It covers the website, its forms, and emails you send us.

1. What we collect and why

InformationSourceWhy we use it
Name, email, organisation, investor type, markets of interest and your messageThe "Start a conversation" formTo reply to your inquiry and scope any advisory engagement.
Name, email and the listing you asked aboutListing enquiry formsTo answer your question about that listing.
Name, email, role and the listing, news item or professional details you submitContribute formsTo review the submission, contact you about it, and publish it if approved.
Email addressFree-access form in the profile limit promptTo administer your free monthly access. We do not send marketing email without asking you first.
Anything you include in an emailEmail to advisory@investglobal.io or riley@investglobal.ioTo respond and keep a record of the conversation.
Name, email, billing details and subscription statusStripe, when you subscribeTo provide and manage your subscription. Card details are entered on Stripe's hosted page; we never see or store your full card number.
IP address, browser type, pages requested and timestampsOur host, Netlify, automaticallyTo serve the site, keep it secure and diagnose problems.
Pages viewed, approximate location (city or country), device type and on-site events such as button clicksGoogle Analytics, only if you click AcceptTo understand which content is useful and improve the site.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not use your information for automated decisions that have legal or similarly significant effects.

2. Browser storage and cookies

The site stores a small amount of information in your own browser. The items below are essential to how the site works, so they are set without asking. They stay on your device and are not sent to us.

NameTypePurposeDuration
ig_access_v1Local storageYour access tier, which profiles you have opened this month, and your referral codeUntil you clear it
ig_consentLocal storageRemembers your analytics choiceUntil you clear it or change it
ig_form_rlLocal storageTimestamps of your recent form submissions, used to block spamEntries older than one hour are discarded
ig_intro_seen, ig_pending_profile, ig_geo_110m_v1Session storageSkips the intro animation on return visits, resumes the profile you were opening after checkout, and caches map outlinesUntil you close the tab

Analytics cookies (optional). If you click Accept, Google Analytics sets the cookies _ga and _ga_<ID> to distinguish visits. They last up to two years. If you click Decline, Google Analytics is never loaded and no analytics request leaves your browser. Google signals and ad personalisation are switched off. If your browser sends a Global Privacy Control signal, we treat it as a Decline.

You can change your choice at any time with the link in the footer of every page.

3. Service providers and third parties

We may also disclose information when the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business, subject to this policy.

4. How long we keep it

5. Your rights (United States)

Depending on the state you live in, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of its sale or use for targeted advertising (we do neither). We will not treat you differently for using these rights.

To make a request, email riley@investglobal.io with the subject "Privacy request". We will verify your identity using the email address we hold, and respond within 45 days. An authorised agent may make a request on your behalf with your signed permission.

6. EEA and UK visitors (GDPR)

For visitors in the European Economic Area, the United Kingdom and Switzerland, [LEGAL ENTITY NAME] is the controller of your personal data. Our legal bases are:

You have the right to access, correct, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent. Email riley@investglobal.io and we will respond within one month. You may also complain to your local data protection authority.

7. International transfers

We and our service providers are based in, or process data in, the United States. Where we transfer personal data from the EEA or UK, we rely on the EU-US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses.

8. Security

The site is served only over HTTPS. Form submissions go to Netlify over encrypted connections, and payments are handled entirely by Stripe. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

The site is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us information, contact us and we will delete it.

10. Changes and contact

If we change this policy we will update the date at the top of this page, and for material changes we will give notice on the site. Questions or requests: riley@investglobal.io. Postal address: [POSTAL ADDRESS].