Privacy Policy

Bozorgmehr Farm Capital ("we," "us," "our," or the "Firm") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website or use our investment services.

As a financial institution, we are subject to various privacy laws and regulations, including the Gramm-Leach-Bliley Act (GLBA), SEC Regulation S-P, the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable state, federal, and international privacy laws.

Personal Information

We collect personal information that you provide directly to us, including but not limited to:

• Identification Information: Name, Social Security number, date of birth, government-issued identification numbers
• Contact Information: Address, email address, telephone number
• Financial Information: Account balances, income, assets, investment experience, transaction history, credit history, payment history, credit scores
• Professional Information: Employment information, occupation, employer name
• Investment Information: Risk tolerance, investment objectives, financial goals, retirement assets

Information Collected Automatically

When you visit our website, we automatically collect certain information through cookies and similar technologies, including:

• IP address and device identifiers
• Browser type and version
• Pages visited and time spent
• Referring website addresses
• Operating system information

Information from Third Parties

We may receive information about you from credit bureaus, identity verification services, regulatory databases, and other financial institutions as permitted or required by law.

Disclosures Required or Permitted by Law

We may share your information with:

• Affiliates: Companies under common ownership or control for business purposes
• Service Providers: Third-party vendors who perform services on our behalf, including custodians, broker-dealers, technology providers, and professional advisors
• Regulatory Authorities: SEC, FINRA, state securities regulators, IRS, and other government agencies as required by law
• Legal Compliance: To comply with subpoenas, court orders, or legal investigations

Limitations on Sharing

We do not sell your personal information to third parties. We limit sharing of your nonpublic personal information with nonaffiliated third parties as required by the GLBA Privacy Rule.

Your Right to Opt Out

You have the right to opt out of certain information sharing with nonaffiliated third parties as permitted under GLBA. To exercise this right, contact us using the information provided at the end of this policy.

If you are located outside the United States, please note that we transfer, store, and process your information in the United States. For transfers from the European Economic Area, United Kingdom, or other jurisdictions with data transfer restrictions, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Other legally recognized transfer mechanisms

We ensure that recipients provide adequate protection for your personal data in accordance with applicable law.

We maintain physical, electronic, and procedural safeguards designed to protect your personal information from unauthorized access, use, or disclosure. Our security measures include:

• Written information security policies and procedures
• Access controls and authentication measures
• Encryption of sensitive data in transit and at rest
• Regular security assessments and testing
• Employee training on data protection
• Vendor management and oversight programs
• Incident response program to detect, respond to, and recover from unauthorized access

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal and regulatory obligations:

• Financial records are retained for at least six years as required by SEC rules and GLBA
• Certain records may be retained for seven years or longer as required by the Sarbanes-Oxley Act and other regulations
• Transaction records and communications are maintained in accordance with applicable recordkeeping requirements

After the retention period expires, we securely dispose of personal information in accordance with our disposal policies.

Rights Under GDPR

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights:

• Right of Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your personal data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your supervisory authority

As required by GLBA, we provide an annual privacy notice to our customers describing our privacy policies and practices. This Privacy Policy, along with any separate privacy notices provided at account opening, constitutes our privacy notice to you.

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to submit a privacy-related request, please contact us: contact [at] bozorgmehrcorp.ir