Privacy Policy

PLEASE READ THIS PRIVACY POLICY CAREFULLY AS IT CONTAINS IMPORTANT INFORMATION AND AFFECTS YOUR LEGAL RIGHTS.

This Privacy Policy is incorporated in our General Terms of Use (the "Terms") by reference, and together with the Terms constitutes a binding agreement between you and Arukah, and describes our information handling practices when you access and use our data including but not limited to, our Infrastructure. All terms and references used in this Privacy Policy and which are defined or construed in the Terms shall have the same meaning and construction in this Privacy Policy.

This Privacy Policy is meant to help you understand our data processing activities and practices when visitors and Users access our Infrastructure, and how we handle your Personal Data (as defined below) including how we collect, use or disclose your Personal Data. Arukah respects the privacy of its Users and recognizes the need for adequate protection and administration of the Personal Data in accordance with this Privacy Policy.

This Privacy Policy supplements but does not supersede nor replace any other consents you may have previously provided to us in respect of your Personal Data, and any consents you may have provided in connection with this Privacy Policy are cumulative and additional to any rights which we may have under Data Protection Laws (as defined below) to collect, use and disclose your Personal Data.

Arukah may, at its sole discretion, make changes to this Privacy Policy from time to time. These changes will be effective immediately upon their publication on our Infrastructure. Please review this Privacy Policy on a regular basis. If changes are significant, we may provide a more prominent notice (including, in certain cases, email notification of the relevant Privacy Policy changes).BY INTERACTING WITH US, SUBMITTING INFORMATION TO US, SIGNING UP FOR THE USE OF OUR INFRASTRUCTURE, ACCESSING AND/OR USING OUR INFRASTRUCTURE, YOU AGREE TO BE BOUND BY, AND ACCEPT THIS PRIVACY POLICY AS UPDATED FROM TIME TO TIME. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MUST IMMEDIATELY DISCONTINUE YOUR ACCESS OR USE OF THE INFRASTRUCTURE.
‍

1. DEFINITIONS
In addition to the terms defined elsewhere in this Privacy Policy, the following words and expressions shall have the meanings respectively assigned to them hereunder, unless the context requires otherwise:
‍
"Data Protection Laws" means any applicable law relating to the protection, privacy and security, collection, use or disclosure of sensitive or other personally identifiable information, including the Singapore Personal Data Protection Act 2012;

"Personal Data" means all personal information and/or personal data as defined under Data Protection Laws; and

"Process", "processed" or, "processing" means any set of operations which is performed on any Personal Data or set of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, reformatting, analysis, storage, adaptation or alteration, retrieval, use, disclosure by transmission, dissemination or otherwise making available, combination with other data, restriction, compression, encryption, erasure or destruction.

2. PERSONAL DATA WE COLLECT
The Personal Data we collect includes the Personal Data you provide to us as part of your access and/or use of the Infrastructure (the "Provided Information"). If you choose not to share the Provided Information with us, we may not be able to serve you as effectively or offer you access to, and use of the Infrastructure. As we add new features and services, you may be asked to provide additional Provided Information. The Provided Information may include, but is not limited to:

i. certain financial information (such as virtual assets wallet address) (the "Financial Information");

ii. information about your transactions, which may include any one or more of the following: information about the transaction, the amount of the transaction and its time (the "Transactions Information");

iii. correspondence information, which may include any one or more of the following: survey responses, information provided to our support team or user research team; records and copies of your email messages together with your email address and our responses, if you choose to correspond with us through email (the "Correspondence Information"); and

iv. information about your User Content, which may include any one or more of the following: User Content you submit to be published or displayed on the Infrastructure or transmitted to other Users or third- parties (the "User Information");

v. technical information and usage data, such as statistical and site-related information relating to how a visitor arrived at our websites or platforms, the IP address which may provide information about precise or approximate location, device information, clickstream information and time stamp, and information about how you use our websites and services;

vi. marketing and communications data, such as your preferences in receiving marketing messages from us, your communication preferences and history of communications with us, our service providers or third parties; and/or

vii. other information, which may include your participation in our contests, promotions, or surveys, and photographs, videos and/or audio recordings taken by us or our representatives.

If you provide us with any Personal Data relating to a third-party (e.g. information on your dependent), by submitting such information to us, you represent and warrant that the collection, use and disclosure of that Personal Data to us, as well as further collection, use, disclosure and/or Processing of that Personal Data by us for the purposes set out herein, is lawful, by or for the benefit of the persons referenced herein, and you have obtained the consent of the third-party to provide us with their personal data.

You should ensure that all Personal Data submitted to us is complete, accurate, true and correct. Failure on your part to do so may result in our inability to offer you access to, and use of, the Infrastructure.

Information we collect from you automatically. To the extent permitted by Data Protection Laws, we may collect certain types of information automatically, such as whenever you interact with the Infrastructure (the "Automatically Collected Information"). This Automatically Collected Information helps us address customer support issues, improve the performance of our Infrastructure, provide you with a streamlined and personalized experience, and protect your account from fraud by detecting unauthorized access. We may use a variety of technologies to collect the Automatically Collected Information, including, without limitation:

i. Cookies. A cookie is a small data file stored on the hard drive of your computer either for only the duration of your visit on the Website or for a fixed period (for more information, please, see Section 7 below);

ii. Web Beacons. Web beacons are small files that are embedded in the Website and emails. Web beacons allow us, for example, to track who has visited the Website or opened an email, to test the effectiveness of our marketing, and for other related Website statistics;

iii. JavaScripts. JavaScripts are code snippets embedded in various parts of Website that facilitate a variety of operations including accelerating the refresh speed of certain functionality or monitoring usage of various online components;

iv. Entity Tags. Entity Tags are HTTP code mechanisms that allow portions of Website to be stored or "cached" within your browser and validates these caches when the Website is opened, accelerating Website performance since the web server does not need to send a full response if the content has not changed;

v. HTML5 Local Storage. HTML5 local storage allows data from Website to be stored or "cached" within your browser to store and retrieve data in HTML5 pages when the Website is revisited; and

vi. Resettable Device Identifiers. Resettable device identifiers (also known as "advertising identifiers") are similar to cookies and are found on many mobile devices and tablets (for example, the "Identifier for Advertisers" or "IDFA" on Apple iOS devices and the "Google Advertising ID" on Android devices), and certain streaming media devices. Like cookies, resettable device identifiers are used to make online advertising more relevant.

The Automatically Collected Information may include, but is not limited to:

i. information about how you access and use the Infrastructure;
ii. device type and unique device identification numbers;
iii. device event information (such as crashes, system activity and hardware settings, browser type, browser language, the date and time of your request and referral URL);
iv. how your device interacts with the Infrastructure, including pages accessed and links clicked; and

v. broad geographic location (e.g. country or city-level location).

You acknowledge and agree that:

i. Arukah shall retain all rights, title and interest in and to all Automatically Collected Information; and
ii. Any IP Rights of or in Automatically Collected Information shall vest solely in us.

3. PURPOSES FOR THE COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA
Our primary purpose in collecting, using or disclosing Personal Data is to provide you with a secure, smooth, efficient and customized experience. We generally use Personal Data to create, develop, operate, deliver, and improve our Infrastructure, content and advertising; and for loss prevention and anti-fraud purposes. We may collect, use and disclose your Personal Data in the following ways and for the following purposes:

i. to provide you with the Infrastructure, to deal with any requests or inquiries you may have with respect to the Infrastructure and to provide customer service and support, including to recommend features or content which may be relevant to you based on your usage of our services, your profile information and preferences, and other information that you submitted to us;

ii. to maintain legal and regulatory compliance and to enforce or apply any agreement or to protect our (or others') property or rights and to defend any potential claim;

iii. communicate with you about your transactions, whether through verifying your blockchain wallet address or otherwise;

iv. inform you about important changes to, or other news about, the Infrastructure, including notifying you of any service issues and account updates, handling and responding to your queries, requests, feedback and suggestions, or sending you direct marketing messages or interest-based advertising, when carried out in our legitimate interests or in accordance with Data Protection Laws;

v. to prevent and detect money-laundering, terrorism, fraud or other crimes or abuses of the Infrastructure;

vi. to operate, maintain, improve, personalize, and analyze the Infrastructure, to monitor and analyze trends, usage, and activities for marketing or advertising purposes, to enhance your experience, to allow you to participate in interactive features on the Infrastructure;

vii. to conduct our recruiting processes, to maintain appropriate records for internal administrative purposes; for statistical purposes, for market research and product analysis and to protect the health and safety of our employees and visitors, our facilities and our property and other rights;

viii. managing our business operations and complying with internal policies and procedures, including but not limited to keeping records for tax purposes, managing and preparing reports on incidents and accidents, protecting and enforcing our contractual and legal rights and obligations, and facilitating business asset transactions;

ix. to develop, test and improve new products or services, including by testing and troubleshooting new products and features, such as through the use of technical and usage data, as well as aggregated, de-identified, and/or anonymized data to understand user behaviour and market trends;

x. for any purpose that you provide your consent. We will not use your Personal Data for purposes other than those purposes we have disclosed to you, without your permission. From time to time, and as required under Data Protection Laws, we may obtain your consent to allow us to share your Personal Data with third-parties. In such instances, you may opt out of having your Personal Data shared with third-parties, or allow us to use your Personal Data for any purpose that is incompatible with the purposes for which we originally collected it or subsequently obtained your authorization. If you choose to limit the use of your Personal Data, certain features of the Infrastructure may not be available to you;

xi. matching any Personal Data held which relates to you for any of the purposes listed herein; and/or

xii. any other purpose relating to or reasonably necessary for any of the above.
‍

These purposes may also apply even if you no longer utilise any of our services or the Infrastructure.

We may also collect, use or disclose your Personal Data for marketing and promotions (e.g. to send promotional communications, such as information about features, newsletters, offers, promotions, contests and events), and will, to the extent required by Data Protection Laws, obtain your express consent before collecting, using, or disclosing your Personal Data for such marketing and promotions.
‍
In relation to particular products or services or in your interactions with us, we may also have provided additional disclosures or specifically notified you of other purposes for which we process your Personal Data at the point of such interaction. These notices may supplement or clarify our privacy practices or may provide you with additional choices about how we process your Personal Data for these purposes as well. You also consent to your Personal Data so collected being handled in accordance with this Privacy Policy.

4. DISCLOSURE OF PERSONAL DATA
We take care to allow your Personal Data to be disclosed only with third- parties in accordance with this Privacy Policy. Arukah will never sell or rent your Personal Data to third-parties without your explicit consent. We will only disclose your Personal Data in the following circumstances, whether to third parties which are located overseas or in Singapore:

i. when we are required by Data Protection Laws to disclose to the relevant government regulators, ministries, statutory boards or authorities and/or law enforcement agencies, to comply with any directions, laws, rules, guidelines, regulations or requests issued or administered by any of them;

ii. with our Affiliates for business purposes and as a normal part of conducting business and offering the Infrastructure to you;

iii. within our cooperation with our service providers and suppliers, including network infrastructure providers, cloud providers, customer support service providers, marketing services providers, security services providers, data analysis service providers, software developers, land owners, real estate surveyors, non-governmental agencies, data scientist, as well as with our professional advisors who provide banking, legal, compliance, insurance, accounting, agricultural, geological, biodiversity, research or other consulting services in order to complete third party financial, technical, compliance and legal audits of our operations or otherwise comply with our legal obligations. The mentioned service providers and advisors are bound by contractual obligations with us to keep Personal Data confidential and use it only for the purposes for which we disclose it to them;

iv. with companies providing services in the areas of fraud and crime prevention and with companies providing similar services, including financial institutions such as credit reference agencies and regulatory bodies, courts, law enforcement authorities, regulators or attorneys or other parties for the establishment, exercise or defense of a legal or equitable claim or for the purposes of a confidential alternative dispute resolution process;

v. aggregated Personal Data and statistics for the purpose of monitoring Infrastructure usage in order to help us develop our Infrastructure;

vi. involving business asset transactions including but not limited to equity or debt financing or asset sale transactions with companies or other entities that we plan to merge with, be acquired by or financed by;

vii. for corporate governance, audit and compliance purposes, including disclosure to our board of directors, auditors, cybersecurity consultants and lawyers or other professional advisors engaged for compliance purposes; and/or

viii. any other party to whom you authorise us to disclose your Personal Data to.
‍
‍
We may also share information about you in an aggregate or anonymised form, for example, generic aggregated demographic information regarding visitors and users, with the abovementioned entities or parties (e.g. our business partners, trusted affiliates and advertisers).

You hereby acknowledge and agree that information that you post on or through the public areas of the Infrastructure are generally accessible to, and may be collected and used by others and may result in unsolicited messages or other contact from others. Users of the Infrastructure are encouraged to exercise caution when providing Personal Data about themselves in public or interactive areas.

Otherwise, we will only disclose your Personal Data when we are allowed or required by Data Protection Laws, and/or when you direct us or give us the consent to do so in accordance with this Privacy Policy.

5. DEEMED CONSENT
In addition to the matters set forth above, subject to and in accordance with Data Protection Laws, you shall be deemed to have consented to us collecting, using, disclosing and sharing amongst ourselves your Personal Data, and disclosing such Personal Data to our Affiliates, service providers, suppliers and relevant third parties:

i. where in response to a request for your Personal Data in connection with identified purposes, you voluntarily provide such Personal Data to us for such purpose(s) and it is reasonable that you would voluntarily provide such Personal Data; and

ii. where the collection, use or disclosure of your Personal Data is reasonably necessary for the conclusion and/or performance of a contract between you and us or any other organisation entered into at your request, which may include recipients of your Personal Data not indicated in this Privacy Policy.

6. OTHER BASES FOR HANDLING OR PROCESSING YOUR PERSONAL DATA
In addition to and without limiting the consents you have provided to our collection, use, or disclosure of your Personal Data for the purposes set out elsewhere in this Privacy Policy, where permitted by Data Protection Laws, Arukah may also in accordance with the requirements thereof also collect, use, or disclose your Personal Data as further detailed below including without consent, where we meet the requirements of Data Protection Laws:

i. for our legitimate interests or the legitimate interests of another person (but not for sending you direct marketing messages unless you have otherwise provided your consent), including without limitation for the following purposes:

a. any investigations or proceedings;
b. fraud detection and prevention; and
c. detection and prevention of misuse of the Infrastructure by Users; and

ii. we may collect your Personal Data from any of our Affiliates, we may use your Personal Data, and any of our Affiliates may disclose your Personal Data to us, for improving our products, services, processes or business, understanding User preferences and personalising experiences and recommendations (regardless whether you are an existing or prospective user of any of our Affiliates).

7. COOKIES
Our websites and platforms may use cookies as follows:

i. as necessary in order to enable our websites and platforms to operate, for example, to enable you to log onto secure parts of our websites and platforms;

ii. to collate information on your search and browsing history within our websites and platforms in order to better tailor our products and services to your interests and needs, such as to personalise the websites and platforms for you and deliver prompts which may be of particular interest to you;

iii. to track and compile statistics about visitors who interact with the websites, platforms and other Arukah online content; and/or

iv. making our websites and platforms easier to use, for example, to help speed up your future interactions with our websites and platforms by storing your selected inputs so that you are not constantly asked for the same information.

Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you delete or disable the cookies associated with our websites and platforms by changing the settings on your browser, this may impact your user experience while on our websites or platforms, including but not limited to your ability to enter or use certain part(s) of our websites or platforms. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com/.

If you have registered for an account with us, you may review and update certain account information by logging into your account, or by contacting us in the manner specified below. You should ensure that all Personal Data submitted to us is accurate, true and correct, as failure on your part to do so may affect our ability to provide you with any products and/or services.
‍
8. SECURITY, PROTECTION AND STORAGE OF PERSONAL DATA
Whilst we will undertake appropriate safeguards to protect the security and confidentiality of the Personal Data you entrust to us in accordance with Data Protection Laws, you acknowledge and agree that the safety and security of your Personal Data also depends on you. As such, where we have given you (or where you have chosen) a password for access to certain parts of the Infrastructure, you undertake to keep your password secure and confidential and shall not disclose or permit it to be disclosed to any unauthorized person, and to inform us as soon as reasonably practicable if you know or suspect that someone else knows your password or believe the confidentiality of your password has been lost, stolen, or compromised in any way or that actual or possible unauthorized transactions have taken place. We are not liable for any damages resulting from any security breaches on authorized and/or fraudulent use of your password.

Notwithstanding the foregoing, please be aware that no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security, or that no malicious attacker or harmful code will enter or target our Infrastructure, websites or services (for example, viruses, bugs, trojan horses, spyware or adware).

9. YOUR CHOICES AND PRIVACY RIGHTS
Depending on Data Protection Laws of jurisdictions where the relevant User resides, the User may be able to assert certain rights related to the Personal Data identified below:

i. to obtain from Arukah confirmation whether Arukah processes any of your Personal Data;

ii. to request for access to your Personal Data processed by Arukah;

iii. to withdraw your consent to processing of your Personal Data at any time (provided that the relevant Personal Data processing is based on your consent);

iv. to obtain from Arukah the rectification (correction) of inaccurate Personal Data;

v. to obtain from Arukah the erasure (deletion) of the Personal Data;

vi. to receive your Personal Data, which have been provided to Arukah, in a structured, commonly used and machine-readable format and to transmit that Personal Data to another controller without hindrance from Arukah;

vii. to restrict or object to the processing of your Personal Data by Arukah;

viii. not to be subject to a decision based solely on automated processing; and

ix. to complain to the local data protection authority if your privacy rights are violated, or if you have suffered as a result of unlawful processing of your Personal Data.

These rights will only apply in certain circumstances. If you wish to exercise any of these rights or become acquainted with these circumstances, in which the relevant right is applied, please, contact us via any of the means provided in Section 11. That being the case, Arukah may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

If any of the rights listed above are not provided under Data Protection Laws for the relevant User's jurisdiction, Arukah has sole and absolute discretion in providing the relevant User with those rights.

If you choose to withdraw your consent to any Processing of your Personal Data, please note that depending on the nature of your request, Arukah may not be in a position to continue to provide its products or services to you, administer any contractual relationship already in place, or perform or conclude an existing or prospective agreement. This may also result in the termination of any agreements you have with Arukah, and your being in breach of your contractual obligations or undertakings. Arukah's legal rights and remedies in such event are expressly reserved. Please also note that withdrawing consent does not affect our right to continue to process Personal Data where such processing without consent is permitted or required under Data Protection Laws. Upon receipt of your written request, we may require reasonable time to process your request and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we shall seek to process your request within thirty (30) days of receiving it, and will inform you should we require more time or information from you to process the request (which may depend on the complexity of the request, the rights and exemptions under Data Protection Laws, and the impact on our relationship with you.

10. CONTACTING US
If you:

i. have any questions or feedback relating to your Personal Data or about this Privacy Policy;

ii. would like to withdraw your consent to any collection, use or disclosure of your Personal Data as set out in this Privacy Policy; or

iii. would like to obtain access and make corrections to your Personal Data records, please contact us as follows:
Name: Arukah Capital Pte. Ltd.;
Email: hello@arukahcapital.com

‍You may also write to our Data Protection Officer as follows:
Email: nicole@arukahcapital.com

Please note that if your Personal Data has been provided to us by a third-party, you should contact that third-party to make such queries, complaints, and access and correction requests to Arukah on your behalf.

If you believe that we have infringed your rights, we encourage you to first submit a request by sending an email to the email address in this Section 10 (subject line: "Privacy Policy Request") so that we can try to resolve the issue or dispute informally.

You have the right to make a complaint at any time to the supervisory authority for data protection issues in the applicable jurisdiction. We would, however, appreciate the chance to deal with your concerns before you approach the relevant supervisory authority so, please, contact us in the first instance via any of the means provided in this Section 10.

11. GOVERNING LAW
This Privacy Policy shall be governed in all respects by the laws of Singapore. Any disputes or claims arising out of or in connection with this Privacy Policy including disputes relating to its validity, breach, termination or nullity, shall be referred to and finally resolved by arbitration administered by the Singapore International Arbitration Centre (“SIAC”) in accordance with the Arbitration Rules of the SIAC for the time being in force, which rules are deemed to be incorporated by reference into this clause. The seat of the arbitration shall be Singapore. The language of the arbitration shall be English. The Tribunal shall consist of one (1) arbitrator which shall be appointed by the parties provided that, in the event that the parties are unable to agree on or appoint the arbitrator within 28 days (or such period as may be agreed by the parties) after the date on which the dispute, controversy or difference was referred to arbitration), the arbitrator shall be appointed by the Chairman of the SIAC. Save to the extent that the parties’ contractual obligations are the subject matter of arbitration proceedings pursuant to clause, the commencement of such arbitration proceedings shall in no way affect the continual performance of the terms of this Privacy Policy.

12. THIRD-PARTY SITES
Our Infrastructure, websites and services may contain links to other websites or services operated or provided by third parties. We are not responsible for the privacy practices of such websites or services operated or provided by third-parties, whether or not these third-party websites or services may carry our logo or trademark even though they are not operated or maintained by us. Once you have left our Infrastructure, websites or services, you should check the applicable privacy policy of the third-party website or service to determine how they will handle any information they collect from you.‍