Privacy Policy

HKC Insight ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the HKC Insight platform ("Platform"). This Policy is governed by the Privacy Act 2020 (New Zealand). By using the Platform, you consent to the collection and use of your information as described in this Policy.

We collect the following categories of personal information: Account Information • Name and email address provided during registration • Password (stored in encrypted form — we never store plaintext passwords) • Account preferences and settings Usage Data • Pages and features accessed on the Platform • Search queries (ticker symbols and company names) • Portfolio and watchlist data you choose to create and save • Research notes you create within the Platform • AI chat session content (used to generate responses; not used to train AI models) Technical Data • IP address and approximate geographic location (country/region) • Browser type, device type, and operating system • Session duration and interaction patterns • Error logs and diagnostic information

We use your personal information to: • Provide, operate, and improve the Platform and its features • Authenticate your identity and maintain account security • Send transactional emails (account verification, password reset) • Respond to your enquiries and provide customer support • Analyse usage patterns to improve the Platform experience • Detect, investigate, and prevent fraudulent or unauthorised activity • Comply with our legal obligations under New Zealand law We will not use your personal information for purposes incompatible with those listed above without your consent.

We do not sell your personal information to third parties. We may share your information in the following limited circumstances: Service Providers We use trusted third-party service providers to operate the Platform, including cloud hosting providers, email delivery services, and analytics tools. These providers access personal information only as necessary to perform their services and are contractually obligated to keep it confidential. Legal Requirements We may disclose your information if required to do so by law, court order, or government authority, or where we believe disclosure is necessary to protect the rights, property, or safety of HKC Insight, our users, or others. Business Transfers If HKC Insight is involved in a merger, acquisition, or asset sale, your personal information may be transferred as part of that transaction. We will notify you before your information is transferred and subject to a different privacy policy.

We retain your personal information for as long as your account remains active or as needed to provide the Platform. If you close your account, we will delete or anonymise your personal information within 90 days, except where we are required to retain it for legal or regulatory compliance purposes. Usage data and logs may be retained in anonymised form for up to 24 months for analytics and security purposes.

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include: • Encrypted storage of passwords using industry-standard hashing • HTTPS encryption for all data in transit • Access controls limiting who can access personal data internally • Regular security reviews of our infrastructure While we take reasonable precautions, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.

We use session cookies and local storage to maintain your login session and remember your preferences. These are essential for the Platform to function correctly. We do not currently use third-party advertising cookies or tracking pixels. If this changes, we will update this Policy and, where required by law, obtain your consent. You can control cookie settings through your browser, but disabling essential cookies may affect Platform functionality.

Under the Privacy Act 2020 (New Zealand), you have the right to: • Access the personal information we hold about you • Request correction of inaccurate or outdated information • Request deletion of your personal information (subject to legal retention requirements) • Object to or restrict certain types of processing • Withdraw consent where processing is based on your consent To exercise any of these rights, please contact us at Contact@hkcinsight.com. We will respond within 20 working days as required under the Privacy Act 2020. If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner (New Zealand) at www.privacy.org.nz.

The Platform is not directed at or intended for use by persons under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal information from a person under 18, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by email or by posting a notice on the Platform. The date of the most recent revision is shown at the top of this Policy. Your continued use of the Platform after any change constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us: Email: Contact@hkcinsight.com HKC Insight New Zealand For privacy complaints, you may also contact the Office of the Privacy Commissioner: Website: www.privacy.org.nz Phone: 0800 803 909