Cayman Islands Data Protection
We have certain duties under the Data Protection Law, 2017 of the Cayman Islands (the "DPL") based on internationally accepted principles of data privacy.

Privacy Notice

Introduction
This privacy notice puts our shareholders on notice that through your investment in the Company you have provided or will provide us with certain personal information which constitutes personal data within the meaning of the DPL ("personal data").

In the following discussion, the "Company" refers to us and our affiliates and/or delegates, except where the context requires otherwise.

Investor Data
We will collect, use, disclose, retain and secure personal data to the extent reasonably required only and within the parameters that could be reasonably expected during the normal course of business. We will only process, disclose, transfer or retain personal data to the extent legitimately required to conduct our activities of on an ongoing basis or to comply with legal and regulatory obligations to which we are subject. We will only transfer personal data in accordance with the requirements of the DPL, and will apply appropriate technical and organisational information security measures designed to protect against unauthorised or unlawful processing of the personal data and against the accidental loss, destruction or damage to the personal data.

In our use of this personal data, we will be characterised as a "data controller" for the purposes of the DPL, while our affiliates and service providers who may receive this personal data from us in the conduct of our activities may either act as our "data processors" for the purposes of the DPL or may process personal information for their own lawful purposes in connection with services provided to us.

We may also obtain personal data from other public sources. Personal data includes, without limitation, the following information relating to a shareholder and/or any individuals connected with a shareholder as an investor: name, residential address, email address, contact details, corporate contact information, signature, nationality, place of birth, date of birth, tax identification, credit history, correspondence records, passport number, bank account details, source of funds details and details relating to the shareholder's investment activity.

Whom this Affects
If you are a natural person, this will affect you directly. If you are a corporate investor (including, for these purposes, legal arrangements such as trusts or exempted limited partnerships) that provides us with personal data on individuals connected to you for any reason in relation your investment in the Company, this will be relevant for those individuals and you should transmit the content of this Privacy Notice to such individuals or otherwise advise them of its content.

How the Company May Use a Noteholder's Personal Data
The Company, as the data controller, may collect, store and use personal data for lawful purposes, including, in particular:
(i) where this is necessary for the performance of our rights and obligations under any purchase agreements;
(ii)          where this is necessary for compliance with a legal and regulatory obligation to which we are subject (such as compliance with anti-money laundering requirements); and/or
(iii) where this is necessary for the purposes of our legitimate interests and such interests are not overridden by your interests, fundamental rights or freedoms.

Should we wish to use personal data for other specific purposes (including, if applicable, any purpose that requires your consent), we will contact you.

Why We May Transfer Your Personal Data
In certain circumstances we may be legally obliged to share personal data and other information with respect to your shareholding with the relevant regulatory authorities such as the Cayman Islands Monetary Authority or the Tax Information Authority. They, in turn, may exchange this information with foreign authorities, including tax authorities.

We anticipate disclosing personal data to persons who provide services to us and their respective affiliates (which may include certain entities located outside the US, the Cayman Islands or the European Economic Area) who will process your personal data on our behalf.

The Data Protection Measures We Take
Any transfer of personal data by us or our duly authorised affiliates and/or delegates outside of the Cayman Islands shall be in accordance with the requirements of the DPL.

We and our duly authorised affiliates and/or delegates shall apply appropriate technical and organisational information security measures designed to protect against unauthorised or unlawful processing of personal data, and against accidental loss or destruction of, or damage to, personal data.

We shall notify you of any personal data breach that is reasonably likely to result in a risk to your interests, fundamental rights or freedoms or those data subjects to whom the relevant personal data relates.