Privacy & Data Protection

Global Privacy Policy

This policy explains Ceron Corporation's treatment of personal information for investor, website and privacy interactions, with California-specific disclosures and provisions for users in other jurisdictions.

Effective: August 16, 2026 · Last updated: August 16, 2026

1. Scope and Controller

This Global Privacy Policy explains how Ceron Corporation, a California corporation ("Ceron," "we," "us," or "our"), collects, uses, discloses and protects personal information through ceroncorporation.com and related investor-information interactions.

Ceron Corporation is the controller or business responsible for the personal information described in this policy where applicable. Privacy questions and requests may be directed to privacy@ceroncorporation.com.

This public website is designed for investor information and is intended only for persons age 21 or older.

2. Information We Collect

Information you provide

  • Identifiers and contact information, such as name, email address, telephone number and state/country.
  • Professional or organizational information, including company, family office, institution or other affiliation.
  • Investor-profile information, including investor type and accredited-investor status.
  • Financial-range information, including approximate liquid investable asset range and potential allocation range.
  • Communications, questions, comments and correspondence.
  • Privacy-request information submitted through our privacy request process.

Information collected automatically

Depending on site configuration and your choices, we may receive IP address, browser type, device information, operating system, referring pages, pages viewed, approximate location derived from IP, cookie or similar identifiers, timestamps and website-performance information.

Information we ask you not to submit

Do not submit Social Security numbers, government identification images, tax returns, bank-account credentials, brokerage credentials, passwords or full financial statements through public website forms. Any investor verification requiring sensitive documentation should occur through a separate controlled process.

3. How We Use Personal Information

  • Respond to investor, corporate and privacy inquiries.
  • Evaluate preliminary investor interest and qualification information.
  • Communicate about requested information, diligence access and next steps.
  • Maintain business, compliance and transaction-related records.
  • Operate, secure, debug and improve the website.
  • Measure website usage and effectiveness where permitted and, where required, with consent.
  • Prevent fraud, misuse, abuse and security incidents.
  • Comply with legal, regulatory, tax, audit, litigation and lawful-request obligations.

EEA / UK legal bases

Where the GDPR or UK GDPR applies, Ceron may process personal data based on consent, steps requested before entering a potential business or investment relationship, legitimate interests such as responding to inquiries and securing the website, and compliance with legal obligations. Where processing depends on consent, consent may be withdrawn prospectively.

4. Cookies and Tracking Technologies

We use necessary technologies for core website functions and may use analytics, measurement or advertising technologies depending on configuration. Optional technologies are controlled through our privacy-choice tool where consent is required.

For details, see the Cookie & Tracking Notice. You can reopen the consent manager at any time using the "Privacy Choices" button displayed on the site.

5. Disclosures and Service Providers

We may disclose personal information to service providers and professional advisers only as reasonably necessary for business purposes. Categories may include website hosting and security providers, email and communications providers, customer-relationship-management or investor-relations systems, analytics providers where enabled, legal counsel, accountants, auditors, consultants and other transaction professionals.

We may also disclose information when required by law, legal process, regulatory request, court order, to protect rights or security, or in connection with a corporate transaction such as a merger, financing, reorganization or asset transfer subject to applicable law.

6. Sale, Sharing and Cross-Context Behavioral Advertising

Ceron does not intend to sell personal information for money. Ceron also does not intend to rent investor contact lists to advertisers.

Some advertising, analytics or measurement technologies can be treated as "sharing," targeted advertising or similar regulated activity under certain privacy laws depending on how they are configured. Where applicable, Ceron will honor legally required opt-out rights and recognized preference signals, including Global Privacy Control where technically supported by the browser and applicable law.

Use Privacy Choices to submit an opt-out request or change optional tracking preferences.

7. Retention

Investor inquiry, qualification and transaction-related correspondence may generally be retained for up to seven years after the last substantive interaction, and longer if reasonably necessary to satisfy legal, regulatory, audit, litigation-hold or contractual obligations. Other categories, such as security logs and cookie-consent records, may be retained for shorter periods appropriate to their purpose.

We seek to retain personal information only for as long as reasonably necessary for the purposes described in this policy.

8. Security

Ceron uses reasonable administrative, technical and organizational safeguards appropriate to the nature of the information. No Internet transmission or storage system is guaranteed to be completely secure. Sensitive investor-verification records should not be transmitted through the public website form.

9. International Users and Transfers

Ceron is based in the United States. If you access the site from the European Economic Area, United Kingdom, Canada or another jurisdiction, your personal information may be transferred to and processed in the United States and other locations where Ceron or its service providers operate.

Where legally required, Ceron will use appropriate safeguards for cross-border transfers, such as contractual protections, adequacy mechanisms or other lawful transfer tools. If a jurisdiction requires Ceron to appoint a local representative, data protection officer or similar contact for specific activities, Ceron will provide that information when the requirement becomes applicable.

10. Privacy Rights

Depending on where you live and which law applies, rights may include access, confirmation of processing, correction, deletion, portability, withdrawal of consent, objection or restriction, opt-out of targeted advertising or sale/sharing, limitation of certain sensitive-information uses, and the right to appeal certain request decisions.

EEA and United Kingdom

Where GDPR or UK GDPR applies, you may have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may also lodge a complaint with the competent supervisory authority. UK individuals may contact the Information Commissioner's Office.

Canada

Where Canadian privacy law applies, individuals may request access to and correction of personal information and may challenge Ceron's compliance or withdraw consent subject to legal limitations. Individuals may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial authority.

United States state privacy laws

Residents of states with applicable comprehensive privacy laws may have rights that vary by state, including access, deletion, correction, portability, targeted-advertising opt-out, sale/sharing opt-out and appeal rights.

Requests can be submitted through Privacy Choices or by emailing privacy@ceroncorporation.com.

11. California Privacy Notice and Voluntary Rights Process

Ceron does not currently represent that it meets the statutory thresholds that make every provision of the California Consumer Privacy Act / California Privacy Rights Act applicable to Ceron. Nevertheless, Ceron maintains a California-oriented privacy process and will endeavor to honor substantially similar requests voluntarily where feasible and appropriate. Providing a voluntary process does not concede that a particular statute applies to Ceron.

Notice at Collection — categories and purposes

CategoryExamples / Purpose
IdentifiersName, email, phone and state/country used to respond to inquiries and maintain records.
Professional informationOrganization, family office, institution or professional affiliation used to understand the inquiry.
Financial / investor-profile informationAsset-range, allocation-range and accredited-investor status used for preliminary qualification and investor-relations purposes.
Internet / network activityDevice, browser, page-view and similar information used for security and, with appropriate consent where required, analytics or measurement.
CommunicationsQuestions, comments and correspondence used to respond and maintain business records.

Investor inquiry records may generally be kept for up to seven years after the last substantive interaction, subject to legal or regulatory needs. Ceron does not intend to sell personal information for money. If a technology configuration constitutes regulated "sharing" or targeted advertising, applicable opt-out rights will be honored.

Authorized agents and verification

Where applicable, an authorized agent may submit a request on your behalf. Ceron may take reasonable steps to verify identity, authority and the scope of a request before disclosing or deleting information.

Non-discrimination

Where applicable law provides such a right, Ceron will not unlawfully discriminate against an individual for exercising a privacy right.

12. Age Restriction — 21 and Older

This site is intended exclusively for persons age 21 or older. Ceron does not knowingly solicit or collect personal information from persons under 21 through this investor-information site. If Ceron learns that information was submitted by a person under 21, Ceron may delete the information and terminate the related interaction, subject to legal retention requirements.

13. Privacy Contact

Email: privacy@ceroncorporation.com

Website: ceroncorporation.com

Privacy requests: Privacy Choices

Ceron may update this policy as laws, technologies and business practices change. Material changes will be reflected by a revised "Last updated" date and, where required, additional notice.