VX Partners L.P. is a company registered in Greece (registered no. 167840701000.) For clients based in the European Economic Area, the issuance of e-money and the provision of related payment services for VX Partners are provided by CurrencyCloud B.V. CurrencyCloud B.V. is registered with the Dutch Chamber of Commerce in the Netherlands under number 72186178. Registered office Mr. Treublaan 7, 1097 DP, Amsterdam, Netherlands. CurrencyCloud B.V. is licensed and regulated by De Nederlandsche Bank as an Electronic Money Institution (Relation Number: R142701) For clients based in the United States, payment services for VX Partners are provided by Visa Global Services Inc. (VGSI), a licensed money transmitter (NMLS ID 181032) in the states listed here. VGSI is licensed as a money transmitter by the New York Department of Financial Services. Mailing address: 900 Metro Center Blvd, Mailstop 1Z, Foster City, CA 94404. VGSI is also a registered Money Services Business ("MSB") with FinCEN and a registered Foreign MSB with FINTRAC. For live customer support contact VGSI at (888) 733-0041. For clients based in the United Kingdom and rest of the world Payment and e-money services are provided by The Currency Cloud Limited. Registered in England No. 06323311. Registered Office: 1 Sheldon Square, London, W2 6TT, United Kingdom. The Currency Cloud Limited is authorized by the Financial Conduct Authority under the Electronic Money Regulations 2011 for the issuing of electronic money (FRN: 900199)

iBanFirst S.A. is duly authorised and regulated by the National Bank of Belgium (under CBE number 0849.872.824) as a payment institution. It is a direct member of the SWIFT network and is certified to make payments throughout the SEPA zone. As a payment institution, iBanFirst S.A. only offers hedging solutions (forward, flexible forward and dynamic forward) connected to underlying payment transactions. iBanFirst S.A. does not offer options or any other financial instruments for investment or speculative purposes.

Privacy Policy and GDPR Compliance for VX Partners L.P.

VX Partners L.P. ("we," "our," "us") is committed to protecting your privacy and ensuring that your personal data is handled in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, store, and share your personal data.

1. Who we are

VX Partners L.P. is a company registered in Greece (registered no. 167840701000). Payment services for VX Partners are provided by our trusted partners based on your location:

• European Economic Area (EEA): CurrencyCloud B.V. (Netherlands, No. 72186178) under the supervision of DNB.
• United States: Visa Global Services Inc. (VGSI) (NMLS ID 181032).
• United Kingdom and Rest of the World: The Currency Cloud Limited (England, No. 06323311) under the FCA.
• Hedging and SEPA Zone Payments: iBanFirst S.A., regulated by the National Bank of Belgium (CBE number 0849.872.824).

Each partner complies with applicable financial regulations and data protection laws, ensuring your data is secure.

2. What We Collect

We may collect and process the following types of personal data:

• Identity Data: Full name, date of birth, and government-issued identification.
• Contact Data: Email address, phone number, and mailing address.
• Financial Data: Payment account details, transaction history, and billing information.
• Technical Data: IP addresses, browser type, and device information.
• Usage Data: Information about how you use our services, including cookies and analytics.

3. How We Use Your Data

We process personal data for the following purposes:

• To provide and improve our services.
• To verify your identity and ensure compliance with anti-money laundering (AML) and know-your-customer (KYC) regulations.
• To process payments, hedging solutions, and related financial transactions.
• To communicate with you regarding your account and our services.
• To comply with legal and regulatory obligations.

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contractual Obligations: To perform the services you request.
• Legal Compliance: To fulfill AML, KYC, and other regulatory obligations.
• Legitimate Interests: To enhance our services and ensure their security.
• Consent: For optional uses such as marketing (where applicable).

5. Data Sharing and Transfers

Your data may be shared with the following entities to fulfill the purposes outlined above:

• Service Providers: Payment processors, cloud storage providers, and IT support.
• Regulatory Authorities: As required by law or regulatory requirements.
• Partners: CurrencyCloud B.V., Visa Global Services Inc., The Currency Cloud Limited, and iBanFirst S.A.

Some data may be transferred to countries outside the EEA under appropriate safeguards, including EU-approved Standard Contractual Clauses or other legally recognized mechanisms.

6. Safeguarding your funds

When funds are posted to your account, in line with regulatory requirements, the regulated payment and e-money institutions who we work with safeguard your funds. This means that the funds shown in your payment account or e-wallet are held at reputable banks or covered by an insurance policy, and most importantly, are protected for you in the event of our partner e-money and payment institutions', or our, insolvency. Our partners stop safeguarding your funds when the money has been paid out of your account to your beneficiary's account. If you require a breakdown of the exact amounts of funds you have safeguarded at each of our e-money and payment partners at a particular point in time, please do not hesitate to contact us.

7. Your Rights

Under GDPR and other data protection laws, you have the following rights:

• Access: Request access to your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data (where applicable).
• Restriction: Limit how your data is processed.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to data processing for specific purposes.
• Withdraw Consent: Withdraw consent for processing based on your permission.

To exercise your rights, contact us at info@vx-partners.com.

8. Data Retention

We retain your data for 5 years for the purposes outlined in this policy or as required by law. Specific retention periods are determined by regulatory obligations and business needs.

8A. Data Handling (XML Converter)

For the ISO 20022 XML to MT103 Converter, uploaded XML files are processed through our secure conversion endpoint over HTTPS in production environments. Converter payloads are not persisted after conversion and temporary upload files are removed during processing. To protect service availability, we apply short-lived anti-abuse rate limiting using a hashed IP token retained for up to one minute.

9. Cookies

Our website uses cookies to improve user experience, analyze traffic, and offer personalized services.

10. Data Security

We implement robust security measures, including encryption, access controls, and regular audits, to safeguard your data against unauthorized access, disclosure, or loss.

11. Complaints

If you have concerns about how we handle your data, you can contact us directly at info@vx-partners.com. You also have the right to file a complaint with your local data protection authority.

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes through our website or direct communication.

Contact Information

For privacy-related inquiries:

VX Partners L.P.
Registered Office: Grammou 71, Marousi, 15124 Greece
Email: info@vx-partners.com
Phone: +30 210 7106426 OR +30 210 7106428

This Privacy Policy is designed to comply with GDPR and other applicable laws.