Legal

Privacy Policy

Last updated: 14 July 2026

1. Who we are

This website, stake.capital (the "Site"), is operated by Stake Capital Group ("we", "us", "our"). We are the controller of the personal data described in this policy. [Legal entity name, registered address, and company number to be confirmed by counsel.] For any privacy matter, contact us at contact@stake.capital.

2. Scope

This policy explains how we process personal data when you visit the Site or contact us. It is written to meet the requirements of the EU and UK General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP). If you are located elsewhere, we apply the same standards as a baseline.

The Site is an informational corporate website. It has no user accounts, no login, no payment functionality, and no wallet connectivity.

3. What we collect

Data you send us. If you email us, we receive your email address, your name if you provide it, and the content of your message. If you engage with us professionally, we may process the contact and business information customary to that relationship.

Technical data. When you visit the Site, our hosting provider processes standard server log data on our behalf: your IP address, browser type and version, operating system, referrer URL, and the date and time of access. This is required to deliver the Site and to protect it against abuse.

Fonts. The Site loads typefaces from Google Fonts. When your browser requests these files, your IP address is transmitted to Google. Details are in Google's own privacy policy. We are evaluating self-hosting these files to remove this transfer.

We do not collect wallet addresses or blockchain transaction data through this Site, we do not use analytics services, and we do not buy, sell, or trade personal data.

4. Why we process it, and on what legal basis

Operating and securing the Site (server logs): our legitimate interest in providing a functioning, secure website (Art. 6(1)(f) GDPR).
Responding to your inquiries: steps taken at your request prior to entering a relationship, or our legitimate interest in corresponding with you (Art. 6(1)(b) and (f) GDPR).
Investor, counterparty, and compliance processes: performance of a contract, compliance with legal obligations including anti-money-laundering and know-your-customer requirements where applicable (Art. 6(1)(b) and (c) GDPR).
Legal claims: establishment, exercise, or defence of legal claims (Art. 6(1)(f) GDPR).

5. Who receives your data

We share personal data only with: our hosting and IT service providers acting as processors under contract; our professional advisers (legal, tax, audit) under confidentiality; our group entities for the purposes above; and courts, regulators, or authorities where the law requires it. In the event of a merger, acquisition, or corporate reorganisation, personal data may be transferred to the successor entity under equivalent protections.

6. International transfers

Where personal data is transferred outside the EEA, the UK, or Switzerland, we rely on an adequacy decision or on appropriate safeguards such as the European Commission's Standard Contractual Clauses, supplemented where necessary.

7. Retention

We keep personal data only as long as needed for the purposes above. Server logs are retained for a short period consistent with our hosting provider's security practices. Correspondence is retained as long as the relationship or matter requires, and thereafter as required by statutory retention obligations, which for commercial and financial records can extend to ten years depending on jurisdiction.

8. Your rights

Subject to the conditions of applicable law, you have the right to: access your personal data; have it rectified or erased; restrict or object to its processing; receive it in a portable format; withdraw consent at any time where processing is based on consent; and lodge a complaint with a supervisory authority, in particular in the country of your habitual residence. To exercise any of these rights, write to contact@stake.capital. We respond within the timelines required by law, generally one month.

9. Children

The Site is directed at professional audiences and not at children. We do not knowingly process personal data of anyone under 16. If you believe such data has been provided to us, contact us and we will delete it.

10. Third-party links

The Site links to third-party websites, including portfolio company websites and social platforms. Their privacy practices are their own, and this policy does not apply to them.

11. Changes

We may update this policy from time to time. The current version is always available on this page with its last-updated date. Material changes will be indicated on the Site.

This document is a working draft prepared for internal review. It should be validated by legal counsel before publication, in particular the controller entity identification in Section 1 and the retention periods in Section 7.