PRIVACY POLICY

Last updated: January 2026

Concept One Properties LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our services.

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Request access to investment opportunities
• Submit contact forms or inquiries
• Register for our services
• Communicate with us via email or phone
• Make a payment for our advisory services

This information may include: name, email address, phone number, company name, investment preferences, financial information, and any other information you choose to provide.

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device.

2. How We Use Your Information

We use the information we collect to:

• Assess your eligibility as an accredited investor
• Provide you with information about investment opportunities
• Respond to your inquiries and provide customer service
• Process payments for advisory services
• Send you marketing communications (with your consent)
• Comply with legal and regulatory requirements
• Improve our website and services
• Prevent fraudulent transactions and protect our business

3. Disclosure of Your Information

We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf, including payment processing (Stripe)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with any merger, sale, or transfer of our business

We do not sell, trade, or otherwise transfer your personal information to outside parties without your consent, except as described in this policy.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Given the confidential nature of our investment opportunities, we employ industry-standard encryption and secure data handling practices.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. This includes retention for compliance with legal, accounting, or reporting requirements.

Payment Data Retention

Transaction records related to payments processed through Stripe are retained for accounting and legal compliance purposes. Payment card details are never stored on our servers. Stripe retains payment information in accordance with their own data retention policies and applicable financial regulations.

6. Your Rights

Depending on your location, you may have the following rights:

• Access to your personal information
• Correction of inaccurate information
• Deletion of your information
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure that appropriate safeguards are in place to protect your information.

8. Email Communications and Analytics

Resend

We use Resend for email delivery and to analyze email engagement. Provider: Resend, Inc., 340 S Lemon Ave #6180, Walnut, CA 91789, USA.

When you receive an email from us via Resend, it may include tracking pixels (web beacons) that connect to Resend's servers to help us understand email opens, link clicks, and technical information such as device type, browser, IP address, and timestamp. This data is used solely for statistical analysis to improve our communications and is not linked to individual identities without your consent.

You may opt out of email communications at any time by using the unsubscribe link in our emails. Data transfers to the USA are governed by standard contractual clauses approved by the EU Commission.

Learn more: Resend Privacy Policy

9. Payment Processing (Stripe)

We use Stripe, Inc. as our payment processor for advisory service payments. When you make a payment through our website, your payment information is processed securely by Stripe.

Data Collected by Stripe

When you make a payment, Stripe collects and processes the following information:

• Payment card details (card number, expiration date, CVC)
• Billing address and email address
• Transaction amount and currency
• Device and browser information for fraud prevention

Data Storage

Your payment card details are processed securely by Stripe and are not stored on our servers. We only receive confirmation of successful transactions and your email address for communication purposes.

Transaction Records

We retain transaction records (amount, date, service purchased, and associated email address) for accounting, tax, and legal compliance purposes.

Learn more: Stripe Privacy Policy

10. Cookies and Tracking Technologies

Cookies are small text files stored on your device when you visit our website. We only set cookies that are strictly necessary for the operation of this website by default. All other cookies are set exclusively with your prior consent, which you give through our cookie banner and can withdraw at any time with effect for the future (Art. 6 (1) (a) GDPR; § 25 TTDSG). Strictly necessary cookies are based on our legitimate interest in providing a secure and functional website (Art. 6 (1) (f) GDPR).

Categories of Cookies We Use

• Strictly necessary — required for page delivery, security, load balancing, submitting the enquiry form and storing your cookie choice (storage duration: up to 12 months). These cannot be deactivated.
• Functional — remember preferences such as language or previously entered contact details (storage duration: up to 12 months). Set only with your consent.
• Analytics — help us understand in aggregated, anonymised form how the website is used so we can improve content and performance (storage duration: up to 24 months). Set only with your consent.
• Marketing — used to measure campaign performance and to display relevant investment information on third-party platforms (storage duration: up to 24 months). Set only with your consent.

Your Cookie Choice

Your consent is stored locally in your browser together with a timestamp and a version number, so we can prove and honour your choice. You can change or withdraw your settings at any time:

Cookie Settings

You can also configure your browser to refuse all cookies or to notify you when a cookie is set, and delete cookies already stored. If you block strictly necessary cookies, parts of this website may no longer work correctly.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Concept One Properties LLC
Email: office@concept1p.ae
Location: Dubai, United Arab Emirates