Privacy Policy

Effective Date: November 12, 2025

Preamble

Oz Capital Corporation, a company duly registered and incorporated under the laws of the British Virgin Islands (hereinafter referred to as "Oz Capital," "we," "us," or "our"), operates the website located at https://www.ozliving.com/ (hereinafter referred to as the "Service"). This Privacy Policy constitutes a binding legal document that governs all access to and use of the Service in accordance with the British Virgin Islands Data Protection Act, 2021 (the "DPA"). This Policy details our data practices, which are strictly limited to ensure compliance with the DPA and other applicable British Virgin Islands laws, including those governing data minimization and purpose limitation. We collect no personal data whatsoever until a user affirmatively avails of advisory services through the Service, and any such data is processed solely for service delivery purposes. No data is collected, used, or retained in connection with any investment activity, financial product, or security, as the Service provides utility-based advisory referrals only and does not engage in regulated financial services. By accessing the Service, you affirmatively represent and warrant that you are not a citizen or resident of the Republic of the Philippines, and you consent to the terms herein, including our Terms of Service (the "Terms"), which together form the complete agreement between you and Oz Capital (the "Agreement"). Oz Capital does not accept, serve, or process data from Filipino citizens or residents, and any attempted access from such individuals is strictly prohibited, may result in immediate termination, and will not be honored.

1. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below, consistent with the DPA and applicable British Virgin Islands legal standards. The term "Service" refers exclusively to the website https://www.ozliving.com/ as operated by Oz Capital. The term "Personal Data" means any information relating to an identified or identifiable natural person under the DPA, such as a name or email address, and Oz Capital collects none of this until a user avails of services. The term "Usage Data" means anonymized, non-identifiable metrics collected solely during active sessions, such as an IP address or browser type, which are deleted immediately post-session. The term "Cookies" means small data files used exclusively for basic session functionality, with no tracking, preference, security, or advertising variants employed. The term "Data Controller" means Oz Capital, as the entity solely responsible for determining the purposes and means of any limited data processing under the DPA. The term "Data Processor" means any third party engaged by Oz Capital to process data on its behalf, bound strictly by DPA-compliant contracts. The term "User" means the individual accessing the Service, who must not be a Filipino citizen or resident and corresponds to the subject of any Personal Data processed post-service availing.

2. Information Collection and Use

Oz Capital collects no Personal Data of any kind until a User explicitly avails of advisory services through the Service, such as requesting a consultation or referral. Once a User avails of such services, Personal Data is collected and used exclusively for the purpose of facilitating delivery of those services, such as coordinating a referral to a third-party provider, and is deleted immediately upon completion thereof, except for basic identifying information retained solely for customer service follow-up purposes. No Personal Data is ever collected, used, or retained for marketing, analysis, improvement of the Service, or any purpose unrelated to direct service delivery. Usage Data is collected in anonymized form solely during active sessions for security monitoring purposes and is deleted within twenty-four (24) hours of session end. All data processing activities comply fully with the DPA's core principles, including lawful basis (explicit consent via service request), data minimization, and purpose limitation, and no processing occurs in relation to any financial, investment, or securities-related activities, as the Service is strictly advisory and utility-based.

3. Types of Data Collected

No Personal Data is collected by Oz Capital until a User avails of services. Upon such availing, Personal Data is limited strictly to essential elements required for delivery, such as a name, email address, or contact details, and no sensitive or extraneous data—such as passport details, financial information, demographics, or documents—is collected or processed. Basic identifying information, such as an email address, may be retained post-delivery solely for customer service purposes, such as responding to follow-up inquiries. Usage Data is collected in fully anonymized form only, consisting of non-identifiable elements like an IP address for security verification, with no linkage to individuals. Cookies are employed solely for session management to enable basic functionality, and no other types of cookies—such as those for preferences, security tracking, or advertising—are used or permitted. Users may disable cookies via their browser settings, though this may impair access to the Service. No other forms of data, including "Other Data" such as age, marital status, or employment details, are collected or retained at any time. Oz Capital does not collect, process, or retain data from Filipino citizens or residents, and access to the Service is restricted to enforce this prohibition.

4. Use of Data

Following a User's availing of services, Personal Data is used exclusively for delivering the requested advisory referral or consultation, such as coordinating with a third-party provider. Such data is also used for security and technical support during the delivery process. Basic identifying information may be used solely for limited customer service follow-ups, such as confirming service satisfaction, with an opt-out mechanism provided at the point of collection and honored immediately. No Personal Data is used for any other purpose, including marketing, notifications, analysis, or sharing beyond strictly necessary processors. Non-identifying data is deleted upon service completion, while identifying information is used only for customer service and deleted after no more than twelve (12) months or upon User request, whichever occurs first. Usage Data is used exclusively for real-time security monitoring and is not profiled or linked to Users. All uses of data require the User's explicit consent, obtained at the time of service availing, and are conducted in strict adherence to the DPA's requirements for lawful processing.

5. Retention of Data

Oz Capital retains no data of any kind prior to a User availing of services. Upon availing, non-identifying Personal Data—such as temporary transaction notes—is held only for the duration of service delivery and is deleted immediately upon completion. Basic identifying information—such as an email address for customer service contact—is retained solely for follow-up purposes for a maximum period of twelve (12) months from the date of service completion, after which it is automatically and irretrievably deleted. Usage Data is retained only for twenty-four (24) hours following session end and is then deleted. All retention practices strictly adhere to the DPA's Retention Principle, ensuring data is destroyed as soon as the specified purpose concludes or upon User request. Users may request deletion at any time via support@ozliving.com, and Oz Capital will comply within thirty (30) days, subject to verification of identity. No data is retained indefinitely or for speculative purposes, and automated deletion processes are employed to enforce this policy.

6. Transfer of Data

Any Personal Data collected post-service availing is processed and stored exclusively within the British Virgin Islands or jurisdictions deemed adequate under the DPA. Transfers to Data Processors, if required for service delivery, are governed by binding contracts ensuring DPA-equivalent protections, including security and confidentiality. No transfers occur to any high-risk jurisdictions lacking adequate safeguards. A User's consent to this Privacy Policy, obtained via service request, constitutes agreement to any necessary transfers, but such consent is limited strictly to the delivery purpose and revocable at any time.

7. Disclosure of Data

Oz Capital discloses no Personal Data prior to service availing. Post-availing, disclosures are limited exclusively to Data Processors necessary for service delivery, such as referral partners, and only under DPA-compliant agreements prohibiting further use or retention. No disclosures occur for marketing, analysis, or third-party commercial purposes. Disclosures may be made solely in exceptional circumstances, such as compliance with a valid order from a British Virgin Islands court or regulatory authority, or in the event of a corporate merger or acquisition, in which case Users will receive prior notice where feasible. Oz Capital never discloses data to affiliates, subsidiaries, or unrelated parties except as strictly required by law, and no data is shared in connection with any financial, investment, or securities-related activities.

8. Security of Data

Oz Capital implements industry-standard technical and organizational measures, including encryption, access controls, and regular audits, to secure any Personal Data held during service delivery. While no method of data transmission or storage can be deemed absolutely secure, Oz Capital commits to commercially reasonable protections in full compliance with the DPA's Security Principle. Users are responsible for maintaining the confidentiality of their own credentials, and any suspected breaches must be reported immediately to support@ozliving.com for investigation and remediation.

9. Your Data Protection Rights under the BVI DPA

As a British Virgin Islands-registered entity, Oz Capital fully complies with the data protection rights afforded under the DPA, including the rights of access, rectification, objection to processing, restriction of processing, data portability, and erasure of Personal Data. Users may exercise these rights at any time by submitting a verified request to support@ozliving.com, and Oz Capital will respond within thirty (30) days, providing confirmation of compliance or any lawful refusal (e.g., for ongoing legal obligations). Where no Personal Data exists, Oz Capital will confirm this fact in writing. Users have the right to lodge complaints regarding data practices with the BVI Office of the Information Commissioner at ovic.vg, and Oz Capital will not discriminate against Users for exercising any DPA rights.

10. Service Providers

Oz Capital may engage third-party Data Processors post-service availing solely to facilitate delivery, such as secure hosting providers, under contracts mandating DPA compliance, limited access, and immediate data destruction upon purpose fulfillment. No Personal Data is shared with Service Providers prior to availing, and all such engagements are audited annually for adherence to this Policy.

11. Links to Other Sites

The Service may include links to third-party websites or resources, such as referral partners, for informational purposes only. Oz Capital exercises no control over the content, privacy practices, or data handling of such third-party sites and assumes no responsibility therefor. Users are advised to review the privacy policies of any linked sites independently before providing data, and Oz Capital disclaims all liability for any data processed by third parties.

12. Children’s Privacy

The Service is not intended for or directed to individuals under the age of eighteen (18) years. Oz Capital does not knowingly collect or process Personal Data from children, and any such data discovered will be deleted immediately upon awareness. Parents or guardians discovering inadvertent collection should contact support@ozliving.com for prompt removal.

13. Changes to This Privacy Policy

Oz Capital reserves the right to update this Privacy Policy from time to time to reflect changes in data practices or legal requirements. Any revisions will be posted on this page with an updated effective date and will become binding immediately upon posting. Users are responsible for reviewing the Policy periodically, and no prior notice via email or other means will be provided prior to service availing. Continued access to the Service following changes constitutes acceptance of the revised Policy.

14. Contact Us

For any questions, requests to exercise DPA rights, or concerns regarding this Privacy Policy, Users should contact Oz Capital at support@ozliving.com. For formal complaints under the DPA, Users may also contact the BVI Office of the Information Commissioner at ovic.vg. Oz Capital will respond to all inquiries within thirty (30) days.

Governing Law and Severability

This Privacy Policy shall be governed exclusively by the laws of the British Virgin Islands, without regard to conflict of laws principles. In the event any provision is deemed invalid or unenforceable, the remaining provisions shall continue in full force and effect. This Policy forms an integral part of the Agreement and may only be amended in writing by Oz Capital.