Privacy Policy
Last updated: 2 October 2026

This policy explains how Bridge Capital Trade handles personal data, in line
with the EU General Data Protection Regulation (GDPR) and the Dutch GDPR
Implementation Act (UAVG).

1. Who we are
   Bridge Capital Trade is the trade finance division of Bridge Capital B.V.
   ("Bridge Capital", "we", "us"), a company registered in Rotterdam, the
   Netherlands, with the Dutch Chamber of Commerce (KvK) under number 94782431.
   Bridge Capital B.V. is the controller of the personal data processed through
   this website. Contact: info@bridge-capital.eu.

2. Who this policy covers
   Our website is intended for businesses. This policy covers visitors to
   bridgecapital.trade, people who contact us or submit a transaction on behalf of
   a company, and individuals whose details appear in the information you send us,
   such as directors or contact persons at counterparties.

3. What data we collect

• Information you submit through our forms: company name, country of
  incorporation, years in operation, website, your name, position, email
  address and phone number.

• Transaction information: commodity, financing type, amount, tenor, origin and
  destination, names of buyers and sellers if you provide them, how the buyer
  pays, and your description of the trade.

• Information you provide later if we proceed: company registration documents,
  financial statements, trading track record, contracts, and identification
  documents needed for KYC checks.

• Our communications with you by email, phone or video call.

• Technical data such as IP address, browser and device information and pages
  visited, collected by our website host.

4. How and why we use your data

• To respond to your enquiry and assess whether your transaction meets our
  eligibility criteria (steps taken at your request, and our legitimate
  interest in running our business).

• To arrange finance, including presenting your transaction to suitable funders
  (our arrangement with you, and legitimate interests).

• To carry out KYC, anti-money-laundering and sanctions checks and keep records
  required by law (legal obligation).

• To keep the website secure and understand how it is used (legitimate
  interests, or consent where required for analytics and non-essential
  cookies).

• To communicate with you and to handle complaints, disputes and legal claims.
  We do not use automated decision-making or profiling that has legal or similarly
  significant effects on you, and we do not sell personal data.

5. Who we share data with

• Funders and financial institutions to which we present your transaction. We
  share only what they need to assess it. Each funder handles the data under its
  own privacy notice and is responsible for it.

• Service providers acting on our instructions, such as our website host
  (Framer) and our email and document storage providers.

• Professional advisers such as lawyers, accountants and auditors, and
  authorities or regulators where we are legally required to.

6. International transfers
   We are established in the Netherlands. Our funders and service providers may be
   located elsewhere, including outside the European Economic Area. Where we
   transfer personal data to a country without an adequacy decision from the
   European Commission, we use safeguards required by the GDPR, such as standard
   contractual clauses.

7. How long we keep data
   If your enquiry does not lead to a transaction, we delete it after 12 months.
   If a transaction proceeds, we keep the data for the duration of our relationship
   and afterwards for as long as the law requires (for example accounting and
   anti-money-laundering record-keeping) or as needed to establish or defend legal
   claims.

8. Your rights
   You may request access to your data, correction, deletion, restriction of or
   objection to our processing, and data portability. Where we rely on consent, you
   can withdraw it at any time. Write to info@bridge-capital.eu; we aim to reply
   within one month and may need to verify your identity. You can also lodge a
   complaint with the Dutch Data Protection Authority (Autoriteit
   Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the data protection
   authority in your own country.

9. Security
   We use appropriate technical and organisational measures to protect your data.
   No online transmission is completely secure. Please do not enter identity
   document numbers, passport details or banking credentials in website forms; if
   we proceed, we will tell you how to send documents securely.

10. Cookies
    This website uses only technically necessary cookies.

11. Changes to this policy
    We may update this policy from time to time. The date at the top shows when it
    was last changed.

12. Contact
    Bridge Capital B.V., Rotterdam, the Netherlands, info@bridge-capital.eu.