Privacy Policy

This policy explains how Reiksgarde Capital ("we", "us") handles personal information on the public website at reiksgardecapital.com and in the investor portal. It applies to visitors of the public pages, to people who contact us, and to investors and administrators who hold portal accounts.

The investor portal is a closed system. Accounts are created by the fund for admitted investors only; there is no public registration.

We collect the following categories of information, and no others:

• Identity and contact details of investors — full name, email address, postal address and the date you joined the fund. These are entered by the fund when your account is opened.
• Account credentials — your login email and a password, which is stored only as a cryptographic hash.
• Financial records — every subscription and redemption, the number of shares involved, the NAV per share at which it was recorded, and the resulting balance. These records are the fund's ledger and are retained permanently; corrections are recorded as new entries with a stated reason rather than by editing history.
• Bank account details you provide for redemption payouts — bank name, account number and account holder name, together with the verification status of that account and when it was added.
• Requests and messages you send through the portal — redemption or subscription requests, supporting notes and the reply thread with the fund.
• Enquiries sent through the contact form — the name, email address and message you type. The form also contains a hidden field that must stay empty; it is used only to reject automated submissions.
• Technical data — the session cookie that keeps you signed in, and the IP address, browser type and request path recorded in server, security and error logs.

We use the information above to:

• Open and administer your investor account and verify that it is you signing in.
• Record your subscriptions and redemptions, calculate your shares and their value, and show you your portfolio and the fund's performance.
• Process redemption requests and pay proceeds to a bank account we have verified as yours.
• Respond to your requests, messages and enquiries.
• Send you the notifications you have enabled in your portal settings — email notifications, report alerts and transaction confirmations.
• Keep the service secure, detect misuse, and investigate errors.
• Comply with laws that apply to the fund, including record-keeping, tax and anti-money-laundering obligations.

We process investor data because it is necessary to perform our agreement with you and to comply with legal obligations that apply to the fund. We process technical and security data on the basis of our legitimate interest in running a secure service. We process contact-form enquiries on the basis of your consent, given when you submit the form.

The site sets cookies only to keep an investor signed in to the portal. These session cookies are strictly necessary, are marked secure and HTTP-only, and are removed when you sign out.

We do not use advertising cookies, analytics cookies, or any third-party tracking on the public site or in the portal. There is nothing to opt out of.

We rely on a small number of providers to run the service. Each processes data only on our instructions and only for the purpose stated:

• Supabase — hosts the database and authentication service. Data is stored in the Asia-Pacific (Singapore) region.
• Vercel — hosts and serves the website and portal.
• Sentry — receives error reports when something breaks, which may include the request path, browser type and IP address of the affected request. Error reports do not contain your financial records.
• TradingView — provides the embedded market charts on the Markets page. When that page loads, your browser requests the widgets directly from TradingView's servers, which may set their own cookies. Their handling of that data is governed by TradingView's privacy policy, not this one.

We do not share personal information with any other third party, and we never sell it. We will disclose information to a court, regulator or law-enforcement body where we are legally required to do so.

Financial records — subscriptions, redemptions, share balances and the NAV history behind them — are retained for the life of the fund and for the period thereafter required by law. They are the fund's books and cannot be deleted on request.

Bank account records are never edited or deleted in place. A replaced account is marked as replaced and kept, because completed payouts refer to it.

Identity and contact details are kept while you hold shares in the fund and for the statutory period after your final redemption.

Contact-form enquiries are kept until they are resolved and then for a reasonable period so we can refer back to them. Server, security and error logs are retained by our providers for a limited period and then discarded.

All traffic to the site and portal is encrypted in transit. Passwords are stored only as hashes. Each investor's data is isolated at the database level, so an investor account can read its own records and nothing belonging to any other investor.

Two deliberate limits exist because of the sensitivity of the data. There is no self-service password reset: if you lose access to your account, you contact the fund and we verify your identity before restoring it. And bank account details cannot be edited: a new account is added as a new record, must be verified against an account that has actually sent funds to the fund, and cannot receive a payout until at least 24 hours after it was added.

Subject to the retention obligations above, you may ask us to:

• Confirm what personal information we hold about you and provide a copy of it.
• Correct identity or contact details that are inaccurate. Your profile is shown read-only in the portal; corrections are made by the fund on your request.
• Delete information that we are not required to keep.
• Restrict or object to processing that is based on our legitimate interests.
• Withdraw consent for processing that is based on consent, such as a contact-form enquiry.

To exercise any of these, write to the address in section 12. We may need to verify your identity before acting. You also have the right to lodge a complaint with the data protection authority in your country.

The fund is administered in Indonesia. The database and authentication service are hosted in Singapore, and the website is served from a global content delivery network. By using the service you acknowledge that your information is processed in these locations under the safeguards described in this policy.

When we change this policy we update the date at the top of the page. If a change materially affects how investor data is handled, we will also notify investors by email before it takes effect.

Questions about this policy or about your personal information: support@reiksgardecapital.com. Existing investors may also raise a request from inside the portal.