Read our Investment Thesis 2022 here X uses cookies to ensure you get the best experience on our website Learn More

Privacy Policy

In this Privacy Policy, 'us' 'we' or 'our' means Woodstock, Inc., or any other group entity. This Privacy Policy comprises part of our terms of use (“Terms of Use”). All capitalised terms used in this Privacy Policy have the same meaning as in the Terms of Use unless otherwise indicated.

This Privacy Policy describes the privacy practices that we follow when collecting and using information about you on our Platform or through other means including e-mails. We ask that you please read this Privacy Policy before using the Platform. It describes what information we gather from you and others who visit or use the Platform, how we use that information, and what we do to protect it. When you access or use the Platform, certain information, including Personal Information may be collected, transferred, processed, stored, and in certain circumstances, disclosed as described in this Privacy Policy.


Table of Contents

  1. Definitions
  2. Use of this Platform and Application of the Policy
  3. Key Principles of collection of Personal Information
  4. How do we process your Personal Information?
  5. Who decides why and how we process your personal data?
  6. What Personal Information do we collect?
  7. Whose Personal Information do we process?
  8. When do we collect Personal Information?
  9. How we use your information?
  10. When we disclose of Personal Information?
  11. Our Legal grounds for processing your Personal Information
  12. Transfers of Personal Information
  13. Your rights relating to Personal Information
  14. Retention
  15. Safety and information security measures
  16. Third Party Analytics Providers
  17. Exclusions
  18. Use of cookies or similar devices
  19. Changes to our Privacy Policy
  20. Making a complaint
  21. Contact Us

  1. Definitions

    1. In this Privacy Policy, the following capitalised terms have the following meanings:
      1. Automatic Data” have the meaning as provided in clause 8.
      2. Non-personal Information” means information which does not relate to a person and/or cannot be used to identify a person.
      3. Personal Information” means any information which can be used to identify an individual.
      4. Platform” means this website, app, platform and any service offered by us.
      5. Users” means any user of the Platform including a Partner.

  2. Use of this Platform and Application of the Policy

    1. Use by Us: We oversee the Platform itself and we may sometimes offer goods or services through the Platform. We may collect some Personal Information about all of our Users, and this Personal Information is used, disclosed and protected according to this Privacy Policy.
    2. Use by the Users (excluding Partners): The Users may use the Platform to access information about us and for enquiries.
    3. Use by the Partner: The Partner may use the Platform to access information about us, enquiries and in relation to information related to the Investment Services.

  3. Key Principles of collection of Personal Information

    1. We will aim to adhere to the following key principles while processing Personal Information:
      1. Lawfulness: We will only collect your personal data in a fair, lawful and transparent manner.
      2. Data minimization: We will limit the collection of your personal data to what is directly relevant and necessary for the purposes for which they have been collected.
      3. Purpose limitation: We will only collect your personal data for specified, explicit and legitimate purposes and not process your personal data further in a way incompatible with those purposes.
      4. Accuracy: We will keep your personal data accurate and up to date.
      5. Data security and protection: We will implement technical and organizational measures to ensure an appropriate level of data security and protection considering, amongst other things, the nature of your personal data to be protected. Such measures provide for the prevention of any unauthorized disclosure or access, accidental or unlawful destruction or accidental loss, or alteration and any other unlawful form of processing.
      6. Access and rectification: We will process your personal data in line with your legal rights.
      7. Retention limitation: We will retain your personal data in a manner consistent with the applicable laws, and no longer than is necessary for the purposes for which they have been collected.
      8. Protection for international transfers: We will ensure that any of your personal data transferred outside the EEA is adequately protected.
      9. Safeguards towards third parties: We will ensure that personal data access by, and transfers to, third parties are carried out in accordance with applicable law and with suitable contractual safeguards.

  4. How do we process your Personal Information

    1. We will only process your Personal Information where we are permitted to do so by law, meaning when we have one or more legal basis to do so. The following subsections explain how we process your Personal Information.

  5. Who decides why and how we process your personal data

    1. We are the data controller of the Personal Information that we process, i.e., the organisation which determines, alone or jointly with another party, how your Personal Information is processed and for what purposes. This means that we are legally responsible for ensuring our systems, processes, suppliers and people comply with data protection laws in relation to the Personal Information that we handle.

  6. What Personal Information do we collect

    1. We collect different types of personal data for different reasons. This may include:
      1. Contact information:Information such as your name, job title, postal address, home address where you provide this to us, business address, telephone number, mobile number, fax number and email address.
      2. Payment data:Data necessary for us to process payments and implement fraud prevention measures, bank details and other such relevant details.
      3. Business details: Business information which we necessarily process as part of our instructions or projects we are involved in or otherwise provided by you voluntarily.
      4. Compliance details:Information we are legally required to collect for compliance purposes, such as "know your client" information, details relevant to international sanctions and restrictive measures and information about relevant and significant litigation, which may impact our ability to act.
      5. Preferences:Information about your preferences, where it is relevant to the services we provide.
      6. Platform information: Your password and other related log-in details for platforms maintained by us, where you have access to any.
      7. Publicly available information: Information collected from publicly available resources, including but not limited to information collected from databases we use to carry out compliance checks or credit rating agencies.
      8. Statutory Register Information: Information about you on account of an interest or office you may hold in or certain relationships you may have with a corporate entity, partnership, trust or other vehicle to which we provide services.

  7. Whose Personal Information do we process

    1. We collect and process the Personal Information of:
      1. Users of the Platform such as those who use our website and online services, attend our events, and subscribe to our newsletters, email services and other promotional services;
      2. The Partners;
      3. Those who apply for a job or work placement with us;
      4. Our people;
      5. Contractors, suppliers and other third parties connected to the operation of our business.

  8. When do we collect Personal Information

    1. We may collect Personal Information about you when you use the Platform, received through e-mail or interact with us in anyway.
    2. Information you provide to us: We collect all information which the Users voluntarily provide to us through using the Platform or interacting with us. This includes information provided:
      1. When you or your organisation seek our services, or use any of our Platform;
      2. During registration in the Platform;
      3. When you or your organisation make an enquiry through our website, in person, over email or over the telephone; or
      4. When you attend a seminar or other events we may organise, or sign up to receive communications from us, including training;
      5. When you or your organisation provide services to us, or otherwise offer to do so;
      6. When you uploaded any information onto the Platform in any way.
    3. Information we automatically collect: We also automatically collect certain technical data that is sent to us from the computer, mobile device and/or browser through which you access the Platforms (“Automatic Data”). Automatic Data, includes without limitation, a unique identifier associated with your access device and/or browser (including, for example, your Internet Protocol (IP) address) characteristics about your access device and/or browser, statistics on your activities on the Platforms, details of the products and services we have provided to you or that you have enquired about, including any additional information necessary to deliver those products and services and respond to your enquiries, or information about how you came to the Platforms.
    4. Information we obtain from others: We may also collect or receive Personal Information from third party sources, other Partners, social media or other third-party integrations.
    5. Non-personal Information: When you interact with the Platform, we may collect Non-personal Information. The limitations and requirements in this Privacy Policy on our collection, use, disclosure, transfer and storage/retention of Personal Information do not apply to Non-personal Information. When you register for the Platforms or otherwise submit Personal Information to us, we may associate other Non-Personal Information (including Non-Personal Information we collect from third parties) with your Personal Information. At such instance, we will treat any such combined data as your Personal Information until such time as it can no longer be associated with you or used to identify you.

  9. How we use your information

    1. General: We may collect, hold, use and disclose your Personal Information for the following purposes:
      1. Your name and contact details: We use your name and contact details, such as email, postal address and contact number to continue communications with you.
      2. Investment Service: To provide services related to investment and partnership with us.
      3. Manage Business: To manage and administer your or your organisation's business relationship with us.
      4. Compliance: For compliance with our legal obligations (such as record keeping obligations), compliance screening or recording obligations (such as under antitrust laws, export controls, trade sanction and embargo laws, for anti-money laundering, financial and credit check and fraud and crime prevention and detection purposes), which may include automated checks of your contact data or other information you provide about your identity against applicable sanctioned-party lists and contacting you to confirm your identity in case of a potential match or recording interaction with you which may be relevant for compliance purposes.
      5. Photograph: For special events. We will always inform you if this is happening.
      6. Other Reasons:
        1. To enable you to access and use our Platform;
        2. To operate, protect, improve and optimise our Platform, business and our users’ experience, such as to perform analytics, conduct research and for advertising and marketing;
        3. To send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you;
        4. To send you marketing and promotional messages and other information that may be of interest to you, including information sent by, or on behalf of, our business partners that we think you may find interesting;
        5. To administer surveys or other promotional activities or events sponsored or managed by us or our business partners;
        6. To comply with our legal and regulatory obligations and requests anywhere in the world, including reporting to and/or being audited by national and international regulatory, law enforcement and tax reporting bodies; and
        7. For any purpose related and/or ancillary to any of the above or any other purpose for which your personal data was provided to us.
    2. Account-Related Emails: When you create an account with us and provide us with your email address we may, subject to applicable law, use your email address to send you Platform-related notices (including any notices required by law, in lieu of communication by postal mail), updates, news, and marketing messages. For example, when you register for an account, you may receive a welcome email. If the Platform or our services are temporarily unavailable, we may also send you an email notice. Email communications you receive from us will generally provide an unsubscribe link or instructions allowing you to opt out of receiving future emails or to change your contact preferences. Please remember that even if you opt out of receiving marketing e-mails, we may still send you important service information related to your account and the Platform. If you correspond with us by email, we may retain the content of your email messages, your email address, and our responses.
    3. Non-Personally Identifiable Information: We may use non-personally identifiable information, such as anonymized and/or aggregated Platform usage data, in any manner that does not identify individual users for the purpose of improving the operation and management of the Platform, including to develop new features, functionality, and services, to conduct internal research, to better understand Platform usage patterns, to resolve disputes, to troubleshoot problems, to fulfill user requests, or for security and compliance purposes. Any non-personally identifiable information that is combined with Personal Information will be treated by us as Personal Information.

  10. When we disclose of Personal Information

    1. When we disclose Personal Information, we work with our partners to ensure that your Personal Information is protected in accordance with applicable laws. We share your information, including any Personal Information, in the circumstances described below.
    2. Business Purpose: We disclose your Personal Information for a business purpose to the following categories:
      1. Our employees and related bodies corporate;
      2. Third-party suppliers and service providers (including providers for the operation of our Platform and/or our business or in connection with providing our products and services to you);
      3. Professional advisers, dealers and agents;
      4. Payment systems operators;
      5. Our existing or potential agents, business partners or partners; and/or
      6. Specific third-parties authorised by you to receive information held by us.
    3. Legal Requirements: We reserve the right to disclose all information collected via the Platform or other means, internally, to affiliates, or to third parties, for any lawful purpose or to prevent harm to us or others. For example, and without limitation, in our discretion we may disclose information to government regulators, law enforcement authorities or alleged victims of identity theft. We will notify you in the event of a government or legal request for your information unless otherwise prohibited by law.
    4. Organizational Transitions: If we should ever transfer or restructure the operational ownership of the Platform, such as through a merger with another entity or a reorganization of all or a part of our operational responsibilities or assets, we may disclose, transfer, assign our rights, and/or delegate our duties to your information without notice and consent, including to prospective or actual recipient or acquiring entities. Should this occur, we will contractually require any third party receiving your Personal Information as described under this subsection to provide the same level of privacy protection as provided by us under this Privacy Policy.
    5. Disclaimer: We cannot ensure that all of your Personal Information will be disclosed only in the ways described in this Privacy Policy. For example, third parties may unlawfully intercept or access transmissions or private communications, or users may abuse or misuse your Personal Information that they collect from the Platform. Even with the most rigorous information security standards, no transmission of data over the internet can be 100% secure.

    1. Our legal grounds for us processing your Personal Information for the purposes set out in clause 9 and 10 above will typically because:
      1. you provided your consent;
      2. it is necessary for our contractual relationship;
      3. the processing is necessary for us to comply with our legal or regulatory obligations; and/or
      4. the processing is in our legitimate interest (for example, to protect the security and integrity of our systems and to provide you with service, etc.).

  11. Transfers of Personal Information

    1. As we are a global company, we may need to transfer your Personal Information outside of the country from which it was originally provided. This may be intra-group or to third parties that we work with who may be located in jurisdictions outside the European Economic Area (EEA), which have no data protection laws or laws that are less strict compared with those in Europe.
    2. When making such transfers, we will ensure that they are subject to appropriate safeguards in accordance with the General Data Protection Regulation (Regulation 2016/679) or other relevant data protection legislation. This may include entering into the EU Commission’s Standard Contractual Clauses. Please get in touch with us for more information about the safeguards we have put in place to protect your Personal Information and privacy rights in these circumstances.

  12. Your rights relating to Personal Information

    1. You can choose not to provide Personal Information: You may always decline to provide your Personal Information to us. Registering for an account or otherwise providing your Personal Information is not required to access some of our online content. If you choose not to provide certain Personal Information to us, some of your experiences may be affected.
    2. You may decline other requests: We use the Personal Information of our Users as needed for the purposes for which it was collected or where you have consented to our use of such information. If you do not wish to provide information to us or do not wish to consent to the uses described in this Privacy Policy, please do not use the Platform, set up an account, or supply the requested information to us.
    3. Right to access specific information and data portability right: You may have the right to request us that we disclose certain information to you about our collection and use of your Personal Information. Once we receive and confirm your verifiable consumer request, we will disclose to you:
      1. The categories of Personal Information that we have collected about you;
      2. The categories of sources for the Personal Information that we have collected about you;
      3. Our business or commercial purpose for collecting or making available that Personal Information;
      4. The categories of third parties with whom we share that Personal Information;
      5. The specific pieces of Personal Information that we have collected about you (also called a data portability request);
      6. If we disclosed your Personal Information for a business purpose, the business purpose for which such Personal Information was disclosed, and the Personal Information categories that each category of recipient obtained;
      7. If applicable:
        1. The categories of your Personal Information that we have made available for valuable consideration;
        2. The categories of third parties to whom such Personal Information was made available; and
        3. The category or categories of Personal Information that we have made available to each category of third parties.
    4. Right to correct Personal Information: Where any Personal Information you have provided us with has changed, or where you believe the Personal Information we hold is inaccurate, please let us know through contact us function below. In addition, please note that if you hold an office or are interested in or have certain relationships with a third party to which we provide services, you and/or the third party may have a contractual or legal obligation to notify us of any change within a prescribed time period. We cannot be responsible for any loss that may arise due to us having any inaccurate, incomplete, inauthentic or otherwise deficient personal data which you or a third party have provided to us.
    5. Right to delete Personal Information: You have the right to request that we delete your Personal Information that we have collected from you and retained. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records.We may deny your deletion request if retaining the information is necessary for us or our service provider(s) or vendor(s) to:
      1. Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
      2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
      3. Debug products to identify and repair errors that impair existing intended functionality;
      4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
      5. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
      6. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
      7. Comply with a legal obligation or legal order;
      8. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
    6.  Right to opt-out:
      1. If at any time, we make your information available to third parties other than for a business purpose, you may direct us not to (the “right to opt-out”). Consumers who opt-in may opt-out at any time.
      2. To exercise the right to opt-out or right to opt-in, you (or your authorized representative) may submit a request to us by contacting us through contact us provided below. However, you may change your mind and opt back in at any time by contacting us through contact us provided below. We will only use Personal Information provided in an opt-out request to review and comply with the request.
    7. Exercising your rights:
      1. To exercise the access, correct, data portability, and deletion rights described above, please submit a verifiable consumer request to us by contacting us through contact us provided below.
      2. Only you, or a person you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.
      3. You may only make such a request for access or data portability twice within a twelve-month period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative, and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
      4. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
      5. We endeavor to respond to a verifiable consumer request within thirty (30) days of its receipt. If we require more time (up to ninety (90) days), we will inform you of the reason and extension period in writing. We will deliver our written response electronically. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
      6. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
    8. Non-discrimination: We will not discriminate against you for exercising any of your rights under GDPR.
    9. Online tracking choices:
      1. Most browsers are initially set up to accept Cookies, but you can reset your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, some features and services of the Platform (particularly those that require sign-in) may not function properly if your Cookies are disabled.
      2. Some web browsers incorporate a “Do Not Track” (“DNT”) or similar feature that signals to websites that a user does not want to have the user’s online activity and behavior tracked. If a website that responds to a particular DNT signal receives the DNT signal, the browser can block that website from collecting certain information about that browser’s user. Not all browsers offer a DNT option and DNT signals are not yet uniform. For this reason, many websites, including the Platform, do not respond to DNT signals.
    10. Limitation on right: Not all of these rights are absolute, which means that they may only apply in certain situations and may be subject to legal exceptions and exemptions.

  13. Retention

    1. We may retain your Personal Information as long as you are registered to the Platform as a User or a Partner. You may close your account by contacting us. However, we may retain Personal Information for an additional period as is permitted or required under applicable laws. Even if we delete your Personal Information it may persist on backup or archival media for an additional period of time for legal, tax or regulatory reasons or for legitimate and lawful business purposes.

  14. Safety and information security measures

    1. Security: We use certain physical, managerial, and technical safeguards designed to preserve the security of your information that we maintain in connection with your use of the Platform. This, however, does not guarantee that your information may not be accessed, disclosed, altered, or destroyed by any breach of our physical, technical or managerial safeguards. In the event that any of your Personal Information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and will notify you, as appropriate, in accordance with pertinent laws and regulations.
    2. Storage: We or our third-party hosting providers store Personal Information in operating environments that are safeguarded against public or unauthorized access and protected from internal access with physical and technical security measures. While these measures are helpful to safeguard your Personal Information after we receive it, no transmission of data over the internet is 100% secure.

  15. Third Party Analytics Providers

    1. We may use third party analytics providers (“Analytics Providers”) to collect information about Platform usage and the users of the Platform. These Analytics Providers use cookies in order to collect demographic and interest-level information and usage information from users that visit the Platform, including information about the pages where users enter and exit the Platform and what pages users view on the Platform, time spent, browser, operating system, and IP address. Cookies allow Analytics Providers to recognize a user when a user visits the Platform and when the user visits other websites. Analytics Providers use the information they collect from the Platform and other websites to share with us and other website operators’ information about users including age range, gender, geographic regions, general interests, and details about devices used to visit the Platform and other websites and purchase items.

  16. Exclusions

    1. External Links: The Platform may contain links to third party websites and services. We are not responsible for any of the content or features or functionality of other linked websites or services. We are also not responsible for the privacy practices and the terms and conditions of use for any external websites or services. The linked websites and services may collect Personal Information from you that is not subject to our control. The data collection practices of linked third party websites and services will be governed by that third party’s privacy policy and terms of use.
    2. Children's Online Privacy: We do not knowingly collect Personal Information from children under the age of 13. If you are under the age of 13, please do not submit any Personal Information through the Platform. We encourage parents and legal guardians to monitor their children's internet usage and to help enforce our Privacy Policy by instructing their children never to provide Personal Information without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Information to us, please contact usand we will endeavour to delete that information from our databases.
    3. Personal Information Provided to Others:This Privacy Policy does not apply to any Personal Information that you provide to another user of the Platform or a Partner through the Platform or through any other means, information posted by you to any public areas of the Platform.

  17. Use of cookies or similar devices

    1. We use cookies on our website.  This helps us to provide you with a better experience when you browse our website and also allows us to make improvements to our site. You may be able to change the preferences on your browser or device to prevent or limit your device’s acceptance of cookies, but this may prevent you from taking advantage of some of our features. If you click on a link to a third-party website or service, a third party may also transmit cookies to you. This policy does not cover the use of cookies by any third parties, and we aren’t responsible for their privacy policies and practices.
    2. For more on our cookies policy, please click on [Cookies Policy].

  18. Changes to our Privacy Policy

    1. Because our privacy practices and privacy law necessarily evolve over time, we reserve the right to revise this Privacy Policy from time-to-time in our sole discretion, upon notice to you such as by posting updated Privacy Policy on the Platform, sending you an email, or by any other reasonable means. You should periodically review this Privacy Policy to ensure that you are familiar with the most current version. Your continued use of the Platform will constitute your acceptance of the updated Privacy Policy.

  19. Making a complaint

    1. If you think we have breached any data privacy law, or you wish to make a complaint about the way we have handled your Personal Information, you can contact us using the contact us feature below. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time. If you think that we have failed to resolve the complaint satisfactorily, we will provide you with information about the further steps you can take.

  20. Contact Us

    1. For further information about our Privacy Policy or practices, or to access or correct your Personal Information, or make a complaint, please contact us using the details set out below:
      • Email:
      • Address: Woodstock Inc, WB Corporate Services (Cayman) Limited, Artemis House, 67 Fort Street, PO Box 2775, Grand Cayman KY1-1111