Privacy Policy for Avalon & Co.

Effective Date: 01/01/2022

Welcome to Avalon & Co. We are committed to protecting your privacy and ensuring the security of your personal information. This privacy policy explains how we collect, use, disclose, and protect your data in compliance with the following global/international privacy laws:

1. Securities Laws: We comply with all applicable securities laws and regulations to protect the confidentiality and integrity of financial data.

2. Information Privacy: We prioritize the privacy of your information and take appropriate measures to safeguard it from unauthorized access or disclosure.

3. General Data Protection Regulation (GDPR): If you are an EU resident, your personal data is processed in accordance with GDPR. We ensure that your rights under GDPR are respected and honored.

4. Privacy Act of 1974: We comply with the Privacy Act of 1974 to protect the privacy of your personal information held by the U.S. government.

5. Children’s Online Privacy Protection Act (COPPA): We do not knowingly collect personal information from children under the age of 13. Our services are not intended for children.

6. Health Insurance Portability and Accountability Act (HIPAA): If applicable, we implement the necessary safeguards to protect your health-related information in compliance with HIPAA.

7. Gramm–Leach–Bliley Act (GLBA): We adhere to GLBA requirements to protect the privacy and security of your non-public personal information.

8. Electronic Communications Privacy Act: We respect the provisions of the Electronic Communications Privacy Act when handling electronic communications.

9. 2020 California Proposition 24: If you are a California resident, your rights under Proposition 24 are protected concerning the collection and use of your personal information.

10. E-Government Act of 2002: We comply with the E-Government Act of 2002, ensuring the confidentiality and security of your electronic records.

11. Data Protection Act 2018: If you are a UK resident, we process your data in compliance with the Data Protection Act 2018.

12. Privacy Act 1988: If you are an Australian resident, we handle your personal information according to the Privacy Act 1988.

13. Telephone Consumer Protection Act of 1991 (TCPA): We adhere to TCPA regulations and do not engage in unsolicited telemarketing.

14. Right to be Forgotten: If you request the deletion of your personal information, and if allowed by law, we will take appropriate measures to erase your data from our records.

15. Driver’s Privacy Protection Act (DPPA): We comply with DPPA to protect the privacy of your driver’s license and motor vehicle records.

16. Right to Financial Privacy Act (RFPA): We respect the provisions of RFPA regarding government access to financial records.

Information We Collect:

We collect and process personal information necessary for providing financial services and complying with legal obligations. The information we may collect includes, but is not limited to:

• Name, contact details, and identification information.
• Financial and investment-related data.
• Information for compliance with anti-money laundering (AML) and know-your-customer (KYC) regulations.
• Communication records with our customer support team.

How We Use Your Information:

We use the information collected for the following purposes:

• Providing financial services and managing your investments.
• Complying with legal and regulatory requirements.
• Improving our services and customer experience.
• Communicating with you regarding your account and updates.
• Preventing fraud and ensuring the security of our services.

Sharing and Disclosure:

We may share your information with third parties under the following circumstances:

• To comply with legal obligations and regulatory authorities.
• With service providers who assist us in providing our services.
• In case of mergers, acquisitions, or other business transactions.
• When required to protect our rights, privacy, safety, or property.
• With your explicit consent.

Data Security:

We maintain appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

Data Retention:

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy and to comply with legal requirements.

Your Rights:

You have the right to:

• Access and rectify your personal data.
• Object to the processing of your data.
• Withdraw consent if processing is based on consent.
• Request the erasure of your data (subject to applicable laws).
• Request data portability.

Contact Us:

If you have any questions or concerns about this privacy policy or wish to exercise your rights, please contact us at [email protected] .