Effective Date: 27/01/2026

Viriditas Ventures Ltd ("Viriditas Ventures", "we", "our", or "us") is committed to maintaining robust governance, information stewardship, and institutional-grade data protection standards in the conduct of its commercial activities, platform development initiatives, and intellectual property commercialisation. This Privacy Policy sets out the principles, controls, and practices governing the collection, use, retention, disclosure, and safeguarding of personal information across our operations, in alignment with the New Zealand Privacy Act 2020 and, where applicable, the Australian Privacy Act 1988 and the Australian Privacy Principles.

This policy applies to personal information processed in the course of our professional engagements, strategic partnerships, stakeholder interactions, digital platforms, pilot systems, and communications, including — but not limited to — our website.

1. Scope

This Privacy Policy applies to personal information collected through:

• Business, partnership, and stakeholder engagements with Viriditas Ventures Ltd

• Platform development, pilot programmes, and IP commercialisation activities operated by or on behalf of Viriditas Ventures Ltd

• Direct professional communications, including email, enquiry forms, and formal correspondence

• The Viriditas Ventures website

2. Information We Collect

We collect and process personal and business-related information that is reasonably necessary to support our commercial, strategic, and operational objectives.

2.1 Information Provided Directly

• Name, title, and professional role

• Organisation or business affiliation

• Contact details, including email address and telephone number

• Enquiry content, correspondence, and records of engagement

2.2 Information Collected Automatically

• IP address, browser type, and device identifiers

• Operating system and technical environment data

• Interaction logs, page access records, and session metadata

• Date, time, and duration of access

Such information is collected through cookies and similar technologies to support system security, performance monitoring, and operational analytics.

3. Purpose of Collection and Use

Personal information is collected, processed, and used for the following institutional and operational purposes:

• Managing and responding to commercial, partnership, and stakeholder enquiries

• Supporting platform development, IP strategy, and market engagement activities

• Maintaining the security, integrity, and performance of our digital systems

• Conducting internal governance, audit, and risk management processes

• Complying with applicable legal, regulatory, and contractual obligations

4. Legal Basis for Processing

Where applicable, personal information is processed on the basis of:

• Legitimate business and institutional interests

• Consent provided by the relevant individual or organisation

• Compliance with statutory, regulatory, or contractual requirements

5. Information Security and Retention

We implement administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, disclosure, alteration, or destruction. These measures include secure hosting environments, access controls, and ongoing monitoring of system integrity.

Personal information is retained only for the duration necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law, regulation, or contractual obligation.

6. Disclosure and Sharing of Information

Viriditas Ventures does not sell personal information. Personal information may be disclosed only:

• To third-party service providers and professional advisers engaged to support our operations, subject to confidentiality and data protection obligations

• Where disclosure is required or authorised by law, regulation, or legal process

• In connection with a corporate transaction, including a merger, acquisition, restructuring, or transfer of assets, subject to appropriate safeguards

7. Cross-Border Information Transfers

Where personal information is transferred outside New Zealand or Australia, we take reasonable and proportionate steps to ensure that the recipient jurisdiction or entity provides a level of protection comparable to that required under applicable privacy laws and institutional standards.

8. Cookies and Tracking Technologies

Our website may utilise cookies and comparable technologies as a supporting function to our broader operational and governance framework. These tools are used to enable core functionality, monitor system performance, and enhance security controls.

Users may configure browser settings to restrict or disable cookies, noting that certain website features may be impaired as a result.

9. Individual Rights and Requests

Subject to applicable law, individuals may have the right to:

• Request access to personal information held by Viriditas Ventures

• Request correction of inaccurate, incomplete, or outdated information

• Withdraw consent where processing is based on consent

• Lodge a complaint with a relevant supervisory or regulatory authority

Requests should be submitted in writing using the contact details set out below and will be addressed in accordance with statutory timeframes and internal governance procedures.

10. Third-Party Websites

Our website may contain links to third-party websites or services. Viriditas Ventures is not responsible for the privacy practices, security controls, or content of external websites.

11. Policy Governance and Amendments

This Privacy Policy may be amended from time to time to reflect changes in legal requirements, regulatory guidance, or our operational practices. The current version will be made available on this page and will take effect from the stated effective date.

12. Contact

For privacy-related enquiries, access requests, or governance matters, please contact:

Viriditas Ventures Ltd
Email: privacy@viriditasventures.co.nz

Last Updated: 27/01/2026