Ozzione Group LTD | Effective Date: June 19, 2026

---

1. Introduction

Ozzione Group LTD (“we,” “us,” “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in connection with our scrap metals, precious metals, and mineral commodities trading operations.

We are a controller of the personal data we process about you. This means we are responsible for deciding how we hold and use personal information about you. We comply with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully to understand our practices regarding your personal data. By using our website or services, you acknowledge the practices described herein.

---

2. What Data We Collect About You

We may collect, use, store, and transfer the following categories of personal data:

Information You Provide to Us

• Contact Information: Name, business address, email address, telephone number
• Business Information: Company name, job title, department, company size, industry sector
• Account Credentials: Username and password for registered accounts
• Transaction Information: Details about orders, shipments, and transactions you conduct with us
• Communications: Records of correspondence when you contact us via phone, email, post, or through our website

Information Automatically Collected

When you visit our website, we may automatically collect:

• Technical Data: IP address, browser type and version, operating system, device information
• Usage Data: Pages visited, time spent, links clicked, referral URLs, and other browsing activities
• Cookies and Tracking Technologies: Information collected through cookies and similar technologies (see Section 7 below)

Information from Third Parties

We may also obtain information about you from publicly available sources, business databases, or third-party service providers for due diligence, compliance, and business development purposes.

---

3. How We Use Your Personal Data

We process your personal data for the following purposes, relying on the legal bases described below:

To Provide and Manage Our Services

• Processing transactions, orders, and shipments
• Managing client accounts and relationships
• Providing customer support and responding to inquiries
• Administering contracts and agreements

Legal Basis: Performance of a contract, legitimate interest

For Compliance and Regulatory Obligations

• Complying with trade control, anti-money laundering, sanctions, and bribery laws
• Conducting due diligence on clients and business partners
• Verifying identities and performing background checks where required by law
• Maintaining records required by regulatory authorities

Legal Basis: Legal obligation, public interest

For Business Development and Marketing

• Communicating with you about our services and industry updates
• Sending promotional materials, newsletters, and event invitations
• Personalising marketing communications based on your interests
• Conducting market research and improving our services

Legal Basis: Consent (where required), legitimate interest

For Operational and Security Purposes

• Monitoring and improving our website and services
• Protecting against fraud, unauthorised access, and security threats
• Analysing usage patterns to enhance user experience

Legal Basis: Legitimate interest, legal obligation

---

4. How We Share Your Personal Data

We may share your personal data with the following categories of recipients:

Affiliates and Group Companies

We may share your data with other entities within the Ozzione Group for operational and business purposes.

Service Providers and Partners

We engage trusted third-party service providers to perform functions on our behalf, including:

• IT and website hosting services
• Logistics and freight partners
• Payment processing and financial services
• Marketing and analytics providers
• Legal and professional advisors

These providers are contractually obligated to protect your data and use it only for the specified purposes.

Regulatory and Law Enforcement Authorities

We may disclose your personal data where required to:

• Comply with legal obligations, court orders, or regulatory requests
• Prevent or detect fraud, money laundering, or other unlawful activities
• Enforce our terms and conditions or protect our rights and property

Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred to the successor entity in accordance with applicable law.

Aggregated and Anonymised Data

We may share aggregated, anonymised statistical data with partners, regulators, or for research purposes. This data does not identify you personally.

We do not sell or rent your personal data to third parties, nor do we share it for third-party marketing purposes without your explicit consent.

---

5. International Data Transfers

As a global commodities trading company, your personal data may be transferred to, stored in, or accessed from countries outside your country of residence, including the UK and the European Economic Area (EEA).

Where we transfer your data internationally, we ensure appropriate safeguards are in place to protect your data to the same high standard as under UK and EU data protection laws. These safeguards may include:

• Transfers to countries with an adequacy decision from the UK government or European Commission
• Use of Standard Contractual Clauses (SCCs) approved by regulators
• Additional measures where necessary to ensure data protection compliance

---

6. Data Retention and Security

How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• To provide and improve our services
• To comply with legal, regulatory, accounting, and reporting requirements
• To resolve disputes and enforce our agreements

Generally, we retain client and transaction data for the duration of our business relationship and for a reasonable period thereafter in accordance with legal requirements. When your data is no longer needed, we will securely delete or anonymise it.

How We Protect Your Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, misuse, or alteration, including:

• Encryption of sensitive data where appropriate
• Access controls limiting data access to personnel with a genuine business need
• Password protection and secure authentication mechanisms
• Regular security assessments and incident response procedures

While we strive to protect your personal data, no method of transmission over the internet is completely secure. Any transmission is at your own risk, and we cannot guarantee absolute security.

---

7. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and deliver personalised content.

Types of Cookies We Use

Cookie Type	Purpose
Necessary Cookies	Essential for website functionality, security, and session management
Analytics Cookies	Help us understand how visitors use our website, track performance, and improve services
Marketing Cookies	Used to deliver relevant advertising, track campaign effectiveness, and enable retargeting

We may use third-party analytics and marketing services, including Google Analytics, to help us evaluate website usage and optimise our digital presence.

You can manage your cookie preferences through your browser settings or by following the instructions provided on our website. Please note that disabling certain cookies may affect the functionality of our website.

---

8. Your Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data.

Right to Erasure (“Right to be Forgotten”)

You have the right to request deletion of your personal data where there is no compelling reason for its continued processing, subject to certain legal exemptions.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances, such as where you contest its accuracy.

Right to Object

You have the right to object to processing of your personal data based on our legitimate interests, including for direct marketing purposes.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.

Right to Withdraw Consent

Where our processing is based on your consent, you have the right to withdraw that consent at any time.

Right to Complain

You have the right to lodge a complaint with a supervisory authority if you believe we have not complied with our data protection obligations.

To exercise any of these rights, please contact us using the details provided in Section 10. We will respond to your request within one month, subject to verification of your identity.

---

9. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us so we can take appropriate action.

---

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at:

Ozzione Group LTD
Email: info@ozzionegroupltd.com

Data Protection Officer

If you have any queries about data protection or wish to exercise your rights, please contact our Data Protection Officer:

Email: info@ozzionegroupltd.com

---

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updates will be posted on this page, and we will indicate the effective date at the top of the policy.

Where changes are significant, we may notify you through our website or by other appropriate means. We encourage you to review this policy periodically to stay informed about how we protect your information.