Privacy Policy

Scope of Policy

This Privacy Policy applies to personal data collected through our website, business development activities, consulting services, and any interactions with Ivy Stone where personal information is provided. Ivy Stone adheres to data protection regulations applicable in the United States, European Union (GDPR), and other regions in which we operate.

1. Information We Collect

We collect information in the following ways:

Contact and Business Information: When you contact us, request services, or engage our consulting services, we may collect personal information such as your name, title, email address, phone number, business affiliation, company information, and professional background.

Business Information: In connection with our consulting and capital introduction services, we may collect:

• General business description and industry sector

• Company stage, size, and growth objectives

• Capital needs and partnership goals

• Business plans and strategic information (as needed for introductions)

• Management team background and expertise areas

Professional Information: To facilitate appropriate introductions and provide consulting services, we may collect:

• Professional background and credentials

• Industry experience and expertise

• Business references and network connections

• Previous funding history (general information only)

Automatically Collected Information: Our website may automatically collect data about your device, browsing activity, and interaction with our site through cookies and similar technologies.

Third-Party Information: We may receive information about you from business partners, referral sources, potential investors, or other third parties in connection with our services.

2. Use of Personal Information

We use personal information for the following purposes:

Service Provision: To provide business consulting, strategic advisory services, and facilitate introductions to potential investors or strategic partners.

Introduction Services: To connect businesses with appropriate investors, lenders, or strategic partners based on compatibility and mutual interests.

Business Advisory: To provide consulting services related to business development, growth strategies, and capital planning.

Communication: To respond to inquiries, send updates, and notify clients about potential business opportunities or policy changes.

Compliance: To meet legal obligations under applicable laws and maintain professional standards for consulting services.

Security: To protect against unauthorized access, fraud, or illegal activities and ensure data integrity.

Business Development: To analyze market opportunities and improve our service offerings.

3. Legal Basis for Data Processing (GDPR Compliance)

For users located in the European Economic Area (EEA), we process personal data based on one of the following legal bases:

Contractual Necessity: Processing necessary to fulfill our contractual obligations and provide requested services.

Legitimate Interests: Processing necessary for legitimate business interests, such as service improvement, security, fraud prevention, and business development activities.

Legal Compliance: Processing necessary to comply with regulatory obligations, including securities laws and anti-money laundering requirements.

Consent: Where required, we obtain consent for specific processing activities, such as marketing communications.

4. Sharing of Personal Information

Ivy Stone does not sell personal information. We may share information with third parties in the following circumstances:

Potential Investors and Partners: In connection with our introduction services, we may share basic business information with potential investors, lenders, or strategic partners to facilitate introductions. This typically includes general business description, industry, growth stage, and capital needs. Detailed due diligence and data room access is handled directly between you and the interested parties.

Service Providers: We may share data with third-party providers for data storage, legal services, accounting, and website management. Ivy Stone maintains Data Processing Agreements (DPAs) with all third-party providers.

Professional Advisors: We may share information with lawyers, accountants, and other professional advisors as necessary for our consulting services.

Legal Requirements: We may disclose information if required by law, court order, or government authorities.

Corporate Transactions: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the new entity under continued protection.

5. Important Business Disclaimers

Consulting and Introduction Services Only: Ivy Stone provides business consulting and introduction services. We do not manage funds, handle investments, or act as financial intermediaries. Our role is limited to:

• Providing strategic business consulting and advisory services

• Making introductions between businesses and potential investors/partners

• Offering guidance on business development and growth strategies

All investment decisions, due diligence, legal documentation, and fund transfers are handled directly between our clients and their investors/partners.

Professional Services Confidentiality: We maintain strict confidentiality regarding client business plans, strategies, proprietary information, and any non-public business information shared with us in the course of our consulting relationship.

6. International Data Transfers

Ivy Stone operates internationally, and your personal information may be transferred outside your country of residence. Where such transfers occur, we ensure appropriate safeguards, including the use of EU-approved Standard Contractual Clauses for transfers outside the EEA. If you are located outside the United States, you consent to the transfer of your personal data to our servers located in the U.S.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience, analyze website traffic, and facilitate business development activities. Users can manage cookie preferences through browser settings. For detailed information, refer to our Cookie Policy.

8. Data Security

We implement industry-standard security measures to protect personal information from unauthorized access, loss, or misuse. Our security measures include secure data storage, access controls, and encrypted communications for sensitive business information. However, no method of transmission over the internet is fully secure, and we cannot guarantee absolute security.

9. Retention of Personal Information

Ivy Stone retains personal data only as long as necessary for the purposes stated in this policy or as required by applicable law. Generally:

• Client relationship and consulting data is retained for the duration of our business relationship and up to 7 years thereafter for business records purposes

• Marketing and communication data is retained until you opt out or request deletion

• Website analytics data is typically retained for 2 years

When personal data is no longer needed, we take steps to anonymize or securely delete it.

10. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

Access: The right to request access to your data and receive information about its processing.

Correction: The right to request correction of inaccurate or incomplete data.

Deletion: The right to request deletion of data where it is no longer necessary for the purpose collected (subject to legal retention requirements).

Restriction: The right to request the restriction of data processing under certain conditions.

Objection: The right to object to data processing based on legitimate interests.

Data Portability: The right to request transfer of your data to another service provider in a structured, commonly used format.

To exercise these rights, please contact us using the information below. We may need to verify your identity to process your request. Users located in jurisdictions with specific data rights (such as the California Consumer Privacy Act or GDPR) will receive prompt responses as required by local law.

11. Children's Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, please contact us to request deletion of the information.

12. Changes to this Privacy Policy

Ivy Stone reserves the right to update this Privacy Policy periodically. Changes will be posted on this page, and the "Last Updated" date will be revised accordingly. We will notify clients of material changes via email or website notice. By continuing to use our services, you agree to the updated terms.

13. Contact Information

For questions or requests regarding this Privacy Policy, please contact us at:

Ivy Stone LLC (Ivy Stone Capital)

395 S MAIN ST STE 202 ALPINE, UT 84004

For assistance you may call us at:
Phone: 801-368-9442
Email: support@ivystonecapital.com
Website: ivystonecapital.com

14. Consent for Marketing Communications

In jurisdictions requiring explicit consent for marketing, we will obtain your consent before sending promotional materials about business opportunities, market insights, or our services. You may withdraw this consent at any time by following the unsubscribe instructions included in our marketing emails or by contacting us directly.

15. Opt-Out Mechanisms

For users in jurisdictions with opt-out rights, such as California (CCPA), we provide options for users to opt out of certain data sharing practices. To exercise this right, please contact us at support@ivystonecapital.com.

16. Language Accessibility

For our global users, this Privacy Policy is available in multiple languages. However, in the case of discrepancies between translations, the English version will take precedence to ensure consistent interpretation.

Last Updated: 6/9/2025