PRIVACY POLICY

Last Updated: 2 September 2025

This privacy policy (this “Privacy Policy”) describes how BRV Limited (“we”, “us” or “our”) collects, uses and shares your personal information (i.e., information from or about an identified or identifiable person, including information that we can associate with an individual person) when you use our Website (i.e., https://www.lewishamilton.com). Please read this Privacy Policy carefully. This website is not intended for children and we do not knowingly collect data relating to children.

Categories of Personal Information We Collect

We may collect the following categories of personal information about you when you use our Website or third party service providers:

  • Contact Information. Information such as name, email address and telephone number.

  • Device and Website Usage Information. We use analytics applications, cookies, pixels and/or similar technologies, including Google Analytics, to help collect and analyse certain information, including: the domain name of the Website that allowed you to navigate to our Website, search engines used, the length of time spent on our Website, the pages you looked at on our Website, the frequency of your visits to our Website, and other relevant statistics.

  • Additional Information. Additional information that you provide to us, including through feedback, messages, emails, mail, or otherwise.

How We Use Personal Information

We use the personal information we collect about you through our Website for the following purposes:

  • Provide Our Website. To provide you with our Website, including using personal information for user support, to make it easier for you to use the Website, and to manage our relationship with you.

  • Marketing Purposes. To contact you with information we think you may find valuable or to subscribe you to receive email communications from us, with your consent. These might be related to third party or affiliate offers, products or services we think you might find interesting. We may send you emails as permitted by law.

  • Website Administration and Development. To maintain, protect, and improve our Website, ensure the technical functions of our network, and improve and customise the content and layout of our Website.

The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:

  • Performance of a contract with you: Where we need to perform the contract we are about to enter into or have entered into with you.

  • Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

  • Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.

  • Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.

How We Share Personal Information

We may share the personal information we collect about you as described below:

  • Service Providers. We may share your personal information with third party service providers that provide services, such as Website usage analytics, on our behalf in order to enable them to provide such services.

  • Subsidiaries and Affiliates. We may share your personal information with our subsidiaries and affiliates for the purposes described above or as reasonably necessary for our internal administrative and business purposes.

  • Marketing Purposes. We may share your personal information with our subsidiaries, affiliates and third parties who jointly sponsor an event or promotion with us. Personal information disclosed to subsidiaries, affiliates and third parties for these purposes includes basic identification information.

  • Legal Reasons. We may share your personal information to comply with applicable law, respond to valid legal process, participate in legal proceedings, including civil discovery and litigation, protect you, us, and others from unlawful or fraudulent activities, and investigate potential violations of and enforce our policies, including our Terms of Use.

  • Change of Control Transaction. We may share your personal information with third parties who may or do acquire all or a portion of our business, whether by way of merger, consolidation, or purchase of all or a portion of our assets, including during negotiations of any such transaction, or in connection with any bankruptcy or reorganisation proceeding brought by or against us.

We do not sell your personal information to third parties, or share your personal information with third parties for purposes of targeted advertising.

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

In some circumstances you can ask us to delete your data.

Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

The internet and information storage are not 100% secure. We cannot guarantee that any of your personal information stored or sent to us will be completely safe. We encourage you to use caution. To the maximum extent allowed by applicable law, you agree and acknowledge that we will not be liable or responsible if any information about you is intercepted, accessed, and/or used by an unintended recipient. If you have reason to believe that the security of your communications or personal information has been compromised, please contact us at teamlh@lewishamilton.com immediately.

Your Legal Rights

You have a number of rights in relation to your personal information under data protection law. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

You have the following rights, some of which may only apply in certain circumstances:

  • to be informed about the processing of your personal information (this is what this statement sets out to do);

  • to have your personal information corrected if it is inaccurate and to have incomplete personal information completed;

  • to object to processing of your personal information;

  • to withdraw your consent to processing your personal information;

  • to restrict processing of your personal information;

  • to have your personal information erased; and

  • to request access to your personal information and information about how we process it.

Third Party Links

Our Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit.

Do Not Track

Our Website does not currently respond to Do Not Track signals.

Updating this Privacy Policy

We may change this privacy policy from time to time. We will post any updates to this Privacy Policy on our Website, with a “Last Updated” date at the top of this document. Please check this page for updates.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example a new address or email address.

Contact

If you have any questions about this privacy policy or about the use of your personal data or you want to exercise your privacy rights or have any complaints, please contact us at teamlh@lewishamilton.com.