HOW IGNYTIVE B.V. HANDLES PERSONAL DATA

Ignytive B.V.
E: info@ignytive.com
W: www.ignytive.com
Version: April 2026

1. Who are we?

Ignytive B.V. (hereinafter: Ignytive) is a European investment and management company specialised in the beauty and personal care sector. We are the data controller for the personal data processed as described in this Privacy Policy.

Contact details:
Ignytive B.V.
E: info@ignytive.com
W: www.ignytive.com

2. What data do we process?

Ignytive processes only personal data that is necessary for our business activities. Depending on the context, this may include:

•       Name and contact details (email address, phone number, business address)

•       Job title and organisation name

•       Correspondence and communications in the context of business relationships

•       Technical data via the website (IP address, browser type, browsing behaviour) — see also our Cookie Policy

•       Data provided through an enquiry, contact form or deal sourcing request

3. On what legal basis do we process your data?

Ignytive processes personal data on the following legal grounds as defined under the General Data Protection Regulation (GDPR):

•       Performance of a contract: when you enter into a business relationship with us.

•       Legitimate interest: for deal sourcing, network communication and business prospecting.

•       Legal obligation: when law or regulation requires us to retain or disclose data.

•       Consent: when you sign up to receive communications from Ignytive.

4. How do we use your data?

We use your personal data for the following purposes:

•       Maintaining business contacts and relationship management

•       Deal sourcing and evaluating potential acquisition candidates

•       Following up on enquiries and contact requests

•       Conducting due diligence processes

•       Compliance with legal and regulatory obligations

•       Improving our website and digital communications

5. How long do we retain your data?

Ignytive retains personal data no longer than necessary for the purposes for which it was collected, or for as long as required by law. As a guideline we apply:

•       Business contact details: for as long as the relationship is active, with a maximum of seven (7) years after last contact.

•       Job applicants: a maximum of four (4) weeks after the conclusion of the process, unless consent has been given for longer retention.

•       Financial and administrative records: seven (7) years in line with statutory retention obligations.

6. Do we share your data with third parties?

Ignytive never sells your data to third parties. We may share data with:

•       Professional service providers (legal advisors, accountants, IT suppliers) who are bound by a data processing agreement or professional secrecy obligations.

•       Government authorities where required by law.

•       Potential co-investors or partners, only with your explicit consent or where this is inherent to the nature of the business relationship.

7. Transfers outside the EEA

Ignytive does not, as a rule, transfer your personal data outside the European Economic Area (EEA). Where this is incidentally necessary, we ensure appropriate safeguards are in place in accordance with the GDPR, such as standard contractual clauses.

8. Security of your data

Ignytive takes appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These measures include access controls, encryption and periodic security assessments.

9. Your rights

As a data subject, you have the following rights under the GDPR:

•       Right of access: you may request information about the personal data we hold about you.

•       Right to rectification: you may request correction of inaccurate or incomplete data.

•       Right to erasure: you may request deletion of your data, unless legal obligations prevent this.

•       Right to restriction of processing: you may in certain circumstances request that processing be restricted.

•       Right to data portability: you may request your data in a structured, machine-readable format.

•       Right to object: you may object to processing based on legitimate interest.

Requests may be submitted to: info@ignytive.com. We will respond within thirty (30) days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl.

10. Amendments

Ignytive reserves the right to amend this Privacy Policy. The current version is always available at www.ignytive.com. We recommend reviewing this policy periodically.