This privacy notice (“Notice”) is provided by McKinsey River Capital Management and the other entities listed in Schedule 1. Throughout this Notice, all references to “McKinsey River Capital Management”, “we”, “us” or “our” refer to McKinsey River Capital Management, its direct and indirect affiliated entities from time to time.

General

We are committed to safeguarding Personal Data (i.e., information relating to a living individual from which that individual can be identified). Personal Data is handled in accordance with applicable Data Protection Legislation, including laws governing the processing of Personal Data and privacy.

We will generally process your Personal Data as a data controller (as defined under applicable Data Protection Legislation).

This Notice explains how we collect, use and protect Personal Data when you:

• Visit our website (the “Site”);

• Inquire about or use services associated with our business made available through the Site (the “Services”);

• Express interest in our business;

• Are employed by, or otherwise connected to, our suppliers or business partners;

• Are related or otherwise connected to our staff (e.g., nominated as an emergency contact);

• Apply for a job or work experience with McKinsey River Capital Management; or

• Visit our corporate offices globally,

together with any other Personal Data you provide to us or that we obtain through our day-to-day business activities.

If you are seeking specific information about how we process Personal Data relating to:

• Investors or former investors, please refer to the privacy notice available through the McKinsey River Capital Management Investor Portal; or

• Employees and contractors, please refer to the applicable internal employee privacy notice.

Scope of This Notice

This Notice describes, among other things:

• The types of Personal Data we collect;

• The purposes for which we process Personal Data;

• Circumstances under which we disclose Personal Data;

• Security measures applied to protect Personal Data;

• Your rights as a data subject; and

• How to contact us to exercise those rights.

Where processing of Personal Data is necessary to provide requested Services, failure to provide such data may prevent us from delivering those Services or responding to inquiries.

We may update this Notice from time to time. Any changes will be posted on the Site and will become effective upon posting. Continued use of the Site or Services constitutes acceptance of the updated Notice.

Types of Personal Data We Collect

We may collect or receive the following categories of Personal Data:

Contact Information

Full name, email address, telephone number.
Sources: Directly from you; from employers or business partners; from staff where relevant.

Audio and Visual Data

Such as recorded telephone calls where legally required.
Sources: Direct interactions with us.

Technical and Usage Information

IP address, device identifiers, browser information, browsing history, clickstream data, referral URLs.
Sources: Automatically generated through cookies and similar technologies.

Preferences and Communications

Marketing preferences, feedback, comments, and content submitted via the Site or Services.

Recruitment Data

CVs, application materials, interview notes, qualifications, references, work authorization data, and where legally required, criminal background information or health data for reasonable adjustments.

Where Personal Data is provided on behalf of another individual, you confirm you have informed them of this Notice.

Purposes of Processing

We process Personal Data for purposes including:

• Operating and maintaining the Site and Services;

• Communicating with you and responding to inquiries;

• Business analytics, compliance, audits, and internal record keeping;

• Security, fraud prevention, and system integrity;

• Recruitment and talent assessment;

• Legal, regulatory, and contractual obligations;

• Corporate transactions (e.g., mergers or restructuring);

• Marketing communications (where permitted).

McKinsey River Capital Management does not sell Personal Data.

Lawful Basis for Processing

Processing is carried out on one or more legal bases:

• Legitimate interests;

• Consent (where required);

• Compliance with legal obligations;

• Performance of a contract or pre-contractual steps;

• Protection of vital interests;

• Public interest (where applicable).

Special category data is processed only where legally permitted.

Data Retention

Personal Data is retained only for as long as necessary, considering:

• The duration of our relationship with you;

• Legal and regulatory retention requirements;

• Limitation periods for legal claims;

• Legitimate business needs.

Data Security

We apply appropriate technical, physical and organizational safeguards to protect Personal Data.
While we follow industry standards, no method of transmission or storage is completely secure.

Cookies and Similar Technologies

We use cookies to operate the Site, enhance performance, remember preferences, and analyze usage.
Non-essential cookies are used only where permitted.
For more information, please refer to our Cookie Notice.

International Transfers

Personal Data may be transferred internationally.
Where required, appropriate safeguards are implemented, such as:

• Adequacy decisions;

• Standard Contractual Clauses (SCCs);

• Transfer risk assessments;

• Comparable protections where relevant.

Your Rights

Depending on your jurisdiction, you may have rights including:

• Access to Personal Data;

• Correction or rectification;

• Erasure (subject to exceptions);

• Restriction or objection to processing;

• Data portability;

• Withdrawal of consent;

• The right to lodge a complaint with a supervisory authority.

Contact Us

To exercise your rights or for privacy-related inquiries, please contact:

[Insert Contact Details]

Supplemental Privacy Notice for California Residents (CCPA)

This section applies where the CCPA is applicable.

We do not sell Personal Data or share it for cross-context behavioral advertising.

California residents have additional rights, including:

• Access

• Correction

• Deletion

• Limitation of use of sensitive data

• Non-discrimination

Requests may be made using the contact details above and will be verified as legally required.

Accessibility

Alternative formats of this Notice are available upon request by contacting us.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time.
Last updated: July 2024.