PRIVACY
POLICY

MDR Capital LLC (the "Company," "we," "us") operates this website at mdrcapit.shop from its business address at 1747 E Albion Dr, Sandy, 84092, United States. The website was designed and built by the developer MDR Capi. This Privacy Policy explains what information the Site and the Company collect, why it is collected, how it is used and shared, and what choices you have regarding it.

The Company provides principal dealing, customized advisory and fund management, trust, custody and fiduciary, and clearing/transfer/quotation services. This Site is an informational brochure and a contact channel — it is not a client portal, does not hold user accounts, and does not process transactions, trades or payments online.

1. Information We Collect

1.1 Information you send directly

When you contact the house by email, phone or the line-request form, you may provide:

• Your name and entity;
• Contact details — email address and telephone number;
• The mandate, deal or question you describe — including approximate size, instrument type and counterparties;
• Any documents you attach by email — term sheets, statements, trust instruments or financial data.

The on-page line-request form opens your own email client; nothing is transmitted to us until you press send in your mail application.

1.2 Information collected automatically

Our hosting infrastructure records standard technical logs when pages are requested: IP address, browser type and version, operating system, referring URL, pages requested, date/time stamps and HTTP status codes. These logs are generated by the hosting provider and retained for security, abuse prevention and performance analysis.

1.3 Information collected during engagements

Where an inquiry becomes an advisory mandate, custody arrangement or transaction, we collect the records that work and applicable law require — which may include identity verification and due-diligence documentation (AML/KYC), financial statements, suitability information, trust instruments and transaction records. Such information is collected through the engagement's documented channels, not through this Site.

1.4 Information we do not collect through this Site

This Site does not use advertising trackers, does not build behavioral analytics profiles, does not create user accounts, does not store payment card or bank account data, and does not use cookies for tracking purposes.

2. How We Use Information

Information submitted to the Company is used for legitimate business purposes only:

• Responding to inquiries — evaluating the mandate, deal or question and replying with a capacity statement and proposal;
• Performing engagements — advisory, fund management, trust, custody, clearing and transfer services you engage us for;
• Regulatory compliance — AML/KYC verification, suitability documentation, record retention and reporting obligations applicable to financial services;
• Record keeping — ledgers, statements, mandates and correspondence retained for accounting, tax and statutory periods applicable in Utah;
• Site security — hosting logs are used to detect abuse, attacks and errors.

We do not sell personal information, do not rent contact lists, and do not share submitted details with third parties for marketing purposes.

3. Client and Counterparty Confidentiality

Financial work touches sensitive data — balances, positions, beneficiaries and transaction terms. Client and counterparty information is used only to perform the engagement it was provided for and shared only as the mandate, the governing instruments or law require. Fiduciary and trust records are handled under the applicable trust instrument and law.

4. Sharing and Disclosure

Information may be shared only in these limited circumstances:

• Service providers — hosting (Firebase/Google Cloud), email routing (Spaceship) and similar infrastructure providers process data to deliver the Site and communications, under their own terms and safeguard obligations.
• Engagement participants — custodians, clearing agents, trustees, counsel, auditors and counterparties as an authorized engagement or transaction requires.
• Legal and regulatory obligation — disclosures required by law, court order, regulator, exchange or self-regulatory body.
• Business transfer — if the Company's assets are sold or merged, client and engagement records may transfer to the successor entity, which inherits the applicable obligations.

5. Retention

Correspondence, mandates, ledgers and transaction records are retained as long as reasonably needed for the engagement, the relationship and statutory recordkeeping periods applicable to financial services in Utah. Hosting logs are retained per the hosting provider's standard schedule. When information is no longer required, it is deleted or destroyed where feasible.

6. Security

We take reasonable administrative and technical measures to protect information: access is limited to personnel working on the relevant mandate or transaction, communications run over encrypted channels (HTTPS/TLS), and records are kept on secured systems. No method of transmission or storage is completely secure. Please do not send account credentials, wire instructions or government identification numbers by ordinary email before a secure channel is arranged.

7. Your Choices and Rights

• You may decline to provide information — we simply may not be able to respond to or scope the inquiry without it.
• You may request access to, correction of, or deletion of the personal information we hold about you by contacting sophia.ma@mdrcapit.shop. We will respond within a reasonable period, subject to legal, regulatory and recordkeeping obligations.
• You may ask us to stop contacting you; communications about an open mandate or transaction may still be sent while it is active.

Where applicable state privacy laws (including Utah's Consumer Privacy Act) grant eligible consumers additional rights, we will honor verified requests subject to statutory exemptions — including exemptions for data processed under the Gramm-Leach-Bliley Act and engagement-related records.

8. Third-Party Links

The Site may reference third-party resources (regulators, market references, industry bodies). We are not responsible for the privacy practices of those sites; review their policies separately.

9. Children's Privacy

The Site is directed at business and investing adults. It is not intended for children under 13, and we do not knowingly collect personal information from children. If you believe a child has submitted information, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy as the Site or practices change. The "Last updated" date above reflects the current version. Material changes will be posted on this page.

11. Contact

Privacy questions, requests or concerns:

• MDR Capital LLC, 1747 E Albion Dr, Sandy, 84092, United States
• Email: sophia.ma@mdrcapit.shop
• Phone: +1 (928) 963-8358