Privacy Policy

Your privacy is important to NewVest and our affiliates (collectively, “we”, “us”, “our” or “NewVest”). In certain circumstances we must collect, maintain, and process certain personal information or personal data about you, otherwise we may be unable to provide you with our products and services as well as the full functionality of the website. Please note that “personal information” and “personal data” as used in this website privacy notice (the “Privacy Notice”) shall have the meaning given to such terms (or the equivalent term) under applicable data protection laws. We use these terms interchangeably in this Privacy Notice for simplicity.

To better protect your privacy, we are providing you with information to explain our data handling practices. This Privacy Notice describes how we gather and use personal information that we collect:

• on or through www.newvest.com and, as applicable, other websites (including any data rooms and investors portals), tools and applications that are provided or operated by us on our behalf (collectively the “website”);
• when you opt to receive communications from us;
• about representatives of our vendors or business partners or portfolio funds; 
• to conduct business with you;
• when you apply for a job with us; 
• when we conduct corporate and commercial transactions and investments (such as our M&A activities); and
• through other data collection points where we refer to this Privacy Notice.

Please read this Privacy Notice carefully and prior to using the website and providing any personal information. This Privacy Notice does not apply to any processing of personal information by or on behalf of NewVest that is covered by a more specific privacy notice (such as those relating to any investment vehicles we create, manage or administer). This Privacy Notice does not apply to the privacy practices of other companies, entities or persons (including, as applicable, our portfolio funds). If you log into the website, while we may obtain your login credentials, your personal information may also be collected by the third party that operates the website and in such case you are also subject to that third party’s privacy notices. We do not control their privacy notices or data collection and processing practices. We encourage you to read the privacy notices applicable to any such parties before you disclose any personal information to or via them.

Jurisdiction-Specific Information

This Privacy Notice is supplemented by the California Privacy Notice Supplement and EU-UK Privacy Notice Supplement (each a “Jurisdiction-Specific Notice”), each of which forms part of this Privacy Notice and in the event of a conflict between any such supplement and the Privacy Notice, the applicable supplement shall take precedence. In addition to reading this Privacy Notice, if you are:

• a resident of California, please also read our California Privacy Notice Supplement; or
• located in the EEA, EU or UK, or the processing of your personal data would otherwise be subject to EU-UK Data Protection Laws (as defined below), please also read our EU-UK Privacy Notice Supplement.

Categories of Personal Information We Collect and Process and How We Collect It

Depending on the context and our reasons for collecting your personal information (see “Purposes for Collecting Personal Information” below), the personal information we collect and process about you may include any (or all) of the following:

1. Basic personal details and identifiers: such as name, email address, postal address, title, job title, and telephone number;
2. Demographic and other identity information: such as age, social security number, driver’s license number or other government-issued identification card information, passport number, national origin, residency (including tax residency), citizenship and visa status, marital status, account credentials and gender;
3. Internet or other electronic network activity information: such as information regarding your use of the website, account credentials, and geolocation data. We obtain some information about your IP address and web browser that you use to access the website; 
4. Images: such as photographs and video recordings of you taken at NewVest events;
5. Employment information: professional or employment-related information, such as information relating to your job position (e.g., job title, job description and office location), talent management information (e.g., résumé information, occupation details, education details, certifications, professional association memberships, historical compensation details, previous employment details, employment screening and background check information (including criminal records information), and emergency contact information);
6. Information received through communications with us: such as information provided through meetings, emails, telephone calls and other forms of communication; and/or
7. Other information: such as information obtained through publicly available external websites in certain circumstances.

Information you provide to us

We collect your personal information when you decide to interact with us (e.g., via any contact/communication feature we utilize on the website, when you visit our offices, when you communicate with us over email or the telephone, when you apply for a job with us, etc.) including your name, email address, postal address, title, job title, telephone number, passport or other government-issued identification, financial information and/or résumé information, as appropriate. 

We may also collect personal information about you, such as your IP address, through automated technology when you access and use our website, such as cookies and similar technology (please see the “Cookies” section below for information about how we use such technologies).

Information provided by third parties or publicly available sources

We collect personal information from third parties, such as a resumé sent to us by a recruiting firm, background information from a background check provider, personal information we viewed on social media (e.g., LinkedIn) or information obtained from publicly available lists of individuals subject to sanctions or trade restrictions.  

If you represent one of our vendors, business partners or portfolio funds, we may also collect your personal information (i.e., basic identifying and contact information, including your name, title, work email address, work postal address, job title and/or work telephone number, as appropriate) from the entity that you work for where this is necessary to receive products or services from, or otherwise conduct business with, such third party.

We process information in relation to portfolio funds that we are evaluating in connection with a corporate or commercial transaction or potential investment, which may include your personal information (e.g., your name, title, email address, postal address, job title, telephone number, passport or other government-issued identification, financial information and/or job and benefits information) as appropriate.

Personal information relating to young persons

We do not knowingly collect personal information from minors under the age of 18. If we are made aware that we have collected personal information from a child under the age of 18, we will delete it as soon as practicable.

Purposes for Collecting Personal Information 

We may collect or disclose the personal information we collect about you for one or more of the following purposes:

Monitoring

We monitor communications where the law requires us to do so. We also monitor communications, where required to do so, to comply with regulatory rules and practices and, where permitted to do so, to protect our respective businesses and the security of our respective systems. 

Marketing and events

Where required by applicable law, we will obtain your consent to send you marketing communications about our products, services, offers and promotions, and to invite you to events and to participate in surveys. You may request that we stop sending you marketing communications by emailing compliance@newvest.com.

Disclosure of Personal Information

Unfortunately, the transmission of information and data via the internet or by other means is not completely secure. Although we try to protection your personal information, we cannot guarantee the security of any information or data transmitted to or through the website or by other means and any transmission of information or data by you or on your behalf to or through the website or by other means is at your sole risk.

We may disclose any of the categories of personal information we obtain about you as described in the “Categories of Personal Information We Collect and Process and How We Collect It” section above amongst NewVest entities and to service providers and persons employed and/or retained by NewVest entities to fulfil the purposes set out in this Privacy Notice. We use a number of service providers to perform certain services including legal and financial professional advisors, our auditors, recruitment firms, consultants, IT and data security providers, data hosting providers, data room and portal service providers, and in some instances, placements agents, administration agents, depositories, investment managers, banks and other fund administrators.

We may also disclose personal information: (1) if we are required or permitted to do so by law or legal process (such as a court order or subpoena); (2) in response to requests by government or regulatory agencies, such as law enforcement, tax, and data protection supervisory authorities; (3) to establish, exercise or defend legal rights; (4) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; (5) in connection with an investigation of suspected or actual illegal activity; or (6) otherwise with your consent.

No Sales of Personal Information

We do not sell or rent any of the personal information we collect about you to third parties. However, we reserve the right to transfer any personal information we have about you in the event of an actual or proposed sale or transfer of all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution, or liquidation).

Retention of Personal Information

We retain your personal information for as long as reasonably necessary and proportionate to achieve the purposes and uses set out in this Privacy Notice, as authorized by law, and to meet legal, taxation, accounting, risk management or business requirements. We may retain personal information for longer where required by our regulatory obligations, or where we believe it is necessary to establish, defend or protect our legal rights and interests or those of others. Your personal data may be deleted when it is no longer relevant or when you withdraw consent (pursuant to the rights detailed directly in this may be exercised by using the contact information contained at the end of this Privacy Notice) within the parameters of applicable law. If we send you emails and/or market to you, you may unsubscribe at any time from communications from us, and we will cease sending you further communications. 

How We Protect Your Information

We maintain physical, electronic, and procedural safeguards to prevent unauthorized access to data and to protect the integrity of our systems. We take reasonable steps to protect any personal information that you provide us online by employing appropriate technical and organizational measures. We permit access only by authorized persons who need access to that information to provide services to us and you and who are required to abide by applicable confidentiality and information security practices. Despite the security procedures we employ, you should be aware that it is impossible to guarantee the security of information that you transmit to us via the internet or by other means.

Cookies

Information regarding how you access the website (e.g., browser type and language, access times, clickstream behaviour (including the pages viewed and any links you may click), the address of the website from which you arrived at our website and Internet Protocol (IP) address) and your hardware and software may be automatically collected through the use of cookies (a small text file placed on your hard drive) or other technologies or tools. This information is used to improve website performance and for our business or commercial purposes, including to help us provide you with a better experience when you browse our website. NewVest may also share the information collected in aggregate form (i.e., so that the information cannot reasonably identify an individual) with third parties for business purposes, such as service providers and consultants to NewVest. Where cookies are not necessary for us to provide the products or services you have requested or for the functioning of the website, we will ask you to consent to their use. You may opt-in to accept cookies automatically by changing the settings on your browser. If you opt-out of certain cookies, you may not be able to access certain parts of the website. 

You may wish to visit www.aboutcookies.org, which contains comprehensive information about types of cookies, how they are used, and how you can manage your cookie preferences.

Further Information

NewVest reserves the right to update this Privacy Notice and the Jurisdiction-Specific Notices at any time, for any reason, in NewVest’s sole discretion, without notice, to reflect changes with respect to the processing of personal data or changes in the law. In the event that we do so, we will make an updated version of this Privacy Notice available to you via the website; however, we will use information only in accordance with the Privacy Notice under which the information was collected. The examples contained within this Privacy Notice are illustrations only and are not intended to be exclusive. You may have additional rights under other laws that apply to you.

Contact Us 

If you have questions about this Privacy Notice, wish to contact NewVest, wish to exercise opt-out rights or submit verified requests, wish to appeal decisions, or wish to make any changes to the personal information you have provided to us, including removing it from a particular subscription list or removing it from our databases, please contact us at compliance@newvest.com.

Please note that, unless expressly advised otherwise, our website and communication facilities do not provide a means for completely secure and private communications and use. Although we will attempt to keep personal information confidential, from a technical standpoint, there is still a risk. For that reason, use caution when using the website, e-mail and other communication methods to communicate information to NewVest that is considered to be confidential. 

Our goal is to respond to any verifiable requests within the timeframes mandated applicable law, and we will notify you in writing if we cannot meet any such timelines.

No Discrimination: We will not discriminate against you for exercising your rights under the applicable privacy regulations in your jurisdiction.

California Privacy Notice Supplement

This California Privacy Notice Supplement supplements the Privacy Notice set forth above with respect to specific rights granted under the California Consumer Privacy Act of 2018, (as amended, and together with its implementing regulations and guidelines, the “CCPA”) to natural person residents of California, and provides information regarding how such California residents can exercise their rights under the CCPA. This California Privacy Notice Supplement is only relevant to you if you are a resident of California as determined in accordance with the CCPA. Information required to be disclosed to California residents under the CCPA regarding the collection of their personal information that is not set forth in this California Privacy Notice Supplement is otherwise set forth above in the Privacy Notice. Please note that the rights under the CCPA do not apply to personal information collected, processed, sold or disclosed pursuant to the Gramm-Leach-Bliley Act (Public Law 106-102). To the extent there is any conflict with the privacy requirements under the Gramm-Leach-Bliley Act and/or Regulation S-P (“GLB Rights”), GLB Rights shall apply.

Categories of Personal Information We Collect: NewVest has collected within the last twelve (12) months some or all of the following categories of personal information from individuals:

NewVest does not collect or use sensitive personal information other than: 

1. To perform services, or provide goods, as would reasonably be expected by an average consumer who requests those goods or services;
2. As reasonably necessary and proportionate to detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information; 
3. As reasonably necessary and proportionate to resist malicious, deceptive, fraudulent, or illegal actions directed at us and to prosecute those responsible for such actions;
4. As reasonably necessary and proportionate to ensure the physical safety of natural persons; 
5. For short-term, transient use (but not in a manner that discloses such information to another third party or is used to build a profile of you or otherwise alter your experience outside of your current interaction with NewVest);
6. To perform services on behalf of the NewVest’s business; and
7. To verify or maintain the quality or safety of a service or to improve, upgrade, or enhance such service or device.
8. To collect or process sensitive personal information where such collection or processing is not for the purpose of inferring characteristics about a consumer.

Some internet browsers have incorporated “Do Not Track” features. Most of these features, when turned on, send a signal or preference (the “DNT Signal”) to websites you visit indicating that you do not wish to be tracked. At this time, NewVest does not currently respond to DNT Signals.

NewVest does not collect or process sensitive personal information with the purpose of inferring characteristics about California consumers covered by this California Privacy Notice Supplement.

Purposes for Collecting Personal Information: NewVest may collect or disclose the personal information NewVest collects about you for one or more of the following business or commercial purposes as set forth in the “Purposes for Collecting Personal Information” section of the Privacy Notice.

NewVest retains the categories of personal information set forth above in the “Categories of Personal Information We Collect” section of this California Privacy Notice Supplement only as long as is reasonably necessary for those business or commercial purposes set forth above, except as may be required under applicable law, court order or government regulations.

Disclosure of Personal Information: NewVest does not share (i.e., disclose to a third party for the purpose of cross-context behavioral advertising) or sell (as such terms are defined in the CCPA) any of the personal information NewVest collects about you to third parties. In the preceding twelve (12) months, NewVest has not sold or shared any of the personal information NewVest collects about you to third parties. NewVest does not disclose any non-public personal information about you to anyone, except as permitted or required by law or regulation and to service providers.

During the last twelve (12) months, NewVest has disclosed personal information collected from you for a business or commercial purpose to the categories of third parties indicated in the chart below. NewVest may also disclose your information to other parties as may be required by law or regulation, or in response to regulatory inquiries.

Rights Under the CCPA: You have certain rights regarding your personal information, as described below.

• Disclosure and Access Rights: You have the right to request that NewVest discloses to you certain information regarding NewVest’s collection, use, disclosure and sale of personal information specific to you. Such information includes:

1. The categories of personal information NewVest collected about you;
2. The categories of sources from which the personal information is collected;
3. NewVest’s business or commercial purpose for collecting such personal information;
4. Categories of third parties to whom NewVest discloses the personal information;
5. The specific pieces of personal information NewVest has collected about you; and
6. Whether NewVest disclosed your personal information to a third party, and if so, the categories of personal information that each recipient obtained.

• Correction Right: You have the right to request that NewVest corrects the personal information NewVest retains about you, subject to certain statutory exceptions, including, but not limited to, NewVest’s compliance with U.S., state, local and non-U.S. laws, rules and regulations, if that information is inaccurate. NewVest will notify you in writing if NewVest cannot comply with a specific request and provide an explanation of the reasons.
• Deletion Rights: You have the right to request that NewVest deletes any of your personal information that NewVest retains, subject to certain exceptions, including, but not limited to, our compliance with U.S., state, local and non-U.S. laws, rules and regulations. NewVest will notify you in writing if NewVest cannot comply with a specific request and provide an explanation of the reasons.
• No Discrimination: NewVest will not discriminate against you for exercising your rights under the CCPA, including by denying service, suggesting that you will receive, or charging, different rates for services or suggesting that you will receive, or providing, a different level or quality of service to you.

How to Exercise Your Rights: To exercise any of your rights under the CCPA, or to access this notice in an alternative format, please submit a request on your behalf using any of the methods set forth below.

Call us using the following number: +1 646-809-0702

Submit a request online using the following online form: https://www.newvest.com/contact-us.

Email us at the following email address: compliance@newvest.com 

NewVest will contact you to confirm receipt of your request under the CCPA and request any additional information necessary to verify your request. NewVest verifies requests by matching information provided in connection with your request to information contained in our records. Depending on the sensitivity of the request and the varying levels of risk in responding to such requests (for example, the risk of responding to fraudulent or malicious requests), NewVest may request further information or your investor portal access credentials, if applicable in order to verify your request. You may designate an authorized agent to make a request under the CCPA on your behalf, provided that you provide a signed agreement verifying such authorized agent’s authority to make requests on your behalf, and NewVest may verify such authorized person’s identity using the procedures above. If NewVest requests you verify your request and NewVest does not receive your response, NewVest will pause processing your request until such verification is received. NewVest will notify you in writing if NewVest cannot meet that timeline.

EU-UK Privacy Notice Supplement

This EU-UK Privacy Notice Supplement supplements the information contained in the Privacy Notice above and applies solely to the processing of personal data which is subject to EU-UK Data Protection Laws. For the purposes of this EU-UK Privacy Notice Supplement, the “EU-UK Data Protection Laws” mean all applicable laws and regulations relating to privacy, protection and/or processing of personal data in the EEA, EU and UK, including (without limitation): the General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”), the EU GDPR as it forms part of the laws of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (“UK GDPR”), and including in respect of the foregoing any implementing or successor legislation and any amendments or re-enactments. The terms “controller”, “data subject”, “personal data”, “process” and “processing” or other applicable or analogous terms shall be interpreted in accordance with the applicable EU-UK Data Protection Laws.

Who is responsible for processing your personal data?

To the extent that EU-UK Data Protection Laws apply to our processing of your personal data, one or more of us will each be a “controller” of your personal data. In simple terms, when applicable, this means we: (i) “control” the personal data that we collect from you or other sources; and (ii) make certain decisions on how to use and protect such personal data.  

What type of personal data do we collect?

The types of personal data that we collect are set forth in the “Categories of Personal Information We Collect and Process and How We Collect It” section of the Privacy Notice. 

Please note that we do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

Purposes and Legal Bases for Collecting and Using Personal Data

We rely on various legal bases under the EU-UK Data Protection Laws in order to process your personal data, as we have set forth in the “Purposes for Collecting Personal Information” section of the Privacy Notice. Note that we may process your personal data on more than one legal basis depending on the specific purpose for which we are using your personal data. These purposes are also set out in the “Purposes for Collecting Personal Information” section of the Privacy Notice, which in general are to operate our business, conduct business or perform a contract with you and perform essential or legitimate business operations.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so. 

If we require your personal data due to a legal requirement or obligation or in order to perform a contract with you, we will make you aware of this at the time we collect your personal data, and the possible consequences of you failing to provide this personal data (e.g., we may require your passport details to verify your identity for the purposes of anti-money laundering regulations). 

No solely automated decision making, including profiling, is used when processing your personal data.

Disclosure and Transfers of Personal Data

NewVest may disclose and transfer your personal data to third parties as set forth in the “Disclosure of Personal Information” section of the Privacy Notice above, which may involve the transfer of your personal data outside of the outside the UK, EU or EEA.  

Whenever we transfer your personal data across borders, we will only do so in accordance with applicable laws. Such transfers of personal data may be made further to applicable adequacy decisions, appropriate or suitable safeguards permitted under the EU-UK Data Protection Laws (such as the standard contractual clauses issued by the European Commission and/or the UK equivalent) or any other valid means permitted by applicable law. Furthermore, we may transfer personal data to a Non-Equivalent Country (as defined below), in order to fulfill the purposes described in the Privacy Notice and in accordance with applicable laws. For information on the safeguards applied to such transfers, please contact us at compliance@newvest.com. 

For the purposes of this Privacy Notice, “Non-Equivalent Country” means a country or territory other than: (i) a member state of the EU or EEA; (ii) the United Kingdom; or (iii) a country or territory which has at the relevant time been decided by the European Commission, the Government of the United Kingdom, or the UK Information Commissioner (as applicable) in accordance with the applicable EU-UK Data Protection Laws to ensure an adequate level of protection for personal data.

Data Subject Rights 

To the extent set forth in EU-UK Data Protection Laws, you may have certain rights relating to the collection and use of your personal data, including, as applicable, the right to (i) request a copy of the personal data retained by NewVest; (ii) to correct any inaccurate information contained within the personal data retained by NewVest; (iii) delete any personal data retained by NewVest; (iv) restrict the processing of personal data retained by NewVest, including the purposes for which personal data is processed by or on behalf of NewVest; (v) object to the processing of personal data undertaken by NewVest; (vi) direct the transfer of your personal data to a third party designated by you; (vii) withdraw your consent to our processing of your personal data at any time; and (viii) not be subject to solely automated decision making. Individuals located in the UK or EU may also “opt out” or unsubscribe from any marketing communications from NewVest. An individual may contact NewVest’s at compliance@newvest.com if they wish to exercise any of the rights set forth herein. Furthermore, you have a right to lodge a complaint with the appropriate supervisory authority. These rights are not absolute and in certain circumstances their exercise may not be possible including when personal data must be maintained to comply with applicable laws. 

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Questions, Complaints and Contacting Us

To the extent EU-UK Data Protection Laws apply, should you have any questions, concerns, or complaints in relation to this EU-UK Privacy Notice Supplement and the Privacy Notice, please contact us at compliance@newvest.com.