Company: OXLCZ
Filing Date: 2025-09-04
Form Type: DEF 14A
Source: 0001213900-25-084505
Chunk: 36

Company: Oxford Lane Capital Corp.
Filing Date: 2025-09-04
Form: DEF 14A
Chunk 36
---
 from a number of sources, including:

| when you or your representative provide, or provided, it to us in correspondence (including when you open an investment) and conversations |     | publicly available and accessible directories and sources                                |
| when recruitment agencies provide us with information for prospective employees                                                            |     | governmental and competent regulatory authorities to whom we have regulatory obligations |
| when you have made or make transactions or provide transaction documentation                                                               |     | fraud prevention and detection agencies and organizations                                |
| through the use of cookies and similar technologies                                                                                        |     |                                                                                          |

The types of personal information we collect and share depend on the product or service you have with us. The personal information we collect, the basis of processing and the purposes of processing are detailed below. For EU/UK data subjects, we have a lawful basis under the GDPR for each of our processing activities, as set out below:

| What we collect                                                                                                                                                                                           |     | Why do we collect it                   |     | Lawful Basis                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| Personal details such as name, address, postal and email address, phone number, Social Security Number or other Tax ID Number, driver’s license number, employment information, and financial information |     | To open and administer your investment |     | As is necessary to enter into or perform our contractual obligations to you (for example, to administer,                                                                                                                                                                                                                                                                                                                                                            
 manage and set up your investment, or to facilitate the transfer of funds, and administering and facilitating any other transaction).                                                                                                                                                                                                                                                                                                                               
 It is also necessary to comply with our legal and regulatory obligations, for example, to verify the identity and address of our investors, maintain statutory registers, comply with the U.S. Office of Foreign Assets Control list and other governmental sanction lists, to prevent and detect fraud, to maintain the integrity and security of our systems, to carry out audit checks and conduct surveillance and investigations, comply with lawful requests. |

24

| What we collect                     |     | Why do we collect it                                                                                  |     | Lawful Basis                                                                                                                                                                                                                                                                                                                                                                    |
|                                     |     |                                                                                                       |     | It is also in our legitimate interest to manage our risk and monitor, improve our relationship with you, and keep you up to date on our latest offerings and investment opportunities, which are not outweighed by the privacy impacts on you.                                                                                                                                  
 If you are an applicant for employment, we use this information to set up and administer your application. It is necessary to take steps at your request prior to entering into a contract (e.g. to