Company: GDSTR
Filing Date: 2025-07-18
Form Type: S-4/A
Source: 0001213900-25-065671
Chunk: 455

Company: Goldenstone Acquisition Ltd.
Filing Date: 2025-07-18
Form: S-4/A
Chunk 455
---
 Information where such action is required by Privacy Requirements. There has been no interception, disclosure of, recording of, improper transfer of, provision of access to, or other Processing of electronic communications or other information in violation of any Privacy Requirements by or for the Company. Annex A-30 (l) The Company and the Company Subsidiaries have not (i) received direct written communication from any site, application, device, or platform (“ Property ”) owner or operator that Company’s or Company Subsidiaries’ access to the Property is unauthorized; (ii) entered into an agreement with any owner or operator prohibiting scraping or other activity; (iii) accessed any information through circumventing a password requirement or similar technological barrier; or (iv) scraped any data from a Property that prohibits such activity through terms or Laws. (m) Except as provided in Schedule 4.14(l), the Company and the Company Subsidiaries do not sell, share, rent, or otherwise make available any Personal Information to a person for the persons’ own use, and do not collect biometric data, biometric information or location data. (n) The Company and the Company Subsidiaries have each implemented and maintained, and to the Company’s knowledge, have required third parties that process material Personal Information on their behalf to implement and maintain, a written information security program and commercially reasonable physical, technical and administrative security safeguards (including, without limitation, implementing, maintaining, and monitoring compliance with government-issued or industry standard measures) designed to protect in all material respects the security and integrity of its Personal Information, including conducting regular vulnerability scans, risk assessments and remediation activities and implementing industry standard procedures preventing unauthorized access, modification, disclosure, misuse, loss, or unavailability of the foregoing and/or the introduction of Disabling Devices. The Company and the Company Subsidiaries have remediated all critical and high findings. Neither the Company nor any of the Company Subsidiaries has (x) experienced any data or security breaches or unauthorized Processing or unavailability of Personal Information including those that were required to be reported under applicable Privacy Requirements; (y) received a demand for or paid any ransomware or experienced a successful phishing, social engineering, or business email compromise incident ((x) or (y), a “ Security Incident ”). The Company has not provided any notices to, nor has it been legally required to provide any such notices, to any Person as a result of any such Security Incident. Neither the Company nor any Company Subsidiaries has