Company: GVH
Filing Date: 2025-02-12
Form Type: 20-F
Source: 0001493152-25-006117
Chunk: 89

Company: Globavend Holdings Ltd
Filing Date: 2025-02-12
Form: 20-F
Item: Item 3
Chunk 89
---
 — accuracy and duration of retention of personal      
  Principle 3 — use of personal data;                               
  Principle 4 — security of personal data;                          
  Principle 5 — information to be generally available; and          
  Principle 6 — access to personal data.                            

Non-compliance with
a Data Protection Principle may lead to a complaint to the Privacy Commissioner for Personal Data (the “ Privacy Commissioner”).
The Privacy Commissioner may serve an enforcement notice to direct the data user to remedy the contravention and/or instigate prosecution
actions. A data user who contravenes an enforcement notice commits an offense that may lead to a fine and imprisonment.

The PDPO also gives
data subjects certain rights, inter alia:

  the right to be informed by a data user whether the data user holds   
  if the data user holds such data, to be supplied with a copy of such  
  the right to request correction of any data the individual considers  

The PDPO criminalizes,
including, but not limited to, the misuse or inappropriate use of personal data in direct marketing activities, non-compliance with a
data access request, and the unauthorized disclosure of personal data obtained without the relevant data user’s consent. An individual
who suffers damage, including injured feelings, by reason of a contravention of the PDPO in relation to his or her personal data may
seek compensation from the data user concerned.

  51  

  Table of Contents  

Data Protection Act (As Revised) of
the Cayman Islands

Cayman Islands
Data Protection Laws

We have certain duties
under the Data Protection Act (as revised) of the Cayman Islands (the “ DPA”), based on internationally accepted principles
of data privacy.

Privacy Notice

This privacy notice
puts our shareholders on notice that through your investment into us you will provide us with certain personal information which constitutes
personal data within the meaning of the DPA, or personal data.

Investor Data

We will collect, use,
disclose, retain and secure personal data to the extent reasonably required only and within the parameters that could be reasonably expected
during the normal course of business. We will only process, disclose, transfer or retain personal data to the extent legitimately required
to conduct our activities of on an ongoing basis or to comply with legal and regulatory obligations to which we are subject. We will
only transfer personal data in accordance with the requirements of the DPA, and will apply appropriate technical and organizational information
security measures designed to protect against unauthorized