Company: XXC
Filing Date: 2025-11-18
Form Type: 20-F
Source: 0001213900-25-111691
Chunk: 45

Company: XINXU COPPER INDUSTRY TECHNOLOGY Ltd
Filing Date: 2025-11-18
Form: 20-F
Item: Item 10
Chunk 45
---
 other trade, profession, business or employment, the person
will be required to report such knowledge or suspicion to (i) a nominated officer (appointed in accordance with the Proceeds of Crime
Act (Revised) of the Cayman Islands) or the Financial Reporting Authority of the Cayman Islands, pursuant to the Proceeds of Crime Act
(Revised) of the Cayman Islands if the disclosure relates to criminal conduct or money laundering or (ii) a police constable
or a nominated officer (appointed in accordance with the Proceeds of Crime Act (Revised) of the Cayman Islands), or the Financial Reporting
Authority, pursuant to the Terrorism Act (Revised) of the Cayman Islands, if the disclosure relates to involvement with terrorism or
terrorist financing and terrorist property. Such a report will not be treated as a breach of confidence or of any restriction upon the
disclosure of information imposed by any enactment or otherwise.

Data
Protection - Cayman Islands

We
have certain duties under the Data Protection Act (Revised) of the Cayman Islands (the “ DPA

Privacy
Notice

Introduction

This
privacy notice puts our shareholders on notice that through your investment in the Company you will provide us with certain personal
information which constitutes personal data within the meaning of the DPA (“ personal data

In
the following discussion, the “ Company” refers to us and our affiliates and/or delegates, except where the context requires
otherwise.

Investor
Data

We
will collect, use, disclose, retain and secure personal data to the extent reasonably required only and within the parameters that could
be reasonably expected during the normal course of business. We will only process, disclose, transfer or retain personal data to the
extent legitimately required to conduct our activities of on an ongoing basis or to comply with legal and regulatory obligations to which
we are subject. We will only transfer personal data in accordance with the requirements of the DPA, and will apply appropriate technical
and organizational information security measures designed to protect against unauthorized or unlawful processing of the personal data
and against the accidental loss, destruction or damage to the personal data.

In
our use of this personal data, we will be characterized as a “data controller” for the purposes of the DPA, while our affiliates
and service providers who may receive this personal data from us in the conduct of our activities may either act as our “data processors”
for the purposes of the DPA or may process personal information for their own lawful purposes in