Company: COPL-UN
Filing Date: 2025-04-14
Form Type: S-1/A
Source: 0001829126-25-002621
Chunk: 321

Company: Copley Acquisition Corp
Filing Date: 2025-04-14
Form: S-1/A
Chunk 321
---
 content.

How the Company May Use Your Personal Data

The company, as the data controller, may collect, store and use personal data for lawful purposes, including, in particular:

| (i) | where this is necessary for the performance of our rights and obligations under any purchase agreements; |

| (ii) | where this is necessary for compliance with a legal and regulatory obligation to which we are subject (such as compliance with anti-money laundering, counter terrorist financing, prevention of proliferation financing, financial sanctions and FATCA/CRS requirements); and/or |

| (iii) | where this is necessary for the purposes of our legitimate interests and such interests are not overridden by your interests, fundamental rights or freedoms. |

Should we wish to use personal data for other specific purposes (including, if applicable, any purpose that requires your consent), we will contact you.

Why We May Transfer Your Personal Data

We will not sell your personal data. In certain circumstances we may be legally obliged to share personal data and other information with respect to your shareholding with the relevant regulatory authorities such as the Cayman Islands Monetary Authority or the Tax Information Authority. They, in turn, may exchange this information with foreign authorities, including tax authorities.

We anticipate disclosing personal data to persons who provide services to us and their respective affiliates (which may include certain entities located outside the United States, the Cayman Islands or the European Economic Area), who will process your personal data on our behalf. Any transfer of personal data outside of the Cayman Islands shall be in accordance with the requirements of the DPL.

Where necessary, we will ensure that separate and appropriate legal agreements are put in place with the recipient of that data.

<div align='center'>195</div>

The Data Protection Measures We Take

Any transfer of personal data by us or our duly authorized affiliates and/or delegates outside of the Cayman Islands shall be in accordance with the requirements of the DPL.

We and our duly authorized affiliates and/or delegates shall apply appropriate technical and organizational information security measures designed to protect against unauthorized or unlawful processing of personal data, and against accidental loss or destruction of, or damage to, personal data.

We shall notify you of any personal data breach that is reasonably likely to result in a risk to your interests, fundamental rights or freedoms or those data subjects to whom the relevant personal data relates. ‘Data subject’ means any living individual who can be identified, directly or indirectly, by the personal data.

Rights of Individual Data Subjects

Individual data subjects have certain data protection rights under the DPL