Privacy Notice
The World Gold Council and its subsidiaries and affiliates ("WGC", "we", "our" and "us") recognise the importance of protecting the privacy of visitors to (and registrants on) this website and other professional contacts. We have created the following policy guidelines to let you know how we collect and use your personal data.
About this Privacy Notice
This Privacy Notice explains how we use, protect and share personal data relating to you ("you" and "your") that we have collected, including in connection with the use of this website, when you register for Goldhub, engage with us professionally, or otherwise interact with the World Gold Council.
The relevant data controller(s) of your personal data will depend on where you are located and the nature of the processing activities. Please see Appendix 1 for a list of our subsidiaries and affiliates who may process your data and how to contact them.
Country Specific Provisions
In addition to the provisions set out in this Privacy Notice, additional terms and information relating to our processing of personal data may apply depending on where you are located. These additional terms are set out as appendices to this Privacy Notice.
Links to Other Sites
Our website may contain links to other third-party websites or applications. If you click on a third-party link, you will be directed to that third party's site. Please be aware that these websites and applications may collect personal data. This Privacy Notice does not apply to the practices of such other websites, and we are not responsible or liable for the websites' or the applications' content, any use of the websites or applications, or the privacy and security practices and policies of those websites or applications. These websites and applications may have their own privacy notices or policies which we encourage you to read.
What personal data do we collect?
We may collect the following personal data about visitors to this site, registrants of the Goldhub and professional contacts including suppliers and partners. Please note that we may combine personal data collected from one source with personal data that we have collected from other sources.
Your biographical and contact details
This personal data may include name, email address, other contact details, business information, address, marketing preferences (including whether we can contact you in relation to Central Banks, ESG, Gold Market structure and trends, Investment Commentary, Weekly Markets Monitor), usernames and other information, including information provided through the forms on our website.
Registration and account details for use of Goldhub
This personal data may include your name, address, email address, location (region, state and/or country), and whether you are a professional investor or individual.
Correspondence and interactions with us and this site
We collect personal data where you contact us or we contact you, and we will typically keep a record of such correspondence. This personal data may include your name and contact information, account information, your queries, and other personal data you may choose to provide to us. If you have had contact with WGC personnel in your professional capacity, for example by meeting a WGC representative and providing your business card, WGC may store your personal information, such as your name, job title, employer organisation, contact details and any meeting notes.
When you use interactive features on this site, including the tools on Goldhub (for example, portfolio modelling and valuation simulators), we may collect information about your use of these tools and any website materials you download from this site and Goldhub.
Social media information
We maintain presences on social media platforms including, but not limited to Facebook, Twitter/X, Instagram, LinkedIn, TikTok, WeChat and YouTube. We collect personal data when you interact with us on social media. Please note that these social media platforms may set cookies and other tracking technologies on your device when you visit their pages and when you navigate from their pages. The output of such information may be provided to us (usually for statistical purposes to see how users interact with our content on social media platforms). These social media platforms will also be data controllers of your personal data. Information about how they collect and use your personal data (and how they use cookies and other technologies, including instructions on how you can disable these) can usually be found in their respective privacy policies and cookies policies on their respective websites.
Information stored on a device
We may access metadata and other information associated with other files stored on your computer, tablet, mobile phone, or any other device such as IP address, domain name, browser version and operating system, traffic data, web logs and other communication data, and device identifiers. To the extent required by applicable law, we will ask for your consent prior to collecting device information.
Collection and use of public information and information from third-party sources
We may also collect, use, store, transfer, share, and disclose your personal data that is publicly available for the purposes set out in this Privacy Notice. We may access information about you from third-party sources and platforms (such as service providers, agents, social networking sites, databases, online marketing firms, and ad targeting firms).
Why do we use personal data?
We may use your personal data for a variety of business purposes, which we have set out below. Under various data protection laws, the use of personal data must be based on one of a number of lawful bases which we have also set out below.
To conduct our business
To conduct our business as a membership organisation for the gold industry, including to enable use of our website and the information and tools available on the website including, for example, Goldhub, Qaurum, Portfolio Simulator and GRAM, to carry out our obligations arising from any agreements entered into, to maintain business records and to administer our business and to contact you in connection with the foregoing.
To provide communications (about updates and changes) and to provide technical support
To communicate about updates to our business and website (including Goldhub) and to provide technical support and to respond to requests, comments, questions, or concerns, and to contact you if we have any issues with respect to the same. Such communications may be provided by various means, but primarily email.
To ensure our websites/applications content (including that on Goldhub) is relevant and to maintain the security of our website
To ensure that content from our websites/applications are presented in the most effective and secure manner. In particular, WGC uses visitors' IP addresses to help diagnose problems with our server, to power security measures and related services relating to your access to the website.
To provide marketing materials and for advertising
To provide updates and newsletters where you have chosen to receive these. WGC may also use personal data of subscribers and professional contacts to send e-mail newsletters. We may also use professional contact information to invite you to events with our professional representatives. We may also use personal data to market via social media.
Where required by law, we will ask for consent at the time we collect the personal data to conduct these types of marketing. Where required by law, we will provide an option to unsubscribe from further communication on any electronic marketing communication sent or you may opt-out/change your marketing settings by contacting us. Please note that even if you opt-out of receiving marketing emails, you may still receive communications from us that are important and/or related to your interactions with us, or otherwise as required by law.
We may combine demographic information supplied by a subscriber at registration with site usage data to provide profiles, in aggregate form, about our visitors and their preferences in the content of the site.
For business development and market analysis
We may collect information about your use of this website and the interactive features on this site, including the tools on Goldhub (for example, portfolio modelling and valuation simulators) and any website materials you download from this site and Goldhub to support our market development activities, develop our business and the tools available on this site and the Goldhub. We may use the IP address of website visitors to gather broad demographic information about our site visitors.
We may also use this information to support future interactions with subscribers and professional contacts, including preparing and distributing reports, presentations and studies. Such reports, presentations and studies may be prepared with the assistance of third parties.
In connection with legal or regulatory obligations and to manage claims
We may process personal data to comply with our legal and regulatory requirements or dialogue with regulators/judicial proceedings/court orders and manage claims and litigation (as applicable) which may include disclosing personal data to third parties, the court service and/or regulators or law enforcement agencies in connection with enquiries, proceedings or investigations by such parties anywhere in the world or where compelled to do so.
To reorganise or make changes to our organisation
In the event that we: (i) are subject to negotiations for the sale of our organisation or part thereof to a third party; (ii) are sold to a third party; or (iii) undergo a re-organisation, we may need to transfer personal data to the relevant third party (or its advisors) as part of any due diligence process for the purpose of analysing any proposed sale or re-organisation. We may also need to transfer personal data to that re-organised entity or third party after the sale or reorganisation.
Cookies and similar technologies
We use cookies and similar technologies. For more information, please refer to our cookies policy.
Who do we share personal data with and why?
We may share or disclose personal data for the purposes and lawful bases set out above to third parties. These third parties include service providers, business partners and our advisors. We may share your personal data we collect and process across our subsidiaries and affiliates.
We may disclose personal data as required by law, regulation and other binding requests (such as subpoenas and court orders), and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process served on us. As described above, we may also need to transfer personal data in the context of a transfer or sale of all or part of WGC's stocks/assets.
Third Party Website & Data Sharing Practices
We encourage users to collaborate with and engage with others by discussing financial and investment opinions, information and experience. You understand and acknowledge that any such information that you provide through the website or otherwise, including, for instance, as part of your profile or while interacting with other users, will be publicly available, and that other users may use and reproduce such information. We have no control over the use by other users of the information that you voluntarily disclose to the public.
Personal Data Security
We take commercially reasonable efforts to protect the personal data under our control. Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect personal data, we cannot guarantee the security of it transmitted to our websites, applications or through communications.
If you are given user credentials (such as username and passwords), please keep these safe and do not disclose these to third parties.
Your Rights
We operate in countries with data protection laws which provide different rights to individuals in respect of access, deletion, rectification and limiting processing of personal data. When a request to exercise certain rights in relation to personal data is made, we will need to check the entitlement prior to answering a request.
In general, the following rights are likely available regardless of where an individual is located:
- the right to stop receiving marketing communication; and
- the right to require us to update any inaccuracies in the personal data we hold.
In order to assist us with this, please keep the relevant information up to date.
If your website registration information changes, you should click through to the "Edit your information" under the "Your Account" section of our website and update your personal information. Or, if you want us to delete your registration you can contact us at the address below.
Please see the Appendices to this Privacy Notice for further detail on the rights which may be available. To submit a request regarding personal data by email, please contact us using the details provided below.
Retention of Personal Information
The period for which WGC will retain personal data will vary depending on the purposes that it was collected for, as well as the requirements of any applicable law or regulation. We may continue to retain it after we have ceased such uses for certain legitimate business purposes. We may also continue to retain personal data to meet our legal requirements or to defend or exercise our legal rights.
After we no longer need to retain personal data, we will then either securely delete it, anonymise it so that it cannot be linked back to you or securely destroy it.
International Transfers of your Personal Information
WGC has operations throughout the world. As such, the personal data that we hold may be transferred to, and stored at, a country outside of your country of residence, including the UK, Switzerland, the EEA, United States, Singapore, UAE, India, China and Japan.
These countries may not provide the same level of data protection as a home country; however, we will take steps to ensure that personal data that is transferred outside a home country is safeguarded as in line with this Privacy Notice and applicable laws. Please see the Appendices to this Privacy Notice for further detail on international transfers of your personal information outside of your jurisdiction.
For more information about how your personal data may be transferred, please contact us using the information below.
Contact Us
If you have any questions about this Privacy Notice, or the practices to which it relates, you can contact us at [email protected] or by writing to us at either the World Gold Council, 7th Floor, 15 Fetter Lane, London EC4A 1BW, UK or the World Gold Council office in your jurisdiction, details of which can be found in Appendix 1 to this Privacy Notice.
You have the right to lodge a complaint with any applicable supervisory authority, details of which are provided in the Appendices to this Privacy Notice. However, we would appreciate the chance to put this right for you first. Please contact us using the details set out above.
We will do our very best to answer any question and resolve any complaint to your satisfaction. If, for whatever reason, you feel we do not meet the high standards we expect of ourselves, you have a right to complain to the applicable supervisory authority, details of which are provided in the Appendices to this Privacy Notice.
Updates to this Privacy Notice
We regularly review and, if appropriate, update this Privacy Notice from time to time, and as our services and use of personal data evolves. We therefore encourage you to review it periodically.
Last update
The Privacy Notice was last updated August 2026.
Appendix 1: List of WGC affiliates and subsidiaries acting as data controllers
| Name | Registered address | Country of establishment | Contact details for data protection queries |
|---|---|---|---|
| WGC (UK) Limited | 7th Floor, 15 Fetter Lane, London EC4A 1BW United Kingdom | United Kingdom | [email protected] |
| World Gold Council, An Association | 7th Floor, 15 Fetter Lane, London EC4A 1BW United Kingdom | Switzerland | [email protected] |
| WGC USA, Inc. | 685 Third Avenue Suite 2702 New York NY 10017 | USA | [email protected] |
| World Gold Council (Singapore) Private Limited | World Gold Council (Singapore) Pte Ltd 6 Battery Road #24-01 Singapore 049909 | Singapore | [email protected] |
| WGC Middle East FZCO | Business Centre, Level 11 Uptown Tower Dubai United Arab Emirates | Dubai (UAE) | [email protected] |
| World Gold Council (India) Private Limited | B-901 9th Floor One BKC Bandra Kurla Complex Bandra (East) Mumbai 400051 India | India | [email protected] |
| World Gold Council China Co Ltd (Shanghai WFOE) | Room 4805 B No. 1717 Nanjing West Road Wheelock Square Jing'an District 200040 Shanghai People's Republic of China | China | [email protected] |
| Branch - Mumbai Liaison Office | B-901 9th Floor One BKC Bandra Kurla Complex Bandra (East) Mumbai 400051 India | India | [email protected] |
| Branch - Shanghai Rep Office | Room 4805 B No. 1717 Nanjing West Road Wheelock Square Jing'an District 200040 Shanghai People's Republic of China | China | [email protected] |
| Branch – Beijing Rep Office | Room 1009, 10/F, Beijing Fortune Building, No. 5 North Dongsanhuan Road, Chaoyang District, 100004 Beijing, People's Republic of China | China | [email protected] |
| World Gold Council KK | 7F Toranomon 40MT Building, 5-13-1 Toranomon, Minato-ku, Tokyo 105-0001, Japan | Japan | [email protected] |
Appendix 2: EEA, Switzerland and UK specific provisions
If you are located in the EEA, Switzerland or the UK, the provisions of this Appendix 2 apply in addition to the provisions of the Privacy Notice.
Why do we use your personal data? Who do we share your personal data with and why?
With respect to individuals located in the EEA, Switzerland or the UK, use and disclosure of personal data must be based on one of a number of lawful bases and we are required to set out the lawful bases in respect of each use made of your personal data.
In the list below, we have set out the relevant lawful bases that apply to each purpose for which we use your personal data as described in the Privacy Notice (including the sharing of your personal data for these purposes as described in the Privacy Notice).
| Why do we use your personal data (by reference to the use cases set out in the Privacy Notice) | Lawful basis |
|---|---|
| To conduct our business | Contract performance (if our contract is entered into with an individual) and in all other cases, legitimate interests (to enable us to perform our obligations and provide our website, the data provided via the Goldhub and wider research, analysis, commentary and insights on the gold market and wider services to you). |
| To provide communications (about updates and changes) and to provide technical support | Contract performance (if our contract is entered into with an individual) and in all other cases, legitimate interests (to enable us to perform our obligations and provide our services to you). |
| To allow use of the interactive features of our website and for business development and analytics | Legitimate interests (to enable us to promote and develop our business based on feedback and to allow us to improve our services). |
| To ensure our websites/applications content (including that on Goldhub) is relevant and to maintain the security of our website | Legitimate interests (to allow us to improve our services). |
| To provide marketing materials and for advertising | Consent or legitimate interest where we are not required to rely on consent (to keep you updated with news in relation to our products and services, to engage with stakeholders and professional contacts and to market content relevant to you). |
| For business development and market analysis | Legitimate interest (to develop our business and support the development of the tools available on this site and the Goldhub). |
| In connection with legal or regulatory obligations and to manage claims | Legal obligations, legitimate interests (to cooperate with law enforcement and regulatory authorities). With respect to special categories of personal data, we will usually rely on legal claims, substantial public interests (processing for the prevention and detection of fraud/crime) or very rarely where necessary, explicit consent. |
| To reorganise or make changes to our organisation | Legitimate interests (in order to allow us to change our business). |
International transfers of personal data (specifically, transfers outside of the EEA, Switzerland and UK)
If transfers are made to other countries that are not deemed to provide adequate protections under EEA, Swiss or UK law, we will ensure that such transfer is subject to appropriate safeguards in accordance with applicable data protection laws such as approved standard contractual clauses. You can contact the relevant data controller as per the "Contact Us" section of the Privacy Notice (with reference to Appendix 1) for further information about the safeguards applied to your personal data.
What are your rights?
In addition to the rights set out in the Privacy Notice, you may, under certain conditions, have the right to:
- withdraw your consent where you have given your consent to us to use your personal data for certain purposes. You have the right to withdraw this consent at any time by contacting us using the contact details set out in the "Contact Us" section. This will not affect the lawfulness of any use of your information that we make before you withdraw your consent.
- be provided with details about what personal data we hold about you and to be provided with a copy of your personal data.
- be provided with a copy of the information you have provided to us in a machine-readable format so that you can transfer it to another provider or ask us to transfer this to another data controller (where our processing activity is based on contract performance or consent).
- require us to delete personal data (including where our processing activity is based on your consent or our legitimate interests).
- restrict how we use your personal data whilst a complaint is being investigated.
- object to our processing of your personal data (where our processing is based on our legitimate interests).
- ask us not to reach decisions affecting you using automated processing or profiling.
Additionally, if you are based in France, you have the right to define directives on the processing of your personal data after your death in compliance with the French data protection act (law n°78-17 of 6 January 1978 as amended). To submit a request regarding personal data by email, please contact us as per the "Contact Us" section of the Privacy Notice.
Your exercise of these rights is subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege). If you exercise any of these rights, we will check your entitlement and respond in most cases within a month.
If you are not satisfied with how we have addressed your complaint or concerns, you can also contact your appropriate EEA Data Protection Authority (DPA) (https://edpb.europa.eu/about-edpb/about-edpb/members_en). If you are located in the UK, your DPA is the ICO (www.ico.org.uk).
Appendix 3: India specific provisions
If you are located in India, the provisions of this Appendix 3 apply in addition to the provisions of the Privacy Notice.
This section governs the Processing of Personal Data of visitors, registrants, and business contacts located in India ("you" and its grammatical variations) by WGC and its affiliates ("we", "us" and its grammatical variations). Capitalized terms used but not defined here have the meaning ascribed to them under the Digital Personal Data Protection Act, 2023 of India and accompanying rules.
How long we retain Personal Data
WGC retains your Personal Data in accordance with the terms of the Privacy Notice, and for at least 1 (one) year from the date of processing.
Your rights
In addition to the rights set out in the Privacy Notice, you may, under certain conditions, have the right to:
- obtain (a) confirmations on whether your Personal Data is being Processed by WGC; and (b) brief summaries of Personal Data Processed or being Processed by WGC.
- correct inaccurate or misleading Personal Data and complete any incomplete Personal Data and update the Personal Data.
- a readily available means of grievance redressal.
- nominate an individual to exercise these rights in the event of any incapacity.
WGC will handle your requests in accordance with applicable laws, and in any event within 90 days of your request or grievance.
We reserve the right to request you to provide particulars or identifiers as may be required to establish your identity against with details available with us.
Contact us
If you have any questions, about this Appendix or any concerns or grievances about the Processing of your Personal Data, please see the "Contact Us" section above, with reference to Appendix 1.
Users under the Age of 18
Users below the age of 18 years are required to obtain verifiable parental consent in order for WGC to Process their Personal Data.
Appendix 4: Singapore specific provisions
If you are located in Singapore, the provisions of this Appendix 4 apply in addition to the provisions of the Privacy Notice. The collection, use and disclosure of personal data in Singapore is governed by the Personal Data Protection Act 2012 ("PDPA").
Consent and bases for processing
We collect, use and disclose your personal data with your consent, or where consent is deemed to have been given by you (for example, where you voluntarily provide personal data to us for an obvious purpose), or where an exception under the PDPA permits us to do so without consent.
International transfers of personal data
The provisions of this section apply in addition to the provisions of the Privacy Notice. We will not transfer personal data to a country or territory outside Singapore except in accordance with the requirements prescribed under the PDPA i.e., we will ensure that a standard of protection comparable to the protection under the PDPA is provided to the transferred personal data.
What are your rights?
The provisions of this section apply in addition to the provisions of the Privacy Notice.
At any time, you may:
- Request access to personal data about you that is in our possession or under our control, as well as information about the ways in which your personal data has been or may have been used or disclosed by us within a year before the date of the request. Please note that you may be charged a reasonable fee (for which we will provide a written estimate) for us to process an access request;
- Request correction of any error or omission in the personal data we hold about you. Please note that there may instances where we are not required to correct or otherwise alter your personal data, for example, as set out in the Sixth Schedule of the PDPA; and
- Withdraw your consent to the collection, use or disclosure of your personal data for any purpose by giving us reasonable notice.
To submit a request regarding personal data by email, please contact us using the "Contact Us" section of the Privacy Notice, with reference to Appendix 1.
There may be instances where we cannot grant you access to the personal data we hold. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality. If that happens, we will give you written reasons for the refusal.
When contacting us to request access to or correction of any personal data we hold about you, or to withdraw consent in relation to your personal data, we ask that you provide us with as much detail as you can about the data in question as this will help us to retrieve it. Before we provide you with access to your personal data, we may require some proof of identity. Unless we inform you otherwise, we will respond to your request for access or correction within 30 days of receiving your request, and to your withdrawal of consent in relation to your personal data within ten business days of receiving notice.
Contacting us
If you have any questions, about this Appendix or any concerns or grievances about the Processing of your Personal Data, please see the "Contact Us" section above, with reference to Appendix 1.
Appendix 5: Japan specific provisions
This Appendix 5 applies to individuals located in Japan and supplements the Privacy Notice. In the event of any inconsistency, this Appendix shall prevail to the extent required under the Act on the Protection of Personal Information (Act No.57 of 2003, as amended. "APPI").
I have read and acknowledged the Privacy Notice, and consent to the processing (including the transfer) of my personal data (including sensitive personal information) by WGC.
Data Controller
The name, address and representative of the data controller handling your personal information are set out in Appendix 1.
Definitions
Personal Data or Personal Information: this means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number (including, "Individual Number" as defined by the "Law on the Use of Specific Numbers to Identify Individuals for Administrative Procedures" (namely, the "My Number Law")), location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; and is defined as "personal information" under the Act on Protection of Personal Information ("APPI") (No. 57 of 2003, as amended).
Purposes of Use of Personal Information (Article 21 APPI)
We will handle your Personal Information in accordance with the APPI.
We process Personal Information for the purposes described in the Privacy Notice. We will not use personal information beyond the scope necessary to achieve these purposes except as permitted under applicable laws and regulations.
Collection of Personal Information
We may collect personal information by the following means:
- Directly from you (e.g., forms, event registrations, account creation)
- Automatically through your use of our website (e.g., cookies, IP address)
- From third parties (e.g., business partners, public sources)
Where we obtain your personal information from third parties, we will do so in accordance with APPI and other applicable law and, where required, confirm that such personal information has been lawfully obtained.
Special Care-Required Personal Information (Article 20 APPI)
We will obtain prior consent from the individual before acquiring any Special Care-Required Personal Information (e.g. information relating to health, medical history or other sensitive data), unless an exception under applicable law applies.
Provision of Personal Information to Third Parties
We may provide your personal information to third parties, including group companies and service providers, for the purposes described in this Privacy Notice.
We will not provide personal information to third parties without your prior consent, except where permitted under applicable laws, including:
- Where required by law
- Where necessary to protect life, body or property
- Where necessary for public health or child welfare
- Where required to cooperate with governmental authorities
Cross-Border Transfers
It is sometimes necessary for us to provide your Personal Data to our other WGC entities or third-party service providers situated out of Japan (including in countries which do not provide the same level of data protection as Japan).
Your Personal Data may be transferred outside Japan only if:
- You have expressly consented that Personal Data can be transferred to a third party outside Japan, unless such Personal Data is transferred to a country in the EU or the UK, the overseas organization to which the Personal Data will be transferred is bound by legally enforceable obligations to provide to the Personal Data transferred a standard of protection that is comparable under the APPI in an appropriate and reasonable manner or the overseas organization to which the Personal Data will be transferred is certified in accordance with an international framework of the handling of Personal Data (including APEC Cross-Border Privacy Rules System).
Information about the foreign organizations to which the Personal Data will be transferred (other than where Personal Data is transferred to the EU or UK) is mainly as follows:
| Name of the Foreign Country | Personal Data Protection Systems in Foreign Country | Personal Information Protection Measures Taken by the Third Party |
|---|---|---|
| China | Personal Information Protection Law (PIPL) applies | Contractual safeguards implemented |
| Singapore | Personal Data Protection Act (PDPA) applies | Contractual safeguards implemented |
| United States | No comprehensive federal privacy law; sectoral/state-based regulation | Contractual measures ensuring protection equivalent to APPI |
You may request further information regarding such measures, including details of the destination country and the data protection system in that country.
Please refer to an overview of the data protection legal system in relevant jurisdictions through the link of the Personal Information Protection Commission of Japan's website below.
https://www.ppc.go.jp/enforcement/infoprovision/laws/?ref=gnavi
Security Control Measures
We take necessary and appropriate measures to prevent leakage, loss or damage of personal information and to otherwise ensure its security, including:
- Organizational measures (internal policies, responsible persons)
- Human measures (training, confidentiality obligations)
- Physical measures (access controls, secure storage)
- Technical measures (access restrictions, encryption)
Retention Period
We will retain Personal Information only for as long as necessary to achieve the purposes of use.
Where retention periods are prescribed by applicable laws and regulations, such statutory periods will apply.
Rights relating to your Personal Information under APPI
In addition to the rights set out in the Privacy Notice, you may, under certain conditions, have the right to:
- request notice of the purpose of use
- request access to your Personal Information
- request correction, addition or deletion of your Personal Information where it is inaccurate
- request suspension of use or deletion of your Personal Information where it is handled in violation of applicable law
- request the disclosure of your Personal Information held by us, and the disclosure of the records of the provision of information about you that we have disclosed to third parties
- ask us to cease of use or erase Personal Information in certain circumstances
If you would like to exercise any of these rights, please contact us using the information provided in the Privacy Notice above and we will endeavour to respond to your request within the timescale prescribed by the APPI.
Minors
Where personal information of minors is collected, we may obtain consent from a parent or guardian where required.
Use of Cookies and Similar Technologies
We may use cookies and similar technologies. Where the information collected constitutes "person-related information" under Japanese law, it will be handled in accordance with applicable requirements. Please see our Cookies Policy for further information.
Contact Us
If you have any questions, about this Appendix or any concerns or grievances about the Processing of your Personal Data, please see the "Contact Us" section above, with reference to Appendix 1.
Appendix 6: UAE specific provisions
If you are located in the UAE (onshore), the provisions of this Appendix 6 apply in addition to the provisions of the Privacy Notice.
In addition to the rights set out in the Privacy Notice, you may, under certain conditions, have the right to:
- withdraw your consent where you have given your consent to us to use your personal data for certain purposes. You have the right to withdraw this consent at any time by contacting us using the contact details set out in the "Contact Us" section. This will not affect the lawfulness of any use of your information that we make before you withdraw your consent.
- be provided with details of the information about the processing of your personal data including on the categories of personal data we process in relation to you, the processing purposes and the storage period;
- be provided with a copy of the information you have provided to us in a machine-readable format (where our processing activity is based on contract performance or consent).
- require us to delete personal data (including where our processing activity is based on your consent).
- restrict how we use your personal data whilst a complaint is being investigated.
- object to our processing of your personal data where the processing of your personal data is intended for the purpose of direct marketing, including profiling related to direct marketing, or for the purposes of conducting statistical surveys (unless the processing is necessary to serve the public interest), or is carried out in violation of the principles of applicable data protection law.
Your exercise of these rights is subject to certain exemptions. If you exercise any of these rights, we will check your entitlement and respond in most cases within a month.
If you are not satisfied with how we have addressed your complaint or concerns, you can also contact the UAE Federal Authority for AI and Data.
Appendix 7: People's Republic of China specific provisions
If you are located in the People's Republic of China ("China", which for the purposes of this Addendum excludes the Hong Kong Special Administrative Region, Macau Special Administrative Region, and Taiwan), the provisions of this Appendix 8 apply in addition to the provisions of the Privacy Notice.
In the event of any conflict or inconsistency between this Addendum and the main body of the Privacy Notice, this Addendum shall prevail for individuals in China. Capitalized terms used but not defined herein shall have the meanings given to them under the Personal Information Protection Law of the People's Republic of China and other relevant laws and regulations concerning data compliance.
Cross-border transfer of date
We will only share or disclose your personal date to the third parties described in this Privacy Notice to the extent necessary for the stated purposes. As WGC operates globally, we may need to transfer your personal date to our affiliates or service providers located outside of China. When transferring your personal date across borders, we will strictly comply with applicable laws and regulations of China. In addition, we will implement necessary safeguards to protect the security of your personal information.
Protection of Minors
Our services are primarily intended for adults (as determined by the applicable law of your place of residence), however, we take the protection of minors' personal information very seriously. If you are a minor under the age of 14, please use our services or submit any personal information to us only after obtaining the verifiable consent of your parent or guardian. We do not knowingly collect personal information from children under the age of 14. If we discover or receive credible notice that a child's personal information has been collected without prior guardian consent, we will endeavor to delete the relevant information as promptly as possible.
If you are a parent or legal guardian of a child, please pay close attention to whether the child under your guardianship is using our services or providing their personal information, and ensure that you have granted proper authorization for such activities. If you believe that a child has provided us with personal information without your consent, please contact us immediately using the details set out in the "Contact Us" section above, with reference to Appendix 1.
Contact us
If you have any questions, about this Appendix or any concerns or grievances about the Processing of your Personal Data, please see the "Contact Us" section above, with reference to Appendix 1.