Privacy Statement

Effective: May 15, 2026 · Last updated: June 3, 2026 · v2.1 (supersedes v2.0, May 15, 2026)

This Privacy Statement ("Statement") describes how siliconvalleytrust.com, owned and operated by Lexplique LLC ("Lexplique LLC," "Silicon Valley Trust," "we," "us," or "our"), collects, uses, and discloses personal information about you when you visit our website, contact us, or engage with our advisory services. This Statement also describes the rights you have under applicable privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the EU and UK General Data Protection Regulation ("GDPR" and "UK GDPR"), and other comprehensive U.S. state privacy laws.

As used in this Statement, "personal information" means information that identifies, relates to, describes, or is reasonably capable of being associated with a particular individual or household — for example, your name, postal address, email address, telephone number, IP address, or other information that can reasonably be linked to you.

1. Scope

This Statement applies to personal information we collect through siliconvalleytrust.com, by phone, by email, in connection with advisory, coaching, fractional, or independent director engagements, and at events where we speak or present. It does not cover personal information that our clients process on their own systems or under their own privacy notices — when we serve as a service provider, processor, or independent director, our handling of personal information is governed by the relevant engagement letter, services agreement, or board confidentiality obligations.

2. Information We Collect

Information you provide to us

• Contact information: name, organization, role, email address, telephone number, and the content of communications you send us.
• Engagement information: details you share in scoping calls, advisory sessions, coaching engagements, board materials, due diligence reviews, or written work product.
• Billing information: billing contact and remittance details. We do not collect or store payment card numbers directly; any payment processor used handles that data under its own privacy notice.
• Event information: the information you provide when registering for or attending an event at which we speak.

Information collected automatically

• Server logs and basic device information: IP address, browser type and version, operating system, referring page, timestamps, and pages requested. Our static hosting provider (Netlify) processes this data on our behalf to deliver the site, balance traffic, and protect against abuse.
• Approximate location: derived from your IP address (typically city- or country-level). We do not collect precise geolocation data (such as GPS coordinates) from your device.

Information from third parties

• Referrals and introductions: information shared by mutual contacts who refer you to us.
• Public sources: information you have published or made publicly available (for example, on LinkedIn, in regulatory filings, or in news coverage) that is relevant to a current or prospective engagement.

Sensitive personal information

We do not intentionally collect sensitive personal information, which under California law includes government identifiers, precise geolocation, racial or ethnic origin, religious beliefs, union membership, contents of mail/email/text messages not directed to us, genetic data, biometric data, health information, and information about sexual orientation or sex life. If you choose to share such information with us in the course of an engagement — for example, while we advise on a privacy program — we will treat it under the heightened protections required by applicable law and the relevant engagement letter, and we will use it only for the purposes for which you provided it and other purposes permitted under California Civil Code § 1798.121(a).

3. How We Use Information

We use personal information to:

• Respond to inquiries and provide information about our services;
• Deliver advisory, coaching, board, and consulting services we have been engaged to provide;
• Administer engagements, including invoicing, scheduling, and recordkeeping;
• Operate, maintain, secure, and improve our website and operations, and detect and prevent fraud or abuse;
• Communicate with you about our services, including occasional updates you have requested;
• Comply with legal, regulatory, and professional obligations (including those applicable to licensed attorneys, even when we are not engaged in the practice of law); and
• Establish, exercise, or defend legal claims, as described further in this Statement.

We do not use personal information for behavioral or cross-context advertising, and we do not engage in profiling that produces legal or similarly significant effects, or in automated decision-making.

4. Legal Bases for Processing (EU/UK)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on one or more of the following legal bases under the GDPR and UK GDPR:

• Contract — to perform an engagement with you or take steps at your request before entering one.
• Legitimate interests — to operate, secure, and improve our practice; respond to your inquiries; and pursue our reasonable business interests, where they are not overridden by your rights and freedoms.
• Consent — where you have given consent (for example, to receive a specific communication you requested). You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legal obligation — to comply with applicable law and professional rules.
• Vital interests / public task — in rare cases, to protect vital interests of an individual or to perform a task carried out in the public interest.

5. Disclosures to Third Parties

We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising as those terms are defined under California law. We disclose personal information only in the limited circumstances below:

• Service providers who help us operate our practice — for example, our website host (Netlify), email and calendaring providers, document storage and collaboration providers, accounting and payment providers, and similar vendors. Each is bound by written contracts that restrict their use of personal information to the services they provide for us.
• Your designees — co-counsel, board colleagues, or others you have asked us to communicate or work with on your behalf.
• Legal and regulatory disclosures — where required by law, regulation, subpoena, court order, or applicable professional rules, or where we reasonably believe disclosure is necessary to (a) comply with the law; (b) enforce or apply our terms or other agreements; (c) protect the rights, property, or safety of Lexplique LLC, our clients, or others; (d) prevent or investigate fraud or other wrongdoing; or (e) respond to a government request.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our practice or assets, subject to appropriate confidentiality protections.
• With your direction — when you ask us to share information with a specific recipient.

6. Cookies, Server Logs & Online Tracking

Our website uses only strictly necessary cookies and similar technologies needed to deliver the site (for example, to balance traffic across servers and protect against abuse). We do not use advertising cookies, social media tracking pixels, or third-party analytics that profile individual visitors. We do not currently host third-party advertising on the site.

When you visit our website, our hosting provider records standard web server log information, including your IP address, the time of your visit, the pages you requested, the referring URL, and basic device and browser characteristics. This information helps us operate, secure, and improve the site. We do not associate web server log data with the contact information you provide unless we have a security or legal reason to do so.

We treat the Global Privacy Control ("GPC") signal as a valid opt-out preference signal under California law: if your browser broadcasts GPC, we honor it — we do not show you optional cookie notices, and (as is true for all visitors) nothing is sold or shared. A complete inventory of everything this site stores in your browser appears in the Cookie Inventory below. Most browsers allow you to refuse cookies; some site features may not function properly if you do so.

7. Retention

We retain personal information only as long as needed for the purposes described in this Statement — typically for the duration of an engagement plus a reasonable period afterward consistent with our professional, tax, and legal recordkeeping obligations and applicable statutes of limitation. We delete or de-identify information when retention periods expire or upon a valid deletion request, subject to legal holds and required retention. Web server logs are retained only for the period needed to operate and secure the site.

8. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction — including encryption in transit (HTTPS), access controls, the principle of least privilege, vendor diligence, and incident response procedures. No system is perfectly secure, and we do not guarantee absolute security. If you believe your interaction with us is no longer secure, please contact us immediately.

9. International Transfers

Lexplique LLC operates from the United States. If you contact us from outside the United States, your personal information will be transferred to and processed in the United States and, depending on the vendors involved, in other countries that may have data protection laws different from those in your country. Where required, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum — for cross-border transfers of personal information.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights with respect to your personal information, subject to certain exceptions:

• Right to know what personal information we have collected about you, including categories, sources, purposes, and the categories of recipients to which we have disclosed it, over the prior 12 months (or longer, if you request).
• Right to access the specific pieces of personal information we hold about you.
• Right to delete personal information we have collected from you.
• Right to correct inaccurate personal information.
• Right to limit use and disclosure of sensitive personal information to purposes permitted under California Civil Code § 1798.121(a). Because we do not use sensitive personal information for purposes beyond those exempt under that section, this right is preserved but does not currently change our practices.
• Right to opt out of sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
• Right to non-discrimination for exercising any of these rights.
• Right to data portability — to receive a copy of your personal information in a portable and, to the extent technically feasible, readily usable format.

You may exercise these rights by contacting us using the methods in Section 13 of this Statement. You may also designate an authorized agent to make a request on your behalf, in which case we will verify both your identity and the agent's authority before responding.

Categories of personal information collected and disclosed. In the prior 12 months, we have collected the categories of personal information described in Section 2 (identifiers, contact information, professional or employment-related information, commercial information related to engagements, and internet or other electronic network activity information). We have disclosed those categories to the categories of recipients described in Section 5 for the business purposes described in Section 3. We have not sold or shared personal information.

11. Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Iowa, Tennessee, Minnesota, Maryland, and other states with comprehensive consumer privacy laws may have rights similar to those described above — including rights to access, correct, delete, and obtain a portable copy of their personal information, and rights to opt out of targeted advertising, sale, or certain profiling. We do not engage in targeted advertising, sale, or profiling that produces legal or similarly significant effects. To exercise applicable rights, contact us as described in Section 13. Where the law provides an appeal right and we deny your request, we will tell you how to appeal within the applicable deadline.

12. EU, UK & Swiss Privacy Rights (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access your personal information and obtain a copy;
• Correct or update inaccurate or incomplete information;
• Request erasure of your personal information ("right to be forgotten");
• Restrict or object to processing, including processing based on legitimate interests or for direct marketing;
• Receive your personal information in a portable, machine-readable format;
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal; and
• Lodge a complaint with your supervisory authority. A list of EU data protection authorities is available here; UK residents can contact the Information Commissioner's Office (ICO); Swiss residents can contact the Federal Data Protection and Information Commissioner (FDPIC).

We would, of course, appreciate the chance to address your concerns directly before you do.

13. How to Exercise Your Rights

To exercise any of the rights described in this Statement, please contact us:

• Web form: use the Privacy Request Form below.
• Phone: (202) 618-2349

We will verify your identity using information we already hold about you or by asking for information needed to confirm you are who you say you are. We will respond within the timeframes required by applicable law — typically 45 days under U.S. state privacy laws (extendable once when reasonably necessary), and one month under the GDPR and UK GDPR (extendable by two further months for complex requests). If we cannot honor your request, we will explain why and, where the law provides an appeal right, how to appeal.

14. Children's Privacy

Our website and services are not directed to children under the age of 16, and we do not knowingly collect personal information from them. If you believe we have collected personal information from a child under 16, please contact us and we will promptly delete it.

15. Third-Party Websites

Our website may contain links to third-party websites and services that we do not own or operate. We are not responsible for the privacy practices of those third parties. When you leave our site, we encourage you to review the privacy notices of the destinations you visit.

16. Changes to This Statement

We may update this Statement from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, post a notice on this page or notify you by other reasonable means. Your continued use of the website after an update constitutes acceptance of the updated Statement to the extent permitted by applicable law.

17. Contact Us

If you have any questions or concerns about this Statement or our privacy practices, please contact us:

Lexplique LLC (d/b/a Silicon Valley Trust)
Bay Area, California, USA
Phone: (202) 618-2349
Web form: Privacy Request Form (below)

For EU/UK residents: we do not currently maintain an EU or UK representative because we do not regularly monitor the behavior of, or target our services to, individuals in the EU/UK. If your rights under the GDPR or UK GDPR apply nonetheless, please contact us using the form below and we will respond promptly.

18. Your Privacy Choices

This section summarizes, in the format encouraged by the CPRA, the choices you have over our collection and use of your personal information.

• Do Not Sell or Share My Personal Information. We do not sell personal information and we do not "share" personal information for cross-context behavioral advertising. There is therefore no opt-out to make — but if you nonetheless want to record this preference, you may do so on our Do Not Sell or Share page or through the Privacy Request Form below.
• Limit Use of Sensitive Personal Information. We do not use sensitive personal information for purposes beyond those exempt under California Civil Code § 1798.121(a). Your right to limit our use of sensitive personal information is preserved but does not currently change our practices.
• Targeted Advertising / Profiling. We do not engage in targeted advertising or in profiling that produces legal or similarly significant effects. There is nothing to opt out of, but you may confirm your preference through the form.
• Global Privacy Control ("GPC"). If your browser broadcasts a GPC signal, we treat it as a valid opt-out signal under California law and we will not present optional cookie notices to you. (We do not engage in cross-context behavioral advertising or the sale of personal information regardless.)
• Withdraw consent. Where we rely on your consent to process personal information, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

19. Cookie Inventory

This is the complete inventory of cookies and similar technologies (including browser storage) set by siliconvalleytrust.com. This site sets no advertising, analytics, functional, or tracking cookies — only the single strictly necessary item below. You can also view this inventory at any time via the "Cookie Settings" link in the footer of every page.

Our static hosting provider (Netlify) records standard server logs (IP address, timestamps, pages requested) to deliver and secure the site, as described in Section 6. Web fonts are served from this domain; no requests are made to third-party font, analytics, or advertising services. If we ever introduce optional cookies, we will update this inventory and seek your consent first where required by applicable law.

20. Other Jurisdictions (LGPD, PIPEDA, Quebec Law 25, Australia, and Others)

Where the personal information of individuals in jurisdictions outside the United States, European Union, or United Kingdom is involved, we apply protections substantively equivalent to those described above and honor the rights provided by the applicable law, including:

• Brazil — LGPD. Rights to confirmation, access, correction, anonymization or deletion of unnecessary or excessive data, portability, information about data sharing, and revocation of consent (Lei Geral de Proteção de Dados, Art. 18).
• Canada — PIPEDA & Quebec Law 25. Rights to access, correction, withdrawal of consent, and, in Quebec, data portability and the right to be informed about automated decision-making. We do not engage in automated decision-making that produces significant effects.
• Australia — Privacy Act 1988 (APPs). Rights to access, correction, and complaint about handling of your personal information.
• Other jurisdictions. We will work in good faith to honor applicable local rights regardless of where you are based.

To exercise any of these rights, use the Privacy Request Form below or call (202) 618-2349.

21. Accessibility

We are committed to maintaining a website that is accessible to people with disabilities. We design siliconvalleytrust.com with reference to the Web Content Accessibility Guidelines (WCAG) 2.2, Level AA. If you encounter any barrier to access on this site, or need any information on this site in an alternative accessible format, please contact us at (202) 618-2349 or through the Privacy Request Form and we will respond promptly.

22. Privacy Request Form

Use this form to submit a privacy rights request — access, correction, deletion, portability, opt-out, restriction, or any other right described in this Statement. We will respond within the timeframe required by applicable law and may need to verify your identity before fulfilling certain requests.

Notice at collection. The information you submit here (name, email, phone, residence, request details, verification confirmation) is used solely to verify your identity, respond to your privacy rights request, and meet our legal obligations. It is not used for marketing and is not sold or shared.