Last Updated: September 10, 2025

1. INTRODUCTION Regantis Limited ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your data when you use our website (www.elgantisformations.com) or our services.

This policy is designed to comply with our obligations under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (EU GDPR).

Data Controller:

• Company Name: Regantis Limited

• Registered Office Address: 483 Green Lanes, London, N13 4BS

• Company Registration Number: 16227156

• Email: business@regantisformations.com

2. LAWFUL BASIS FOR PROCESSING We only process your personal data when we have a lawful basis to do so. These bases include:

• Performance of a Contract: To provide the company formation and related services you have purchased.

• Legal Obligation: To comply with laws, such as financial regulations and Anti-Money Laundering (AML) checks.

• Legitimate Interests: To improve our services and manage our business, provided your rights do not override these interests.

• Consent: For specific purposes such as sending you direct marketing materials. You can withdraw your consent at any time.

3. PERSONAL DATA WE COLLECT

• Identity Data: Full name, date of birth, passport/ID details for KYC purposes.

• Contact Data: Residential/billing address, email, and telephone number.

• Financial Data: Payment information (processed securely by our third-party payment gateways).

• Technical & Usage Data: IP address, browser information, and how you interact with our website.

4. HOW WE USE YOUR DATA Your data is used to:

• Register the company you requested in the UK or USA.

• File applications for EINs, bank accounts, and payment gateways on your behalf.

• Process payments and manage your account.

• Communicate with you about your service.

• Comply with legal and regulatory requirements.

5. INTERNATIONAL DATA TRANSFERS As a UK-based company, your data is processed under the protection of the UK GDPR. To provide our US-based services, it is necessary to transfer your personal data to the United States, which is outside the UK and European Economic Area (EEA).

• The primary legal basis for this transfer is that it is necessary for the performance of our contract with you (Article 49, UK GDPR).

• For any other transfers outside the UK/EEA, we will ensure appropriate safeguards are in place, such as using Standard Contractual Clauses (SCCs) or relying on an adequacy decision.

6. YOUR DATA PROTECTION RIGHTS Under both UK and EU GDPR, you have the following rights:

• Right of Access: To request a copy of the personal data we hold about you.

• Right to Rectification: To have inaccurate personal data corrected.

• Right to Erasure: To have your personal data deleted in certain circumstances.

• Right to Restrict Processing: To limit how we use your personal data.

• Right to Data Portability: To receive your data in a portable format.

• Right to Object: To object to the processing of your data for certain purposes (like direct marketing).

To exercise these rights, please contact us. You have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) (www.ico.org.uk). If you are in the EU, you can complain to your local data protection authority.

7. DATA SECURITY AND RETENTION We implement robust security measures to protect your data. We retain your data only for as long as necessary to fulfill our service obligations and to comply with legal requirements (typically 6 years after the end of our business relationship).