Terms of Service and Privacy Notice

Goldbridge Investment Club a.s.b.l.

Effective date: 24 September 2026 Version: 2.0 — replaces the version dated 26 September 2025

Part A — Terms of Service

1. Who we are

Goldbridge Investment Club ("Goldbridge", "the club", "we", "us") is an association sans but lucratif (a.s.b.l.) established under Luxembourg law. The club is student-led, operates on a non-profit basis, and exists solely for educational and community purposes.

• Registered office: 7, Rue Alcide de Gasperi, L-1615 Kirchberg, Luxembourg
• Register number: RCS Luxembourg F15181
• Contact: info@goldbridge.lu

2. Scope and acceptance

These Terms govern your use of goldbridge.lu (the "Site"), your membership of the club, and any application you submit to us. By using the Site, submitting a form, or becoming a member, you confirm that you have read and accept these Terms. If you do not accept them, please do not use the Site or apply.

3. Membership and eligibility

• Membership of Goldbridge is open to everyone and is free of charge. No financial contribution is required at any time.
• Active member positions on our desks are open to students.
• High-school students and working professionals are welcome as passive members.
• Applicants must provide accurate and complete information. Material misstatements may lead to an application being rejected or a membership being revoked.
• Goldbridge may accept or decline any application at its discretion, and is not obliged to give reasons.

4. Equal opportunity and non-discrimination

Goldbridge is open to everyone. We assess applications on merit, motivation, and genuine interest in the club's work — and on nothing else.

We do not discriminate on the basis of sex, gender identity or expression, sexual orientation, racial or ethnic origin, nationality, religion or belief, disability, age, family or civil status, socio-economic background, or any other characteristic protected under Luxembourg or European Union law. This applies to applications and selection, to which desk you are assigned, and to how you are treated as a member of the club.

We do not ask for any of this information and it plays no part in our decisions. For the same reason, we ask applicants not to include it in a CV or application (see Part B, section 2).

If you need an adjustment at any stage of the application or interview process — for example because of a disability, or a scheduling constraint — write to info@goldbridge.lu and we will accommodate it wherever we reasonably can. Asking for an adjustment will never count against an application.

Discrimination or harassment by any member is a breach of our Code of Conduct and will result in removal from the club.

5. What we provide

Depending on your membership type, the club may offer:

• Educational material, guides and teaching resources published on the Site.
• Written research, market commentary and reports produced by club members.
• A periodic newsletter.
• A simulated stock-market environment for educational use.
• Transparency on the club's student-managed portfolio, including decisions and supporting research.
• The opportunity to apply for a position on one of the club's desks.

We may add, change, suspend or withdraw any of these at any time. Nothing on the Site is guaranteed to be continuously available.

6. Applications and selection

• Applications open from 1 to 20 September and from 1 to 20 February each year. Interviews are held from 20 to 30 September and from 20 to 28 February.
• Some desks require a CV to be submitted as part of the application.
• Selection is carried out by the committee and current desk members. Decisions are final.
• Applying does not create any employment relationship, contract of service, traineeship, or entitlement to remuneration.

7. No financial advice

This is the most important term on this page.

• Goldbridge is not authorised or regulated as an investment firm, investment adviser, or financial intermediary in Luxembourg or anywhere else, and does not hold any licence from the Commission de Surveillance du Secteur Financier (CSSF).
• Nothing published by the club — research notes, reports, newsletters, portfolio disclosures, commentary, teaching material or any other content — constitutes investment advice, a personal recommendation, an offer, a solicitation, or an invitation to buy or sell any financial instrument.
• All content is produced by students for educational purposes and may contain errors, omissions or outdated information.
• Past performance is not a reliable indicator of future results. The value of investments can fall as well as rise, and you may lose money.
• You are solely responsible for your own financial decisions. You should obtain advice from a licensed professional before acting on anything you read here.

8. Deal advisory work

Where the club carries out deal advisory work, that work is performed for the party who engages the club under whatever separate written arrangement applies to it. Nothing published on the Site about that work is addressed to you, may be relied upon by you, or creates any duty of care towards you.

9. Code of conduct

Members must:

• Engage respectfully with other members, the committee and partners.
• Not share misleading or false financial information.
• Not use club resources, data or access for personal financial gain.
• Respect the confidentiality of any non-public information they receive through the club.

Harassment, discrimination, dishonesty or other misconduct will result in removal from the club.

10. Intellectual property

All content on the Site — text, research, reports, graphics, the Goldbridge name and logo — belongs to Goldbridge or its licensors. You may read, download and share our published material for personal, non-commercial and educational use, provided you credit Goldbridge and do not alter it. Any other use requires our prior written permission.

Work you submit to us (for example a CV or a written application) remains yours. By submitting it you give us permission to use it for the purpose of assessing your application.

11. Third-party links and content

The Site links to third-party services, including Google Drive for certain report downloads, and to our Instagram, LinkedIn and WhatsApp channels. We do not control those services and are not responsible for their content, availability, or privacy practices. Their own terms and privacy policies apply once you leave our Site.

12. Limitation of liability

To the fullest extent permitted by Luxembourg law:

• The Site and all content are provided "as is", without warranty of any kind, express or implied, including as to accuracy, completeness, reliability, or fitness for a particular purpose.
• Goldbridge, its committee members, its members and its partners are not liable for any direct, indirect, incidental, consequential or financial loss arising from your use of the Site, your reliance on any content, any investment or financial decision you take, or any interruption or unavailability of the Site.
• Nothing in these Terms excludes or limits liability where such exclusion would be unlawful, including liability for death or personal injury caused by negligence, or for fraud.

13. Changes and termination

We may amend these Terms at any time. The effective date at the top of this page will change, and members will be notified of significant changes. Continued use of the Site after a change means you accept the revised Terms. We may suspend or revoke a membership where these Terms are breached.

14. Governing law and disputes

These Terms are governed by Luxembourg law. In the event of a dispute, the parties will first attempt to resolve the matter through internal mediation with the committee. Failing resolution, the courts of the Tribunal d'arrondissement de Luxembourg have exclusive jurisdiction. If you are a consumer, this does not deprive you of the protection of mandatory provisions of the law of your country of residence.

Part B — Privacy Notice (GDPR)

This notice explains how Goldbridge collects and uses personal data, in accordance with Regulation (EU) 2016/679 (the GDPR) and Luxembourg data protection law.

1. Data controller

Goldbridge Investment Club a.s.b.l. is the controller of the personal data described below.

• Contact for all data protection matters: info@goldbridge.lu
• Data protection officer: not appointed. All data protection requests are handled by the committee at the address above.

2. What we collect, why, and on what legal basis

a) Membership and desk applications

Collected through the application forms on the Site.

Purpose: to assess your application, contact you about it, run the interview stage, and administer your membership if you are accepted.

Legal basis: Article 6(1)(b) GDPR — steps taken at your request prior to entering into the membership relationship, and performance of that relationship thereafter. Where you tick the GDPR acceptance box, that consent is recorded under Article 6(1)(a) for the specific processing described to you at the point of collection.

Please do not include in your CV or application any information revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life or sexual orientation, or biometric or genetic data. We do not need this data, we do not ask for it, and we ask you not to provide it. If you do include it, we will delete it where practicable.

b) Contact form

Name, email address and the content of your message.

Purpose: to answer your enquiry. Legal basis: Article 6(1)(f) — our legitimate interest in responding to people who contact us.

c) Newsletter

Email address, and whether our emails are opened or links clicked.

Purpose: to send you club updates, research and articles. Legal basis: Article 6(1)(a) — your consent. You may withdraw it at any time using the unsubscribe link in any newsletter, or by emailing us.

d) Member profiles published on the Site

For active desk members, we publish a name, role, photograph, university and LinkedIn link on the Team page.

Purpose: to present the team publicly. Legal basis: Article 6(1)(a) — your consent, given when you join a desk. You can ask us to remove your profile at any time and we will do so.

e) Website usage

Our host sets cookies that record visits to the Site. See section 7.

3. How long we keep it

Deletion is carried out manually by the committee. If you want your data deleted sooner, contact us.

4. Who has access

• Access within the club is limited to committee members and, for applications, the members of the relevant desk who carry out the selection.
• We do not sell personal data, and we do not share it with partners, sponsors or any other third party for their own purposes.

We use the following processors, who handle data on our instructions only:

5. Transfers outside the EU

Zapier Inc. is established in the United States, and Squarespace's group includes entities outside the EU. Where personal data is transferred outside the European Economic Area, that transfer is made on the basis of the European Commission's Standard Contractual Clauses, together with the supplementary measures those clauses require. You may request a copy of the relevant safeguards by emailing us.

6. Security

Data is stored in the providers' cloud environments and access is restricted to authorised committee members. We keep access to CVs limited to those assessing the application concerned. No system is perfectly secure, and we cannot guarantee absolute security.

7. Cookies

The Site currently sets the following cookies:

No advertising, profiling or social-media tracking cookies are used, and no data is shared with advertising networks.

You can block or delete cookies through your browser settings. Blocking the strictly necessary cookie will prevent forms on the Site from working.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you, and receive a copy;
• rectify data that is inaccurate or incomplete;
• erase your data ("right to be forgotten") where the conditions in Article 17 are met;
• restrict processing in the circumstances set out in Article 18;
• object to processing carried out on the basis of legitimate interest;
• portability — receive data you gave us in a structured, machine-readable format, or have it sent to another controller;
• withdraw consent at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

To exercise any of these rights, email info@goldbridge.lu. We will respond within one month. We may ask you to confirm your identity before acting on a request.

9. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects concerning you. Applications are reviewed by people.

10. Minors

If you are under 16, you may only subscribe to our newsletter or submit an application with the consent of a parent or guardian, as required by Article 8 GDPR and Luxembourg law. If we learn that we hold data about a person under 16 without that consent, we will delete it.

11. Data breaches

If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Commission Nationale pour la Protection des Données (CNPD) within 72 hours of becoming aware of it, and will inform you directly where the breach is likely to result in a high risk to you.

12. Complaints

If you believe we have handled your data unlawfully, please contact us first so we can try to put it right. You also have the right to lodge a complaint with the supervisory authority:

Commission Nationale pour la Protection des Données (CNPD) 15, boulevard du Jazz, L-4370 Belvaux, Luxembourg cnpd.lu

You may also complain to the supervisory authority in your country of residence.

13. Changes to this notice

We may update this notice. The effective date at the top of the page will change, and we will tell members about significant changes.

For any question about these Terms or this Privacy Notice, contact info@goldbridge.lu.