Privacy Policy

Last updated: October 2026

This policy explains how Caldrion LLC (“Caldrion,” “we” or “us”) handles personal information when you visit this website, send us an inquiry or apply for a role, and when we correspond with you about it. Inquiries sent through Caldrion Ventures (ventures.caldrion.com) are covered by its privacy policy. If we go on to evaluate an investment with you or offer you a position, we may give you further information at that stage.

Who we are

Caldrion LLC is a single family office and principal investor with offices in New York and Sydney. It is responsible for (the “controller” of) the personal information described in this policy.

Information we collect

Information you give us

• Contact form. The type of inquiry; for investment opportunities, the asset class; your first and last name, email address and message; and, if you choose to provide them, your phone number, company and a link to materials.
• Job application form. The track, team and office you are applying for; your name, email address and, optionally, phone number and LinkedIn profile; your university or most recent employer; your graduation year or years of experience; a link to your CV; why you are interested in Caldrion; and your work authorization status.
• Linked materials. Our forms take links, not file uploads. When you share a link to a CV, deck or data room, we open it to review your submission; it may contain personal information about you or others, such as management biographies.
• Correspondence. What you tell us when you email or call us, and your contact details.

We may also receive information about you from others, such as an intermediary who introduces an opportunity or a reference you name, or from public sources such as professional networking sites.

Information collected automatically

• Technical data. To deliver and secure this website, our hosting and security provider, Cloudflare, processes your IP address, browser user agent and request details, such as the page requested and the time. IP addresses are personal information, and we treat them as such.
• Human verification. Cloudflare Turnstile checks that form submissions come from a person, using technical signals such as your IP address and browser characteristics.
• Submission details. With each form submission, we record the date and time, your browser user agent, and your country as derived by Cloudflare from your IP address.
• Analytics. We use Google Analytics to understand how this website is used, such as which pages are visited, how visitors find us and roughly where they are. It collects information about your device and browser and the pages you view, and uses your IP address to estimate your location; Google states that Google Analytics does not log or store IP addresses. For visitors in the European Economic Area, the United Kingdom and Switzerland, it runs without cookies or other identifiers. We do not use it for advertising.

Sensitive information

We do not ask for sensitive information, such as government identification numbers, financial account details or health information, and ask that you not include it in a form or in linked materials. The one exception is the application form’s work authorization question, which may reveal immigration status; we use that answer only to assess whether you can work in your chosen office.

How we use it

We use personal information to:

• respond to your inquiry and route it to the right team;
• evaluate investment opportunities, partnership proposals and other submissions;
• assess job applications, communicate with candidates and make hiring decisions;
• keep this website and our forms secure, including by preventing spam, fraud and abuse; and
• comply with legal and regulatory obligations, and establish, exercise or defend legal claims.

Inquiries and applications are reviewed by people; apart from the automated human-verification check, we make no decisions about you by automated means. We do not use personal information for marketing or advertising, and we do not personalize this website for individual visitors.

Legal bases (EU and UK)

If the EU or UK General Data Protection Regulation (GDPR) applies to you, we rely on:

• Legitimate interests. Responding to inquiries, evaluating opportunities, recruiting, keeping records, operating and securing this website, and measuring how it is used, where those interests are not overridden by your rights.
• Steps prior to a contract. When you ask us to consider an investment, a partnership or your application.
• Consent. Where we ask for it—for example, to keep your application on file for future openings. You can withdraw consent at any time.
• Legal obligation. Where the law requires us to process or keep information.

How we share it

We share personal information only as follows:

• Service providers. Cloudflare, Inc. hosts and secures this website, runs the Turnstile check, and processes and stores form submissions (in Cloudflare D1). Resend, Inc. sends us an email alert for each submission, and Google LLC delivers those alerts to our team mailbox through Google Workspace. Google LLC also provides Google Analytics. These providers process personal information on our behalf under contractual data protection terms.
• Related entities. Entities that are part of or related to the Caldrion family office, where needed to evaluate or make an investment.
• Professional advisers. Lawyers, accountants, auditors and other advisers bound by duties of confidentiality.
• Legal requirements. Where required by law, regulation or legal process, or where needed to protect the rights, property or safety of Caldrion or others.
• Business transfers. If all or part of Caldrion’s business or assets is restructured, sold or transferred.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Cookies and similar technologies

Apart from the Google Analytics cookies described below, this website sets no cookies of its own, and it uses no advertising or cross-site tracking technologies. Our fonts are served with the website, not loaded from a third party.

• Analytics cookies. Google Analytics sets first-party cookies named _ga and _ga_HKZLET7PWL that last up to two years, to tell visits apart and recognize returning visitors. It sets none for visitors in the European Economic Area, the United Kingdom and Switzerland. You can opt out with the Google Analytics opt-out browser add-on.
• Security cookies. Cloudflare may set strictly necessary cookies, for example to distinguish people from automated traffic and to protect our forms. They are not used for advertising; see Cloudflare’s privacy policy.
• Local storage. If you pause the animated backgrounds, your browser remembers that choice so they stay paused on later visits. It stays on your device and is not sent to us.

You can clear or block cookies and local storage in your browser settings, although blocking Cloudflare’s security cookies may prevent a form from submitting.

International transfers

We have offices in the United States and Australia, and our service providers process information in the United States and other countries where they operate; Cloudflare may process technical data in a data center near you.

For transfers from the EU or UK to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses (with the UK addendum) in our service providers’ data processing terms, or the EU–US Data Privacy Framework and its UK extension where the recipient is certified. When we disclose personal information outside Australia, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles. You can ask us for details of these safeguards.

How long we keep it

• Inquiries. As long as needed to respond and follow up, and afterward for legitimate record-keeping, such as a record of the opportunities we have reviewed.
• Job applications. If your application is unsuccessful, we typically keep it for up to 24 months, unless you ask us to delete it sooner or the law requires otherwise. If you join Caldrion, it becomes part of your employment record.
• Technical data. For limited periods, in line with Cloudflare’s data retention practices.
• Analytics data. Up to 14 months, under the data retention setting in our Google Analytics account.

We may keep information longer where needed to comply with the law or to establish, exercise or defend legal claims. When we no longer need it, we delete it or make it anonymous.

Security

Our safeguards include encrypted (HTTPS) connections for this website and our forms, automated protection against abusive traffic, and access to submissions limited to the people who need it. No method of transmission or storage is completely secure, so please do not send confidential information through our forms or by email unless we have agreed how it will be handled.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal information, among other rights. To make a request, contact us using the details below. We may need to verify your identity, some rights are subject to legal exceptions, and we will respond within the time required by applicable law.

California residents

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”), gives California residents the right to:

• know what personal information we collect, use and disclose, and obtain a copy of it;
• delete or correct personal information we hold about them;
• opt out of the sale or sharing of their personal information—although we do not sell or share personal information, as the CCPA defines those terms, and have not done so in the past 12 months; and
• not be discriminated against for exercising these rights.

This policy describes the categories of personal information we collect, their sources, our purposes, our retention periods and the categories of recipients. We use sensitive personal information, such as a work authorization answer, only for purposes the CCPA permits. You may make a request through an authorized agent; we may ask for proof of the agent’s authority and verify your identity with you directly.

EU and UK residents

If the GDPR applies to you, you also have the right to access, rectify or erase your personal information; to restrict or object to our processing of it; to data portability; and to withdraw consent at any time where we rely on it. You may also complain to a data protection supervisory authority—in the EU, usually the authority where you live or work; in the UK, the Information Commissioner’s Office—although we would welcome the chance to address your concern first.

Australian residents

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), and you may ask to access or correct the information we hold about you. If you have a complaint, please contact us first; we aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Children

This website is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child under 16 has given us personal information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post any changes on this page with a new “Last updated” date, and will make material changes clear here.

Contact us

For questions, requests or complaints about this policy or our privacy practices, contact us:

• By email: legal@caldrion.com
• By post: Caldrion LLC, 1 Rockefeller Plaza, Level 15, New York, NY 10020, United States
• In Australia, by post: Caldrion, 1 Farrer Place, Level 36, Sydney NSW 2000, Australia