Privacy Policy and Notice at Collection

Updated: April 2020, March 2026

Krane Funds Advisors, LLC, Krane Capital Management, LLC, Krane Digital Investments LLC and their respective affiliates (collectively "Krane") are committed to protecting your privacy. This Privacy Policy and Notice at Collection ("Privacy Policy") describes how we may collect and use information about you ("you," "user").

This Privacy Policy applies to: the Krane websites, including KraneShares.com, KraneShares.eu, KFAFunds.com, KraneShares.ae, ClimateMarketNow.com and ChinaLastNight.com (collectively, the "Websites"), and other digital or online services or offerings that link, post, or reference this Privacy Policy; and your interactions with us in the ordinary course of business, including communications by phone, e-mail, or in person as part of a business relationship, when we interact with companies or organizations you work for, and in connection with your relationship with us as an investor (or prospective investor) in our funds (collectively referred to as the "Services").

This Privacy Policy does not apply to any third-party applications or software that integrate with our Services, or any other third-party products, services, or businesses (collectively, "Third Party Services"). Third Party Services are governed by their own privacy policies. We recommend you review the privacy policy governing any Third Party Services before using them.

Krane is the controller of the personal information collected through the Services. Any questions or concerns regarding our privacy and data protection practices can be directed to [email protected].

IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, YOU SHOULD NOT ACCESS OR USE THE WEBSITES OR SERVICES.

NOTICE AT COLLECTION

What Types of Personal Information Do We Collect?

We collect and generate different types of Personal Information depending on how you use or interact with our Services. For purposes of this Privacy Policy, "Personal Information" means information that identifies, describes, or is reasonably capable of being associated with you that we collect or generate when you use or interact with our Services. Personal Information does not include data where you can no longer be identified from it, such as anonymized aggregate data.

The following describes various categories and sources of Personal Information we have collected, may collect, or generate, including in the past 12 months, along with the lawful basis for processing under applicable data protection laws (including the GDPR).

Demographic and Contact Information. Demographic and contact information that you provide to us. For example, we may collect information such as your name, mailing address, e-mail address, and telephone number.

Lawful Basis: Performance of a contract (to provide you with requested services or information); Legitimate interests (to manage our relationship with you and respond to inquiries); Consent (where you have opted in to receive marketing communications).

Online or Other Account Information. Username or email address and corresponding passwords, security questions, and other information needed to permit access to certain components of our Services which require registration and/or credentials.

Lawful Basis: Performance of a contract (to provide you with account access and Services); Legitimate interests (to maintain the security of our systems and authenticate users).

Webforms and Requests. Information you submit to us through online or interactive forms available within our Services. For example, you may contact us, submit feedback, request additional information about a product or Service, sign up for a mailing list such as our China Last Night daily newsletter, register for webinars, request literature or research information, or reach out to us regarding a question or concern.

Lawful Basis: Performance of a contract (to respond to your requests); Legitimate interests (to manage and improve our Services and respond to inquiries); Consent (for newsletter subscriptions and marketing communications).

Websites. Information such as your username and password to enter certain sections of our Websites or Services, unique identifiers, preference information (such as marketing preferences), browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site, operating system, date/time stamp, and clickstream data and other pieces of information further described in "Tracking Technologies" below.

Lawful Basis: Legitimate interests (to improve our Websites and user experience, analyze usage patterns, and ensure security); Consent (for non-essential cookies and tracking technologies, where required by law).

Device Information. Device-specific information including Internet Protocol ("IP") address, hardware model, operating system, unique device identifiers, and mobile network information. We may also associate the information we collect from your different devices, which helps us provide consistent Services across your devices.

Lawful Basis: Legitimate interests (to provide and improve our Services, ensure security, and prevent fraud); Consent (for tracking technologies, where required by law).

Log Information. Usage details of our Services, including the address (or URL) where you came from before visiting us, which pages or features you visit or utilize, which browser you use, search terms you enter, and items you click on. We may also create usage statistics and monitor the traffic from your use or interaction with our Services.

Lawful Basis: Legitimate interests (to analyze and improve our Services, troubleshoot technical issues, and ensure the security and integrity of our systems).

Internet Protocol (IP) Addresses. IP addresses are unique identifiers automatically assigned to each computer when logging onto the Internet. We generally collect IP address information from visitors using or interacting with the Services and we log them for system administration purposes. We use IP addresses on a highly restrictive basis to analyze trends, to administer the site, and to collect general information for aggregate use. In some cases, we may also use IP addresses to customize services to your location, such as the language displayed on our Services, or to serve you ads regarding our Services that may be of interest to you based upon your use or interaction with the Services if you have opted in to certain types of cookies.

Lawful Basis: Legitimate interests (to administer our systems, analyze usage, customize services, and ensure security); Consent (for advertising-related uses, where required by law).

Location Information. Your general location information may be collected in a variety of ways depending on how you use or interact with our Services. For example, location information can be derived from your IP address, location information associated with your use of a device, your country or location selection, or other location-based components and content of our Services.

Lawful Basis: Legitimate interests (to provide localized content and comply with geographic restrictions on our Services); Consent (where precise location data is collected, if applicable).

Business Interactions. Information derived from your business-related requests, communications, and dealings we have with you, or the company/organization you work(ed) for or are associated with. This may include your job title, business contact information (phone, email, fax, and address), information about products or services you expressed an interest in or purchased from us, or that we have purchased from you or your company/organization, and other information needed to verify your ability to conduct business with us.

Lawful Basis: Legitimate interests (to manage our business relationships and provide you with relevant information about our Services); Performance of a contract (where we have entered into a business agreement with you or your organization).

Investment Account Information. If you are an investor (or prospective investor) in our funds, we may collect information including your name, address, email address, phone number, date of birth, financial information (such as bank account details), Social Security Number (SSN), Personal Public Service (PPS) number or equivalent in your jurisdiction, passport or other ID documentation, and other information necessary to comply with anti-money laundering and anti-terrorist financing ("AML") obligations and to detect fraud and/or other criminal activity.

Lawful Basis: Performance of a contract (to open and manage your investor account and process transactions); Legal obligation (to comply with AML, KYC, tax reporting, and other regulatory requirements); Legitimate interests (to prevent fraud and protect against financial crime).

Social Media. Krane and select employees maintain profiles and/or pages on various social media sites, including, but not limited to, X (formerly Twitter), Facebook, YouTube, and LinkedIn. If you choose to follow Krane on these platforms or take any similar action on another social media site, you are providing your consent to receive informational updates, including solicitations, from Krane. To stop receiving this information from Krane on a social media site, you must follow the procedure established by the site. If you choose to interact with us on social media, we may collect the information you publish or submit. Note that this information is also governed by the privacy policies of the respective companies offering the social media service.

Lawful Basis: Consent (by choosing to follow or interact with us on social media); Legitimate interests (to engage with our audience and promote our Services).

Tracking Technologies. Our Services may incorporate tracking technologies to provide you with certain functionalities available within our Services. These tracking technologies, including those described below, may collect or generate Personal Information about you when you interact with us, but only if you decide to allow them in your Cookie Settings, or in your individual browser's settings.

Lawful Basis: Consent (for non-essential cookies and tracking technologies); Legitimate interests (for strictly necessary cookies required to operate the Websites).

You may adjust these preferences at any time, and you may be prompted to make your selections again if you navigate to a new part of our Services where different tracking technologies are used. Please review the Cookie Notice that is displayed at the time you use our Services to learn more, and feel free to contact us with any questions.

Our Services may incorporate the following tracking technologies:

• Cookies: Small files that are transferred to your device's hard drive for a period of time to store user preferences and other types of information to help us provide you with certain features.
• Web Beacons: Electronic images placed in the code of a webpage, application, or email that allow us to monitor things such as user activity and site traffic.
• Pixels and Tags: Pieces of code, or tags, which gather information about users. For example, tags are used on our websites to better understand online usage patterns and trends. We may also use tags in our emails or newsletters to count how many of those messages are read.
• Google Analytics: Google Analytics uses cookies to collect data such as time of visit, website pages visited, time spent on each Krane website page, IP address, URL, and type of operating system. To learn more about how Google Analytics collects and processes Personal Information, please visit www.google.com/policies/privacy/partners.
• Google Ads: We may use Google Ads conversion tracking and remarketing tools, which use cookies to collect data about your interactions with our Services and to serve you relevant advertisements. To learn more about how Google uses data and to manage your ad settings, please visit www.google.com/settings/ads.
• LinkedIn: We may use LinkedIn Insight Tag and related tracking technologies to collect data about your interactions with our Services and to serve you relevant advertisements on the LinkedIn platform. To learn more about LinkedIn's data practices and to manage your advertising preferences, please visit www.linkedin.com/psettings/advertising.

Embedded Videos. We may provide embedded videos on our Services that are hosted by third party video providers, such as YouTube (Google). If you click "play" on a video embedded within the Services, the third-party video provider may place tracking technologies on our Service, for example to remember where you left off in the video. Depending on where you live, we may be required to obtain your consent before this type of tracking technology is used. If you are unsure whether you provided your consent to such tracking technology, you can always review and adjust your Cookie Settings or your individual browser's settings.

Lawful Basis: Consent (where required by law for third-party tracking technologies).

How Do We Use Personal Information?

Depending on what Services you use and how you interact with us, we may use Personal Information about you in the following ways. We will generally rely on the following lawful bases to collect and use Personal Information: performance of a contract, compliance with our legal obligations, pursuing our legitimate interests, consent, or protection of vital interests.

To administer and provide you with the Services. If you access a section of our Services requiring a username and password, we will use Personal Information about you to create and/or administer your account, authenticate your credentials, remember your preferences, and allow you to access and use the Services.

To provide investment services. If you are an investor or prospective investor, we may use Personal Information about you to consider opening an investor account or relationship at your request, to meet AML obligations and detect fraud and/or other criminal activity, to deliver services via our Websites or other investor services, to complete transactions, and to manage payments and fee collections.

To manage business transactions. During certain business interactions, we may use Personal Information about you to manage business transactions with you or the company or organization you work(ed) for. This may include making or responding to requests related to the Services or obtaining or making payments for such Services.

To respond to your inquiries and provide information about the Services. If you send us questions, make an inquiry or request, or ask for certain information, we may use Personal Information about you to respond to you.

To send you marketing information. We may use Personal Information about you to provide you with information about our Services, to send you marketing communications (such as our China Last Night newsletter), or to enable you to participate in surveys, webinars, or events. If we send you a marketing email, it will include instructions on how to opt out of receiving these emails in the future.

To serve advertisements you may be interested in. We may use Personal Information about you to tailor and deliver relevant advertisements to you when you are using our Services, or when you are accessing a third-party service. Depending on where you live, we may be required to obtain your consent before we serve you with these types of advertisements.

To improve the Services and user experience. We may use Personal Information about you to gather and create statistics regarding your usage of our Services. For example, we may monitor how many users visit our Services in a given time, which components or pages are most popular, which domains you come from, which browsers you use, and how you navigate our Services. We use this information to better understand our users, personalize users' experiences and interactions with us, and improve the content and performance of our Services.

To comply with applicable laws and our legal obligations. We may use Personal Information about you to comply with applicable laws, regulations, industry codes of conduct, and Krane's internal policies and procedures, including:

• For compliance with applicable retention obligations;
• To comply with anti-money laundering, anti-terrorist financing, and other regulatory requirements applicable to investment advisers and fund managers;
• To respond to lawful requests by public authorities (e.g., to respond to a government request or subpoena);
• To investigate potential breaches; and
• To protect our rights, property, safety, and those of our users.

Merger or Sale. If we are involved in a merger, acquisition, or sale of our assets (or a portion thereof), we may share Personal Information about you with a corporate purchaser, successor in interest, or prospect to the extent permitted by law.

Other uses. Where permitted by law, we may also enhance or combine information about you, including Personal Information about you, with information about you that we obtain from third parties for the same purposes described in this Privacy Policy.

Use of Non-Personally Identifiable Information. We may use non-personally identifiable information, such as anonymized and/or aggregated Services usage data, in any manner that does not identify individual users for the purpose of improving the operation and management of the Services, including to develop new features, functionality, and services, to conduct internal research, to better understand usage patterns, to resolve disputes, to troubleshoot problems, to fulfill user requests, or for security and compliance purposes. Any non-personally identifiable information that is combined with personal information will be treated by us as personal information.

Change of purpose. We will only use personal information about you for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us. If we need to use personal information about you for an unrelated purpose, we will notify you and we will explain the business purpose which allows us to do so. Please note that we may process personal information about you without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Do We Share Personal Information with Third Parties?

Links to Third-Party Websites. As a resource to our users, we may provide links to other unaffiliated websites or services within our Services. If you choose to visit such third-party websites or services, please note that any information you submit to them is not subject to this Privacy Policy.

Krane Affiliates and Subsidiaries. Krane is a global company, and it shares Personal Information with its affiliates and subsidiaries for the purposes described in this Privacy Policy, including to service your accounts, in the context of a business reorganization or group restructuring exercise, for system maintenance support, and for hosting of data.

Service Providers. We may share Personal Information about you with third party service providers that we hire to help us administer and provide the Services to you. These may include our transfer agent administrator, depositary, investment managers, distributors, auditors, lawyers, IT service providers, insurers, and companies engaged to mail account-related materials. These third parties are required to treat Personal Information about you in accordance with appropriate contractual and legal privacy and security requirements. We require service providers to only use personal information for the specific purpose for which it was given to us and to protect the privacy of personal information.

Advertising. We may engage third party service providers who utilize tracking technologies to serve you advertisements that you may be interested in. Some of these advertisements may be personalized to you, meaning that the advertisements are intended to be relevant to you based on what we, or the third-party service providers, know about you. Depending on where you live, we may be required to obtain your consent before we serve you with these types of advertisements. If you are unsure whether you provided your consent, you can always review and adjust your Cookie Settings or your individual browser's settings.

We may also share personal information about you to:

• Comply with any court order, law, or legal process, including responding to any government or regulatory request;
• A buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Krane's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Krane about our Services users is among the assets transferred;
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Krane, our customers, or others, including exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction; and
• Enforce or apply our Terms of Service and other agreements, including for billing and collection purposes.

Do We Sell or Share Personal Information?

We may disclose personal information about you to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

We do not sell personal information or share personal information for cross-contextual behavioral advertising purposes.

In the preceding twelve (12) months, we have disclosed the following categories of personal information to service providers for a business purpose:

Personal Information Category	Business Purpose	Categories of Third Parties
Identifiers	Marketing, delivery services, customer relationship management, web hosting, data storage, investor services	Service providers, affiliates
Customer Records	Marketing, customer relationship management, data storage, investor services	Service providers, affiliates
Commercial Information	Marketing, customer relationship management, web hosting, data storage	Service providers, affiliates
Internet or Other Similar Network Activity	Marketing, customer relationship management, web hosting, data storage	Service providers
Geolocation Information	Marketing, customer relationship management, web hosting, data storage	Service providers

 

How Do We Secure and Retain Personal Information?

Krane is committed to protecting the security of personal information. We have reasonable security measures in place to protect against the loss, misuse, and alteration of any Personal Information we receive about you. Our internal security policies restrict access to your non-public personal information to authorized employees who require such information to provide products or services to you. We maintain physical, electronic, and procedural safeguards that are designed to comply with federal standards to guard this non-public personal information against unauthorized access, theft, or improper disclosure. Security measures include controlled access to our offices and records, password requirements to access our networks and systems, and restricted access to information stored in our systems. All staff are subject to privacy procedures when dealing with non-public personal information and are responsible for ensuring the confidentiality of any information that is accessed.

We will retain personal information for the period necessary to fulfill the purposes for which it was collected and processed, or for such longer period as may be required or permitted by applicable law. The retention period applicable to each category of Personal Information is determined based on the criteria set forth below. After the applicable retention period expires, personal information will be deleted, blocked, or anonymized, as provided by applicable law.

Identifiers and Customer Records (e.g., name, address, email, phone number, account credentials, SSN, investment account information): Retained for the duration of your account or business relationship with us, plus any additional period necessary to comply with applicable legal, regulatory, or tax obligations (including AML/KYC requirements), to resolve disputes, or to enforce our agreements. Certain transactional data and investor records may be retained for up to ten (10) years following the end of the business relationship, as required under statutory commercial, tax, and securities law.

Commercial Information (e.g., transaction history, products or services purchased or considered): Retained for the duration of your account or business relationship with us, plus any additional period required to comply with applicable recordkeeping, tax, and regulatory obligations, or as reasonably necessary to support audit, dispute resolution, or legal proceedings.

Internet or Other Similar Network Activity (e.g., browsing history, search history, log data, device information, IP addresses): Retained for a period reasonably necessary to fulfill the analytical, security, and operational purposes for which such information was collected, which generally does not exceed twenty-four (24) months from the date of collection, unless a longer period is required for ongoing security investigations, fraud prevention, or compliance with legal obligations.

Geolocation Information (e.g., general location derived from IP address or device settings): Retained for a period reasonably necessary to fulfill the purposes for which such information was collected, including the provision of localized content and compliance with geographic restrictions, which generally does not exceed twenty-four (24) months from the date of collection.

In addition to the foregoing category-specific criteria, the following general provisions apply to the retention and deletion of Personal Information:

• If you terminate your account, your Personal Information will be marked for deletion except to the degree legal requirements or other prevailing legitimate purposes dictate longer storage.
• Please note that Krane may be required to retain certain transactional data under statutory commercial and tax law for a period of up to ten (10) years.
• If you withdraw your consent on which processing of your Personal Information is based, we will delete your Personal Information without undue delay to the extent that the collection and processing of the Personal Information was based on the withdrawn consent.
• If you exercise a right to object to the processing of your Personal Information, we will review your objection and delete your Personal Information that we processed for the purpose to which you objected without undue delay, unless another legal basis for processing and retaining this data exists or unless applicable law requires us to retain the data.

Does Krane Transfer Personal Information to Other Countries?

To provide our Services, we may need to transfer and process personal information about you internationally (including to destinations outside the country in which you are located). As we are domiciled in the USA, any personal information that we collect about you will be processed in the USA as our Websites are hosted in the USA and also in order for us to correspond with you or otherwise provide the information you have requested.

As a result, your information may be transferred to and/or processed in countries which may not guarantee the same level of protection for personal information as the country in which you reside. However, we have taken appropriate safeguards to ensure that personal information about you will remain protected in accordance with this Notice.

Whenever we transfer personal information out of the EU or UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• European Commission Standard Contractual Clauses: We may use specific contracts approved by the European Commission which give personal data the same protection it has in the EU.
• UK Information Commissioner's Office International Data Transfer Agreement or International Data Transfer Addendum (where applicable).

If you require further information about international data transfers, you can request it by contacting [email protected].

How Old Do I Have to Be to Use the Krane Websites or Other Digital Offerings?

THE WEBSITES AND SERVICES ARE NOT INTENDED FOR CHILDREN.

You must be at least the age of majority in your place of residence to use the Services. Online components of our Services are not directed to children under the age of 13 or 14, depending on where you reside, and we do not knowingly collect Personal Information via online Services from children under the ages specified above. Consistent with the requirements of the U.S. Children's Online Privacy Protection Act, if we learn that we received any information directly from a child under age 13 without his or her parent's verified consent, we will use that information only to inform the child (or his or her parent or legal guardian) that he or she cannot use the Services. If you think that we have collected Personal Information via an online Service from a child under the ages specified above, please contact us as described below.

California Minors: While the Service is not intended for anyone under the age of 18, if you are a California resident who is under age 18 and you are unable to remove publicly-available content that you have submitted to us, you may request removal by contacting us at [email protected]. When requesting removal, you must be specific about the information you want removed and provide us with specific information, such as the URL for each page where the information was entered, so that we can find it. We are not required to remove any content or information that: (1) federal or state law requires us or a third party to maintain; (2) was not posted by you; (3) is anonymized so that you cannot be identified; (4) you don't follow our instructions for removing or requesting removal; or (5) you received compensation or other consideration for providing the content or information. Removal of your content or information from the Service does not ensure complete or comprehensive removal of that content or information from our systems or the systems of our service providers. We are not required to delete the content or information posted by you; our obligations under California law are satisfied so long as we anonymize the content or information or render it invisible to other users and the public.

YOUR US STATE PRIVACY RIGHTS

State consumer privacy laws may provide their residents with additional rights regarding our use of personal information. The following Section applies to individuals who reside in specific jurisdictions that provide additional privacy rights, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia.

Your Rights and Choices

Right to Access Specific Information and Data Portability. You have the right to request that we disclose certain information to you about our collection and use of personal information over the past twelve (12) months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you (also called a data portability request).
• If we disclosed personal information for a business purpose, the business purpose for which personal information was disclosed, and the personal information categories that each category of recipient obtained.

Right to Correct Information. You have the right to request we update personal information about you that is incorrect in our systems.

Right to Delete. You have the right to request that we delete any personal information about you that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) the personal information from our records, unless an exception applies.

Right to Opt-out of the Sale or Sharing of Personal Information for Cross-Contextual Behavioral Advertising. You have the right to opt-out of personal information sales or sharing for cross-contextual behavioral advertising.

Right to Limit Sensitive Personal Information Use. You have the right to limit the use of sensitive personal information regarding you.

Non-Discrimination. We will not discriminate against you for exercising any of your rights.

How to Exercise These Rights. The exact scope of these rights may vary by state. To submit a request to exercise these rights you may use one of these methods:

• Email: [email protected]
• Phone:  (212) 933-0393
• Mail: Krane Funds Advisors, LLC, Attn: Privacy Inquiries, 280 Park Avenue, 32nd Floor, New York, NY 10017

For all requests, please clearly state that the request is related to "Your Privacy Rights," indicate which type of request you are making, and provide your name, street address, city, state, zip code and an e-mail address or phone number where we may contact you. We are not responsible for notices that are not labeled or sent properly or that do not include complete information.

To appeal a decision regarding a consumer rights request, please submit your appeal using one of the methods above. Your appeal should include an explanation of the reason you disagree with our decision. Within 60 days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

Only you, or a person registered with the applicable Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to personal information about you. You may also make a verifiable consumer request on behalf of your minor child.

You may only make such a request for access or data portability twice within a 12-month period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response electronically. Any disclosures we provide will only cover the 12-month period preceding the receipt of the verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide the personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Opt-out Preference Signals. Our website honors Global Privacy Control ("GPC") opt-out preference signals when such signals are configured through your browser. You can get further help in configuring your browser by visiting: https://globalprivacycontrol.org/

Personal Information Sales Opt-Out. If you are age 16 or older, you have the right to direct us to not sell personal information about you at any time (the "right to opt-out"). We do not sell the personal information of consumers we know are less than 16 years old, unless we receive affirmative authorization (the "right to opt-in") from either the consumer who is between 13 and 15 years old, or the parent or guardian of a consumer less than 13 years old. Consumers who opt-in to personal information sales may opt out of future sales at any time. Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales.

California Shine the Light Law. California Civil Code Section 1798.83 permits users who are California residents to obtain from us once a year, free of charge, a list of third parties to whom we have disclosed personal information (if any) for direct marketing purposes in the preceding calendar year. If you are a California resident and you wish to make such a request, please send an e-mail with "California Privacy Rights" in the subject line to [email protected] or write us at: Krane Funds Advisors, LLC, Attn: Privacy Inquiries, 280 Park Avenue, 32nd Floor, New York, NY 10017.

THE GENERAL DATA PROTECTION REGULATION ("GDPR")

If you reside within the European Union or the United Kingdom, you may be entitled to other rights under the GDPR and UK GDPR. These rights are summarized below. We may require you to verify your identity before we respond to your requests to exercise your rights. If you are entitled to these rights, you may exercise these rights with respect to personal information about you that we collect and store:

• the right to withdraw your consent to data processing at any time (please note that this might prevent you from using certain aspects of the Services);
• the right to access personal information about you;
• the right to request a copy of personal information about you;
• the right to correct any inaccuracies in personal information about you;
• the right to erase personal information about you;
• the right to data portability, meaning to request a transfer of personal information about you from us to any other person or entity as chosen by you;
• the right to request restriction of the processing of personal information about you; and
• the right to object to processing of personal information about you.

You may exercise these rights free of charge. These rights will be exercisable subject to limitations as provided for by the GDPR. Any requests to exercise the above listed rights may be made to [email protected].

If you reside within the European Union or United Kingdom, you have the right to lodge a complaint with a Data Protection Authority about how we process personal information. For EU residents: https://edpb.europa.eu/about-edpb/board/members_en; for UK residents: https://ico.org.uk/make-a-complaint/.

Lawful Basis of Processing

We will only use personal information when the law allows us to. Most commonly, we will use personal information for the following lawful purposes:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where we receive your consent.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

Krane uses information that we collect from customers and visitors for the purposes of: providing the Services (performance of a contract); providing ongoing support (performance of a contract); communicating with you, including promotional communications and customer relationship management (legitimate business interest); providing information about other Services (legitimate business interest); helping us run our company, for example to improve the Services or our security, train staff or perform marketing activities (legitimate business interest); complying with our legal obligations (legal obligation); and accounting and other administrative purposes (legitimate business interest).

Please note that we will only process your personal information without your knowledge or consent in circumstances where it is permitted by applicable law (for example, if we are required by law to do so or if we reasonably believe that it is necessary to protect our rights and/or to comply with judicial or regulatory proceedings, a court order or other legal process).

CHANGES TO THIS PRIVACY POLICY

We may periodically update this Privacy Policy to describe new Services and how such Services may affect our collection and use of Personal Information. If we make material changes to this Privacy Policy, we will post a notice of the material changes on our Websites. We may also notify you in other ways from time to time about the processing of your personal information. If we use Personal Information about you for other purposes not specified in this Privacy Policy, we will notify you and obtain your consent, to the extent required by applicable law. We encourage you to periodically review this Privacy Policy for the latest information on our privacy practices.

QUESTIONS OR COMPLAINTS

We understand that you may have questions or concerns about this Privacy Policy or our privacy practices or may wish to file a complaint. If you have questions or concerns regarding this Privacy Policy, our information practices, or any other aspect of the privacy and security of Personal Information about you, please contact us using the information below.

Email: [email protected]

Phone: +1 (855) 8KRANE8 / +1 (855) 857-2638

Mail: Krane Funds Advisors, LLC, Attn: Privacy Inquiries, 280 Park Avenue, 32nd Floor, New York, NY 10017

Carefully consider the funds' investment objectives, risk factors, charges, and expenses before