WHAT PERSONAL INFORMATION HAVE WE COLLECTED IN THE PAST 12 MONTHS?

It is routine for us to collect, process and store Personal Information about you over the course of your relationship with us.

Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include deidentified or aggregate information, or public information lawfully available from governmental records.

The following chart describes the categories of Personal Information we may have collected about you in the past 12 months and, for each category, where and why we collected it, and the categories of entities with which we shared or sold the Personal Information, if any.

Category of Personal Information (PI)

Sources of Personal Information

Purpose of Collection

Categories of Entities with Which Personal Information was Shared

Address and other identifiers – such as name, postal address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers

• Directly from you;

• From your employer;

• Through your direct or indirect use of our products or services or those of one of our affiliated operating companies;

• From an agent or third party acting on your behalf, such as a distributor, one of our affiliated operating companies, a lead referral service, or a data provider that collected information from you directly or indirectly;

• Through publicly available sources; or

• From the use of our CCTV cameras, as where we have cameras on our premises, your image and movements may be recorded.

• to contact you to discuss the services or products you receive from us;

• to respond to any questions or concerns you have raised;

• to deal with administrative matters such as invoicing, renewal or to audit customer transactions

• to perform services on our behalf, such as customer service, processing or fulfilling orders, and processing payments

• to otherwise carry out our obligations arising under our contract with you and to enforce the same;

• to carry out anti-money laundering and other compliance checks and controls;

• to verify your identity or for other fraud or crime prevention

• to debug errors in our systems;

• for marketing and advertising purposes; or

• for internal research, analytics and development.

• Professional advisers, including accountancy and legal firms, in order to provide us with advice;

• Service providers, including to provide and support our data management, analytics, security, and storage systems;

• Our operating and other affiliated companies, for business and operational purposes; and

• Transaction (merger and acquisition) partners, including to facilitate the diligence, negotiation, and completion phases of transactions contemplated by us, our parent company, or affiliated operating companies.

Unique and online identifiers – such as IP address, device IDs, or other similar identifiers

• Directly from you;

• From your employer;

• Through your direct or indirect use of our products or services or those of one of our affiliated operating companies;

• From an agent or third party acting on your behalf as described above;

• Through publicly available sources; or

• From the use of our CCTV cameras as described above.

• to debug errors in our systems;

• for marketing and advertising purposes; or

• for internal research, analytics and development.

• Professional advisers as described above;

• Service providers as described above;

• Our operating and other affiliated companies as described above; and

• Transaction partners as described above.

Financial information

• Directly from you;

• From your employer;

• Through your direct or indirect use of our products or services or those of one of our affiliated operating companies;

• From an agent or third party acting on your behalf as described above; or

• Through publicly available sources.

• to respond to any questions or concerns you have raised;

• to deal with administrative matters as described above;

• to perform services on our behalf as described above

• to otherwise carry out our obligations arising under our contract with you and to enforce the same;

• to carry out anti-money laundering and other compliance checks and controls;

• to verify your identity or for other fraud or crime prevention

• Professional advisers as described above;

• Service providers as described above;

• Our operating and other affiliated companies as described above; and

• Transaction partners as described above.

Commercial information – such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

• Directly from you;

• From your employer;

• Through your direct or indirect use of our products or services or those of one of our affiliated operating companies;

• From an agent or third party acting on your behalf as described above; or

• Through publicly available sources.

• to contact you to discuss the services or products you receive from us;

• to respond to any questions or concerns you have raised;

• to deal with administrative matters as described above;

• to perform services on our behalf as described above

• to otherwise carry out our obligations arising under our contract with you and to enforce the same;

• to carry out anti-money laundering and other compliance checks and controls;

• to verify your identity or for other fraud or crime prevention

• to debug errors in our systems;

• for marketing and advertising purposes; or

• for internal research, analytics and development.

• Professional advisers as described above;

• Service providers as described above;

• Our operating and other affiliated companies as described above; and

• Transaction partners as described above.

Education or other professional information

• Directly from you;

• From your employer;

• Through your direct or indirect use of our products or services or those of one of our affiliated operating companies;

• From an agent or third party acting on your behalf as described above; or

• Through publicly available sources.

• to contact you to discuss the services or products you receive from us;

• to respond to any questions or concerns you have raised;

• to deal with administrative matters as described above;

• to perform services on our behalf as described above

• to otherwise carry out our obligations arising under our contract with you and to enforce the same;

• to carry out anti-money laundering and other compliance checks and controls;

• to verify your identity or for other fraud or crime prevention

• to debug errors in our systems;

• for marketing and advertising purposes; or

• for internal research, analytics and development.

• Professional advisers as described above;

• Service providers as described above;

• Our operating and other affiliated companies as described above; and

• Transaction partners as described above.

Audio or video footage collected using CCTV cameras (only if you visit one of our premises that uses this technology)

• Directly from you;

• From your employer;

• Through your direct or indirect use of our products or services or those of one of our affiliated operating companies;

• From an agent or third party acting on your behalf as described above;

• Through publicly available sources; or

• From the use of our CCTV cameras, as where we have cameras on our premises, your image and movements may be recorded.

• to deal with administrative matters as described above;

• to carry out anti-money laundering and other compliance checks and controls; or

• to verify your identity or for other fraud or crime prevention

• Professional advisers as described above;

• Service providers as described above; and

• Our operating and other affiliated companies as described above.

Biometric information

• to respond to any questions or concerns you have raised;

• to perform services on our behalf as described above

• to otherwise carry out our obligations arising under our contract with you and to enforce the same;

• to carry out anti-money laundering and other compliance checks and controls;

• to verify your identity or for other fraud or crime prevention

• to debug errors in our systems; or

• for internal research, analytics and development.

• to contact you to discuss the services or products you receive from us;

• to respond to any questions or concerns you have raised;

• to perform services on our behalf as described above

• to otherwise carry out our obligations arising under our contract with you and to enforce the same;

• to carry out anti-money laundering and other compliance checks and controls;

• to verify your identity or for other fraud or crime prevention

• to debug errors in our systems; or

• for internal research, analytics and development.

• Professional advisers as described above;

• Service providers as described above; and

• Our operating and other affiliated companies as described above.

Geolocation Information

• Directly from you;

• From your employer;

• Through your direct or indirect use of our products or services or those of one of our affiliated operating companies;

• From an agent or third party acting on your behalf as described above;

• Through publicly available sources; or

• From the use of our CCTV cameras as described above.

• to contact you to discuss the services or products you receive from us;

• to respond to any questions or concerns you have raised;

• to deal with administrative matters as described above;

• to perform services on our behalf as described above

• to otherwise carry out our obligations arising under our contract with you and to enforce the same;

• to carry out anti-money laundering and other compliance checks and controls;

• to verify your identity or for other fraud or crime prevention

• to debug errors in our systems;

• for marketing and advertising purposes; or

• for internal research, analytics and development.

• Professional advisers as described above;

• Service providers as described above;

• Our operating and other affiliated companies as described above; and

• Transaction (merger and acquisition) partners as described above.

Inferences drawn from CCPA PI – such as individual profiles, preferences, characteristics, behaviors

• Directly from you;

• From your employer;

• Through your direct or indirect use of our products or services or those of one of our affiliated operating companies;

• From an agent or third party acting on your behalf as described above;

• Through publicly available sources; or

• From the use of our CCTV cameras as described above

• to contact you to discuss the services or products you receive from us;

• to respond to any questions or concerns you have raised;

• to deal with administrative matters as described above;

• to perform services on our behalf as described above

• to otherwise carry out our obligations arising under our contract with you and to enforce the same;

• to carry out anti-money laundering and other compliance checks and controls;/span>

• to verify your identity or for other fraud or crime prevention

• to debug errors in our systems;

• for marketing and advertising purposes; or

• for internal research, analytics and development.

• Professional advisers as described above;

• Service providers as described above;

• Our operating and other affiliated companies as described above; and

• Transaction (merger and acquisition) partners as described above.

In the past 12 months, we have not sold your Personal Information to any other entity; and we do not and will not sell Personal Information to third parties.