Common use of How We Use Your Personal Data Clause in Contracts

How We Use Your Personal Data. We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: • Where we need to perform the contract we are about to enter into or have entered into with you. • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. • Where we need to comply with a legal or regulatory obligation. Information you supply using any electronic forms on our website will only be used for the purpose(s) stated on the form. Information you provide in emails to us will only be used for the purpose (which we reasonably believe) that you give it to us for. Information you provide us with may be used for statistical research but will not be used in any way (beyond its original purpose) which enables you to be identified. Generally we do not rely on consent as a legal basis for processing your personal data other than in relation, if applicable, to sending third party direct marketing communications to you via email or text message or for the purposes of providing you with our newsletter. You have the right to withdraw consent to marketing at any time by contacting us at ▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇.▇▇ We collect, use, hold and share where necessary, information for the following purposes:  making a decision about the Programme of support you are undertaking  checking you are legally entitled to work in the UK  to conduct data analytics studies in support of our contractual obligations. These will involve data collected but will usually be anonymised.  Equal opportunities monitoring  to deal with the service that you requested and to allow us to be able to communicate, and provide services appropriate to your needs and to monitor our performance in responding to your request  to ensure we meet our legal obligations  to prevent and detect fraud or crime  to process financial transactions including grants, payments, benefits and invoices involving us or when we are acting on behalf of other government bodies  to conduct research and surveys and to allow for the statistical analysis of data so we can plan the provision of services  where necessary to protect individuals from harm or injury  where you have consented to the processing  where otherwise permitted under Data Protection legislation

How We Use Your Personal Data. 3.1 Our Uses We will only use your personal data Personal Data when the law allows us to. Most commonly, Set out below is a table containing the different types of Personal Data we collect and the lawful basis for processing that data. Please refer to section 2.2 for more information on the lawful basis listed in the table below. Examples provided in the table below are indicative in nature and the purposes for which we use your data may be broader than described but we will use never process your personal data in the following circumstances: • Where we need to perform the contract we are about to enter into or have entered into with you. • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. • Where we need to comply with a legal or regulatory obligation. Information you supply using any electronic forms on our website will only be used for the purpose(s) stated on the form. Information you provide in emails to us will only be used for the purpose (which we reasonably believe) that you give it to us for. Information you provide us with may be used for statistical research but will not be used in any way (beyond its original purpose) which enables you to be identified. Generally we do not rely on consent as without a legal basis for processing doing so and it is for a related purpose. For further inquiries please contact us. User signing up to the platform and creating an account Contact Data Consent Contractual Obligations (a) Consent You will need to include Personal Data when filling in the Company profile on the platform so the content you create is linked to your personal profile (b) Contractual Obligation In order to use our Platform you need to contract with us under our Terms of Service and so this data other than in relationis necessary to form the contract between us Once a customer has signed up to the platform, if applicablethey must input their and applicable passenger passport details. Profile /Identity Data Necessity Passengers name, surname, date of birth, document details (type, serial number, date of issue, expiration date, issuing country), flight details (flight date, flight time) These are required by the operator to conduct the flight itinerary by the UK CAA. Without this data, the service can not be provided. (a) Legitimate interest To define types of customers for our products and services, to sending third party direct keep our Site and Platform updated and relevant, to develop our business and to inform users about marketing strategy User makes a purchase on the website/app Transactional Data Consent Contractual Obligations Legitimate Interest (a) Consent You will need to include Personal Data when filling in the Company profile on the Platform so the content you create is linked to your profile We will retain the name that is stated on the credit/debit card you enter into our Stripe API but all other card details are stored by them and not retained by us (b) Contractual Obligation In order to Activity Type of data Legal Justification Lawful basis for processing data use our Platform you need to contract with us under our Terms of Service and so this is necessary to form the contract between us We need to retain your Transactional Data so that we can comply with our legal obligation to send you an invoice following a purchase (c) Legitimate Interest We need to know who you are so that we know who to deliver the service to once it has been purchased. It also enables us to provide support to the right individual in case there is an issue with the purchased product 3.2 Marketing and Content Updates You will receive marketing and new content communications from us unless you specifically request that you would not like to receive these communications. From time to time we may make suggestions and recommendations to you via email about goods or text message or for the purposes services that may be of providing you with our newsletter. You have the right interest to withdraw consent to marketing at any time by contacting us at ▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇you.▇▇.▇▇ We collect, use, hold and share where necessary, information for the following purposes:  making a decision about the Programme of support you are undertaking  checking you are legally entitled to work in the UK  to conduct data analytics studies in support of our contractual obligations. These will involve data collected but will usually be anonymised.  Equal opportunities monitoring  to deal with the service that you requested and to allow us to be able to communicate, and provide services appropriate to your needs and to monitor our performance in responding to your request  to ensure we meet our legal obligations  to prevent and detect fraud or crime  to process financial transactions including grants, payments, benefits and invoices involving us or when we are acting on behalf of other government bodies  to conduct research and surveys and to allow for the statistical analysis of data so we can plan the provision of services  where necessary to protect individuals from harm or injury  where you have consented to the processing  where otherwise permitted under Data Protection legislation

How We Use Your Personal Data. We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: • Where we need to perform the contract we are about to enter into or have entered into with you. • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. • Where we need to comply with a legal or regulatory obligation. Information Please see the Glossary below to find out more about the types of lawful basis that we will rely on to process your personal data. We may use your personal information to send you supply using any electronic forms on updates (by email, text message, telephone or post) about our website will only be used for the purpose(s) stated on the form. Information you provide in emails to us will only be used for the purpose (which we reasonably believe) services, including offers, promotions or new services that you give it to us for. Information you provide us with may be used of interest to you. We have a legitimate interest in processing your personal information for statistical research but will not be used in any way (beyond its original purpose) which enables you to be identifiedpromotional purposes. Generally This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly. PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on consent as a to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below. Purpose/Activity Type of data Lawful basis for processing including basis of legitimate interest If you are a tenant, to facilitate the letting process from application to you signing the lease and during your personal data other than tenancy. (a) Identity (b) Contact (c) Financial (d) Criminal Convictions and Offences and Court Orders Performance of our contract with you. If you are a guarantor, to facilitate the letting process from application to the tenant signing the lease. (a) Identity (b) Contact (c) Financial (d) Criminal Convictions and Offences and Court Orders Necessary for our legitimate interests (to ensure that in relationthe event the tenant is unable to pay rent that you are able to guarantee those payments). To carry out a credit check. (a) Identity (b) Contact (c) Financial (d) Criminal Convictions and Offences and Court Orders Necessary for our legitimate interests to : (i) if you are the tenant, that you are able to meet the rent payments; (ii) if you are a guarantor, that in the event the tenant is unable to pay rent that you are able to guarantee those payments. To liaise with the landlord, guarantors and tenant (as applicable) regarding the letting and management of the property. (a) Identity (b) Contact (c) Financial Performance of our contract with you. To liaise with the statutory bodies (including the Land and Property Services), insurance companies and utility companies regarding the letting and management of the property. (a) Identity (b) Contact (c) Financial Performance of our contract with you and to comply with a legal obligation. To engage third parties to carry out repair and maintenance works on the property (if applicable, ). (a) Identity (b) Contact Performance of our contract with you. To arrange payments to sending third party direct marketing communications to you via email the landlord or text message or for the purposes of providing you with our newsletter. You have the right to withdraw consent to marketing at any time by contacting us at ▇▇▇▇@▇ ▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇.▇▇ Residential as agents, including setting up a standing order and/or direct debit with you as a tenant or guarantor (as applicable). To participate in the tenancy deposit scheme (a) Identity (b) Contact (c) Financial Performance of our contract with you and to comply with a legal obligation. To comply with Anti-Money Laundering Regulations (a) Identity (b) Contact (c) Financial To comply with a legal obligation. To manage our relationship with you which will include: (i) Correspond with you about the services which we are providing or which you are providing to us, including keeping you up to date on the services transaction; and (ii) Notifying you about changes to our terms or privacy policy; (a) Identity (b) Contact (c) Financial (i) Performance of a contract with you (ii) Necessary to comply with a legal obligation, and to comply with the terms of a contract we have with you To provide direct marketing services to you (a) Identity (b) Contact Necessary for our legitimate interests (to keep our records updated and to study how customers or suppliers use our services) CHANGE OF PURPOSE We collect, use, hold and share where necessary, information will only use your personal data for the following purposes:  making a decision about the Programme of support you are undertaking  checking you are legally entitled purposes for which we collected it, unless we reasonably consider that we need to work in the UK  to conduct data analytics studies in support of our contractual obligations. These will involve data collected but will usually be anonymised.  Equal opportunities monitoring  to deal use it for another reason and that reason is compatible with the service that original purpose. If you requested wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact our data privacy manager. If we need to use your personal data for an unrelated purpose, we will notify you and to allow we will explain the legal basis which allows us to be able to communicatedo so. Please note that we may process your personal data without your knowledge or consent, and provide services appropriate to your needs and to monitor our performance in responding to your request  to ensure we meet our legal obligations  to prevent and detect fraud compliance with the above rules, where this is required or crime  to process financial transactions including grants, payments, benefits and invoices involving us or when we are acting on behalf of other government bodies  to conduct research and surveys and to allow for the statistical analysis of data so we can plan the provision of services  where necessary to protect individuals from harm or injury  where you have consented to the processing  where otherwise permitted under Data Protection legislationby law.

How We Use Your Personal Data. We will only use your personal data Your Personal Data when the law allows us Us to. Most commonly, we will use your personal data Your Personal Data in the following circumstances, where: • Where we We need to perform the contract we We are about to enter into or have entered into with youYou. • Where it is necessary for our Our legitimate interests (or those of a third party) and your Your interests and fundamental rights do not override those interests. • Where we We need to comply with a legal or regulatory obligation. Information you supply using any electronic forms • We have Your consent to process medical details. Please see the Glossary and Lawful Basis sections of this Privacy Notice below, to find out more about the types of lawful basis that We will rely on our website will only be used to process Your Personal Data. We have set out below, in a table format, a description of all the ways We plan to use Your Personal Data, and which of the legal bases We rely on to do so. We have also identified what Our legitimate interests are where appropriate. Please note that We may process Your Personal Data for the purpose(s) stated more than one lawful ground depending on the formspecific purpose for which We are using Your Personal Data. Information you Please contact Us if You need details about the specific legal ground, we are relying on to process Your Personal Data where more than one ground has been set out in the table below. To deal with enquiries from You about Our products or services (a) Identity (b) Contact (a) Necessary for Our legitimate interests (to support You or the contract with Your employer) To register You as a new Customer (a) Identity (b) Contact (a) Performance of a contract with You (b) Necessary for Our legitimate interests (to support the contract with Your employer) To process and deliver Your order including: (a) Identity (b) Contact (c) Financial (a) Performance of a contract with You (a) Manage payments, fees, and charges (b) Collect and recover money owed to Us (d) Transaction (e)Marketing and Communications (b) Necessary for our legitimate interests (to recover debts due to Us/ perform a contract with Your employer) To manage Our relationship with You which will include: (a) Notifying You about changes to our terms or Privacy Notice (b) Asking You to leave a review or take a survey (a) Identity (b) Contact (c) Profile (d)Marketing and Communications (a) Performance of a contract with You (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how Customers use Our products/services/ perform a contract with Your employer) To manage the services, we provide to a customer including, making contact with family members and third-party service providers (such as care home and local authorities) (a) Identity (b) Contact (c) Location (a) Necessary for our legitimate interests (to support the contract with Your employer) (b) Performance of a contract with You For training purposes, to prevent and detect crime (including fraud) and to administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (a) Identity (b) Contact (c) Technical (a) Necessary for Our legitimate interests (for running Our business, provision of administration and IT services, network security, to prevent fraud and in emails the context of a business reorganisation or group restructuring exercise) (b) Necessary to us will only be used comply with a legal obligation To deliver relevant website content and advertisements to You and measure or understand the effectiveness of the advertising We serve to You (a) Identity (b) Contact (c) Profile (d) Usage (e)Marketing and Communications (f) Technical Necessary for the purpose Our legitimate interests (which we reasonably believeto study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) To use data analytics to improve Our website, products/services, marketing, customer relationships and experiences (a) Technical (b) Usage Necessary for Our legitimate interests (to define types of Customers for Our products and services, to keep Our website updated and relevant, to develop Our business and to inform Our marketing strategy) For assessment and analysis and to make suggestions and recommendations to You about products or services that you give it to us for. Information you provide us with may be used of interest to You, and to invite You to attend Our events (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile Necessary for statistical research but Our legitimate interests (to develop Our products/services and grow Our business) (f) Marketing and Communications We may use Your Identity, Contact, Technical, Usage and Profile Data to form a view on what We think you may want or need, or what may be of interest to You. This is how We decide which products, services and offers may be relevant for You (We call this marketing). You will not be used in any way (beyond its original purpose) which enables you to be identified. Generally we do not rely on consent as a legal basis for processing your personal data other than in relation, if applicable, to sending third party direct receive marketing communications to you via email from Us if You have requested information from Us or text message purchased products or for the purposes services from Us and You have not opted out of providing you with our newsletterreceiving that marketing. You have the right can ask Us to withdraw consent to stop sending You marketing messages at any time by contacting Us using the details provided above. Where You opt out of receiving these marketing messages, this will not apply to Personal Data provided to us at ▇▇▇▇@▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇as a result of a product or service purchase or order, product or service experience or other transactions.▇▇.▇▇ We collect, use, hold and share where necessary, information for the following purposes:  making a decision about the Programme of support you are undertaking  checking you are legally entitled to work in the UK  to conduct data analytics studies in support of our contractual obligations. These will involve data collected but will usually be anonymised.  Equal opportunities monitoring  to deal with the service that you requested and to allow us to be able to communicate, and provide services appropriate to your needs and to monitor our performance in responding to your request  to ensure we meet our legal obligations  to prevent and detect fraud or crime  to process financial transactions including grants, payments, benefits and invoices involving us or when we are acting on behalf of other government bodies  to conduct research and surveys and to allow for the statistical analysis of data so we can plan the provision of services  where necessary to protect individuals from harm or injury  where you have consented to the processing  where otherwise permitted under Data Protection legislation