Common use of Purpose of processing and types of personal data Clause in Contracts

Purpose of processing and types of personal data. We may process personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need specific details about the specific legal ground that we are relying on to process your personal data, where more than one ground has been set out in the table below. Purpose / Activity Type of data Lawful basis for processing including basis of legitimate interest To register you as a new customer • Identity • Contact • Performance of a contract with you To process and deliver your order including payment and collection or recovery of those payments • Identity • Contact • Financial • Transaction • Marketing and communications • Performance of a contract with you • Necessary for our legitimate interests (debt collection) To manage our relationship with you which will include: • Notifying you about changes in our terms or privacy policy • Asking you for feedback or take a survey • Identity • Contact • Profile • Marketing and communications • Performance of a contract with you • Necessary to comply with a legal obligation • Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To enable you to take part in a competition, prize draw, or survey • Identity • Contact • Profile • Usage • Marketing and communications • Performance of a contract with you • Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To administer and protect our business and website (including troubleshooting, data analysis, testing, system • Identity • Contact • Technical • Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) maintenance, support, reporting and hosting of data) • Necessary to comply with a legal obligation To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you • Identity • Contact • Profile • Usage • Marketing and communications • Technical • Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) To use data analytics to improve our website, products/services, marketing, customer relationships and experiences • Technical • Usage • Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you • Identity • Contact • Technical • Usage • Profile • Necessary for our legitimate interests (to develop our products/services and grow our business)

Purpose of processing and types of personal data. We may process personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need specific details about the specific legal ground that we are relying on to process your personal data, where more than one ground has been set out in the table below. Purpose / Activity Type of data Lawful basis for processing including basis of legitimate interest To register you as a new customer • Identity • Contact • Performance of a contract with you To process and deliver your order including payment and collection or recovery of those payments • Identity • Contact • Financial • Transaction • Marketing and communications • Performance of a contract with you • Necessary for our legitimate interests (debt collection) To manage our relationship with you which will include: • Notifying you about changes in our terms or privacy policy • Asking you for feedback or take a survey • Identity • Contact • Profile • Marketing and communications • Performance of a contract with you • Necessary to comply with a legal obligation • Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To enable you to take part in a competition, prize draw, or survey • Identity • Contact • Profile • Usage • Marketing and communications • Performance of a contract with you • Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To administer and protect our business and website (including troubleshooting, data analysis, testing, system • Identity • Contact • Technical • Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) maintenance, support, reporting and hosting of data) of a business reorganisation or group restructuring exercise) • Necessary to comply with a legal obligation To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you • Identity • Contact • Profile • Usage • Marketing and communications • Technical • Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) To use data analytics to improve our website, products/services, marketing, customer relationships and experiences • Technical • Usage • Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you • Identity • Contact • Technical • Usage • Profile • Necessary for our legitimate interests (to develop our products/services and grow our business)

Purpose of processing and types of personal data. We may process personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need specific details about the specific legal ground that we are relying on to process your personal data, where more than one ground has been set out in the table below. Purpose / Activity Type of data Lawful basis for processing including basis of legitimate interest To register you as a new customer • Identity • Contact • Performance of a contract with you To process and deliver your order including payment and collection or recovery of those payments • Identity • Contact • Financial • Transaction • Marketing and communications • Performance of a contract with you • Necessary for our legitimate interests (debt collection) To manage our relationship with you which will include: • Notifying you about changes in our terms or privacy policy • Asking you for feedback or take a survey • Identity • Contact • Profile • Marketing and communications • Performance of a contract with you • Necessary to comply with a legal obligation • Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To enable you to take part in a competition, prize draw, or survey • Identity • Contact • Profile • Usage • Marketing and communications • Performance of a contract with you • Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To administer and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) • Identity • Contact • Technical • Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) maintenance, support, reporting and hosting of data) • Necessary to comply with a legal obligation To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you • Identity • Contact • Profile • Usage • Marketing and communications • Technical • Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) To use data analytics to improve our website, products/services, marketing, customer relationships and experiences • Technical • Usage • Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you • Identity • Contact • Technical • Usage • Profile • Necessary for our legitimate interests (to develop our products/services and grow our business)

Purpose of processing and types of personal data. We may process personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need specific details about the specific legal ground that we are relying on to process your personal data, where more than one ground has been set out in the table below. Purpose / Activity Type of data Lawful basis for processing including basis of legitimate interest To register you as a new customer •  Identity •  Contact •  Performance of a contract with you To process and deliver your order including payment and collection or recovery of those payments •  Identity •  Contact •  Financial •  Transaction •  Marketing and communications •  Performance of a contract with you •  Necessary for our legitimate interests (debt collection) To manage our relationship with you which will include: •  Notifying you about changes in our terms or privacy policy •  Asking you for feedback or take a survey •  Identity •  Contact •  Profile •  Marketing and communications •  Performance of a contract with you •  Necessary to comply with a legal obligation •  Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To enable you to take part in a competition, prize draw, or survey •  Identity •  Contact •  Profile •  Usage •  Marketing and communications •  Performance of a contract with you •  Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To administer and protect our business and website (including troubleshooting, data analysis, testing, system •  Identity •  Contact •  Technical •  Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) maintenance, support, reporting and hosting of data) • of a business reorganisation or group restructuring exercise)  Necessary to comply with a legal obligation To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you •  Identity •  Contact •  Profile •  Usage •  Marketing and communications •  Technical •  Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) To use data analytics to improve our website, products/services, marketing, customer relationships and experiences •  Technical •  Usage •  Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you •  Identity •  Contact •  Technical •  Usage •  Profile •  Necessary for our legitimate interests (to develop our products/services and grow our business)

Purpose of processing and types of personal data. We may process personal data Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need specific details about the specific legal ground that we are relying on to process your personal data, where more than one ground has been set out in the table below. Purpose / Activity Type of data Lawful basis for processing including basis of legitimate interest To register you as a new customer •   Identity • Contact •  Performance of a contract with you To process and deliver your order including payment and collection or recovery of those payments • Identity • Contact • Financial • Transaction • Marketing and communications • Performance of a contract with you • Necessary for our legitimate interests (debt collection) To manage our relationship with you which will include: •  Notifying you about changes in our terms or privacy policy •  Asking you for feedback or take a survey • To enable you to take part in a competition, prize draw, or survey  Identity •  Contact • Profile •  Financial  Transaction  Marketing and communications •  Identity  Contact  Profile  Marketing and communications  Identity  Contact  Profile  Usage  Marketing and communications  Performance of a contract with you •  Necessary for our legitimate interests (debt collection)  Performance of a contract with you  Necessary to comply with a legal obligation •  Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To enable you to take part in a competition, prize draw, or survey • Identity • Contact • Profile • Usage • Marketing and communications •  Performance of a contract with you •  Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To administer and protect our business and website (including troubleshooting, data analysis, testing, system • maintenance, support, reporting and hosting of data)    Identity • Contact • Technical •  Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) maintenance, support, reporting and hosting of data) •  Necessary to comply with a legal obligation To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you •  Identity •  Contact •  Profile •  Usage •  Marketing and communications •  Technical •  Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) To use data analytics to improve  Technical our website, products/services,  Usage marketing, customer relationships and experiences • Technical • Usage •  Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you •  Identity •  Contact •  Technical • Usage • Profile •  Necessary for our legitimate interests (to develop our products/services and grow our business)) goods or services that may be of interest to you  Usage  Profile

Purpose of processing and types of personal data. We may process personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need specific details about the specific legal ground that we are relying on to process your personal data, where more than one ground has been set out in the table below. Purpose / Activity Type of data Lawful basis for processing including basis of legitimate interest To register you as a new customer •  Identity •  Contact •  Performance of a contract with you To process and deliver your order including payment and collection or recovery of those payments •  Identity •  Contact •  Financial •  Transaction •  Marketing and communications •  Performance of a contract with you •  Necessary for our legitimate interests (debt collection) To manage our relationship with you which will include: •  Notifying you about changes in our terms or privacy policy •  Asking you for feedback or take a survey •  Identity •  Contact •  Profile •  Marketing and communications •  Performance of a contract with you •  Necessary to comply with a legal obligation •  Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To enable you to take part in a competition, prize draw, or survey •  Identity •  Contact •  Profile •  Usage •  Marketing and communications •  Performance of a contract with you •  Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To administer and protect our business and website (including troubleshooting, data analysis, testing, system • maintenance, support, reporting and hosting of data)  Identity •  Contact •  Technical •  Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) maintenance, support, reporting and hosting of data) •  Necessary to comply with a legal obligation To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you •  Identity •  Contact •  Profile •  Usage •  Marketing and communications •  Technical •  Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) To use data analytics to improve our website, products/services, marketing, customer relationships and experiences •  Technical •  Usage •  Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you •  Identity •  Contact •  Technical •  Usage •  Profile •  Necessary for our legitimate interests (to develop our products/services and grow our business)

Purpose of processing and types of personal data. We may process personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need specific details about the specific legal ground that we are relying on to process your personal data, where more than one ground has been set out in the table below. Purpose / Activity Type of data Lawful basis for processing including basis of legitimate interest To register you as a new customer •   Identity • Contact •  Performance of a contract with you To process and deliver your order including payment and collection or recovery of those payments • Identity • Contact • Financial • Transaction • Marketing and communications • Performance of a contract with you • Necessary for our legitimate interests (debt collection) To manage our relationship with you which will include: •  Notifying you about changes in our terms or privacy policy •  Asking you for feedback or take a survey • To enable you to take part in a competition, prize draw, or survey  Identity •  Contact • Profile •  Financial  Transaction  Marketing and communications •  Identity  Contact  Profile  Marketing and communications  Identity  Contact  Profile  Usage  Performance of a contract with you •  Necessary for our legitimate interests (debt collection)  Performance of a contract with you  Necessary to comply with a legal obligation •  Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To enable you to take part in a competition, prize draw, or survey • Identity • Contact • Profile • Usage • Marketing and communications •  Performance of a contract with you •  Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)  Marketing and communications To administer and protect our business and website (including troubleshooting, data analysis, testing, system • maintenance, support, reporting and hosting of data)    Identity • Contact • Technical •  Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) maintenance, support, reporting and hosting of data) •  Necessary to comply with a legal obligation To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you •  Identity •  Contact •  Profile •  Usage •  Marketing and communications •  Technical •  Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) To use data analytics to improve our website, products/services, marketing, customer relationships and experiences •  Technical •  Usage •  Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you • Identity • Contact • Technical • Usage • Profile • Necessary for our legitimate interests (to develop our products/services and grow our business)you

Purpose of processing and types of personal data. We may process personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need specific details about the specific legal ground that we are relying on to process your personal data, where more than one ground has been set out in the table below. Purpose / Activity Type of data Lawful basis for processing including basis of legitimate interest To register you as a new customer •  Identity •  Contact •  Performance of a contract with you To process and deliver your order including payment and collection or recovery of those payments •  Identity •  Contact •  Financial •  Transaction •  Marketing and communications •  Performance of a contract with you •  Necessary for our legitimate interests (debt collection) To manage our relationship with you which will include: •  Notifying you about changes in our terms or privacy policy •  Asking you for feedback or take a survey •  Identity •  Contact •  Profile •  Marketing and communications •  Performance of a contract with you •  Necessary to comply with a legal obligation •  Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To enable you to take part in a competition, prize draw, or survey •  Identity •  Contact •  Profile •  Usage •  Marketing and communications •  Performance of a contract with you •  Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To administer and protect our business and website (including troubleshooting, data analysis, testing, system •  Identity •  Contact •  Technical •  Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) maintenance, support, reporting and hosting of data) •  Necessary to comply with a legal obligation To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you •  Identity •  Contact •  Profile •  Usage •  Marketing and communications •  Technical •  Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy) To use data analytics to improve our website, products/services, marketing, customer relationships and experiences •  Technical •  Usage •  Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you •  Identity •  Contact •  Technical •  Usage •  Profile •  Necessary for our legitimate interests (to develop our products/services and grow our business)