Common use of Your Information Clause in Contracts

Your Information. 19.1 We collect and process various categories of personal and financial information throughout your relationship with us, to allow us to provide our products and services and to run our business. This includes basic personal information such as your name and contact details, and information about your financial circumstances, your accounts and transactions. This section sets out how we may share your information with other Group companies and third parties. 19.2 For more information about how we use your personal information, the types of information we collect and process and the purposes for which we process personal information, please read our full Privacy Notice (our ‘Privacy Notice’) provided on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. 19.3 We may update our Privacy Notice from time to time, by communicating such changes to you and/or publishing the updated Privacy Notice on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it. 19.4 In respect of any personal information relating to a third party that you provide to us, you must: a) notify the third party that you are providing their personal information to us and obtain their permission; b) provide the third party with a copy of our Privacy Notice and these Terms and Conditions; c) promptly notify the third party of any changes to our Privacy Notice that we notify you of; and d) ensure that, to the best of your knowledge, the personal information is accurate and up to date, and promptly notify us if you become aware that it is incorrect. 19.5 Your information may be shared with and used by other Group companies. We will only share your information where it is necessary for us to carry out our lawful business activities, or where it is necessary to comply with laws and regulations that apply to us. 19.6 We will not share your information with anyone outside the Group except: a) where we have your permission; b) where required for your product or service; c) where we are required by law and with law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world; d) with other banks and third parties where required by law to help recover funds that have entered your Account as a result of a misdirected payment by such a third party; e) with third parties providing services to us, such as market analysis and benchmarking, correspondent banking, and agents and subcontractors acting on our behalf, such as the companies which print our account statements; f) with other banks to help trace funds where you are a victim of suspected financial crime and you have agreed for us to do so, or where we suspect funds have entered your Account as a result of a financial crime; g) with debt collection agencies; h) with credit reference and fraud prevention agencies; i) with third party guarantors or other companies that provide you with benefits or services (such as insurance cover) associated with your product or service; j) where required for a proposed sale, reorganisation, transfer, financial arrangement, asset disposal or other transaction relating to our business and/or assets held by our business; k) in anonymised form as part of statistics or other aggregated data shared with third parties; or l) where permitted by law, it is necessary for our legitimate interests or those of a third party, and it is not inconsistent with the purposes listed above. 19.7 If you ask us to, we may at our sole discretion share information with any third party that provides you with account information or payment services. If you ask a third party provider to provide you with account information or payment services, you are allowing that third party to access information relating to your Account. We are not responsible for any such third party’s use of your Account information, which will be governed by their agreement with you and any privacy statement they provide to you. 19.8 In the event that any additional authorised users are added to your Account, we may share information about the use of the account by any authorised user with all other authorised users. 19.9 We will not share your information with third parties for their own marketing purposes without your permission. 19.10 We may transfer your information to organisations in other countries (including to other Group companies) on the basis that anyone to whom we pass it protects it in the same way we would and in accordance with applicable laws. We will only transfer your information if we are legally obligated to do so, or where the other country has laws that adequately protect your information, or where we have imposed contractual obligations on the recipients that require them to protect your information to the same standard as we are legally required to.

Your Information. 19.1 (a) The organisation responsible for processing your information is National Westminster Bank Plc (trading as Royal Bank of Scotland Mentor), which is a member of NatWest Group (“NatWest”). For more information about other NatWest companies please visit ▇▇▇▇▇▇▇.▇▇▇ or contact us on ▇▇▇▇ ▇▇▇ ▇▇▇▇ Relay UK 18001 0800 634 7001 or ▇▇▇▇@▇▇▇▇▇▇.▇▇.▇▇▇ (b) We collect and process various categories of personal and financial financial information throughout your relationship with us, to allow us to provide our products and services and to run our business. This includes basic personal information such as your name and contact details, and information about your financial financial circumstances, your accounts and transactions. This section sets out how we may share your information with other Group NatWest companies and third parties. 19.2 (c) For more information about how we use your personal information, the types of information we collect and process and the purposes for which we process personal information, please read our full Privacy Notice privacy notice (our ‘“Privacy Notice’) provided on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇”). 19.3 (d) We may update our Privacy Notice from time to time, by communicating such changes to you and/or publishing the updated Privacy Notice on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇.▇▇.▇▇▇ privacynotice. We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it. 19.4 (e) In respect of any personal information relating to a third party that you provide to us, you must: (a) notify the third party that you are providing their personal information to us and obtain their permission; (b) provide the third party with a copy of our Privacy Notice and these Terms and ConditionsTerms; (c) promptly notify the third party of any changes to our Privacy Notice that we notify you of; and (d) ensure that, to the best of your knowledge, the personal information is accurate and up to date, and promptly notify us if you become aware that it is incorrect. 19.5 (f) Your information may be shared with and used by other Group NatWest companies. We will only share your information where it is necessary for us to carry out our lawful business activities, or where it is necessary to comply with laws and regulations that apply to us. 19.6 (g) We will not share your information with anyone outside the Group NatWest except: (a) where we have your permission; (b) where required for your product or service; (c) where we are required by law and with to law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world; (d) with other banks and third parties where required by law to help recover funds that have entered your Account account as a result of a misdirected payment by such a third party; (e) with third parties providing services to us, such as market analysis and benchmarking, correspondent banking, and agents and subcontractors sub-contractors acting on our behalf, such as the companies which print our account statements; (f) with other banks to help trace funds where you are a victim of suspected financial financial crime and you have agreed for us to do so, or where we suspect funds have entered your Account account as a result of a financial financial crime; (g) with debt collection agencies; (h) with credit reference and fraud prevention agencies; (i) with third party guarantors or other companies that provide you with benefits benefits or services (such as insurance cover) associated with your product or service; (j) where required for a proposed sale, reorganisation, transfer, financial financial arrangement, asset disposal or other transaction relating to our business and/or and/ or assets held by our business; (k) in anonymised form as part of statistics or other aggregated data shared with third parties; or (l) where permitted by law, it is necessary for our legitimate interests or those of a third party, and it is not inconsistent with the purposes listed above. 19.7 (h) If you ask us to, we may at our sole discretion will share information with any third party that provides you with account information or payment services. If you ask a third party provider to provide you with account information or payment services, you are you’re allowing that third party to access information relating to your Accountaccount. We are We’re not responsible for any such third party’s use of your Account account information, which will be governed by their agreement with you and any privacy statement they provide to you. 19.8 (i) In the event that any additional authorised users are added to your Accountaccount, we may share information about the use of the account by any authorised user with all other authorised users. 19.9 We (j) NatWest will not share your information with third parties for their own marketing purposes without your permission. 19.10 . We may transfer your information to organisations in other countries (including to other Group NatWest companies) on the basis that anyone to whom we pass it protects it in the same way we would and in accordance with applicable laws. We will only transfer your information if we are legally obligated to do so, or where the other country has laws that adequately protect your information, or where we have imposed contractual obligations on the recipients that require them to protect your information to the same standard as we are legally required to.

Your Information. 19.1 We 3.1 You must be at least 18 to be a customer on the Platform. 3.2 You acknowledge that we are obliged to carry out "Know Your Client" procedures in accordance with our policies, applicable local or foreign laws, regulations, subsidiary legislation, and any other requirements issued by the regulatory authority including the Securities Commission of Malaysia (“SC”) as may be amended from time to time (“Applicable Laws”). 3.3 You acknowledge that prior to the opening of an Account for you or the provision of the Services to you or the performance of any investment for on your behalf (“Transaction”), all documents and information as we deem necessary to carry out such "Know Your Client" procedures are required to be submitted to us (through the Platform or such other method as we may notify you). In the event of any change in the information provided you are required to advise us of the same accordingly. 3.4 You acknowledge that where it is required for the purposes of complying with any Applicable Laws or where required by any order, direction, or request by any applicable court, government or regulatory authority you agree to provide any information or documents whatsoever upon request by us from time to time. You also acknowledge that we are entitled to provide the information which you have shared with us to all relevant authorities for the purposes of complying with all applicable disclosure or reporting obligations without limiting the generality of our rights under Clause 3.3. Without prejudice to any other representation and/or warranty on your part, you undertake that all information and documents provided by you are accurate, true, and complete. 3.5 When we exercise our rights in this clause, you consent to us using your personal data (as defined in the Personal Data Protection Act 2010) to carry out electronic searches on private and public databases in order to provide the Services to you. For more details on how we collect and process various categories of personal and financial information throughout your relationship with us, to allow us to provide our products and services and to run our business. This includes basic personal information such as your name and contact details, and information about your financial circumstances, your accounts and transactions. This section sets out how we may share your information with other Group companies and third parties. 19.2 For more information about how we use your personal informationdata, including the types of information we collect and process and the purposes for which we process rights in relation to your personal informationdata, please read refer to our full Privacy Personal Data Protection Notice on the Platform (our ‘Privacy Notice’) provided on our website ▇▇▇.▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇). 19.3 We may update our Privacy Notice from time to time, by communicating such changes to you and/or publishing the updated Privacy Notice on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it. 19.4 3.6 In respect of any personal information relating to a third party that you provide to us, you must: a) notify the third party that you are providing their personal information to us and obtain their permission; b) provide the third party with a copy of our Privacy Notice and these Terms and Conditions; c) promptly notify the third party of any changes to our Privacy Notice that we notify you of; and d) ensure that, to the best of your knowledge, the personal information is accurate and up to date, and promptly notify us if you become aware that it is incorrect. 19.5 Your information may be shared with and used by other Group companies. We will only share your information where it is necessary for us to carry out our lawful business activities, or where it is necessary to comply with laws and regulations that apply to us. 19.6 We will not share your information with anyone outside the Group except: a) where we have your permission; b) where required for your product or service; c) where we are required by law and with law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world; d) with other banks and third parties where required by law to help recover funds that have entered your Account as a result of a misdirected payment by such a third party; e) with third parties providing services to us, such as market analysis and benchmarking, correspondent banking, and agents and subcontractors acting on our behalf, such as the companies which print our account statements; f) with other banks to help trace funds where you are a victim of suspected financial crime and you have agreed for us to do so, or where we suspect funds have entered your Account as a result of a financial crime; g) with debt collection agencies; h) with credit reference and fraud prevention agencies; i) with third party guarantors or other companies that provide you with benefits or services (such as insurance cover) associated with your product or service; j) where required for a proposed sale, reorganisation, transfer, financial arrangement, asset disposal or other transaction relating to our business and/or assets held by our business; k) in anonymised form as part of statistics or other aggregated data shared with third parties; or l) where permitted by law, it is necessary for our legitimate interests or those of a third party, and it is not inconsistent with the purposes listed above. 19.7 If you ask us tosome cases, we may at our sole discretion share information with any third party that provides you with account need to ask for additional information or payment servicesdocuments from you. If this happens, we will send you ask a third party provider secure email and you agree to provide us with the information and documents we ask for within a reasonable period. You accept that if you with account information or payment services, you are allowing that third party to access information relating to your Account. We are do not responsible for any such third party’s use of your Account information, which will be governed by their agreement with you and any privacy statement they provide to you. 19.8 In the event that any additional authorised users are added to your Accountdo this, we may share information about freeze the use of the account by any authorised user Account or take other action against you or with all other authorised users. 19.9 We will not share your information with third parties for their own marketing purposes without your permission. 19.10 We may transfer your information to organisations in other countries (including to other Group companies) on the basis that anyone to whom we pass it protects it in the same way we would and in accordance with applicable laws. We will only transfer your information if we are legally obligated to do so, or where the other country has laws that adequately protect your information, or where we have imposed contractual obligations on the recipients that require them to protect your information respect to the same standard as we are legally required toAccount.

Your Information. 19.1 (a) We are a member of The Royal Bank of Scotland Group (“RBS”). For more information about other RBS companies please visit ▇▇▇.▇▇▇ or contact your branch or Relationship Manager. (b) We collect and process various categories of personal and financial financial information throughout your relationship with us, to allow us to provide our products and services and to run our business. This includes basic personal information such as your name and contact details, and information about your financial financial circumstances, your accounts and transactions. We have a duty to keep customer information confidential. This section sets out how we may share your information with other Group RBS companies and third parties. 19.2 For more information about how we use your personal information, the types of information we collect and process and the purposes for which we process personal information, please read our full Privacy Notice (our ‘Privacy Notice’c) provided on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. 19.3 We may update our Privacy Notice from time to time, by communicating such changes to you and/or publishing the updated Privacy Notice on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it. 19.4 In respect of any personal information relating to a third party that you provide to us, you must: a) : • notify the third party that you are providing their personal information to us and obtain their permission; b) ; • provide the third party with a copy of our Privacy Notice and these Terms and Conditions; c) promptly notify the third party of any changes to our Privacy Notice that we notify you ofTerms; and d) • ensure that, to the best of your knowledge, the personal information is accurate and up to date, and promptly notify us if you become aware that it is incorrect. 19.5 (d) Your information may be shared with and used by other Group RBS companies. We will only share your information where it is necessary for us to carry out our lawful business activities, or where it is necessary to comply with laws and regulations that apply to us. 19.6 (e) We will not share your information with anyone outside the Group RBS except: a) : • where we have your permission; b) ; • where required for your product or service; c) ; • where we are required by law and with to law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world; d) ; • with other banks and third parties where required by law to help recover funds that have entered your Account account as a result of a misdirected payment by such a third party; e) ; • with third parties providing services to us, such as market analysis and benchmarking, correspondent banking, and agents and subcontractors sub-contractors acting on our behalf, such as the companies which print our account statements; f) ; • with other banks to help trace funds where you are a victim of suspected financial financial crime and you have agreed for us to do so, or where we suspect funds have entered your Account account as a result of a financial financial crime; g) ; • with debt collection agencies; h) ; • with credit reference and fraud prevention agencies; i) ; • with third party guarantors or other companies that provide you with benefits benefits or services (such as insurance cover) associated with your product or service; j) ; • where required for a proposed sale, reorganisation, transfer, financial financial arrangement, asset disposal or other transaction relating to our business and/or assets held by our business; k) ; • in anonymised form as part of statistics or other aggregated data shared with third parties; or l) or • where permitted by law, it is necessary for our legitimate interests or those of a third party, and it is not inconsistent with the purposes listed above. 19.7 (f) If you ask us to, we may at our sole discretion will share information with any third party that provides you with account information or payment services. If you ask a third party provider to provide you with account information or payment services, you are you’re allowing that third party to access information relating to your Accountaccount. We are We’re not responsible for any such third party’s use of your Account account information, which will be governed by their agreement with you and any privacy statement they provide to you. 19.8 (g) In the event that any additional authorised users are added to your Accountaccount, we may share information about the use of the account by any authorised user with all other authorised users. 19.9 We (h) RBS will not share your information with third parties for their own marketing purposes without your permission. 19.10 (i) We may transfer your information to organisations in other countries (including to other Group RBS companies) on the basis that anyone to whom we pass it protects it in the same way we would and in accordance with applicable laws. We will only transfer your information if we are legally obligated to do so, or where the other country has laws that adequately protect your information, or where we have imposed contractual obligations on the recipients that require them to protect your information to the same standard as we are legally required to.

Your Information. 19.1 18.1 We collect and process various categories of personal and financial financial information throughout your relationship with us, to allow us to provide our products and services and to run our business. This includes basic personal information such as your name and contact details, and information about your financial financial circumstances, your accounts and transactions. This section sets out how we may share your information with other Group RBS companies and third parties. 19.2 18.2 For more information about how we use your personal information, the types of information we collect and process and the purposes for which we process personal information, please read our full privacy notice, Ulster Bank Ireland DAC Privacy Notice – Long form, (our ‘“Privacy Notice’”) provided on our website ▇▇▇at ▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. 19.3 We may update our Privacy Notice from time to time, by communicating such changes to you and/or publishing the updated Privacy Notice on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it. 19.4 18.3 In respect of any personal information relating to a third party that you provide to us, you must: (a) notify the third party that you are providing their personal information to us and obtain their permission; (b) provide the third party with a copy of our Privacy Notice and these Terms and ConditionsTerms; (c) promptly notify the third party of any changes to our Privacy Notice that we notify you of; and (d) ensure that, to the best of your knowledge, the personal information is accurate and up to date, and promptly notify us if you become aware that it is incorrect. 19.5 18.4 Your information may be shared with and used by other Group RBS companies. We will only share your information where it is necessary for us to carry out our lawful business activities, or where it is necessary to comply with laws and regulations that apply to us. 19.6 18.5 We will not share your information with anyone outside the Group RBS except: (a) where we have your permission; (b) where required for your product or service; (c) where we are required by law and with to law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world; (d) with other banks and third parties where required by law to help recover funds that have entered your Account account as a result of a misdirected payment by such a third party; (e) with third parties providing services to us, such as market analysis and benchmarking, correspondent banking, and agents and subcontractors sub-contractors acting on our behalf, such as the companies which print our account statements; (f) with other banks to help trace funds where you are a victim of suspected financial financial crime and you have agreed for us to do so, or where we suspect funds have entered your Account account as a result of a financial financial crime; (g) with debt collection agencies; (h) with the Central Credit Register, credit reference and fraud prevention agencies; (i) with third party guarantors or other companies that provide you with benefits benefits or services (such as insurance cover) associated with your product or service; j) where required for a proposed sale, reorganisation, transfer, financial arrangement, asset disposal or other transaction relating to our business and/or assets held by our business; k) in anonymised form as part of statistics or other aggregated data shared with third parties; or l) where permitted by law, it is necessary for our legitimate interests or those of a third party, and it is not inconsistent with the purposes listed above. 19.7 If you ask us to, we may at our sole discretion share information with any third party that provides you with account information or payment services. If you ask a third party provider to provide you with account information or payment services, you are allowing that third party to access information relating to your Account. We are not responsible for any such third party’s use of your Account information, which will be governed by their agreement with you and any privacy statement they provide to you. 19.8 In the event that any additional authorised users are added to your Account, we may share information about the use of the account by any authorised user with all other authorised users. 19.9 We will not share your information with third parties for their own marketing purposes without your permission. 19.10 We may transfer your information to organisations in other countries (including to other Group companies) on the basis that anyone to whom we pass it protects it in the same way we would and in accordance with applicable laws. We will only transfer your information if we are legally obligated to do so, or where the other country has laws that adequately protect your information, or where we have imposed contractual obligations on the recipients that require them to protect your information to the same standard as we are legally required to.

Your Information. 19.1 (a) The organisation responsible for processing your information is National Westminster Bank Plc (trading as NatWest Mentor), which is a member of NatWest Group (“NatWest”). For more information about other NatWest companies please visit ▇▇▇▇▇▇▇.▇▇▇ or contact us on Relay UK ▇▇▇▇▇ ▇▇▇▇ ▇▇▇ ▇▇▇▇ or ▇▇▇▇@▇▇▇▇▇▇.▇▇.▇▇▇ (b) We collect and process various categories of personal and financial financial information throughout your relationship with us, to allow us to provide our products and services and to run our business. This includes basic personal information such as your name and contact details, and information about your financial financial circumstances, your accounts and transactions. This section sets out how we may share your information with other Group NatWest companies and third parties. 19.2 (c) For more information about how we use your personal information, the types of information we collect and process and the purposes for which we process personal information, please read our full Privacy Notice privacy notice (our ‘“Privacy Notice’) provided on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇”). 19.3 (d) We may update our Privacy Notice from time to time, by communicating such changes to you and/or publishing the updated Privacy Notice on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇.▇▇.▇▇/ privacynotice. We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it. 19.4 (e) In respect of any personal information relating to a third party that you provide to us, you must: (a) notify the third party that you are providing their personal information to us and obtain their permission; (b) provide the third party with a copy of our Privacy Notice and these Terms and ConditionsTerms; (c) promptly notify the third party of any changes to our Privacy Notice that we notify you of; and (d) ensure that, to the best of your knowledge, the personal information is accurate and up to date, and promptly notify us if you become aware that it is incorrect. 19.5 (f) Your information may be shared with and used by other Group NatWest companies. We will only share your information where it is necessary for us to carry out our lawful business activities, or where it is necessary to comply with laws and regulations that apply to us. 19.6 (g) We will not share your information with anyone outside the Group RBS except: (a) where we have your permission; (b) where required for your product or service; (c) where we are required by law and with to law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world; (d) with other banks and third parties where required by law to help recover funds that have entered your Account account as a result of a misdirected payment by such a third party; (e) with third parties providing services to us, such as market analysis and benchmarking, correspondent banking, and agents and subcontractors sub-contractors acting on our behalf, such as the companies which print our account statements; (f) with other banks to help trace funds where you are a victim of suspected financial financial crime and you have agreed for us to do so, or where we suspect funds have entered your Account account as a result of a financial financial crime; (g) with debt collection agencies; (h) with credit reference and fraud prevention agencies; (i) with third party guarantors or other companies that provide you with benefits benefits or services (such as insurance cover) associated with your product or service; (j) where required for a proposed sale, reorganisation, transfer, financial financial arrangement, asset disposal or other transaction relating to our business and/or and/ or assets held by our business; (k) in anonymised form as part of statistics or other aggregated data shared with third parties; or (l) where permitted by law, it is necessary for our legitimate interests or those of a third party, and it is not inconsistent with the purposes listed above. 19.7 (h) If you ask us to, we may at our sole discretion will share information with any third party that provides you with account information or payment services. If you ask a third party provider to provide you with account information or payment services, you are you’re allowing that third party to access information relating to your Accountaccount. We are We’re not responsible for any such third party’s use of your Account account information, which will be governed by their agreement with you and any privacy statement they provide to you. 19.8 (i) In the event that any additional authorised users are added to your Accountaccount, we may share information about the use of the account by any authorised user with all other authorised users. 19.9 We (j) RBS will not share your information with third parties for their own marketing purposes without your permission. 19.10 . We may transfer your information to organisations in other countries (including to other Group RBS companies) on the basis that anyone to whom we pass it protects it in the same way we would and in accordance with applicable laws. We will only transfer your information if we are legally obligated to do so, or where the other country has laws that adequately protect your information, or where we have imposed contractual obligations on the recipients that require them to protect your information to the same standard as we are legally required to.

Your Information. 19.1 17.1 We collect and process various categories of personal and financial financial information throughout your relationship with us, to allow us to provide our products and services and to run our business. This includes basic personal information such as your name and contact details, and information about your financial financial circumstances, your accounts and transactions. This section sets out how we may share your information with other NatWest Group companies and third parties. 19.2 17.2 For more information about how we use your personal information, the types of information we collect and process and the purposes for which we process personal information, please read our full privacy notice, Ulster Bank Ireland DAC Privacy Notice – Long form, (our ‘“Privacy Notice’”) provided on our website ▇▇▇at ▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. 19.3 We may update our Privacy Notice from time to time, by communicating such changes to you and/or publishing the updated Privacy Notice on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. 17.3 We can make very limited use of information that you provide to us in relation to a third party, for example an additional authorised account user. We would encourage If you provide such information to visit our website regularly us, we will: (a) contact the third party to stay informed of advise them that we have received their data, the circumstances under which we have received it and the purposes for which we process your information and your rights to control how we process it. 19.4 In respect of any personal information relating to a third party that you provide to us, you must: a) notify will use the third party that you are providing their personal information to us and obtain their permissiondata; (b) ask for confirmation that we may process that data; (c) provide the third party with a copy of access to our Privacy Notice and these Terms and Conditions;privacy notice; and c(d) promptly notify request that the third party of any changes to our Privacy Notice ensures that we notify you of; and d) ensure that, to the best of your knowledge, the personal their information is accurate accurate, up-to-date and up to date, and that they promptly notify us if you they become aware that it is incorrect. 19.5 17.4 Your information may be shared with and used by other NatWest Group companies. We will only share your information where it is necessary for us to carry out our lawful business activities, or where it is necessary to comply with laws and regulations that apply to us. 19.6 17.5 We will not share your information with anyone outside the NatWest Group except: (a) where we have your permission; (b) where required for your product or service; (c) where we are required by law and with to law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world; (d) with other banks and third parties where required by law to help recover funds that have entered your Account account as a result of a misdirected payment by such a third party; (e) with third parties providing services to us, such as market analysis and benchmarking, correspondent banking, and agents and subcontractors sub-contractors acting on our behalf, such as the companies which print our account statements; (f) with other banks to help trace funds where you are a victim of suspected financial financial crime and you have agreed for us to do so, or where we suspect funds have entered your Account account as a result of a financial financial crime; (g) with debt collection agencies; (h) with the Central Credit Register, credit reference and fraud prevention agencies; (i) with third party guarantors or other companies that provide you with benefits benefits or services (such as insurance cover) associated with your product or service; j) where required for a proposed sale, reorganisation, transfer, financial arrangement, asset disposal or other transaction relating to our business and/or assets held by our business; k) in anonymised form as part of statistics or other aggregated data shared with third parties; or l) where permitted by law, it is necessary for our legitimate interests or those of a third party, and it is not inconsistent with the purposes listed above. 19.7 If you ask us to, we may at our sole discretion share information with any third party that provides you with account information or payment services. If you ask a third party provider to provide you with account information or payment services, you are allowing that third party to access information relating to your Account. We are not responsible for any such third party’s use of your Account information, which will be governed by their agreement with you and any privacy statement they provide to you. 19.8 In the event that any additional authorised users are added to your Account, we may share information about the use of the account by any authorised user with all other authorised users. 19.9 We will not share your information with third parties for their own marketing purposes without your permission. 19.10 We may transfer your information to organisations in other countries (including to other Group companies) on the basis that anyone to whom we pass it protects it in the same way we would and in accordance with applicable laws. We will only transfer your information if we are legally obligated to do so, or where the other country has laws that adequately protect your information, or where we have imposed contractual obligations on the recipients that require them to protect your information to the same standard as we are legally required to.

Your Information. 19.1 17.1 We collect and process various categories of personal and financial financial information throughout your relationship with us, to allow us to provide our products and services and to run our business. This includes basic personal information such as your name and contact details, and information about your financial financial circumstances, your accounts and transactions. Digi Ventures is a subsidiary of National Westminster Bank Plc which is a subsidiary of RBS. This section sets out how we may share your information with other Group RBS companies and third parties. 19.2 17.2 For more information about how we use your personal information, the types of information we collect and process and the purposes for which we process personal information, please read our full Privacy Notice privacy notice (our ‘“Privacy Notice’”) provided on our website ▇▇▇▇▇▇.▇▇▇/.▇▇▇▇▇▇▇▇▇▇▇▇▇. 19.3 17.3 We may update our Privacy Notice from time to time, by communicating such changes to you and/or publishing the updated Privacy Notice on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇(insert URL). We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it. 19.4 17.4 In respect of any personal information relating to a third party that you provide to us, you must: a) 17.4.1 notify the third party that you are providing their personal information to us and obtain their permission; b) 17.4.2 provide the third party with a copy of our Privacy Notice and these Terms and Conditionsthis Agreement; c) 17.4.3 promptly notify the third party of any changes to our Privacy Notice that we notify you of; and d) 17.4.4 ensure that, to the best of your knowledge, the personal information is accurate and up to date, and promptly notify us if you become aware that it is incorrect. 19.5 17.5 Your information may be shared with and used by other Group RBS companies. We will only share your information where it is necessary for us to carry out our lawful business activities, or where it is necessary to comply with laws and regulations that apply to us. 19.6 17.6 We will not share your information with anyone outside the Group RBS except: a) 17.6.1 where we have your permission; b) 17.6.2 where required for your product or service; c) 17.6.3 where we are required by law and with to law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world; d) 17.6.4 with other banks and third parties where required by law to help recover funds that have entered your Account account as a result of a misdirected payment by such a third party; e) 17.6.5 with third parties providing services to us, such as market analysis and benchmarking, correspondent banking, and agents and subcontractors sub-contractors acting on our behalf, such as the companies which print our account statements; f) 17.6.6 with other banks to help trace funds where you are a victim of suspected financial financial crime and you have agreed for us to do so, or where we suspect funds have entered your Account account as a result of a financial financial crime; g) 17.6.7 with debt collection agencies; h) 17.6.8 with credit reference and fraud prevention agencies; i) 17.6.9 with third party guarantors or other companies that provide you with benefits benefits or services (such as insurance cover) associated with your product or service; j) 17.6.10 where required for a proposed sale, reorganisation, transfer, financial financial arrangement, asset disposal or other transaction relating to our business and/or assets held by our business; k) 17.6.11 in anonymised form as part of statistics or other aggregated data shared with third parties; or l) 17.6.12 where permitted by law, it is necessary for our legitimate interests or those of a third party, and it is not inconsistent with the purposes listed above. 19.7 17.7 If you ask us to, we may at our sole discretion will share information with any third party Authorised Third Party Provider that provides you with account information Account Information Services or payment servicesPayment Initiation Services. If you ask a third party provider an Authorised Third Party Provider to provide you with account information Account Information Services or payment servicesPayment Initiation Services, you are you’re allowing that third party Authorised Third Party Provider to access information relating to your Account. We are We’re not responsible for any such third party’s Authorised Third Party Provider's use of your Account information, which will be governed by their agreement with you and any privacy statement they provide to you. 19.8 17.8 In the event that any additional authorised users are added to your Accountaccount, we may share information about the use of the account Account by any authorised user with all other authorised users. 19.9 17.9 We will not share your information with third parties for their own marketing purposes without your permission. 19.10 17.10 We may transfer your information to organisations in other countries (including to other Group RBS companies) on the basis that anyone to whom we pass it protects it in the same way we would and in accordance with applicable laws. We will only transfer your information if we are legally obligated to do so, or where the other country has laws that adequately protect your information, or where we have imposed contractual obligations on the recipients that require them to protect your information to the same standard as we are legally required to. 17.11 You consent to us in using your information to provide payment services to you. If you withdraw this consent, we will stop providing payment services but may still use your data or information where we have lawful grounds to do so, for example because we need to retain records for regulatory purposes.

Your Information. 19.1 We collect and process various categories of personal and financial information throughout your relationship with us, to allow us to provide our products and services and to run our business. This includes basic personal information such as your name and contact details, and information about your financial circumstances, your accounts and transactions. This section sets out how we may share your information with other Group companies and third parties. 19.2 For more information about how we use your personal information, the types of information we collect and process and the purposes for which we process personal information, please read our full Privacy Notice (our ‘Privacy Notice’) provided on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. 19.3 We may update our Privacy Notice from time to time, by communicating such changes to you and/or publishing the updated Privacy Notice on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it. 19.4 In respect of any personal information relating to a third party that you provide to us, you must: a) notify the third party that you are providing their personal information to us and obtain their permission; b) provide the third party with a copy of our Privacy Notice and these Terms and Conditions; c) promptly notify the third party of any changes to our Privacy Notice that we notify you of; and d) ensure that, to the best of your knowledge, the personal information is accurate and up to date, and promptly notify us if you become aware that it is incorrect. 19.5 Your information may be shared with and used by other Group companies. We will only share your information where it is necessary for us to carry out our lawful business activities, or where it is necessary to comply with laws and regulations that apply to us. 19.6 We will not share your information with anyone outside the Group except: a) where we have your permission; b) where required for your product or service; c) where we are required by law and with law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world; d) with other banks and third parties where required by law to help recover funds that have entered your Account as a result of a misdirected payment by such a third party; e) with third parties providing services to us, such as market analysis and benchmarking, correspondent banking, and agents and subcontractors acting on our behalf, such as the companies which print our account statements; f) with other banks to help trace funds where you are a victim of suspected financial crime and you have agreed for us to do so, or where we suspect funds have entered your Account as a result of a financial crime; g) with debt collection agencies; h) with credit reference and fraud prevention agencies; i) with third party guarantors or other companies that provide you with benefits or services (such as insurance cover) associated with your product or service; j) where required for a proposed sale, reorganisation, transfer, financial arrangement, asset disposal or other transaction relating to our business and/or assets held by our business; k) in anonymised form as part of statistics or other aggregated data shared with third parties; or l) where permitted permi7ed by law, it is necessary for our legitimate interests or those of a third party, and it is not inconsistent with the purposes listed above. 19.7 If you ask us to, we may at our sole discretion share information with any third party that provides you with account information or payment services. If you ask a third party provider to provide you with account information or payment services, you are allowing that third party to access information relating to your Account. We are not responsible for any such third party’s use of your Account information, which will be governed by their agreement with you and any privacy statement they provide to you. 19.8 In the event that any additional authorised users are added to your Account, we may share information about the use of the account by any authorised user with all other authorised users. 19.9 We will not share your information with third parties for their own marketing purposes without your permission. 19.10 We may transfer your information to organisations in other countries (including to other Group companies) on the basis that anyone to whom we pass it protects it in the same way we would and in accordance with applicable laws. We will only transfer your information if we are legally obligated to do so, or where the other country has laws that adequately protect your information, or where we have imposed contractual obligations on the recipients that require them to protect your information to the same standard as we are legally required to.

Your Information. 19.1 We collect and process various categories of personal and financial information throughout your relationship with us, pledge to allow us to provide our products and services and to run our business. This includes basic personal information such as your name and contact details, and information about your financial circumstances, your accounts and transactions. This section sets out how we may share handle your information with other Group companies responsibly, fairly and third parties. 19.2 For more information legally at all times. We are dedicated to being transparent about how we use your personal information, the types of any information we collect and process use about you. Below we explain who we are, what information we collect, why we collect it, where we collect it from and your rights. If you would like any further details you can get in touch with us using the purposes for which we process personal contact details below. (a) Controller’s details: Caversham Insurance Limited (the terms “we”, “us” or “our” in this notice refers to Caversham Insurance Limited) and Caversham Finance Limited (“BrightHouse”) (In Administration) are the “data controller” of your information, please read our full . You can access the BrightHouse Privacy Notice (our ‘Privacy Notice’) provided by contacting them directly or on our their website here at ▇▇▇▇://▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. 19.3 We may update our Privacy Notice from time to time, by communicating such changes to you and/or publishing the updated Privacy Notice on our website ▇▇▇▇▇▇.▇▇▇/▇▇▇▇▇▇▇▇▇▇▇▇▇. We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it/privacy-notice. 19.4 In respect (b) What information we collect and from where: (i) We collect and process various categories of any personal information relating to a third party that you provide to at the start of, and for the duration of, your relationship with us, you must: a) notify the third party that you are providing their including basic personal information to us (for example, your name, address, date of birth), financial information (for example, bank account details and obtain their permission;debt information), and the “Goods Information” you rent under your Agreement. b(ii) provide the third party with a copy of our Privacy Notice and these Terms and Conditions; c) promptly notify the third party of any changes to our Privacy Notice that we notify you of; and d) ensure that, to the best of We collect your knowledge, the personal information is accurate directly from you and up to datefrom other sources such as, and promptly notify us if you become aware that it is incorrect. 19.5 Your information may be shared with and used by other Group companies. We will only share your information where it is necessary for us to carry out our lawful business activities, or where it is necessary to comply with laws and regulations that apply to us. 19.6 We will not share your information with anyone outside the Group except: a) where we have your permission; b) where required for your product or service; c) where we are required by law and with law enforcement agencies, judicial bodies, government entities, tax authorities or regulatory bodies around the world; d) with other banks and third parties where required by law to help recover funds that have entered your Account as a result of a misdirected payment by such a third party; e) with third parties providing services to us, such as market analysis and benchmarking, correspondent banking, and agents and subcontractors acting on our behalf, such as the companies which print our account statements; f) with other banks to help trace funds where you are a victim of suspected financial crime and you have agreed for us to do so, or where we suspect funds have entered your Account as a result of a financial crime; g) with debt collection agencies; h) with credit reference and fraud prevention agencies, public sources of information e.g. voters roll, other retail organisations, affiliate websites and market researchers. (c) Why we collect your information (purpose) and lawful basis for using your information: (i) We will only process your personal information where we have a lawful basis for doing so. We will use your information: a. for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract (including for underwriting and claims, checking and verifying your identity and contact details, to assess financial and insurance risk and recover any amounts owed); b. for compliance with our legal and regulatory obligations (for example, recording your conversations for compliance purposes and detecting and preventing crime, including fraud); c. for the establishment, exercise or defence of legal claims; d. where you have provided your express consent (we would ask for your consent where we rely on it, for example to process any sensitive health data about you and for marketing where we ask for your consent); e. for pursuing our general business interests and to keep improving our service (this may include customer surveys, marketing, market research); f. Where we need to collect personal information by law, or under the terms of a contract we have with you, and you choose not to provide it, we may not be able to provide certain products or services to you. If this is so, we will tell you. (d) Sharing your information (i) with third party guarantors or other companies So that we can provide you with benefits or services (such as insurance cover) associated with your product or service; j) where required for a proposed saleproducts and services, reorganisation, transfer, financial arrangement, asset disposal or other transaction relating to meet our business and/or assets held by legal obligations and manage our business; k) in anonymised form as part of statistics or , it may be necessary to share your personal information with other aggregated data shared with third parties; or l) where permitted by law, it is necessary for our legitimate interests or those of a third party, and it is not inconsistent with the purposes listed above. 19.7 If you ask us to, we may at our sole discretion share information with any third party that provides you with account information or payment services. If you ask a third party provider to provide you with account information or payment services, you are allowing that third party to access information relating to your Account. We are not responsible for any such third party’s use of your Account information, which will be governed by their agreement with you and any privacy statement they provide to you. 19.8 In the event that any additional authorised users are added to your Account, we may share information about the use of the account by any authorised user with all other authorised users. 19.9 We will not share your information with third parties for their own marketing purposes without your permission. 19.10 other members of the BrightHouse Group of Companies, and with suppliers and service providers acting on our behalf or providing services to us (e.g. the companies we use to carry out repairs, IT & mailing services, storage of paper records, financial organisations, credit reference and fraud prevention agencies, regulatory bodies, central or local government, security services and telecommunications). We have data protection compliant contracts in place with our suppliers and service providers. In some circumstances we are legally obliged to share information. In exceptional cases we may transfer your information to organisations in other countries (including based outside the UK provided we have a legal basis to other Group companies) do so and they ensure that such information is adequately secured and protected and that such transfers meet the requirements of applicable data protection law and regulation. Under any circumstance we will only share the data lawfully. If you wish to obtain a copy of the relevant data protection clauses and safeguards, please contact us on the basis that anyone details provided below. (e) Keeping your information (i) Retention periods for records are determined according to whom we pass it protects it in record type; the same way we would nature of the activity, product or service and in the applicable legal or regulatory requirements. In accordance with applicable lawsour Retention Policy, we normally keep your information for up to 10 years (the average life of an appliance) after you terminate your Policy with us, to enable us to process any claims that may arise and for health and safety reasons. We will only transfer dispose of personal data in a secure manner when we no longer need it. (f) Rights to your information Under data protection law, you have rights that we need to make you aware of. By writing to us using the contact details provided below, you have the right to ask us: (i) to confirm if we hold any Personal Information about you and to obtain a copy of the Personal Information we hold about you (ii) for a copy of the Personal Information you provided to us to be sent to a third party in a commonly used, machine readable format (iii) to update or correct your Personal Information to keep it accurate (iv) to delete your Personal Information from our records if it is no longer needed for the original purpose; (v) to restrict the processing or object to the processing of your Personal Information in certain circumstances – in which case we will either agree to stop processing or explain why we’re unable to; (vi) to withdraw your consent by contacting us. You have the right to withdraw your consent at any time (this will not affect the lawfulness of any processing which has already happened based on that consent). (vii) You also have a right to complain to the Information Commissioner’s Office (ICO). Please note that not all of the above rights are legally obligated absolute and certain exemptions apply to do so, or where the other country has laws that adequately protect your them. (g) Changes to our Privacy Information (i) We regularly review this privacy information, last reviewed January 2021. Where appropriate, changes may be notified to you by post or where we have imposed contractual obligations on the recipients that require them to protect your information to the same standard as we are legally required toemail.