Common use of Collection, Use and Disclosure of Information Clause in Contracts

Collection, Use and Disclosure of Information. This section supplements the terms and conditions pertaining to the collection, use and disclosure of the Customer’s information set forth in the Legal Terms and Conditions. The Customer will, prior to requesting the issuance of a Physical Card for an Employee of the Customer or the opening of a VPA Account in the name of the VPA Account Holder, obtain the following information with respect to each such Employee of the Customer: the legal first and last names, date of birth, personal home address and personal telephone number. The Customer must keep this information for at least seven (7) years after a Cardholder Account and/or VPA Account has been closed and must provide it to Royal Bank, upon request, within thirty (30) days. Royal Bank will, prior to issuing a Physical Card to an Employee of the Customer or opening a VPA Account in the name of the VPA Account Holder, only obtain and keep the following information with respect to each such Employee of the Customer: the legal first and last names, business address, business email address, business phone number and employee identification number. However, in certain circumstances, Royal Bank may require the Customer to obtain such additional information or documentation as Royal Bank may require to verify the identity of an Employee of the Customer at a level sufficient to allow Royal Bank to issue a Physical Card to such Employee of the Customer or the VPA Account Holder or open a VPA Account in the name of such VPA Account Holder. Even though a Physical Card is issued to Cardholders at the Customer’s request and a VPA is opened in the name of a VPA Account Holder, Royal Bank’s primary business relationship is with the Customer. Royal Bank will not ascertain the personal creditworthiness of any Cardholder or VPA Account Holder by obtaining credit bureau reports on them, either at the time a Cardholder Account or a VPA Account is opened or periodically thereafter. Royal Bank may however make other inquiries or checks about them as required by Applicable Law, such as law related to the prevention of money laundering and funding of terrorism. Except as otherwise specified in this Agreement, Royal Bank will not communicate with Cardholders or VPA Account Holders directly and will not send Cardholders or VPA Account Holders any marketing promotion or offer. However, for Cardholders or VPA Account Holders who are participants in the RBC Rewards® program, Royal Bank may communicate with these Cardholders or VPA Account Holders if they have provided consent and their email address for that purpose. The Customer consents to Royal Bank processing and analyzing information about how the Customer uses its Customer Account(s), how Cardholders use their Cardholder Account and how VPA Users use the VPA Account(s) to develop reports that may be made available to the Customer. Royal Bank will remain the owner of such information and reports and retain such information for so long as is appropriate for the purposes of these Commercial Card Program Service Materials, or at a minimum, as required by Applicable Law. The Customer may request and receive reports from time to time, whether through RBC NextLogic Services or not, or otherwise have access to data and information pertaining to individual transactions and activities of Cardholders, VPA Account Holders and Users. The Customer will, as part of the Commercial Card Program, notify Cardholders, VPA Account Holders and Users, and obtain any required consent from each Cardholder, VPA Account Holder and User, in accordance with Applicable Laws, to the collection, use and disclosure of such data and information, including to RBC NextLogic Services, to Royal Bank, to the Customer and to other third parties. Royal Bank may provide information related to amounts charged to a Cardholder Account or a VPA Account to selected merchants and Suppliers used by the Cardholder, VPA Account Holder or VPA User, when requested by such merchants and Suppliers to analyze business trends, Customer needs and generally for marketing purposes. Royal Bank will ensure that the provision of such data will be in a format non-attributable to the Cardholder, VPA Account Holder, VPA Users or the Customer.

Collection, Use and Disclosure of Information. This section supplements the terms and conditions pertaining to the collection, use and disclosure of the Customer’s information set forth in the Legal Terms and Conditions. The Customer will, prior to requesting the issuance of a Physical Card for an Employee of the Customer Customer, or prior to the opening of a VPA Account in the name of the a VPA Account Holder, obtain the following information with respect to each such Employee of the CustomerCustomer or VPA Account Holder: the legal first and last names, date of birth, personal home address and personal telephone number. The Customer must keep this information for at least seven (7) years after a Cardholder Account and/or a VPA Account has been closed and must provide it to Royal Bank, upon request, within thirty (30) days. Royal Bank will, prior to issuing a Physical Card to an Employee of the Customer Customer, or prior to opening a VPA Account in the name of the a VPA Account Holder, only obtain and keep the following information with respect to each such Employee of the CustomerCustomer or VPA Account Holder: the legal first and last names, business address, business email address, business phone number and employee identification number. However, in certain circumstances, Royal Bank may require the Customer to obtain such additional information or documentation as Royal Bank may require to verify the identity of an Employee of the Customer or a VPA Account Holder, at a level sufficient to allow Royal Bank to issue a Physical Card to such Employee of the Customer or the VPA Account Holder or open a VPA Account in the name of such VPA Account Holder. Even though a Physical Card is issued to Cardholders at the Customer’s request a Cardholder and a VPA Account is opened in the name of a VPA Account HolderHolder at the Customer’s request, Royal Bank’s primary business relationship is with the Customer. Royal Bank will not ascertain the personal creditworthiness of any Cardholder or VPA Account Holder by obtaining credit bureau reports on them, either at the time a Cardholder Account or a VPA Account is opened or periodically thereafter. Royal Bank may however make other inquiries or checks about them as required by Applicable Law, such as law related to the prevention of money laundering and funding of terrorism. Except as otherwise specified in this Agreement, Royal Bank will not communicate with Cardholders or VPA Account Holders directly and will not send Cardholders or VPA Account Holders any marketing marketing, promotion or offer. However, for Cardholders or VPA Account Holders who are participants in the RBC Rewards® Avion program, Royal Bank may communicate with these Cardholders or VPA Account Holders if they have provided consent and their email address for that purpose. The Customer consents to Royal Bank processing and analyzing information about how the Customer uses its Customer Account(s), how Cardholders use their Cardholder Account and how VPA Users use the VPA Account(s) to develop reports that may be 9 made available to the Customer. Royal Bank will remain the owner of such information and reports and retain such information for so long as is appropriate for the purposes of these Commercial Card Program Service Materials, or at a minimum, as required by Applicable Law. The Customer may request and receive reports from time to time, whether through RBC NextLogic Services or not, or otherwise have access to data and information pertaining to individual transactions and activities of Cardholders, VPA Account Holders and Users. Current wording in the HSBC Commercial Agreement Revised wording in the RBC CCSM The Customer will, as part of the Commercial Card Program, notify Cardholders, VPA Account Holders and Users, and obtain any required consent from each Cardholder, VPA Account Holder and User, in accordance with Applicable Laws, to the collection, use and disclosure of such data and information, including to RBC NextLogic Services, to Royal Bank, to the Customer and to other third parties. Royal Bank may provide information related to amounts charged to a Cardholder Account or to a VPA Account to selected merchants and Suppliers used by the Cardholder, VPA Account Holder or VPA User, when requested by such merchants and Suppliers to analyze business trends, Customer needs and generally for marketing purposes. Royal Bank will ensure that the provision of such data will be in a format non-attributable to the Cardholder, VPA Account Holder, VPA Users or the Customer.. Unaddressed 12. Communication Between You and Us 12.1. Delivery of Account Documentation Any Account Documentation, including Account Statements, notices and disclosures, may be delivered using one or more means of communication, which may include (a) delivery in paper form, (b) delivery in electronic form using any Electronic Channel, or (c) posting on Royal Bank’s website. If we have important announcements to make, or important information to communicate to you, about your Account(s) and/ or your Business Card Product(s), we will normally do so by adding a message to the Account Statement(s). Each month, when you receive your Account Statement(s), you will look for these messages and read them carefully, where applicable

Collection, Use and Disclosure of Information. This section supplements the terms and conditions pertaining to the collection, use and disclosure of the Customer’s information set forth in the Legal Terms and Conditions. The Customer will, prior to requesting the issuance of a Physical Card for an Employee of the Customer Customer, or prior to the opening of a VPA Account in the name of the a VPA Account Holder, obtain the following information with respect to each such Employee of the CustomerCustomer or VPA Account Holder: the legal first and last names, date of birth, personal home address and personal telephone number. The Customer must keep this information for at least seven (7) years after a Cardholder Account and/or a VPA Account has been closed and must provide it to Royal Bank, upon request, within thirty (30) days. Royal Bank will, prior to issuing a Physical Card to an Employee of the Customer Customer, or prior to opening a VPA Account in the name of the a VPA Account Holder, only obtain and keep the following information with respect to each such Employee of the CustomerCustomer or VPA Account Holder: the legal first and last names, business address, business email address, business phone number and employee identification number. However, in certain circumstances, Royal Bank may require the Customer to obtain such additional information or documentation as Royal Bank may require to verify the identity of an Employee of the Customer or a VPA Account Holder, at a level sufficient to allow Royal Bank to issue a Physical Card to such Employee of the Customer or the VPA Account Holder or open a VPA Account in the name of such VPA Account Holder. Even though a Physical Card is issued to Cardholders at the Customer’s request a Cardholder and a VPA Account is opened in the name of a VPA Account HolderHolder at the Customer’s request, Royal Bank’s primary business relationship is with the Customer. Royal Bank will not ascertain the personal creditworthiness of any Cardholder or VPA Account Holder by obtaining credit bureau reports on them, either at the time a Cardholder Account or a VPA Account is opened or periodically thereafter. Royal Bank may however make other inquiries or checks about them as required by Applicable Law, such as law related to the prevention of money laundering and funding of terrorism. Except as otherwise specified in this Agreement, Royal Bank will not communicate with Cardholders or VPA Account Holders directly and will not send Cardholders or VPA Account Holders any marketing marketing, promotion or offer. However, for Cardholders or VPA Account Holders who are participants in the RBC Rewards® Avion program, Royal Bank may communicate with these Cardholders or VPA Account Holders if they have provided consent and their email address for that purpose. The Customer consents to Royal Bank processing and analyzing information about how the Customer uses its Customer Account(s), how Cardholders use their Cardholder Account and how VPA Users use the VPA Account(s) to develop reports that may be made available to the Customer. Royal Bank will remain the owner of such information and reports and retain such information for so long as is appropriate for the purposes of these Commercial Card Program Service Materials, or at a minimum, as required by Applicable Law. The Customer may request and receive reports from time to time, whether through RBC NextLogic Services or not, or otherwise have access to data and information pertaining to individual transactions and activities of Cardholders, VPA Account Holders and Users. The Customer will, as part of the Commercial Card Program, notify Cardholders, VPA Account Holders and Users, and obtain any required consent from each Cardholder, VPA Account Holder and User, in accordance with Applicable Laws, to the collection, use and disclosure of such data and information, including to RBC NextLogic Services, to Royal Bank, to the Customer and to other third parties. Royal Bank may provide information related to amounts charged to a Cardholder Account or to a VPA Account to selected merchants and Suppliers used by the Cardholder, VPA Account Holder or VPA User, when requested by such merchants and Suppliers to analyze business trends, Customer needs and generally for marketing purposes. Royal Bank will ensure that the provision of such data will be in a format non-attributable to the Cardholder, VPA Account Holder, VPA Users or the Customer.

Collection, Use and Disclosure of Information. This section supplements the terms and conditions pertaining to the collection, use and disclosure of the Customer’s information set forth in the Legal Terms and Conditions. The Customer will, prior to requesting the issuance of a Physical Card for an Employee of the Customer Customer, or prior to the opening of a VPA Account in the name of the a VPA Account Holder, obtain the following information with respect to each such Employee of the CustomerCustomer or VPA Account Holder: the legal first and last names, date of birth, personal home address and personal telephone number. The Customer must keep this information for at least seven (7) years after a Cardholder Account and/or a VPA Account has been closed and must provide it to Royal Bank, upon request, within thirty (30) days. Royal Bank will, prior to issuing a Physical Card to an Employee of the Customer Customer, or prior to opening a VPA Account in the name of the a VPA Account Holder, only obtain and keep the following information with respect to each such Employee of the CustomerCustomer or VPA Account Holder: the legal first and last names, business address, business email address, business phone number and employee identification number. However, in certain circumstances, Royal Bank may require the Customer to obtain such additional information or documentation as Royal Bank may require to verify the identity of an Employee of the Customer or a VPA Account Holder, at a level sufficient to allow Royal Bank to issue a Physical Card to such Employee of the Customer or the VPA Account Holder or open a VPA Account in the name of such VPA Account Holder. Even though a Physical Card is issued to Cardholders at the Customer’s request a Cardholder and a VPA Account is opened in the name of a VPA Account HolderHolder at the Customer’s request, Royal Bank’s primary business relationship is with the Customer. Royal Bank will not ascertain the personal creditworthiness of any Cardholder or VPA Account Holder by obtaining credit bureau reports on them, either at the time a Cardholder Account or a VPA Account is opened or periodically thereafter. Royal Bank may however make other inquiries or checks about them as required by Applicable Law, such as law related to the prevention of money laundering and funding of terrorism. Except as otherwise specified in this Agreement, Royal Bank will not communicate with Cardholders or VPA Account Holders directly and will not send Cardholders or VPA Account Holders any marketing marketing, promotion or offer. However, for Cardholders or VPA Account Holders who are participants in the RBC Rewards® program, Royal Bank may communicate with these Cardholders or VPA Account Holders if they have provided consent and their email address for that purpose. The Customer consents to Royal Bank processing and analyzing information about how the Customer uses its Customer Account(s), how Cardholders use their Cardholder Account and how VPA Users use the VPA Account(s) to develop reports that may be made available to the Customer. Royal Bank will remain the owner of such information and reports and retain such information for so long as is appropriate for the purposes of these Commercial Card Program Service Materials, or at a minimum, as required by Applicable Law. The Customer may request and receive reports from time to time, whether through RBC NextLogic Services or not, or otherwise have access to data and information pertaining to individual transactions and activities of Cardholders, VPA Account Holders and Users. The Customer will, as part of the Commercial Card Program, notify Cardholders, VPA Account Holders and Users, and obtain any required consent from each Cardholder, VPA Account Holder and User, in accordance with Applicable Laws, to the collection, use and disclosure of such data and information, including to RBC NextLogic Services, to Royal Bank, to the Customer and to other third parties. Royal Bank may provide information related to amounts charged to a Cardholder Account or to a VPA Account to selected merchants and Suppliers used by the Cardholder, VPA Account Holder or VPA User, when requested by such merchants and Suppliers to analyze business trends, Customer needs and generally for marketing purposes. Royal Bank will ensure that the provision of such data will be in a format non-attributable to the Cardholder, VPA Account Holder, VPA Users or the Customer.