Common use of Data Protection and Confidentiality Clause in Contracts

Data Protection and Confidentiality. 1. The Cardmember understands and acknowledges the Data Privacy Notice. 2. The Cardmember hereby explicitly consents to the collection, storage, use, and transfer (in electronic or other form) of Cardmember’s personal data by the American Express group of companies worldwide and affiliates (inside or outside of the UAE) for the purpose of implementing, administering, and managing the Cardmember’s Account. The Cardmember understands that AEME may hold certain personal information about the Cardmember, including, but not limited to, name, home address, and telephone number, date of birth, identification number, salary, nationality, and job title for the purpose of implementing, managing and administering the Cardmember’s Account. 3. The Cardmember understands and agrees that AEME may: a. use information about the Cardmember and information about how he or she uses his or her Card Account to develop lists for use within the American Express group of Companies worldwide (including other organizations which issue the Card) and other selected companies in order that AEME or these companies may develop or make offers to the Cardmember (by mail, email, telephone, SMS or any other mode of communication) of products and services in which the Cardmember might be interested. The information used to develop these lists may be obtained from the Application, from information on where the Card is used and information about the nature of the Charges made on the Cardmember’s Card, from surveys and research (which may involve contacting the Cardmember by mail or telephone) and from information obtained from other external sources such as merchants or marketing organizations; b. exchange information about the Cardmember and his or her Card Account with credit rating agencies, Credit Bureaus (including without limitation the Eithad Credit Bureau), or regulatory authorities, and report any Transaction, event, matter or incidence related to the Card or the Cardmember to the regulatory authorities. Such information may be shared with other organizations in assessing applications received from the Cardmember or from members of his or her household for credit or other facilities and for preventing fraud and tracking debtors; c. carry out credit checks whilst any money is owed by the Cardmember on his or her Card Account (including contacting the Cardmember’s bank, financial institution or approved referee) and disclose information about the Cardmember and his or her Card Account to collection agencies and lawyers for the purpose of collecting debts on the Cardmember’s Card Account; d. carry out further credit checks and analyze information about the Cardmember and charges on his or her Card Account, to assist in managing the Cardmember’s Card Account, authorizing Charges on it and to prevent fraud; e. monitor and/or record any telephone calls between AEME and the Cardmember, either directly by AEME or by organizations selected by AEME, to maintain evidence of the contents of such telephone calls and to ensure consistent servicing levels (including staff training) and Account operation; f. undertake all of the above within and outside the Middle East; g. undertake all of the above in respect of any Supplementary Cardmember on the Card Account. When the Cardmember has approved the issue of a Supplementary Card, the Cardmember confirms that he or she has obtained the consent of the Supplementary Cardmember to disclose his or her information to American Express group of companies worldwide and process it for the above purposes. 4. The Cardmember understands that data will be held only as long as is necessary to implement, administer, and manage the Account and make available the Card. The Cardmember understands that Cardmember may, at any time, view data, request additional information about the storage and processing of the data, require any necessary amendments to the data or refuse or withdraw the consents herein, in any case without cost, by contacting AEME in writing. 5. The Data Privacy Notice is available online at xxx.xxxxxxxxxxxxxxx.xx This document includes further details in respect of the collection, processing, transfer and disclosure of personal data. 6. The Cardmember authorises AEME to obtain information, on an ongoing basis, from the Etihad Credit Bureau, banks and other financial institutions, the Cardmember’s employer or any other body as AEME deems appropriate, about the Cardmember’s financial and non-financial affairs which includes but is not limited to the details of the Cardmember’s banking facilities, financial position, income and any other information relating to the Cardmember which AEME deems appropriate without any reference to the Cardmember. 7. The Cardmember understands and agrees that AEME may disclose Confidential Information: a. about the Cardmember, his or her Card Account and Charges on his or her Card Account (which may include details of goods and/or services purchased) to companies within the American Express group of companies worldwide (including third parties and other organizations which issue the Card or provide relevant services), to any other party whose name or logo appears on the Card issued to the Cardmember, to any party authorized by the Cardmember, to AEME’s processors and suppliers and to organizations which accept the Card in payment for goods or services purchased by the Cardmember and obtain such information from those parties, in order to administer and service the Card Account, process and collect Charges on it and manage any benefits or insurance programmes in which the Cardmember is enrolled or if required by applicable law. When the Cardmember purchases goods or services on behalf of a third party, the Cardmember confirms that he or she has obtained the consent of the third party to the disclosure of his or her information to American Express group of companies worldwide for these purposes; b. to its professional advisors who are under a duty of confidentiality to AEME; c. to any actual or potential assignee or transferee (or any agent or adviser of any of the foregoing) of AEME; d. to the UAE Central Bank or any UAE court, tribunal or regulatory, supervisory, tax or other governmental or quasi-governmental authority having jurisdiction over AEME or any other member of the American Express group of companies worldwide, or any other court, tribunal or authority; e. to any credit reference agencies (including Al Etihad Credit Bureau), rating agency, insurer or insurance broker or direct or indirect provider of credit protection to AEME in connection with the Card and Account; f. to any party that provides services to the Cardmember through AEME as an intermediary; x. to any party that AEME reasonably believes to be acting on the Cardmember’s behalf, including without limitation payment recipients, beneficiaries of the Cardmember’s Account, nominees, intermediaries, correspondent and agent banks, clearing houses and clearing or settlement system; h. to any other party to the extent necessary, in AEME’s sole discretion, for AEME to provide the Account and the Card; i. as may be required by Applicable Law; j. as otherwise specified in this Agreement; and k. as may be required in order to preserve or enforce any of AEME’s rights or remedies against the Cardmember. 8. The Cardmember agrees to provide any information or documents that AEME may require and waives any confidentiality rights applicable under data protection, bank secrecy or similar laws in respect of all such information which AEME may disclose in accordance with this clause.

Data Protection and Confidentiality. 1. The Cardmember understands and acknowledges the Data Privacy Notice. 2. The Cardmember hereby explicitly consents to the collection, storage, use, and transfer (in electronic or other form) of Cardmember’s personal data by the American Express group of companies worldwide and affiliates (inside or outside of the UAE) for the purpose of implementing, administering, and managing the Cardmember’s AccountAccount and making available the Card. The Cardmember understands that AEME may hold certain personal information about the Cardmember, including, but not limited to, name, home address, and telephone number, date of birth, identification number, salary, nationality, and job title for the purpose of implementing, managing and administering the Cardmember’s Account. Additionally, AEME may send the Cardmember marketing information (e.g. newsletters, product information or event invitations) concerning products and services of interest to the Cardmember, and the Cardmember’s personal data may be used by AEME to submit offers to the Cardmember and to provide the Cardmember with the best possible service. 32. The Cardmember understands and agrees that AEME may:: 40445_AMEX_UAE Cardmember Agreement_Credit Cards_05_2021 a. use information about the Cardmember and information about how he or she uses his or her Card Account to develop lists for use within the American Express group of Companies worldwide (including other organizations which issue the Card) and other selected companies in order that AEME or these companies may develop or make offers to the Cardmember (by mail, email, telephone, SMS or any other mode of communication) of products and services in which the Cardmember might be interested. The information used to develop these lists may be obtained from the Application, from information on where the Card is used and information about the nature of the Charges made on the Cardmember’s Card, from surveys and research (which may involve contacting the Cardmember by mail or telephone) and from information obtained from other external sources such as merchants or marketing organizations; b. exchange information about the Cardmember and his or her Card Account with credit rating agencies, Credit Bureaus (including without limitation the Eithad Credit Bureau), or regulatory authorities, and report any Transaction, event, matter or incidence related to the Card or the Cardmember to the regulatory authorities. Such information may be shared with other organizations in assessing applications received from the Cardmember or from members of his or her household for credit or other facilities and for preventing fraud and tracking debtors; c. carry out credit checks whilst any money is owed by the Cardmember on his or her Card Account (including contacting the Cardmember’s bank, financial institution or approved referee) and disclose information about the Cardmember and his or her Card Account to collection agencies and lawyers for the purpose of collecting debts on the Cardmember’s Card Account; d. carry out further credit checks and analyze information about the Cardmember and charges on his or her Card Account, to assist in managing the Cardmember’s Card Account, authorizing Charges on it and to prevent fraud; e. monitor and/or record any telephone calls between AEME and the Cardmember, either directly by AEME or by organizations selected by AEME, to maintain evidence of the contents of such telephone calls and to ensure consistent servicing levels (including staff training) and Account operation; f. undertake all of the above within and outside the Middle East; g. undertake all of the above in respect of any Supplementary Cardmember on the Card Account. When the Cardmember has approved the issue of a Supplementary Card, the Cardmember confirms that he or she has obtained the consent of the Supplementary Cardmember to disclose his or her information to American Express group of companies worldwide and process it for the above purposes. 43. The Cardmember understands that data will be held only as long as is necessary to implement, administer, and manage the Account and make available the Card. The Cardmember understands that Cardmember may, at any time, view data, request additional information about the storage and processing of the data, require any necessary amendments to the data or refuse or withdraw the consents herein, in any case without cost, by contacting AEME in writing. 54. The Data Privacy Notice is available online at xxx.xxxxxxxxxxxxxxx.xx This document includes further Further details in respect of the collection, processing, transfer and disclosure of personal datadata are available online. 65. The Cardmember authorises AEME to obtain information, on an ongoing basis, from the Etihad Credit Bureau, banks and other financial institutions, the Cardmember’s employer or any other body as AEME deems appropriate, about the Cardmember’s financial and non-non- financial affairs which includes but is not limited to the details of the Cardmember’s banking facilities, financial position, income and any other information relating to the Cardmember which AEME deems appropriate without any reference to the Cardmember. 76. The Cardmember understands and agrees that AEME may disclose Confidential Information: a. : about the Cardmember, his or her Card Account and Charges on his or her Card Account (which may include details of goods and/or services purchased) to companies within the American Express group of companies worldwide (including third parties and other organizations which issue the Card or provide relevant services), to any other party whose name or logo appears on the Card issued to the Cardmember, to any party authorized by the Cardmember, to AEME’s processors and suppliers and to organizations which accept the Card in payment for goods or services purchased by the Cardmember and obtain such information from those parties, in order to administer and service the Card Account, process and collect Charges on it and manage any benefits or insurance programmes in which the Cardmember is enrolled or if required by applicable law. When the Cardmember purchases goods or services on behalf of a third party, the Cardmember confirms that he or she has obtained the consent of the third party to the disclosure of his or her information to American Express group of companies worldwide for these purposes; b. a. to its professional advisors who are under a duty of confidentiality to AEME; c. b. to any actual or potential assignee or transferee (or any agent or adviser of any of the foregoing) of AEME; d. c. to the UAE Central Bank or any UAE court, tribunal or regulatory, supervisory, tax or other governmental or quasi-governmental authority having jurisdiction over AEME or any other member of the American Express group of companies worldwide, or any other court, tribunal or authority; e. d. to any credit reference agencies (including Al Etihad Credit Bureau), rating agency, insurer or insurance broker or direct or indirect provider of credit protection to AEME in connection with the Card and Account; f. e. to any party that provides services to the Cardmember through AEME as an intermediary; x. f. to any party that AEME reasonably believes to be acting on the Cardmember’s behalf, including without limitation payment recipients, beneficiaries of the Cardmember’s Account, nominees, intermediaries, correspondent and agent banks, clearing houses and clearing or settlement system; h. g. to any other party to the extent necessary, in AEME’s sole discretion, for AEME to provide the Account and the Card; i. h. as may be required by Applicable Law; j. i. as otherwise specified in this Agreement; and k. as may be required in order to preserve or enforce any of AEME’s rights or remedies against the Cardmember. 8. The Cardmember agrees to provide any information or documents that AEME may require and waives any confidentiality rights applicable under data protection, bank secrecy or similar laws in respect of all such information which AEME may disclose in accordance with this clause.

Data Protection and Confidentiality. 1. The Cardmember understands and acknowledges the Data Privacy Notice. 2. The Cardmember hereby explicitly consents to the collection, storage, use, and transfer (in electronic or other form) of Cardmember’s personal data by the American Express group of companies worldwide and affiliates (inside or outside of the UAE) for the purpose of implementing, administering, and managing the Cardmember’s AccountAccount and making available the Card. The Cardmember understands that AEME may hold certain personal information about the Cardmember, including, but not limited to, name, home address, and telephone number, date of birth, identification number, salary, nationality, and job title for the purpose of implementing, managing and administering the Cardmember’s Account. Additionally, AEME may send the Cardmember marketing information (e.g. newsletters, product information or event invitations) concerning products and services of interest to the Cardmember, and the Cardmember’s personal data may be used by AEME to submit offers to the Cardmember and to provide the Cardmember with the best possible service. 32. The Cardmember understands and agrees that AEME may: a. use information about the Cardmember and information about how he or she uses his or her Card Account to develop lists for use within the American Express group of Companies worldwide (including other organizations which issue the Card) and other selected companies in order that AEME or these companies may develop or make offers to the Cardmember (by mail, email, telephone, SMS or any other mode of communication) of products and services in which the Cardmember might be interested. The information used to develop these lists may be obtained from the Application, from information on where the Card is used and information about the nature of the Charges made on the Cardmember’s Card, from surveys and research (which may involve contacting the Cardmember by mail or telephone) and from information obtained from other external sources such as merchants or marketing organizations; b. exchange information about the Cardmember and his or her Card Account with credit rating agencies, Credit Bureaus (including without limitation the Eithad Credit Bureau), or regulatory authorities, and report any Transaction, event, matter or incidence related to the Card or the Cardmember to the regulatory authorities. Such information may be shared with other organizations in assessing applications received from the Cardmember or from members of his or her household for credit or other facilities and for preventing fraud and tracking debtors; c. carry out credit checks whilst any money is owed by the Cardmember on his or her Card Account (including contacting the Cardmember’s bank, financial institution or approved referee) and disclose information about the Cardmember and his or her Card Account to collection agencies and lawyers for the purpose of collecting debts on the Cardmember’s Card Account; d. carry out further credit checks and analyze information about the Cardmember and charges on his or her Card Account, to assist in managing the Cardmember’s Card Account, authorizing Charges on it and to prevent fraud; e. monitor and/or record any telephone calls between AEME and the Cardmember, either directly by AEME or by organizations selected by AEME, to maintain evidence of the contents of such telephone calls and to ensure consistent servicing levels (including staff training) and Account operation; f. undertake all of the above within and outside the Middle East; g. undertake all of the above in respect of any Supplementary Cardmember on the Card Account. When the Cardmember has approved the issue of a Supplementary Card, the Cardmember confirms that he or she has obtained the consent of the Supplementary Cardmember to disclose his or her information to American Express group of companies worldwide and process it for the above purposes. 43. The Cardmember understands that data will be held only as long as is necessary to implement, administer, and manage the Account and make available the Card. The Cardmember understands that Cardmember may, at any time, view data, request additional information about the storage and processing of the data, require any necessary amendments to the data or refuse or withdraw the consents herein, in any case without cost, by contacting AEME in writing. 54. The Data Privacy Notice is available online at xxx.xxxxxxxxxxxxxxx.xx This document includes further Further details in respect of the collection, processing, transfer and disclosure of personal datadata are available online at www. xxxxxxxxxxxxxxx.xx. 65. The Cardmember authorises AEME to obtain information, on an ongoing basis, from the Etihad Credit Bureau, banks and other financial institutions, the Cardmember’s employer or any other body as AEME deems appropriate, about the Cardmember’s financial and non-non- financial affairs which includes but is not limited to the details of the Cardmember’s banking facilities, financial position, income and any other information relating to the Cardmember which AEME deems appropriate without any reference to the Cardmember. 76. The Cardmember understands and agrees that AEME may disclose Confidential Information: a. about the Cardmember, his or her Card Account and Charges on his or her Card Account (which may include details of goods and/or services purchased) to companies within the American Express group of companies worldwide (including third parties and other organizations which issue the Card or provide relevant services), to any other party whose name or logo appears on the Card issued to the Cardmember, to any party authorized by the Cardmember, to AEME’s processors and suppliers and to organizations which accept the Card in payment for goods or services purchased by the Cardmember and obtain such information from those parties, in order to administer and service the Card Account, process and collect Charges on it and manage any benefits or insurance programmes in which the Cardmember is enrolled or if required by applicable law. When the Cardmember purchases goods or services on behalf of a third party, the Cardmember confirms that he or she has obtained the consent of the third party to the disclosure of his or her information to American Express group of companies worldwide for these purposes; b. to its professional advisors who are under a duty of confidentiality to AEME; c. to any actual or potential assignee or transferee (or any agent or adviser of any of the foregoing) of AEME; d. to the UAE Central Bank or any UAE court, tribunal or regulatory, supervisory, tax or other governmental or quasi-governmental authority having jurisdiction over AEME or any other member of the American Express group of companies worldwide, or any other court, tribunal or authority; e. to any credit reference agencies (including Al Etihad Credit Bureau), rating agency, insurer or insurance broker or direct or indirect provider of credit protection to AEME in connection with the Card and Account; f. to any party that provides services to the Cardmember through AEME as an intermediary; ; 40445_AMEX_UAE Cardmember Agreement Individual Liability_05_2021 x. to any party that AEME reasonably believes to be acting on the Cardmember’s behalf, including without limitation payment recipients, beneficiaries of the Cardmember’s Account, nominees, intermediaries, correspondent and agent banks, clearing houses and clearing or settlement system; h. to any other party to the extent necessary, in AEME’s sole discretion, for AEME to provide the Account and the Card; i. as may be required by Applicable Law; j. as otherwise specified in this Agreement; and k. as may be required in order to preserve or enforce any of AEME’s rights or remedies against the Cardmember. 8. The Cardmember agrees to provide any information or documents that AEME may require and waives any confidentiality rights applicable under data protection, bank secrecy or similar laws in respect of all such information which AEME may disclose in accordance with this clause.

Data Protection and Confidentiality. 1. The Cardmember understands and acknowledges agrees to the terms and conditions of the Data Privacy Notice. 2. The Cardmember hereby explicitly consents to the collection, storage, use, and transfer (in electronic or other form) of Cardmember’s personal data by the American Express group of companies worldwide and affiliates (inside or outside of the UAE) for the purpose of implementing, administering, and managing the Cardmember’s Account. The Cardmember understands that AEME may hold certain personal information about the Cardmember, including, but not limited to, name, home address, and telephone number, date of birth, identification number, salary, nationality, and job title for the purpose of implementing, managing and administering the Cardmember’s Account. 3. The Cardmember understands and agrees that AEME may: a. use information about the Cardmember and information about how he or she uses his or her Card Account to develop lists for use within the American Express group of Companies worldwide (including other organizations which issue the Card) and other selected companies in order that AEME or these companies may develop or make offers to the Cardmember (by mail, email, telephone, SMS or any other mode of communication) of products and services in which the Cardmember might be interested. The information used to develop these lists may be obtained from the Application, from information on where the Card is used and information about the nature of the Charges made on the Cardmember’s Card, from surveys and research (which may involve contacting the Cardmember by mail or telephone) and from information obtained from other external sources such as merchants or marketing organizations; b. exchange information about the Cardmember and his or her Card Account with credit rating agencies, Credit Bureaus (including without limitation the Eithad Etihad Credit Bureau), or regulatory authorities, and report any Transaction, event, matter or incidence related to the Card or the Cardmember to the regulatory authorities. Such information may be shared with other organizations in assessing applications received from the Cardmember or from members of his or her household for credit or other facilities and for preventing fraud and tracking debtors; c. carry out credit checks whilst any money is owed by the Cardmember on his or her Card Account (including contacting the Cardmember’s bank, financial institution or approved referee) and disclose information about the Cardmember and his or her Card Account to collection agencies and lawyers for the purpose of collecting debts on the Cardmember’s Card Account; d. carry out further credit checks and analyze information about the Cardmember and charges on his or her Card Account, to assist in managing the Cardmember’s Card Account, authorizing Charges on it and to prevent fraud; e. monitor and/or record any telephone calls between AEME and the Cardmember, either directly by AEME or by organizations selected by AEME, to maintain evidence of the contents of such telephone calls and to ensure consistent servicing levels (including staff training) and Account operation; f. undertake all of the above within and outside the Middle East; g. undertake all of the above in respect of any Supplementary Cardmember on the Card Account. When the Cardmember has approved the issue of a Supplementary Card, the Cardmember confirms that he or she has obtained the consent of the Supplementary Cardmember to disclose his or her information to American Express group of companies worldwide and process it for the above purposes. 4. The Cardmember understands that data will be held only as long as is necessary to implement, administer, and manage the Account and make available the Card. The Cardmember understands that Cardmember may, at any time, view data, request additional information about the storage and processing of the data, require any necessary amendments to the data or refuse or withdraw the consents herein, in any case without cost, by contacting AEME in writing. 5. The Data Privacy Notice is available online at xxx.xxxxxxxxxxxxxxx.xx This document includes further details in respect of the collection, processing, transfer and disclosure of personal data. 6. The Cardmember authorises AEME to obtain information, on an ongoing basis, from the Etihad Credit Bureau, banks and other financial institutions, the Cardmember’s employer or any other body as AEME deems appropriate, about the Cardmember’s financial and non-financial affairs which includes but is not limited to the details of the Cardmember’s banking facilities, financial position, income and any other information relating to the Cardmember which AEME deems appropriate without any reference to the Cardmember. 7. The Cardmember understands and agrees that AEME may disclose Confidential Information: a. : about the Cardmember, his or her Card Account and Charges on his or her Card Account (which may include details of goods and/or services purchased) to companies within the American Express group of companies worldwide (including third parties and other organizations which issue the Card or provide relevant services), to any other party whose name or logo appears on the Card issued to the Cardmember, to any party authorized by the Cardmember, to AEME’s processors and suppliers and to organizations which accept the Card in payment for goods or services purchased by the Cardmember and obtain such information from those parties, in order to administer and service the Card Account, process and collect Charges on it and manage any benefits or insurance programmes in which the Cardmember is enrolled or if required by applicable law. When the Cardmember purchases goods or services on behalf of a third party, the Cardmember confirms that he or she has obtained the consent of the third party to the disclosure of his or her information to American Express group of companies worldwide for these purposes; b. a. to its professional advisors who are under a duty of confidentiality to AEME; c. b. to any actual or potential assignee or transferee (or any agent or adviser of any of the foregoing) of AEME; d. c. to the UAE Central Bank or any UAE court, tribunal or regulatory, supervisory, tax or other governmental or quasi-governmental authority having jurisdiction over AEME or any other member of the American Express group of companies worldwide, or any other court, tribunal or authority; e. d. to any credit reference agencies (including Al Etihad Credit Bureau), rating agency, insurer or insurance broker or direct or indirect provider of credit protection to AEME in connection with the Card and Account; f. e. to any party that provides services to the Cardmember through AEME as an intermediary; x. f. to any party that AEME reasonably believes to be acting on the Cardmember’s behalf, including without limitation payment recipients, beneficiaries of the Cardmember’s Account, nominees, intermediaries, correspondent and agent banks, clearing houses and clearing or settlement system; h. g. to any other party to the extent necessary, in AEME’s sole discretion, for AEME to provide the Account and the Card; i. h. as may be required by Applicable Law; j. i. as otherwise specified in this Agreement; and k. as may be required in order to preserve or enforce any of AEME’s rights or remedies against the Cardmember. 8. The Cardmember agrees to provide any information or documents that AEME may require and waives any confidentiality rights applicable under data protection, bank secrecy or similar laws in respect of all such information which AEME may disclose in accordance with this clause.

Data Protection and Confidentiality. 1. The Cardmember understands and acknowledges the Data Privacy Notice. 2. The Cardmember hereby explicitly consents to the collection, storage, use, and transfer (in electronic or other form) of Cardmember’s personal data by the American Express group of companies worldwide and affiliates (inside or outside of the UAE) for the purpose of implementing, administering, and managing the Cardmember’s Account. The Cardmember understands that AEME may hold certain personal information about the Cardmember, including, but not limited to, name, home address, and telephone number, date of birth, identification number, salary, nationality, and job title for the purpose of implementing, managing and administering the Cardmember’s Account. 3. The Cardmember understands and agrees that AEME may: a. use information about the Cardmember and information about how he or she uses his or her Card Account to develop lists for use within the American Express group of Companies worldwide (including other organizations which issue the Card) and other selected companies in order that AEME or these companies may develop or make offers to the Cardmember (by mail, email, telephone, SMS or any other mode of communication) of products and services in which the Cardmember might be interested. The information used to develop these lists may be obtained from the Application, from information on where the Card is used and information about the nature of the Charges made on the Cardmember’s Card, from surveys and research (which may involve contacting the Cardmember by mail or telephone) and from information obtained from other external sources such as merchants or marketing organizations; b. exchange information about the Cardmember and his or her Card Account with credit rating agencies, Credit Bureaus (including without limitation the Eithad Etihad Credit Bureau), or regulatory authorities, and report any Transaction, event, matter or incidence related to the Card or the Cardmember to the regulatory authorities. Such information may be shared with other organizations in assessing applications received from the Cardmember or from members of his or her household for credit or other facilities and for preventing fraud and tracking debtors; c. carry out credit checks whilst any money is owed by the Cardmember on his or her Card Account (including contacting the Cardmember’s bank, financial institution or approved referee) and disclose information about the Cardmember and his or her Card Account to collection agencies and lawyers for the purpose of collecting debts on the Cardmember’s Card Account; d. carry out further credit checks and analyze information about the Cardmember and charges on his or her Card Account, to assist in managing the Cardmember’s Card Account, authorizing Charges on it and to prevent fraud; e. monitor and/or record any telephone calls between AEME and the Cardmember, either directly by AEME or by organizations selected by AEME, to maintain evidence of the contents of such telephone calls and to ensure consistent servicing levels (including staff training) and Account operation; f. undertake all of the above within and outside the Middle East; g. undertake all of the above in respect of any Supplementary Cardmember on the Card Account. When the Cardmember has approved the issue of a Supplementary Card, the Cardmember confirms that he or she has obtained the consent of the Supplementary Cardmember to disclose his or her information to American Express group of companies worldwide and process it for the above purposes. 4. The Cardmember understands that data will be held only as long as is necessary to implement, administer, and manage the Account and make available the Card. The Cardmember understands that Cardmember may, at any time, view data, request additional information about the storage and processing of the data, require any necessary amendments to the data or refuse or withdraw the consents herein, in any case without cost, by contacting AEME in writing. 5. The Data Privacy Notice is available online at xxx.xxxxxxxxxxxxxxx.xx This document includes further details in respect of the collection, processing, transfer and disclosure of personal data. 6. The Cardmember authorises AEME to obtain information, on an ongoing basis, from the Etihad Credit Bureau, banks and other financial institutions, the Cardmember’s employer or any other body as AEME deems appropriate, about the Cardmember’s financial and non-financial affairs which includes but is not limited to the details of the Cardmember’s banking facilities, financial position, income and any other information relating to the Cardmember which AEME deems appropriate without any reference to the Cardmember. 7. The Cardmember understands and agrees that AEME may disclose Confidential Information: a. : about the Cardmember, his or her Card Account and Charges on his or her Card Account (which may include details of goods and/or services purchased) to companies within the American Express group of companies worldwide (including third parties and other organizations which issue the Card or provide relevant services), to any other party whose name or logo appears on the Card issued to the Cardmember, to any party authorized by the Cardmember, to AEME’s processors and suppliers and to organizations which accept the Card in payment for goods or services purchased by the Cardmember and obtain such information from those parties, in order to administer and service the Card Account, process and collect Charges on it and manage any benefits or insurance programmes in which the Cardmember is enrolled or if required by applicable law. When the Cardmember purchases goods or services on behalf of a third party, the Cardmember confirms that he or she has obtained the consent of the third party to the disclosure of his or her information to American Express group of companies worldwide for these purposes; b. a. to its professional advisors who are under a duty of confidentiality to AEME; c. b. to any actual or potential assignee or transferee (or any agent or adviser of any of the foregoing) of AEME; d. c. to the UAE Central Bank or any UAE court, tribunal or regulatory, supervisory, tax or other governmental or quasi-governmental authority having jurisdiction over AEME or any other member of the American Express group of companies worldwide, or any other court, tribunal or authority; e. d. to any credit reference agencies (including Al Etihad Credit Bureau), rating agency, insurer or insurance broker or direct or indirect provider of credit protection to AEME in connection with the Card and Account; f. e. to any party that provides services to the Cardmember through AEME as an intermediary; x. f. to any party that AEME reasonably believes to be acting on the Cardmember’s behalf, including without limitation payment recipients, beneficiaries of the Cardmember’s Account, nominees, intermediaries, correspondent and agent banks, clearing houses and clearing or settlement system; h. g. to any other party to the extent necessary, in AEME’s sole discretion, for AEME to provide the Account and the Card; i. h. as may be required by Applicable Law; j. i. as otherwise specified in this Agreement; and k. as may be required in order to preserve or enforce any of AEME’s rights or remedies against the Cardmember. 8. The Cardmember agrees to provide any information or documents that AEME may require and waives any confidentiality rights applicable under data protection, bank secrecy or similar laws in respect of all such information which AEME may disclose in accordance with this clause.

Data Protection and Confidentiality. 1. The Cardmember understands and acknowledges the Data Privacy Notice. 2. The Cardmember hereby explicitly consents to the collection, storage, use, and transfer (in electronic or other form) of Cardmember’s personal data by the American Express group of companies worldwide and affiliates (inside or outside of the UAE) for the purpose of implementing, administering, and managing the Cardmember’s AccountAccount and making available the Card. The Cardmember understands that AEME may hold certain personal information about the Cardmember, including, but not limited to, name, home address, and telephone number, date of birth, identification number, salary, nationality, and job title for the purpose of implementing, managing and administering the Cardmember’s Account. Additionally, AEME may send the Cardmember marketing information (e.g. newsletters, product information or event invitations) concerning products and services of interest to the Cardmember, and the Cardmember’s personal data may be used by AEME to submit offers to the Cardmember and to provide the Cardmember with the best possible service. 32. The Cardmember understands and agrees that AEME may: a. use information about the Cardmember and information about how he or she uses his or her Card Account to develop lists for use within the American Express group of Companies worldwide (including other organizations which issue the Card) and other selected companies in order that AEME or these companies may develop or make offers to the Cardmember (by mail, email, telephone, SMS or any other mode of communication) of products and services in which the Cardmember might be interested. The information used to develop these lists may be obtained from the Application, from information on where the Card is used and information about the nature of the Charges made on the Cardmember’s Card, from surveys and research (which may involve contacting the Cardmember by mail or telephone) and from information obtained from other external sources such as merchants or marketing organizations;. b. exchange information about the Cardmember and his or her Card Account with credit rating agencies, Credit Bureaus (including without limitation the Eithad Credit Bureau), or regulatory authorities, and report any Transaction, event, matter or incidence related to the Card or the Cardmember to the regulatory authorities. Such information may be shared with other organizations in assessing applications received from the Cardmember or from members of his or her household for credit or other facilities and for preventing fraud and tracking debtors; c. carry out credit checks whilst any money is owed by the Cardmember on his or her Card Account (including contacting the Cardmember’s bank, financial institution or approved referee) and disclose information about the Cardmember and his or her Card Account to collection agencies and lawyers for the purpose of collecting debts on the Cardmember’s Card Account; d. carry out further credit checks and analyze information about the Cardmember and charges on his or her Card Account, to assist in managing the Cardmember’s Card Account, authorizing Charges on it and to prevent fraud; e. monitor and/or record any telephone calls between AEME and the Cardmember, either directly by AEME or by organizations selected by AEME, to maintain evidence of the contents of such telephone calls and to ensure consistent servicing levels (including staff training) and Account operation; f. undertake all of the above within and outside the Middle East; g. undertake all of the above in respect of any Supplementary Cardmember on the Card Account. When the Cardmember has approved the issue of a Supplementary Card, the Cardmember confirms that he or she has obtained the consent of the Supplementary Cardmember to disclose his or her information to American Express group of companies worldwide and process it for the above purposes. 43. The Cardmember understands that data will be held only as long as is necessary to implement, administer, and manage the Account and make available the Card. The Cardmember understands that Cardmember may, at any time, view data, request additional information about the storage and processing of the data, require any necessary amendments to the data or refuse or withdraw the consents herein, in any case without cost, by contacting AEME in writing. 54. The Data Privacy Notice is available online at xxx.xxxxxxxxxxxxxxx.xx This document includes further Further details in respect of the collection, processing, transfer and disclosure of personal datadata are available online at xxx.xxxxxxxxxxxxxxx.xxx.xx. 65. The Cardmember authorises AEME to obtain information, on an ongoing basis, from the the credit reference agencies (including the Etihad Credit Bureau), banks and other financial institutions, the Cardmember’s employer or any other body as AEME deems appropriate, about the Cardmember’s financial and non-financial affairs which includes but is not limited to the details of the Cardmember’s banking facilities, financial position, income and any other information relating to the Cardmember which AEME deems appropriate without any reference to the Cardmember. 76. The Cardmember understands and agrees that AEME may disclose Confidential Information: a. about the Cardmember, his or her Card Account and Charges on his or her Card Account (which may include details of goods and/or and/ or services purchased) to companies within the American Express group of companies worldwide (including third parties and other organizations which issue the Card or provide relevant services), to any other party whose name or logo appears on the Card issued to the Cardmember, to any party authorized by the Cardmember, to AEME’s processors and suppliers and to organizations which accept the Card in payment for goods or services purchased by the Cardmember and obtain such information from those parties, in order to administer and service the Card Account, process and collect Charges on it and manage any benefits or insurance programmes in which the Cardmember is enrolled or if required by applicable law. When the Cardmember purchases goods or services on behalf of a third party, the Cardmember confirms that he or she has obtained the consent of the third party to the disclosure of his or her information to American Express group of companies worldwide for these purposes; b. to its professional advisors who are under a duty of confidentiality to AEME; c. to any actual or potential assignee or transferee (or any agent or adviser of any of the foregoing) of AEME; d. to the UAE Central Bank of Bahrain or any UAE Kingdom of Bahrain court, tribunal or regulatory, supervisory, tax or other governmental or quasi-governmental authority having jurisdiction over AEME or any other member of the American Express group of companies worldwide, or any other court, tribunal or authority; e. to any credit reference agencies (including Al Etihad Credit Bureau), rating agency, insurer or insurance broker or direct or indirect provider of credit protection to AEME in connection with the Card and Account; f. to any party that provides services to the Cardmember through AEME as an intermediary; x. to any party that AEME reasonably believes to be acting on the Cardmember’s behalf, including without limitation payment recipients, beneficiaries of the Cardmember’s Account, nominees, intermediaries, correspondent and agent banks, clearing houses and clearing or settlement system; h. to any other party to the extent necessary, in AEME’s sole discretion, for AEME to provide the Account and the Card; i. as may be required by Applicable Law; j. as otherwise specified in this Agreement; and k. as may be required in order to preserve or enforce any of AEME’s rights or remedies against the Cardmember. 87. The Cardmember agrees to provide any information or documents that AEME may require and waives any confidentiality rights applicable under data protection, bank secrecy or similar laws in respect of all such information which AEME may disclose in accordance with this clause.

Data Protection and Confidentiality. 1. The Cardmember understands and acknowledges the Data Privacy Notice. 2. The Cardmember hereby explicitly consents to the collection, storage, use, and transfer (in electronic or other form) of Cardmember’s personal data by the American Express group of companies worldwide and affiliates (inside or outside of the UAE) for the purpose of implementing, administering, and managing the Cardmember’s AccountAccount and making available the Card. The Cardmember understands that AEME may hold certain personal information about the Cardmember, including, but not limited to, name, home address, and telephone number, date of birth, identification number, salary, nationality, and job title for the purpose of implementing, managing and administering the Cardmember’s Account. Additionally, AEME may send the Cardmember marketing information (e.g. newsletters, product information or event invitations) concerning products and services of interest to the Cardmember, and the Cardmember’s personal data may be used by AEME to submit offers to the Cardmember and to provide the Cardmember with the best possible service. 32. The Cardmember understands and agrees that AEME may: a. use information about the Cardmember and information about how he or she uses his or her Card Account to develop lists for use within the American Express group of Companies worldwide (including other organizations which issue the Card) and other selected companies in order that AEME or these companies may develop or make offers to the Cardmember (by mail, email, telephone, SMS or any other mode of communication) of products and services in which the Cardmember might be interested. The information used to develop these lists may be obtained from the Application, from information on where the Card is used and information about the nature of the Charges made on the Cardmember’s Card, from surveys and research (which may involve contacting the Cardmember by mail or telephone) and from information obtained from other external sources such as merchants or marketing organizations; b. exchange information about the Cardmember and his or her Card Account with credit rating agencies, Credit Bureaus (including without limitation the Eithad Credit Bureau), or regulatory authorities, and report any Transaction, event, matter or incidence related to the Card or the Cardmember to the regulatory authorities. Such information may be shared with other organizations in assessing applications received from the Cardmember or from members of his or her household for credit or other facilities and for preventing fraud and tracking debtors; c. carry out credit checks whilst any money is owed by the Cardmember on his or her Card Account (including contacting the Cardmember’s bank, financial institution or approved referee) and disclose information about the Cardmember and his or her Card Account to collection agencies and lawyers for the purpose of collecting debts on the Cardmember’s Card Account; d. carry out further credit checks and analyze information about the Cardmember and charges on his or her Card Account, to assist in managing the Cardmember’s Card Account, authorizing Charges on it and to prevent fraud; e. monitor and/or record any telephone calls between AEME and the Cardmember, either directly by AEME or by organizations selected by AEME, to maintain evidence of the contents of such telephone calls and to ensure consistent servicing levels (including staff training) and Account operation; f. undertake all of the above within and outside the Middle East; g. undertake all of the above in respect of any Supplementary Cardmember on the Card Account. When the Cardmember has approved the issue of a Supplementary Card, the Cardmember confirms that he or she has obtained the consent of the Supplementary Cardmember to disclose his or her information to American Express group of companies worldwide and process it for the above purposes. 43. The Cardmember understands that data will be held only as long as is necessary to implement, administer, and manage the Account and make available the Card. The Cardmember understands that Cardmember may, at any time, view data, request additional information about the storage and processing of the data, require any necessary amendments to the data or refuse or withdraw the consents herein, in any case without cost, by contacting AEME in writing.. 40445_AMEX_UAE_ American Express Corporate Card Cardmember Agreement Joint & Several Liability 54. The Data Privacy Notice is available online at xxx.xxxxxxxxxxxxxxx.xx This document includes further Further details in respect of the collection, processing, transfer and disclosure of personal datadata are available online at xxx.xxxxxxxxxxxxxxx.xx . 65. The Cardmember authorises AEME to obtain information, on an ongoing basis, from the Etihad Credit Bureau, banks and other financial institutions, the Cardmember’s employer or any other body as AEME deems appropriate, about the Cardmember’s financial and non-non- financial affairs which includes but is not limited to the details of the Cardmember’s banking facilities, financial position, income and any other information relating to the Cardmember which AEME deems appropriate without any reference to the Cardmember. 76. The Cardmember understands and agrees that AEME may disclose Confidential Information: a. about the Cardmember, his or her Card Account and Charges on his or her Card Account (which may include details of goods and/or services purchased) to companies within the American Express group of companies worldwide (including third parties and other organizations which issue the Card or provide relevant services), to any other party whose name or logo appears on the Card issued to the Cardmember, to any party authorized by the Cardmember, to AEME’s processors and suppliers and to organizations which accept the Card in payment for goods or services purchased by the Cardmember and obtain such information from those parties, in order to administer and service the Card Account, process and collect Charges on it and manage any benefits or insurance programmes in which the Cardmember is enrolled or if required by applicable law. When the Cardmember purchases goods or services on behalf of a third party, the Cardmember confirms that he or she has obtained the consent of the third party to the disclosure of his or her information to American Express group of companies worldwide for these purposes; b. to its professional advisors who are under a duty of confidentiality to AEME; c. to any actual or potential assignee or transferee (or any agent or adviser of any of the foregoing) of AEME; d. to the UAE Central Bank or any UAE court, tribunal or regulatory, supervisory, tax or other governmental or quasi-governmental authority having jurisdiction over AEME or any other member of the American Express group of companies worldwide, or any other court, tribunal or authority; e. to any credit reference agencies (including Al Etihad Credit Bureau), rating agency, insurer or insurance broker or direct or indirect provider of credit protection to AEME in connection with the Card and Account; f. to any party that provides services to the Cardmember through AEME as an intermediary; x. to any party that AEME reasonably believes to be acting on the Cardmember’s behalf, including without limitation payment recipients, beneficiaries of the Cardmember’s Account, nominees, intermediaries, correspondent and agent banks, clearing houses and clearing or settlement system; h. to any other party to the extent necessary, in AEME’s sole discretion, for AEME to provide the Account and the Card; i. as may be required by Applicable Law; ; j. as otherwise specified in this Agreement; and k. as may be required in order to preserve or enforce any of AEME’s rights or remedies against the Cardmember. 87. The Cardmember agrees to provide any information or documents that AEME may require and waives any confidentiality rights applicable under data protection, bank secrecy or similar laws in respect of all such information which AEME may disclose in accordance with this clause.

Data Protection and Confidentiality. 40445_AMEX_UAE Cardmember Agreement Company Liabilit_05_2021 1. The Cardmember understands and acknowledges the Data Privacy Notice. 2. The Cardmember hereby explicitly consents to the collection, storage, use, and transfer (in electronic or other form) of Cardmember’s personal data by the American Express group of companies worldwide and affiliates (inside or outside of the UAE) for the purpose of implementing, administering, and managing the Cardmember’s AccountAccount and making available the Card. The Cardmember understands that AEME may hold certain personal information about the Cardmember, including, but not limited to, name, home address, and telephone number, date of birth, identification number, salary, nationality, and job title for the purpose of implementing, managing and administering the Cardmember’s Account. Additionally, AEME may send the Cardmember marketing information (e.g. newsletters, product information or event invitations) concerning products and services of interest to the Cardmember, and the Cardmember’s personal data may be used by AEME to submit offers to the Cardmember and to provide the Cardmember with the best possible service. 32. The Cardmember understands and agrees that AEME may: a. use information about the Cardmember and information about how he or she uses his or her Card Account to develop lists for use within the American Express group of Companies worldwide (including other organizations which issue the Card) and other selected companies in order that AEME or these companies may develop or make offers to the Cardmember (by mail, email, telephone, SMS or any other mode of communication) of products and services in which the Cardmember might be interested. The information used to develop these lists may be obtained from the Application, from information on where the Card is used and information about the nature of the Charges made on the Cardmember’s Card, from surveys and research (which may involve contacting the Cardmember by mail or telephone) and from information obtained from other external sources such as merchants or marketing organizations; b. exchange information about the Cardmember and his or her Card Account with credit rating agencies, Credit Bureaus (including without limitation the Eithad Credit Bureau), or regulatory authorities, and report any Transaction, event, matter or incidence related to the Card or the Cardmember to the regulatory authorities. Such information may be shared with other organizations in assessing applications received from the Cardmember or from members of his or her household for credit or other facilities and for preventing fraud and tracking debtors; c. carry out credit checks whilst any money is owed by the Cardmember on his or her Card Account (including contacting the Cardmember’s bank, financial institution or approved referee) and disclose information about the Cardmember and his or her Card Account to collection agencies and lawyers for the purpose of collecting debts on the Cardmember’s Card Account; d. carry out further credit checks and analyze information about the Cardmember and charges on his or her Card Account, to assist in managing the Cardmember’s Card Account, authorizing Charges on it and to prevent fraud; e. monitor and/or record any telephone calls between AEME and the Cardmember, either directly by AEME or by organizations selected by AEME, to maintain evidence of the contents of such telephone calls and to ensure consistent servicing levels (including staff training) and Account operation; f. undertake all of the above within and outside the Middle East; g. undertake all of the above in respect of any Supplementary Cardmember on the Card Account. When the Cardmember has approved the issue of a Supplementary Card, the Cardmember confirms that he or she has obtained the consent of the Supplementary Cardmember to disclose his or her information to American Express group of companies worldwide and process it for the above purposes. 43. The Cardmember understands that data will be held only as long as is necessary to implement, administer, and manage the Account and make available the Card. The Cardmember understands that Cardmember may, at any time, view data, request additional information about the storage and processing of the data, require any necessary amendments to the data or refuse or withdraw the consents herein, in any case without cost, by contacting AEME in writing. 54. The Data Privacy Notice is available online at xxx.xxxxxxxxxxxxxxx.xx This document includes further Further details in respect of the collection, processing, transfer and disclosure of personal datadata are available online at xxx.xxxxxxxxxxxxxxx.xx . 65. The Cardmember authorises AEME to obtain information, on an ongoing basis, from the Etihad Credit Bureau, banks and other financial institutions, the Cardmember’s employer or any other body as AEME deems appropriate, about the Cardmember’s financial and non-non- financial affairs which includes but is not limited to the details of the Cardmember’s banking facilities, financial position, income and any other information relating to the Cardmember which AEME deems appropriate without any reference to the Cardmember. 76. The Cardmember understands and agrees that AEME may disclose Confidential Information: a. about the Cardmember, his or her Card Account and Charges on his or her Card Account (which may include details of goods and/or services purchased) to companies within the American Express group of companies worldwide (including third parties and other organizations which issue the Card or provide relevant services), to any other party whose name or logo appears on the Card issued to the Cardmember, to any party authorized by the Cardmember, to AEME’s processors and suppliers and to organizations which accept the Card in payment for goods or services purchased by the Cardmember and obtain such information from those parties, in order to administer and service the Card Account, process and collect Charges on it and manage any benefits or insurance programmes in which the Cardmember is enrolled or if required by applicable law. When the Cardmember purchases goods or services on behalf of a third party, the Cardmember confirms that he or she has obtained the consent of the third party to the disclosure of his or her information to American Express group of companies worldwide for these purposes; b. to its professional advisors who are under a duty of confidentiality to AEME; c. to any actual or potential assignee or transferee (or any agent or adviser of any of the foregoing) of AEME; d. to the UAE Central Bank or any UAE court, tribunal or regulatory, supervisory, tax or other governmental or quasi-governmental authority having jurisdiction over AEME or any other member of the American Express group of companies worldwide, or any other court, tribunal or authority; e. to any credit reference agencies (including Al Etihad Credit Bureau), rating agency, insurer or insurance broker or direct or indirect provider of credit protection to AEME in connection with the Card and Account; f. to any party that provides services to the Cardmember through AEME as an intermediary; x. to any party that AEME reasonably believes to be acting on the Cardmember’s behalf, including without limitation payment recipients, beneficiaries of the Cardmember’s Account, nominees, intermediaries, correspondent and agent banks, clearing houses and clearing or settlement system; h. to any other party to the extent necessary, in AEME’s sole discretion, for AEME to provide the Account and the Card; i. as may be required by Applicable Law; ; j. as otherwise specified in this Agreement; and k. as may be required in order to preserve or enforce any of AEME’s rights or remedies against the Cardmember. 87. The Cardmember agrees to provide any information or documents that AEME may require and waives any confidentiality rights applicable under data protection, bank secrecy or similar laws in respect of all such information which AEME may disclose in accordance with this clause.

Data Protection and Confidentiality. 1. The Cardmember understands and acknowledges the Data Privacy Notice. 2. The Cardmember hereby explicitly consents to the collection, storage, use, and transfer (in electronic or other form) of Cardmember’s personal data by the American Express group of companies worldwide and affiliates (inside or outside of the UAE) for the purpose of implementing, administering, and managing the Cardmember’s AccountAccount and making available the Card. The Cardmember understands that AEME may hold certain personal information about the Cardmember, including, but not limited to, name, home address, and telephone number, date of birth, identification number, salary, nationality, and job title for the purpose of implementing, managing and administering the Cardmember’s Account. Additionally, AEME may send the Cardmember marketing information (e.g. newsletters, product information or event invitations) concerning products and services of interest to the Cardmember, and the Cardmember’s personal data may be used by AEME to submit offers to the Cardmember and to provide the Cardmember with the best possible service. 32. The Cardmember understands and agrees that AEME may: a. use information about the Cardmember and information about how he or she uses his or her Card Account to develop lists for use within the American Express group of Companies worldwide (including other organizations which issue the Card) and other selected companies in order that AEME or these companies may develop or make offers to the Cardmember (by mail, email, telephone, SMS or any other mode of communication) of products and services in which the Cardmember might be interested. The information used to develop these lists may be obtained from the Application, from information on where the Card is used and information about the nature of the Charges made on the Cardmember’s Card, from surveys and research (which may involve contacting the Cardmember by mail or telephone) and from information obtained from other external sources such as merchants or marketing organizations; b. exchange information about the Cardmember and his or her Card Account with credit rating agencies, Credit Bureaus (including without limitation the Eithad Credit Bureau), or regulatory authorities, and report any Transaction, event, matter or incidence related to the Card or the Cardmember to the regulatory authorities. Such information may be shared with other organizations in assessing applications received from the Cardmember or from members of his or her household for credit or other facilities and for preventing fraud and tracking debtors; c. carry out credit checks whilst any money is owed by the Cardmember on his or her Card Account (including contacting the Cardmember’s bank, financial institution or approved referee) and disclose information about the Cardmember and his or her Card Account to collection agencies and lawyers for the purpose of collecting debts on the Cardmember’s Card Account; d. carry out further credit checks and analyze information about the Cardmember and charges on his or her Card Account, to assist in managing the Cardmember’s Card Account, authorizing Charges on it and to prevent fraud; e. monitor and/or record any telephone calls between AEME and the Cardmember, either directly by AEME or by organizations selected by AEME, to maintain evidence of the contents of such telephone calls and to ensure consistent servicing levels (including staff training) and Account operation; f. undertake all of the above within and outside the Middle East; g. undertake all of the above in respect of any Supplementary Cardmember on the Card Account. When the Cardmember has approved the issue of a Supplementary Card, the Cardmember confirms that he or she has obtained the consent of the Supplementary Cardmember to disclose his or her information to American Express group of companies worldwide and process it for the above purposes.. 40445_AMEX_UAE_ CPC-T&C Agreement_05_2021 43. The Cardmember understands that data will be held only as long as is necessary to implement, administer, and manage the Account and make available the Card. The Cardmember understands that Cardmember may, at any time, view data, request additional information about the storage and processing of the data, require any necessary amendments to the data or refuse or withdraw the consents herein, in any case without cost, by contacting AEME in writing. 54. The Data Privacy Notice is available online at xxx.xxxxxxxxxxxxxxx.xx This document includes further Further details in respect of the collection, processing, transfer and disclosure of personal datadata are available online at xxx.xxxxxxxxxxxxxxx. ae . 65. The Cardmember authorises AEME to obtain information, on an ongoing basis, from the Etihad Credit Bureau, banks and other financial institutions, the Cardmember’s employer or any other body as AEME deems appropriate, about the Cardmember’s financial and non-non- financial affairs which includes but is not limited to the details of the Cardmember’s banking facilities, financial position, income and any other information relating to the Cardmember which AEME deems appropriate without any reference to the Cardmember. 76. The Cardmember understands and agrees that AEME may disclose Confidential Information: a. about the Cardmember, his or her Card Account and Charges on his or her Card Account (which may include details of goods and/or services purchased) to companies within the American Express group of companies worldwide (including third parties and other organizations which issue the Card or provide relevant services), to any other party whose name or logo appears on the Card issued to the Cardmember, to any party authorized by the Cardmember, to AEME’s processors and suppliers and to organizations which accept the Card in payment for goods or services purchased by the Cardmember and obtain such information from those parties, in order to administer and service the Card Account, process and collect Charges on it and manage any benefits or insurance programmes in which the Cardmember is enrolled or if required by applicable law. When the Cardmember purchases goods or services on behalf of a third party, the Cardmember confirms that he or she has obtained the consent of the third party to the disclosure of his or her information to American Express group of companies worldwide for these purposes; b. to its professional advisors who are under a duty of confidentiality to AEME; c. to any actual or potential assignee or transferee (or any agent or adviser of any of the foregoing) of AEME; d. to the UAE Central Bank or any UAE court, tribunal or regulatory, supervisory, tax or other governmental or quasi-governmental authority having jurisdiction over AEME or any other member of the American Express group of companies worldwide, or any other court, tribunal or authority; e. to any credit reference agencies (including Al Etihad Credit Bureau), rating agency, insurer or insurance broker or direct or indirect provider of credit protection to AEME in connection with the Card and Account; f. to any party that provides services to the Cardmember through AEME as an intermediary; x. to any party that AEME reasonably believes to be acting on the Cardmember’s behalf, including without limitation payment recipients, beneficiaries of the Cardmember’s Account, nominees, intermediaries, correspondent and agent banks, clearing houses and clearing or settlement system; h. to any other party to the extent necessary, in AEME’s sole discretion, for AEME to provide the Account and the Card; i. as may be required by Applicable Law; ; j. as otherwise specified in this Agreement; and k. as may be required in order to preserve or enforce any of AEME’s rights or remedies against the Cardmember.. 40445_AMEX_UAE_ CPC-T&C Agreement_05_2021 87. The Cardmember agrees to provide any information or documents that AEME may require and waives any confidentiality rights applicable under data protection, bank secrecy or similar laws in respect of all such information which AEME may disclose in accordance with this clause.

Data Protection and Confidentiality. 1. The Cardmember understands and acknowledges the Data Privacy Notice. 2. The Cardmember hereby explicitly consents to the collection, storage, use, and transfer (in electronic or other form) of Cardmember’s personal data by the American Express group of companies worldwide and affiliates (inside or outside of the UAE) for the purpose of implementing, administering, and managing the Cardmember’s AccountAccount and making available the Card. The Cardmember understands that AEME may hold certain personal information about the Cardmember, including, but not limited to, name, home address, and telephone number, date of birth, identification number, salary, nationality, and job title for the purpose of implementing, managing and administering the Cardmember’s Account. Additionally, AEME may send the Cardmember marketing information (e.g. newsletters, product information or event invitations) concerning products and services of interest to the Cardmember, and the Cardmember’s personal data may be used by AEME to submit offers to the Cardmember and to provide the Cardmember with the best possible service. 32. The Cardmember understands and agrees that AEME may: a. use information about the Cardmember and information about how he or she uses his or her Card Account to develop lists for use within the American Express group of Companies worldwide (including other organizations which issue the Card) and other selected companies in order that AEME or these companies may develop or make offers to the Cardmember (by mail, email, telephone, SMS or any other mode of communication) of products and services in which the Cardmember might be interested. The information used to develop these lists may be obtained from the Application, from information on where the Card is used and information about the nature of the Charges made on the Cardmember’s Card, from surveys and research (which may involve contacting the Cardmember by mail or telephone) and from information obtained from other external sources such as merchants or marketing organizations; b. exchange information about the Cardmember and his or her Card Account with credit rating agencies, Credit Bureaus (including without limitation the Eithad Credit Bureau), or regulatory authorities, and report any Transaction, event, matter or incidence related to the Card or the Cardmember to the regulatory authorities. Such information may be shared with other organizations in assessing applications received from the Cardmember or from members of his or her household for credit or other facilities and for preventing fraud and tracking debtors; c. carry out credit checks whilst any money is owed by the Cardmember on his or her Card Account (including contacting the Cardmember’s bank, financial institution or approved referee) and disclose information about the Cardmember and his or her Card Account to collection agencies and lawyers for the purpose of collecting debts on the Cardmember’s Card Account; d. carry out further credit checks and analyze information about the Cardmember and charges on his or her Card Account, to assist in managing the Cardmember’s Card Account, authorizing Charges on it and to prevent fraud; e. monitor and/or record any telephone calls between AEME and the Cardmember, either directly by AEME or by organizations selected by AEME, to maintain evidence of the contents of such telephone calls and to ensure consistent servicing levels (including staff training) and Account operation; f. undertake all of the above within and outside the Middle East; g. undertake all of the above in respect of any Supplementary Cardmember on the Card Account. When the Cardmember has approved the issue of a Supplementary Card, the Cardmember confirms that he or she has obtained the consent of the Supplementary Cardmember to disclose his or her information to American Express group of companies worldwide and process it for the above purposes. 43. The Cardmember understands that data will be held only as long as is necessary to implement, administer, and manage the Account and make available the Card. The Cardmember understands that Cardmember may, at any time, view data, request additional information about the storage and processing of the data, require any necessary amendments to the data or refuse or withdraw the consents herein, in any case without cost, by contacting AEME in writing. 54. The Data Privacy Notice is available online at xxx.xxxxxxxxxxxxxxx.xx This document includes further Further details in respect of the collection, processing, transfer and disclosure of personal datadata are available online at www. xxxxxxxxxxxxxxx.xx. 65. The Cardmember authorises AEME to obtain information, on an ongoing basis, from the Etihad Credit Bureau, banks and other financial institutions, the Cardmember’s employer or any other body as AEME deems appropriate, about the Cardmember’s financial and non-non- financial affairs which includes but is not limited to the details of the Cardmember’s banking facilities, financial position, income and any other information relating to the Cardmember which AEME deems appropriate without any reference to the Cardmember. 76. The Cardmember understands and agrees that AEME may disclose Confidential Information: a. about the Cardmember, his or her Card Account and Charges on his or her Card Account (which may include details of goods and/or services purchased) to companies within the American Express group of companies worldwide (including third parties and other organizations which issue the Card or provide relevant services), to any other party whose name or logo appears on the Card issued to the Cardmember, to any party authorized by the Cardmember, to AEME’s processors and suppliers and to organizations which accept the Card in payment for goods or services purchased by the Cardmember and obtain such information from those parties, in order to administer and service the Card Account, process and collect Charges on it and manage any benefits or insurance programmes in which the Cardmember is enrolled or if required by applicable law. When the Cardmember purchases goods or services on behalf of a third party, the Cardmember confirms that he or she has obtained the consent of the third party to the disclosure of his or her information to American Express group of companies worldwide for these purposes; b. to its professional advisors who are under a duty of confidentiality to AEME; c. to any actual or potential assignee or transferee (or any agent or adviser of any of the foregoing) of AEME; d. to the UAE Central Bank or any UAE court, tribunal or regulatory, supervisory, tax or other governmental or quasi-governmental authority having jurisdiction over AEME or any other member of the American Express group of companies worldwide, or any other court, tribunal or authority; e. to any credit reference agencies (including Al Etihad Credit Bureau), rating agency, insurer or insurance broker or direct or indirect provider of credit protection to AEME in connection with the Card and Account; f. to any party that provides services to the Cardmember through AEME as an intermediary; x. to any party that AEME reasonably believes to be acting on the Cardmember’s behalf, including without limitation payment recipients, beneficiaries of the Cardmember’s Account, nominees, intermediaries, correspondent and agent banks, clearing houses and clearing or settlement system; h. to any other party to the extent necessary, in AEME’s sole discretion, for AEME to provide the Account and the Card; i. as may be required by Applicable Law; j. as otherwise specified in this Agreement; and k. as may be required in order to preserve or enforce any of AEME’s rights or remedies against the Cardmember. 87. The Cardmember agrees to provide any information or documents that AEME may require and waives any confidentiality rights applicable under data protection, bank secrecy or similar laws in respect of all such information which AEME may disclose in accordance with this clause.