Common use of Privacy Notice Clause in Contracts

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may we share your information with? In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation.

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may we share your information with? In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone PlaceOakley House, KetteringHeadway Business Park, NN14 1FN0 Xxxxx Xxx Xxxx, Xxxxx XX00 0XX. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation.

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about The mobile application you when you engage us are using (the “Demo App”) has been provided to certain staff of TransUnion’s clients (or potential clients) for financial advice, financial planning and investment management servicesdemonstration purposes only. This information will relate Privacy Notice applies to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is solely for the performance purposes of our contract with yousuch demonstration. The information that we collect about you is essential Who are we? We are TransUnion International UK Limited (company number 03961870) (referred to as “TransUnion” for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example purposes of this Demo App), with headquarters at Xxx Xxxx Xxxx, Xxxxx, Xxxx Xxxxxxxxx XX0 0XX. What is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may we share your information with? In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing? We are processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to demonstrate how TransUnion’s Document Verification and Biometric Matching app (the ‘live’ version of this Demo App) could potentially operate to assist TransUnion’s clients with identity verification and/or anti-money laundering and/or the detection/prevention of fraud or financial crime. What data will you be forwarded processing? We will be processing the data you input into the Demo App (a photographic image of your identity document, including the data it contains, a real-time photograph of your face, and any secondary documents you photograph, e.g. a utility bill or bank statement) as part of the demonstration, as well as your device metadata (which includes your geolocation data - if you have given permission for this to be collected). We will also be processing the data that we return to you, which will be presented back to you as a third party we summary report via the Demo App. What is the legal basis for processing? We are processing your data on the basis of your consent. This must be your explicit consent so please read this notice carefully (along with the End User Terms & Conditions) to ensure you fully understand how your data will use appropriate security measures be used, stored, transferred and deleted. Who will the data be transferred to? The data processed through the Demo App will be passed to protect TransUnion’s sub-contractor Paycasso Verify Limited (company number 08057477) (“Paycasso”) which will be processing your personal data in transiton TransUnion’s behalf. This Paycasso will include not be allowed to use the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification its own purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your informationwill my data be stored for before it is deleted? During Your data will only be stored for the course duration of our relationship with you we the demonstration. Your input data will retain personal data which is necessary to provide services be processed and a report will be returned to you. We will take Once the demonstration is complete and the Demo App is closed, all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain of your data (including the report) stored on the mobile telephone you are using (as well as on Paycasso’s servers) will be securely deleted and destroyed. Will I be able to exercise my rights as a data subject under the GDPR? Under the GDPR, you have various rights in relation to the data we are processing (for specified minimum periods. These areexample, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have obtain a copy of your data, the right to request deletion rectify your data, the right to have your data erased and the right to withdraw your consent). However, due to the limited period of time Paycasso will be holding your data before it is deleted, it will not be possible for us to implement such a request. Who can you complain to if you’re unhappy about the use of your personal data? You can contact our Data Protection Officer at xxx@xxxxxxxxxx.xx.xx. We will comply with this request, subject You also have a right to complain to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal informationInformation Commissioner’s Office at Wycliffe House, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about youWater Lane, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone PlaceWilmslow, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register Cheshire SK9 5AF or by contacting the FCA telephone on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation0000 000 0000.

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial planning advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetingscollect information when you voluntarily complete client surveys or provide feedback to us. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will informati use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx site Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may might we share your information with? If you agree, we may email you about other products or services that we think may be of interest to you. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the , such as password protection and/or encryption of data transmitted electronicallyto enhance the security of the data during transfer. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will may send your details to a credit referencing agency third party agencies for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain keep hold of your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance mortgage business • Indefinitely for pension transfers and opt-out outs Three years for insurance business These are minimum periods, periods during which we have a legal obligation to retain your records. In any case, we will not keep your personal data for longer than five years after our relationship with you has ended. We reserve the right to retain data for longer where we believe it is it's in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject requ to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, information please email or write to us using the contact details noted below. When your personal data is processed by automated means you have the right to ask us to move your personal data to another organisation for their use. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How Marketing agreed to contact receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you have any questions about our privacy policy or information we hold about youno longer wish to be contacted for marketing purposes, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendationpost.

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. You will also need to read through Appendix A, which specifically relates to your privacy of information, before signing and confirming your agreement within Appendix A. What information do we collect about youInformation Do We Collect About You? We collect information about you when you engage us for financial planning/financial advice, financial planning and /investment management services. This information will relate to your personal and financial circumstances. It may also include special categories catagories of personal data such as data about your health, if this is necessary necessasary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetingscollect information when you voluntaily complete client surveys or provide feedback to us. Information relating to usage the use of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour behavior information. We will We’ll use your the information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals About Connected Individuals We may need to gather personal information about your close family members and dependants in order to provide our service ser- vice to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will We’ll provide a copy of this privacy notice for them orthem, or where appropriate, ask you to pass the privacy information on to them. Why do we need to collect and use your personal dataDo We Need To Collect And Use Your Personal Data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectivelyeffectivly. Without collecting your personal data we would we’d also be unable to fulfil fulfill our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about youWill We Use The Information About You? We collect information about you in order to provide you with the services for which you engage us. Who may we share your information with? In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation.

Privacy Notice. This Xxx Xxxxxxx & Company Privacy Notice May 2018: How Xxx Xxxxxxx & Company ("we") use your information Your privacy notice explains how we use any personal information we collect about youis important to us. We are committed to safeguarding the privacy of your information. What information data do we collect about you& why? We will collect and hold the information about you when you engage deemed necessary to enable us for financial adviceto communicate with our clients and to manage our client body as we are contracted to do so. In the context of GDPR we consider our clients as owners of properties we have been instructed to value, financial planning market or manage and investment management servicesthus generating the lawful basis (under Articles 5(2) and 24) upon which we hold the information. This information will relate to your personal include names, contact details, address, Identification and financial circumstances. It may also include special categories of other sensitive personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour informationbank details. We will sometimes hold similar information for anyone who may be nominated by our clients as someone who we may contact in their absence. How do we process data? Most of our information is held electronically within an operating system which is subject to secure and password protected access rights. Any hard copy information is collected and contained within lockable filing cabinets and is destroyed in accordance with the Data Protection legislation. How do we use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. share data? We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order given to provide you with the services for which you engage us. Who may we share your information with? In order us by our clients to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place make contact with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it the duties and purposes for which we are contracted and any information that is necessary for your personal data to be forwarded shared to a third party we will use appropriate security measures to protect your personal data in transit. This will include is done so under the encryption context of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of compliance with the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal datalaw or legitimate interests. How long do we retain hold data for? We hold your information? During data for varying lengths of time depending on the course type of our relationship information in question but in doing so we always comply with Data Protection legislation. Please contact us if you wish to make any changes to the information we will retain personal data which hold, if for example it is necessary or has become inaccurate. Requesting access to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These areUnder Data Protection legislation, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You you have the right to request deletion of access to information about you that we hold. To make a request for your personal data. We will comply with this requestinformation contact the Data Protection Officer at xxxxxxxx@xxxxxxxxxx.xxx or write to Xxx Xxxxxxx Lettings, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? 000 Xxxxxx Xxxx, Xxxx, WA15 9SF You also have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation.to:

Privacy Notice. This notice explains how Avire Trading Limited (referred to in this notice as Avire, we or us) collects and uses your personal information in connection with the use of our Services including our Products, Website(s), Hosted Services (including Cloud), Apps, and other services. This privacy notice explains how is to inform you about: • How to contact us. • What personal information is; • How we use any collect your personal information; • The types of personal information we collect; • How we use your personal information; • The legal basis for processing your personal information; • What will happen if you do not provide the information we request; • How we share your personal information; • How we keep your personal information secure; • When do we transfer your information overseas; • How long we keep your personal information; • Your rights in relation to your personal information; and • How to make complaints in relation to your personal information. The table at the end of this notice provides an overview of the data that we collect, the purposes for which we use that data, the legal basis which permits us to use your information and the rights that you have in relation to your information. We will treat all of your personal information as confidential and in accordance with the Data Protection Legislation and your personal information will only be shared with others in accordance with this privacy notice. We keep this privacy notice up to date, so if there are any changes to the way in which your personal information is used this privacy notice will be updated and we will notify you of the changes. Contact details Our contact details are as follows: Address: Avire Trading Ltd, Xxxx 0, Xxx Xxxxxxxxxx, Xxxxxxx Xxxx, Maidenhead SL6 7RJ, United Kingdom Telephone: +00 (0)0000 000000 Avire has appointed a data protection officer who has responsibility for advising Avire on its data protection obligations. You can contact the data protection officer using the contact details above. What is personal information? Personal information is any information that tells us something about an individual. This could include information such as name, contact details, phone number or date of birth. How do we collect personal information? We collect personal information about youyou from various sources including: • when setting up a SmartView Hub account; • when performing local device set up on XxxxxXxxxxx.xxx • when adding or removing users to a SmartView Hub account; and • from you when using a SmartView Hub account. What information do we collect about youcollect? • Personal and/or business contact details such as employer, name, title, address and email addresses; • Account information (including details of work carried out by you in relation to any installation); • Geo-location information which tells us you carried out work at a particular location and other information obtained through our Cloud Services • IP Adress and Subnet Mask of installed unit on client’s network How do we use your information? We use your information for the following purposes: • to conduct checks to authorize an SmartView Hub account; • to administer the Terms of Use for the Cloud Services, • to notify you about other products and services that we offer; • for business management and planning purposes, including accounting and auditing; • to conduct data analysis to provide information useful to our customers, including but not limited to, lift telemetry, usage, and fault diagnosis information • to conduct data analytics studies to review and better understand our customers • to comply with our legal obligations and professional codes; and • to comply with information requests that we receive from regulators and law enforcement authorities or to comply with court orders. What is the legal basis that permits us to use your information? Under Data Protection Legislation we are only permitted to use your personal information if we have a legal basis for doing so as set out in the Data Protection Legislation. We rely on the following legal bases to use your information in relation to our Cloud Services: • where we need information to perform the contract we have entered into with you; and • where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. In more limited circumstances we may also rely on the following legal bases: • Where we need to protect your interests (or someone else’s interests); and • Where it is needed in the public interest or for official purposes. The table at the end of this notice provides more detail about the information that we use, the legal basis that we rely on in each case and your rights. What happens if you do not provide information that we request? We need some of your personal information in order to perform our contract with you to provide the Cloud Services. For example, we need to know your name so that a profile can be created for an SmartView Hub account. Where information is needed for these purposes if you do not provide it we will not be able to offer our Cloud Services to you. We explain when this is the case at the point where we collect information about you when you engage us for financial advice, financial planning and investment management servicesfrom you. How do we share your information? We share your personal information in the following ways: • Where we use third party services providers who process personal information on our behalf in order to provide services to us. This includes IT systems providers and IT contractors, cloud service providers, and wireless network operators • Where we share your personal information with third parties we ensure that we have appropriate measures in place to safeguard your personal information and to ensure that it is solely used for How do we keep your information secure? We will relate ensure access to personal information is restricted to employees of Avire on a need to know basis. Training will be provided to any of those employees of Avire who need access to your personal information to ensure it is secure at all times. When do we transfer your information overseas? When data is transferred to countries outside of the UK and financial circumstancesthe European Economic Area those countries may not offer an equivalent level of protection for personal information to the laws in the UK. It may also include special categories of personal data such as data about your health, if Where this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating case we will ensure that appropriate safeguards are put in place to usage of our website is collected using cookies. These are text files placed on protect your computer to collect standard internet log information and visitor behaviour personal information. We will use For how long do we keep your information? As a general rule we keep your personal information for as long as you retain a user profile on a SmartView Hub Account and for a period of 6 months after your profile is removed. However, where we have statutory obligations to keep personal information for a longer period or where we may need your information collected from for a longer period in case of a legal claim, then the website to personalise your repeat visits to the siteretention period may be longer. Full details of the retention periods that apply to your information are set out in our Data Retention Policy which is available on request. Your rights in relation to your information You have a number of rights in relation to your personal information, these include the right to: • be informed about how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary information; • obtain access to your personal information that we hold; • request that your personal information is corrected if you believe it is incorrect, incomplete or inaccurate; • request that we erase your personal information in the following circumstances: o if Avire is continuing to process personal data beyond the period when it is necessary to do so for the purpose for which it was originally collected; o if Avire is relying on consent as the legal basis that we intend for processing and you withdraw consent; o if Avire is relying on legitimate interest as the legal basis for processing and you object to use for this processing and there is no overriding compelling ground which enables us to continue with the processing; o if the personal data has been processed unlawfully (i.e. in breach of the requirements of the Data Protection Legislation); or o if it is necessary to delete the personal data to comply with a legal obligation; • ask us to restrict our data processing activities where you consider that: o personal information is inaccurate; o our processing of your data personal information is for unlawful; o where we no longer need the performance of our contract with you. The personal information that we collect about but you is essential for require us to be able keep it to carry out the services that enable you require from us effectively. Without collecting your personal data we would also be unable to fulfil our establish, exercise or defend a legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is claim; or o where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may we share your information with? In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data raised an objection to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to information; • request a copy of the certain personal information that you have provided to us in a commonly used electronic format. This right relates to personal information that you have provided to us that we hold about need in order to perform our agreement with you and personal information where we are relying on consent to process your personal information; • object to our processing of your personal information where we are relying on legitimate interests or exercise of a public interest task to make the processing lawful. If you raise an objection we will carry out an assessment to determine whether we have an overriding legitimate ground which entitles us to continue to process your personal information; and • not be subject to automated decisions which produce legal effects or which could have a similarly significant effect on you. If you would like a copy of some or all to exercise any of your personal information, please email rights or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about youfind out more, please contact us by email our Data Protection Officer. The table at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Placethe end of this notice provides more detail about the information that we use, Kettering, NN14 1FN. This is our standard client agreement upon which the legal basis that we intend to rely. This agreement should be read rely on in conjunction with the Services each case and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendationrights.

Privacy Notice. ‌ United States Fire Insurance Company, The North River Insurance Company and affiliates within Xxxx & Xxxxxxx (collectively, “The Company”) values your business and your trust. In order to administer insurance policies and provide you with effective customer service, we must collect certain information including nonpublic personal information about our customers and claimants. Nonpublic personal information means information that allows someone to identify or contact you (“Information”). We are committed to protecting such Information and we will comply with all applicable federal and state laws and regulations. This privacy notice explains describes how we collect, use any personal and share your Information, your rights with respect to insurance products issued by The Company and our legal duties and privacy practices. State laws require that we provide this notice. Please review this Notice and keep a copy of it with your records. Your privacy is our concern When you apply to The Company for insurance or make a claim against a policy written by The Company, you disclose information about yourself to us. The Company limits the collection, use, and disclosure of such information to only what is needed to properly produce, underwrite and service its insurance products and/or fulfill legal or regulatory requirements. The Company maintains administrative, technical and physical safeguards that comply with state and federal regulations to protect your Information. We also limit employee access to Information to those with a business reason for knowing such Information and we collect about youtake measures to enforce employee privacy responsibilities. What kind of information do we collect about youyou and from whom? We collect obtain most of our Information from you. The application or claim form you complete, as well as any additional information you provide, generally gives us most of the information we need to know. Sometimes we may contact you by phone or mail to obtain additional information. We may use information about you when from other transactions with us, our affiliates, or others. Depending on the nature of your insurance transaction, we may need additional information about you engage us or other individuals proposed for financial advicecoverage. We may obtain the additional information we need from third parties, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data other insurance companies or agents, government agencies, medical providers, insurance support organizations, the state motor vehicle department, information clearinghouses, credit reporting agencies, courts, or public records. A report from a consumer reporting agency may contain information as to creditworthiness, credit standing, credit capacity, character, general reputation, hobbies, occupation, personal characteristics, or mode of living. What do we do with the information collected about your healthyou? The Company collects nonpublic information to conduct its business of producing, if this underwriting, servicing and administering its insurance products. If coverage is necessary declined or the charge for coverage is increased because of information contained in a consumer report we obtained, we will inform you, as required by state law or the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour informationfederal Fair Credit Reporting Act. We will use your information collected from also give you the website to personalise your repeat visits to name and address of the siteconsumer reporting agency making the report. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need retain information about our former customers and may disclose that information to gather affiliates and non-affiliates only as described in this notice. To whom do we disclose information about you? Access to non-public personal information about your close family members is limited to those employees, and dependants in order authorized representatives, attorneys and service providers who specifically need such information to provide our service to you effectivelyconduct their business responsibilities. In such cases it will be your responsibility to ensure that you have addition, we may disclose all the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able affiliated companies and nonaffiliated third parties (as permitted by law), such as: • Insurance companies; • Insurance agencies; • Loss adjusters; • Medical providers; • Third party non-insurance service providers; • Third party administrators; • Medical bill review companies; • Reinsurance companies; and • Similar service providers. Xxxx & Xxxxxxx requires its service providers to carry out the services that you require from us effectivelyabide by privacy laws in handling non-public personal information obtained through its business relationship with Xxxx & Xxxxxxx. Without collecting Additionally, Xxxx & Xxxxxxx may disclose non-public personal information to third parties as allowed or required by law. For example, Xxxx & Xxxxxxx may release your Information to comply with reporting requirements, to comply with a subpoena, warrant, legal process or other order or inquiry of a court, governmental agency or state or federal regulator, or to fulfill C&F’s obligations to its insurers and reinsurers We may also share your personal data we would also be unable information in order to fulfil establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies. If you conclude your relationship with the Company, the Company will continue to safeguard your privacy in accordance with the standards described in this notice. The Company maintains physical, electronic and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent procedural safeguards to collect and process this protect non-public personal information. An example of this is where About Our Websites We may collect information via technology about how you use our website, including the elements you have interacted with, metadata, and other details about these elements, clicks, change states, and other user actions. This information is required about used primarily to provide, maintain, protect, and improve our current products and to develop new ones. We may use cookies on certain pages of our site. Cookies are stored on your healthcomputer, not on our site. How will we use Most cookies are “session cookies” which means that they are automatically deleted at the end of each session. A cookie itself does not have the ability to automatically collect personal information about you? We collect . A cookie can store certain information about that identifies your computer to us so that you in order do not need to provide re-enter that information as frequently when you with the services for which you engage us. Who may we share your information with? In order to deliver use our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposessite. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share cookie does not contain your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your recordspassword. We reserve the right to retain data for longer where change our policy regarding cookies and the collection of information from visitors at any time without advance notice. Should any new policy be put into effect, we believe will post it is in our legitimate interests on this website, and the new policy will apply only to do soinformation collected thereafter. You have may opt out of receiving cookies or delete any prior cookies by changing your specific internet browser settings. The privacy of communication over the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about youinternet cannot be guaranteed. If you would like a copy of some or all are concerned about the security of your communication, we encourage you to send your correspondence through the postal service or use the telephone to speak directly to us. We do not represent or warrant that the site, in whole or in part, is appropriate or available for use in any particular jurisdiction. Those who choose to access the site, do so on their own initiative and at their own risk, and are responsible for complying with all local laws, rules and regulations. We do not assume any responsibility for any loss or damage you may experience or incur by the sending of personal information over the internet by or to us. This Usage Agreement shall be governed by the laws of the United States and of the State of New Jersey, without giving effect to its conflict of laws provisions. Please know that The Company has not and will not sell any consumers’ personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that do not sell your nonpublic personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrectthird parties nor do we use it for marketing purposes. How to contact us If you have any questions about our privacy policy this Privacy Notice or about how we use the information we hold about youcollect, please contact us by email at: Xxxx & Xxxxxxx Legal Department 000 Xxxxxxx Xxxxxx Morristown, NJ 07960 xxxxxxxxxxxxxxxxxx@xxxxx.xxx Changes to this Privacy Notice We may revise this notice at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditionsany time. If you do not understand any pointwe make material changes, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendationnotify you as required by law.

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to when you voluntarily complete client surveys or provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on feedback to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would we’d also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will we’ll obtain your explicit consent in order to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may might we share your information with? If you agree, we may email you about other products or services that we think may be of interest to you. We won’t share your information for marketing purposes with other companies. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will they’ll only act in accordance with our written instructions. Where it is it’s necessary for your personal data to be forwarded to a third party we will we’ll use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-money- laundering and other financial crime we will may send your details to a credit referencing agency third party agencies for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain keep hold of your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep In principle, your personal data up to date throughout shouldn’t be held for longer than is required under the terms of our relationshipcontract for services with you. We are also However, we’re subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We also reserve the right to retain data for longer where we believe than this due to the possibility that it is in our legitimate interests may be required to do sodefend a future claim against us. You have the right to request deletion of your personal data. We will We’ll comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would you’d like a copy of some or all of your personal information, please email or write to us using the contact details noted below. When your personal data is processed by automated means you have the right to ask us to move your personal data to another organisation for their use. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How Marketing We’d like to contact send you information about our products and services which may be of interest to you. If you’ve agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you have any questions about our privacy policy or information we hold about youno longer wish to be contacted for marketing purposes, please contact us by phone, email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendationpost.

Privacy Notice. PIB GROUP LIMITED This privacy notice explains Privacy Notice provides details of the personal data we collect from you, what we do with it, how you might access it and who it might be shared with. Our Contact Information and Data Protection Officer CIS LTD is a subsidiary of PIB Group Limited. Our Data Protection Officer can be contacted directly here: Data Protection Officer PIB Group Limited 00 Xxxxxxxxxxx Xxxxxx Xxxxxx, XX0X 0XX xxx@xxx-xxxxxxxxx.xxx 0330 058 9700 WHAT WE DO WITH YOUR PERSONAL DATA We use the personal data you give to us to provide insurance policies and to process claims. We may use your personal data for other similar purposes, including marketing and communications, but that will only occur if we use have your consent or where, as a current or previous user of our services, we rely on a legitimate interest justification for doing so. You have a right at any time to stop us from contacting you for marketing purposes. Please contact us to do so - see above. The way insurance works means that your information may be shared with, and used by, a number of third parties in the insurance or risk sector; for example, insurers, agents or brokers, reinsurers, loss adjusters, sub-contractors, regulators, law enforcement agencies, fraud and crime prevention and detection agencies and compulsory insurance databases. We will only disclose your personal information in connection with the insurance cover that we provide and to the extent required or permitted by law. More information on how the Insurance market works is available from the London Insurance Market Core Uses Information Notice available at www. xxxxxxxxxxxxxxxxx.xx.xx/xxxx WHAT PERSONAL DATA DO WE COLLECT? We collect and use relevant information about you to provide you with insurance cover and to meet our legal obligations. This information includes details such as your name, address and contact details and any other information that we collect about youyou in connection with the insurance cover from which you benefit. What information do we collect about you? We collect information about you when you engage us for financial advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special Special categories of personal data such as data about your health, health and criminal convictions may be collected and processed on a consent or public interest basis if this is necessary for the provision of our servicesinsurance purposes. We collate this If you provide us with personal data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close other people, for example; family members and dependants in order you wish to provide our service add to a policy or contract, we expect you effectively. In such cases it will be your responsibility to ensure that they know you have the consent of the people concerned to pass are doing so and they are content with their information on being provided to us. We will provide a copy of this privacy notice may record or monitor calls for them ortraining purposes, where appropriate, ask you to pass improve the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance quality of our contract with you. The information that we collect about you is essential for us service and to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal prevent and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may we share your information with? In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendationdetect fraud.

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial planning/financial advice, financial planning and investment management services/mortgage advice. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to when you voluntarily complete client surveys or provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on feedback to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would we’d also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will we’ll obtain your explicit consent in order to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may might we share your information with? If you agree, we may email you about other products or services that we think may be of interest to you. We won’t share your information for marketing purposes with other companies. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will they’ll only act in accordance with our written instructions. Where it is it’s necessary for your personal data to be forwarded to a third party we will we’ll use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will may send your details to a credit referencing agency third party agencies for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain keep hold of your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep In principle, your personal data up to date throughout shouldn’t be held for longer than is required under the terms of our relationshipcontract for services with you. We are also However, we’re subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We also reserve the right to retain data for longer where we believe than this due to the possibility that it is in our legitimate interests may be required to do sodefend a future claim against us. In any case, we’ll not retain your personal data for longer than 5 years past the time of your death. You have the right to request deletion of your personal data. We will We’ll comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would you’d like a copy of some or all of your personal information, information please email or write to us using the contact details noted below. When your personal data is processed by automated means you have the right to ask us to move your personal data to another organisation for their use. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. Marketing We’d like to send you information about our products and services which may be of interest to you. If you’ve agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please contact us by email or post. Other websites Our website contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies. What can you do if you are unhappy with how your personal data is processed? You also have a right to lodge a complaint with the supervisory authority for data protection. In the UK this is: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF 0303 123 1113 (local rate) Changes to our privacy policy We keep our privacy policy under regular review. This privacy policy was last updated on 01/01/2018. How to contact us If Please contact us if you have any questions about our privacy policy or information we hold about you, please contact us : by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or xxxx@xxxxxxxxxxxxx.xx.xx Or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), : Xxxxxxx Xxxxxx LLP 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation.Xxxxx Xxxx

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may we share your information with? In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement en- gagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/xxxxxxxx or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation.

Privacy Notice. This privacy notice explains how Who looks after your personal information Do you have to give us your personal information Your personal information will be held by Bank of Scotland plc which is part We may be required by law, or as a consequence of any contractual of the Lloyds Banking Group. More information on the Group can be found at relationship we have, to collect certain personal information. Failure to xxx.xxxxxxxxxxxxxxxxxx.xxx provide this information may prevent or delay us fulfilling these obligations or How we use any your personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial advice, financial planning and investment management performing services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your personal information: What rights you have over your personal information • to provide products and services, manage your relationship with us and The law gives you a number of rights in relation to your personal information comply with any laws or regulations we are subject to (for example the including: laws that prevent financial crime or the regulatory requirements governing • the right to access the personal information we have about you. This the products we offer). includes information from application forms, statements, correspondence • for other purposes including improving our services, exercising our rights and call recordings. in relation to agreements and contracts and identifying products and • the right to get us to correct personal information that is wrong or services that may be of interest. incomplete. To support us with the above we analyse information we know about you and • in certain circumstances, the right to ask us to stop using or delete your how you use our products and services, including some automated decision personal information. making. You can find out more about how we do this, and in what circumstances • from 25 May 2018 you will have the right to receive any personal information you can ask us to stop, in our full privacy notice. we have collected from you in an easily re-usable format when it’s processed Who we share your personal information with on certain grounds, such as consent or for contractual reasons. You can also Your personal information will be shared within Lloyds Banking Group and other ask us to pass this information on to another organisation. companies that provide services to you or us, so that we and any other companies You can find out more about these rights and how you can exercise them in our in our Group can look after your relationship with us. By sharing this information it full privacy notice. enables us to better understand our customers’ needs, run accounts and policies, Other individuals you have financial links with and provide products and services efficiently. This processing may include activities which take place outside of the website to personalise your repeat visits to European Economic Area. If this is the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather also collect personal information about other individuals who you case we will ensure appropriate safeguards are in place to protect your close family members and dependants in order to provide our service to you effectivelypersonal have a financial link with. In such cases it will be your responsibility to ensure that This may include people who you have the consent joint accounts information. You can find out more about how we share your personal information or policies with such as your partner/spouse, dependents, beneficiaries or with credit reference agencies below and can access more information about how people you have commercial links to, for example other directors or officers of the people concerned to pass their else we share your information on to usin our full privacy notice. your company. Where we collect your personal information from We will provide a copy of collect this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to assess any applications, provide the services We will collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able from a number of sources including: requested and to carry out credit reference and fraud prevention checks. You can find out more about how we process personal information about individuals • information given to us on application forms, when you talk to us in with whom you have a financial link in our full privacy notice. branch, over the phone or through the device you use and when new How we use credit reference agencies services that are requested. • from analysis of how you require from us effectively. Without collecting operate our products and services, including the In order to process your application we may supply your personal data we would also be unable information frequency, nature, location, origin and recipients of any payments. to fulfil credit reference agencies (CRAs) including how you use our legal products and regulatory obligations. Where special category data of a sensitive nature is required we services and they will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the give us information about you? , such as about your • from or through other organisations (for example card associations, credit financial history. We collect do this to assess creditworthiness and product suitability, reference agencies, insurance companies, retailers, comparison websites, check your identity, manage your account, trace and recover debts and prevent social media and fraud prevention agencies). criminal activity. • in certain circumstances we may also use information about health or We may also continue to exchange information about you with CRAs on an criminal convictions but we will only do this where allowed by law or if you ongoing basis, including about your settled accounts and any debts not fully give us your consent. repaid on time, information on funds going into the account, the balance on the You can find out more about where we collect personal information about you account and, if you borrow, details of your repayments or whether you repay in order from in our full privacy notice. full and on time. CRAs will share your information with other organisations, for example other organisations you ask to provide you with the services for which you engage us. Who may we share your information with? In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplaceservices. We are also able to determine the ongoing suitability of existing investments you may hold 5 Personal and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance Business Information and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation.Lloyds Banking Group

Privacy Notice. This Xxx Xxxxxxx & Company Privacy Notice May 2018: How Xxx Xxxxxxx & Company ("we") use your information Your privacy notice explains how we use any personal information we collect about youis important to us. We are committed to safeguarding the privacy of your information. What information data do we collect about you& why? We will collect and hold the information about you when you engage deemed necessary to enable us for financial adviceto communicate with our clients and to manage our client body as we are contracted to do so. In the context of GDPR we consider our clients as owners of properties we have been instructed to value, financial planning market or manage and investment management servicesthus generating the lawful basis (under Articles 5(2) and 24) upon which we hold the information. This information will relate to your personal include names, contact details, address, Identification and financial circumstances. It may also include special categories of other sensitive personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour informationbank details. We will sometimes hold similar information for anyone who may be nominated by our clients as someone who we may contact in their absence. How do we process data? Most of our information is held electronically within an operating system which is subject to secure and password protected access rights. Any hard copy information is collected and contained within lockable filing cabinets and is destroyed in accordance with the Data Protection legislation. How do we use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. share data? We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order given to provide you with the services for which you engage us. Who may we share your information with? In order us by our clients to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place make contact with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it the duties and purposes for which we are contracted and any information that is necessary for your personal data to be forwarded shared to a third party we will use appropriate security measures to protect your personal data in transit. This will include is done so under the encryption context of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of compliance with the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal datalaw or legitimate interests. How long do we retain hold data for? We hold your information? During data for varying lengths of time depending on the course type of our relationship information in question but in doing so we always comply with Data Protection legislation. Please contact us if you wish to make any changes to the information we will retain personal data which hold, if for example it is necessary or has become inaccurate. Requesting access to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These areUnder Data Protection legislation, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You you have the right to request deletion of access to information about you that we hold. To make a request for your personal data. We will comply with this requestinformation contact the Data Protection Officer at xxxxxxxx@xxxxxxxxxx.xxx or write to Xxx Xxxxxxx Lettings, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? 000 Xxxxxx Xxxx, Xxxx, XX00 0XX You also have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation.to:

Privacy Notice. This privacy notice explains how we use any tells you what to expect when Xxxxx Xxxx Financial Planning Ltd collects personal information. It applies to information we collect about you. What How we use your information do To enable us to provide the services we collect have agreed and for other related purposes - including updating and enhancing customer records, analysis for management purposes and statutory returns, crime prevention and legal & regulatory compliance – we may obtain, use, process and disclose personal data about you? . We may collect and process the following data about you: • Information that you provide by filing in forms on our site xxx.xxxxxxxxx.xx.xx. • Information that you provide to us by telephone; e-mail or face to face. • If you contact us, we may keep a copy of that correspondence. Disclosure of personal information about you In many circumstances we will not disclose personal data without consent. However, when you engage we investigate a complaint, for example, we will need to share personal information with the organisation concerned and with other relevant bodies. Sharing Information with Third Parties We may share your information with third party service providers such as insurance providers, compliance, and other agents relevant to the business activity. People who email us Any email sent to us, including any attachments, may be monitored and used by us for financial advice, financial planning reasons of security and investment management servicesfor monitoring compliance with office policy. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings Email monitoring or blocking software may also be made used. Please be aware that you have a responsibility to ensure that any email you send to us is within the bounds of telephone calls and meetingsthe law. Information relating People who use our services Xxxxx Xxxx Financial Planning Ltd provide a range of Financial Services to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour informationData Subjects. We will use your information collected from process data provided by the website data subject and other sources in order to personalise your repeat visits deliver the appropriate products and services to Data Subjects. We have to hold the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants the people who have requested the service in order to provide it. However, we only use these details to provide the service the person has requested and for other closely related purposes. For example, we might use information about people who have used our services to carry out a survey to find out if they are happy with the level of service they received. When people do subscribe to our services, they can cancel their subscription at any time and are given an easy way of doing this. Use of data processors If you effectively. In such cases it will agree, we may email you about other products or services that we think may be your responsibility of interest to ensure that you have the consent of the people concerned to pass their information on to usyou. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may we not share your information with? for marketing purposes with companies outside our group of companies or with other companies. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will they’ll only act in accordance with our written instructions. Where it is it’s necessary for your personal data to be forwarded to a third party we will we’ll use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronicallytransit such as password protection. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will may send your details to a credit referencing agency third party agencies for identity verification purposes. The privacy notice People who make a complaint to us When we receive a complaint from a person, details of the credit referencing agency we use complaint including the identity of the complainant and any other individuals involved in the complaint, are forwarded to our Compliance Officer for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to youinvestigation. We will take all reasonable steps only use the personal information we collect to keep your personal data up process the complaint and to date throughout check on the level of service we provide. We usually have to disclose the complainant’s identity to whoever the complaint is about. This is inevitable where, for example, the accuracy of a person’s record is in dispute. We usually have to disclose details of the complaint to our relationshipprofessional Indemnity Insurance Broker and Insurer. We may also be required to provide a copy of our file to the Financial Ombudsman Service should an adjudicator be required to consider the complaint case. We are also subject required to regulatory requirements disclose to retain your The Financial Conduct Authority (FCA) high level analytics concerning the number and nature of complaints received. This data for specified minimum periodsdoes not include names or details that identify the specific data subject. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers Personal information relating to a complaint will be retained indefinitely from closure. It will be retained in a secure environment and opt-out business These are minimum periods, during which we have a legal obligation access to retain your records. We reserve the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject be restricted according to the restrictions of our regulatory obligations and legitimate interests ‘need to know’ principle. Your rights Under the General Data Protection Regulations (GDPR) you have rights as noted above. How an individual which you can I access exercise in relation to the information you hold about me? You have the right to request a copy of the information that we hold about you. If Your rights as an individual which you would like a copy of some or all of your personal information, please email or write can exercise in relation to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about you, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write  Access to use Personal Information (Portability) Data Subjects may submit a Subject Access Request (SAR) - in order to us at Ironstone Place, Kettering, NN14 1FNobtain a copy of the personal data that we hold about them in a structured and portable manner. This is our standard client agreement upon which we intend to rely. This agreement All SAR requests should be read in conjunction with sent to: Data Protection Officer: Xxxxx Xxxx, Xxxxx Xxxx Financial Planning Ltd, The Old Forge, 00x Xxxxxx Xxxxxx, Xxxxxxxx, Xxxx, XX00 0XX. Telephone: 00000 000000. Email: xxxxx@xxxxxxxxx.xx.xx  Confirmation of Whether, and Where, the Services Controller is Processing Personal Data Xxxxx Xxxx Financial Planning Ltd is the Data Controller and Costs document and a Processor. Xxxxx Xxxx Financial Planning Ltd undertakes data processing within the engagement letter EEA.  Right of Data Subjects to Erasure (Right to be Forgotten) Data Subjects may notify Xxxxx Xxxx Financial Planning Ltd if they wish to exercise their right to erasure. Such a withdrawal of Consent does not affect the lawfulness of processing based on consent prior to the withdrawal. Data Subjects that you exercise this right will be issued with prior to us commencing work on your behalfremoved from any marketing or future contact. For your own benefit Xxxxx Xxxx Financial Planning Ltd may retain a copy of any personal data and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated be retained by the Financial Conduct Authority (FCA)Controller if the processing is necessary for the establishment, 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register exercise or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules defence of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendationlegal claims.

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial planning/financial advice, financial planning and investment management services/mortgage advice. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to when you voluntarily complete client surveys or provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on feedback to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would we’d also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will we’ll obtain your explicit consent in order to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may might we share your information with? If you agree, we may email you about other products or services that we think may be of interest to you. We won’t share your information for marketing purposes with other companies. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will they’ll only act in accordance with our written instructions. Where it is it’s necessary for your personal data to be forwarded to a third party we will we’ll use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will may send your details to a credit referencing agency third party agencies for identity verification purposes. The privacy notice In the event that your adviser is unavailable you might be contacted by a member of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they their team, who will use and share have access to your personal datainformation. How long do we retain keep hold of your information? During the course of our relationship with you we We will retain hold personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to (e.g. name, address, date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers of birth and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is contact details) in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply line with this request, subject to the restrictions of our regulatory and legal obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How to contact us If you have any questions about our privacy policy or information we hold about you, please contact us set out by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make – currently a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation.minimum of:

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial planning advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetingscollect information when you voluntarily complete client surveys or provide feedback to us. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will We’ll use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx site Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will We’ll provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would we’d also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will we’ll obtain your explicit consent in order to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may might we share your information with? If you agree, we may email you about other products or services that we think may be of interest to you. We won’t share your information for marketing purposes with other companies. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will they’ll only act in accordance with our written instructions. Where it is it’s necessary for your personal data to be forwarded to a third party we will we’ll use appropriate security measures to protect your personal data in transit. This will include the , such as password protection and/or encryption of data transmitted electronicallyto enhance the security of the data during transfer. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will may send your details to a credit referencing agency third party agencies for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain keep hold of your information? During the course of our relationship with you we will we’ll retain personal data which is necessary to provide services to you. We will We’ll take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance mortgage business • Indefinitely for pension transfers and opt-out outs • Three years for insurance business These are minimum periods, periods during which we have a legal obligation to retain your records. In any case, we will not keep your personal data for longer than five years after our relationship with you has ended. We reserve the right to retain data for longer where we believe it is it's in our legitimate interests to do so. You have the right to request deletion of your personal data. We will We’ll comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would you’d like a copy of some or all of your personal information, information please email or write to us using the contact details noted below. When your personal data is processed by automated means you have the right to ask us to move your personal data to another organisation for their use. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How Marketing We’d like to contact send you information about our products and which may be of interest to you. If you’ve agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you have any questions about our privacy policy or information we hold about youno longer wish to be contacted for marketing purposes, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendationpost.

Privacy Notice. The CFTC has approved regulations that impose various requirements on financial institutions' treatment of customer information. The regulations require that financial institutions develop privacy policies and disclose these policies to its customers. Interbank FX, LLC considers your privacy one of our utmost concerns. This privacy notice explains Privacy Notice outlines our current policies and practices regarding how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website individual customers is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour informationused. We will use your information collected from the website send existing customers an updated Privacy Notice on an annual basis; also should any portion of our current policies and practices change you will be sent a revised Privacy Notice in advance, thus providing you with sufficient notice to personalise your repeat visits respond prior to the site. Full details effective date of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectivelythe change. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will obtain your explicit consent to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with individualized service, Interbank FX, LLC collects information about you from your account application and other forms that you may deliver to us or to the services firms that clear securities trades on the various domestic securities exchanges. We use this information to open an Account for which you, process your requests and transactions and to provide you engage uswith additional information about our products and services. Who may we share your information with? In order to deliver service your Account, effect your transactions and mail correspondence to you, we provide your personal information to other independent firms that specialize in providing these services. We require these other independent firms to protect the confidentiality of your information and to use the information only for the purpose for which the disclosure is made. In the regular course of our services to you effectively business, we also collect information about your transactions with us and we may send receive non-public information about you from a consumer reporting agency. We do not disclose any nonpublic personal information about our customers to other independent firms, organizations or individuals except in furtherance of our business relationship with you, or if compelled to do so by due process of law. If you decide at some point to close your details to third parties such as those that we engage for professional complianceInterbank FX, audit LLC Account, or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountantsbecome an inactive customer, we will supply information needed by them continue to carry out adhere to the services you have engaged them forprivacy policies and practices described in this Notice. We may also be required restrict access to forward your data nonpublic personal information about you to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we have a contract in place with them those employees who need to ensure know that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions. Where it is necessary for your personal data to be forwarded to a third party we will use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will send your details to a credit referencing agency for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain your information? During the course of our relationship with you we will retain personal data which is necessary to provide products or services to you. We will take all reasonable steps maintain physical, electronic and procedural safeguards that comply with federal standards to keep guard your personal data up to date throughout our relationshipinformation. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we Should you have a legal obligation to retain your records. We reserve any questions or concerns about this Privacy Notice or the right to retain data for longer where we believe it is in our legitimate interests to do so. You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all privacy of your personal information, please email or write to us using the contact details noted below. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How feel free to contact us If you have any questions about our privacy policy or information we hold about youthe Compliance Department at (000) 000-0000, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone PlaceMonday through Friday, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with between the Services hours of 8:00 a.m. and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation5 p.m. Mountain Standard Time.

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial planning advice, financial planning and investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetingscollect information when you voluntarily complete client surveys or provide feedback to us. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will We’ll use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx site Information about connected individuals We may need to gather personal information about your close family members and dependants in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on to us. We will We’ll provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would we’d also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will we’ll obtain your explicit consent in order to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may might we share your information with? If you agree, we may email you about other products or services that we think may be of interest to you. We won’t share your information for marketing purposes with other companies. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will they’ll only act in accordance with our written instructions. Where it is it’s necessary for your personal data to be forwarded to a third party we will we’ll use appropriate security measures to protect your personal data in transit. This will include the , such as password protection and/or encryption of data transmitted electronicallyto enhance the security of the data during transfer. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will may send your details to a credit referencing agency third party agencies for identity verification purposes. The privacy notice of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they will use and share your personal data. How long do we retain keep hold of your information? During the course of our relationship with you we will we’ll retain personal data which is necessary to provide services to you. We will We’ll take all reasonable steps to keep your personal data up to date throughout our relationship. We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance mortgage business • Indefinitely for pension transfers and opt-out outs • Three years for insurance business These are minimum periods, periods during which we have a legal obligation to retain your records. We reserve the right to retain data for longer where we believe it is it's in our legitimate interests to do so. You have the right to request deletion of your personal data. We will We’ll comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would you’d like a copy of some or all of your personal information, information please email or write to us using the contact details noted below. When your personal data is processed by automated means you have the right to ask us to move your personal data to another organisation for their use. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. How Marketing We’d like to contact send you information about our products and which may be of interest to you. If you’ve agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you have any questions about our privacy policy or information we hold about youno longer wish to be contacted for marketing purposes, please contact us by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendationpost.

Privacy Notice. This privacy notice explains how we use any personal information we collect about you. What information do we collect about you? We collect information about you when you engage us for financial planning/financial advice, financial planning and investment management services/mortgage advice. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services. We collate this data by note taking and the completion of questionnaires. Audio recordings may also be made of telephone calls and meetings. Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. Full details of how cookies work is provided on our website xxx.xxxxxxxxxxx.xx.xx Information about connected individuals We may need to gather personal information about your close family members and dependants in order to when you voluntarily complete client surveys or provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to pass their information on feedback to us. We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass the privacy information to them. Why do we need to collect and use your personal data? The primary legal basis that we intend to use for the processing of your data is for the performance of our contract with you. The information that we collect about you is essential for us to be able to carry out the services that you require from us effectively. Without collecting your personal data we would we’d also be unable to fulfil our legal and regulatory obligations. Where special category data of a sensitive nature is required we will we’ll obtain your explicit consent in order to collect and process this information. An example of this is where information is required about your health. How will we use the information about you? We collect information about you in order to provide you with the services for which you engage us. Who may might we share your information with? If you agree, we may email you about other products or services that we think may be of interest to you. We won’t share your information for marketing purposes with other companies. In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, audit accountancy or legal services as well as product and platform providers that we use to arrange financial products for you. Where you are also a client of Xxxxx Xxxxxxxx Chartered Accountants, we will supply information needed by them to carry out the services you have engaged them for. We may also be required to forward your data to our regulator, the Financial Conduct Authority when requested. Where third parties are involved in processing your data we we’ll have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will they’ll only act in accordance with our written instructions. Where it is it’s necessary for your personal data to be forwarded to a third party we will we’ll use appropriate security measures to protect your personal data in transit. This will include the encryption of data transmitted electronically. To fulfil our obligations in respect of prevention of money-laundering and other financial crime we will may send your details to a credit referencing agency third party agencies for identity verification purposes. The privacy notice In the event that your adviser is unavailable you might be contacted by a member of the credit referencing agency we use for this purpose is available at xxx.xxxxxxxxxx.xx.xx/xxxxx-xxxxxxxxxxx/ bureau-privacy-notice This provides information of how they their team, who will use and share have access to your personal datainformation. How long do we retain keep hold of your information? During the course of our relationship with you we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep In principle, your personal data up to date throughout shouldn’t be held for longer than is required under the terms of our relationshipcontract for services with you. We are also However, we’re subject to regulatory requirements to retain your data for specified minimum periods. These are, generally: - • Five years for investment business • Three years for insurance business • Indefinitely for pension transfers and opt-out business These are minimum periods, during which we have a legal obligation to retain your records. We also reserve the right to retain data for longer where we believe than this due to the possibility that it is in our legitimate interests may be required to do sodefend a future claim against us. In any case, we’ll not retain your personal data for longer than 5 years past the time of your death. You have the right to request deletion of your personal data. We will We’ll comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. How can I access the information you hold about me? You have the right to request a copy of the information that we hold about you. If you would you’d like a copy of some or all of your personal information, information please email or write to us using the contact details noted below. When your personal data is processed by automated means you have the right to ask us to move your personal data to another organisation for their use. We have an obligation to ensure that your personal information is accurate and up to date. Please ask us to correct or remove any information that you think is incorrect. Marketing We’d like to send you information about our products and services which may be of interest to you. If you’ve agreed to receive marketing information, you may opt out at a later date. You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please contact us by email or post. Other websites Our website contains links to other websites. This privacy policy only applies to this website so when you link to other websites you should read their own privacy policies. What can you do if you are unhappy with how your personal data is processed? You also have a right to lodge a complaint with the supervisory authority for data protection. In the UK this is: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF 0303 123 1113 (local rate) Changes to our privacy policy We keep our privacy policy under regular review. This privacy policy was last updated on 01/01/2018. How to contact us If Please contact us if you have any questions about our privacy policy or information we hold about you, please contact us : by email at xxxxxxxxxxxxxx@xxxxxxxxxxx.xx.xx or xxxx@xxxxxxxxxxxxx.xx.xx Or write to use to us at Ironstone Place, Kettering, NN14 1FN. This is our standard client agreement upon which we intend to rely. This agreement should be read in conjunction with the Services and Costs document and the engagement letter that you will be issued with prior to us commencing work on your behalf. For your own benefit and protection, you should read this agreement carefully before signing the engagement letter to accept the terms and conditions. If you do not understand any point, please ask for further information. Regulatory status We are authorised and regulated by the Financial Conduct Authority (FCA), : Xxxxxxx Xxxxxx LLP 00 Xxxxxxxxx Xxxxxx, Xxxxxxxxx, Xxxxxx, X00 0XX. xxx.xxx.xxx.xx. Our firm reference number is 143390. You can check our details on the Financial Services Register by visiting the FCA’s website xxx.xxx.xxx.xx/xxxxx/xxxxxxx-xxxxxxxxx/ register or by contacting the FCA on 0800 111 6768. Our Advice As we predominantly recommend our own investment services and solutions our investment advice is Restricted Advice under the rules of our regulator the Financial Conduct Authority. On the occasions where our own investment solutions are not suitable for you we may recommend investment products and services provided by other product providers selected from across the marketplace. We are also able to determine the ongoing suitability of existing investments you may hold and advise you accordingly. We do not provide advice on the following types of investment: - • Unregulated Collective Investment Schemes • Qualified Investor Schemes • Derivatives contracts For insurance and annuities we will make a recommendation after researching the whole of the market. In all cases we will carry out an analysis of your circumstances, needs and objectives before making any recommendation.Xxxxx Xxxx