Common use of Using Your Personal Information Clause in Contracts

Using Your Personal Information. We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below. To register you as a new customer (a) Identity (b) Contact Performance of a contract with you To provide our products and services to you including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us (c) To detect fraudulent and unlawful use of our products and services (d) to provide you with access to your account data through our UI (a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications (a) Performance of a contract with you (b) Necessary for our legitimate interests (to recover debts due to us) To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey (a) Identity (b) Contact (c) Profile (d) Marketing and Communications (a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services) To enable you to partake in a prize draw, competition or complete a survey (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (a) Performance of a contract with you (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) To administer and protect our business, our UI and website (including troubleshooting, data analysis, testing, system (a) Identity (b) Contact (c) Technical (a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the

Using Your Personal Information. We have set out below, in a table format, a description of all the ways we plan to may use your personal datainformation for several different purposes, including: • to consider your application for a product or service; • to enable us to provide a product or service; • to tell you about other products and which services that may be of interest to you; • to assist in arrangements with other organisations in relation to a promotion or provision of a product or service; • to manage accounts or perform other administrative and operational tasks (including risk management, systems development and testing, credit scoring and staff training, collecting debts and market or customer satisfaction research); • to consider any concerns or complaints you raise against us and/or to manage any legal action; • to prevent or investigate any actual or suspected fraud, unlawful activity or misconduct; • to identify you or establish your tax status under any Australian or foreign legislation, regulation or treaty, pursuant to an agreement with any tax authority; • as required by relevant laws, regulations, codes of practice and external payment systems; and • brokers and/or other related entities who may have introduced you to us. We may also disclose your personal information to related entities or business partners to enable them to tell you about a product or service that may be of interest to you. If you reside in the European Economic Area (EEA), we collect and process information about you only where we have a legal bases basis to do so under the GDPR. The legal basis we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending depends on the specific purpose for which services you use and how you use them. This means we are using collect and use your data. Please contact us if you information only where: • we need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below. To register you as a new customer (a) Identity (b) Contact Performance of a contract with you To provide our products and services to you including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us (c) To detect fraudulent and unlawful use of our products and services (d) to provide you with access to your account data through our UI (a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications (a) Performance of a contract with you (b) Necessary for our legitimate interests (to recover debts due to us) To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey (a) Identity (b) Contact (c) Profile (d) Marketing and Communications (a) Performance of a contract with you (b) Necessary to comply with a legal obligation obligation; • it satisfies a legitimate interest (c) Necessary which is not overridden by your data protection interests), such as for research and development, to market and promote our legitimate interests (to keep our records updated services, and to study how customers use our products/services) To enable you to partake in a prize draw, competition or complete a survey (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (a) Performance of a contract with you (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) To administer and protect our businesslegal rights and interests; • you give us consent to do so for a specific purpose. If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. Where we are using your information because we have a legitimate interest to do so, you have the right to object to that use. However, this may mean you will no longer be able to access our UI and website (including troubleshooting, data analysis, testing, system (a) Identity (b) Contact (c) Technical (a) Necessary for our legitimate interests (for running our business, provision of administration and IT products or services, network security, to prevent fraud and in the.

Using Your Personal Information. We have set out belowmay use this Personal Information for the purposes communicated to you at the time of collection or in your agreement(s) with us, in a table formatincluding to: • verify your identity and to authenticate you when you contact us or we contact you; • evaluate your current and ongoing creditworthiness, a description of all the ways we plan to use your personal data, including by obtaining credit reports; • evaluate and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using application, account, transaction and reports; • set up your data. Please contact us if accounts and provide ongoing service; • provide you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below. To register you as a new customer (a) Identity (b) Contact Performance of a contract with you To provide our products and services you have requested; • communicate with you, including to you including: (a) Manage paymentsrespond to your inquiries; • understand your product and service requirements; • market a product or service, fees and charges (b) Collect and recover money owed to us (c) To detect fraudulent and unlawful use either directly or through a service provider, partner or third party; • determine your eligibility for some of our products and services (d) and offer them to provide you; • help manage and assess our risks, operations and relationship with you; • prevent, detect or investigate fraud or criminal activity; • collect amounts owing to us; • maintain the accuracy and integrity of information held by a credit reporting agency; and • comply with legal, regulatory, governmental, and contractual requirements. We may also use Personal Information we collect when you register or use our online banking or mobile banking platforms to: • assist and guide you through the onboarding/ sign up process through timely messages and contextual pop-ups; to understand your onboarding/ sign up journey and source; • understand who you are, your needs, and how you use products and features, including the monitoring of your current product portfolio, balances, funding levels, and activity; • target or personalize your banking experience and predict, generate and deliver tailored messaging, promotions, insights, recommendations, and walkthroughs based on information that we have collected, including information we have collected through your digital activities on Equitable digital channels; • determine your eligibility for incentives, such as bonus interest, fee waivers and discounts to try new products and services or encourage continued use of your existing products and services; • inform you about relevant new and existing products and features via pop-up messaging; • identify friction points in your navigation journey and deliver immediate support and guidance; • aggregate data across web and mobile to optimize your overall banking experience; • track the specific Equitable ad that you selected, the site activity associated with access each marketing ad, and the response rate to your account data through our UI (a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing help us plan future online marketing campaigns. If you enter a third-party site which has an Equitable ad, we may use cookies to help us identify the site you accessed, but we do not track and Communications (a) Performance create a profile of a contract with you (b) Necessary for our legitimate interests (user’s behaviour on that site; • use de-identified transactional data to recover debts due to us) To manage our relationship with you which will include: (a) Notifying you about changes to our terms help personalize ads and offers on third party websites or privacy policy (b) Asking you to leave a review or take a survey (a) Identity (b) Contact (c) Profile (d) Marketing Equitable digital channels; and Communications (a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated • promote and to study how customers use our products/services) To enable you to partake in a prize draw, competition or complete a survey (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing market products and Communications (a) Performance of a contract with you (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) To administer and protect our businessservices offered by Equitable and, our UI program partners or other third parties we have carefully selected. We may create statistical and website anonymized reports, analysis and predictive models, rules and insights using information (including troubleshootingfrom credit bureaus (please see the Credit Consent section in this Agreement)) about you and other current or prospective customers. Aggregated reports provide insights into sales performance, data analysisidentify customer demographics or behavioural insights, testingand may also be shared with other Equitable businesses, system (a) Identity (b) Contact (c) Technical (a) Necessary affiliates, or subsidiaries. The information in these reports is not personal and cannot be used to identify you and it is only retained until its intended purpose is fulfilled. If for our legitimate interests (any reason your information is required to fulfill a different purpose than that of your original intent, we will ask for running our business, provision of administration and IT services, network security, to prevent fraud and in theyour consent before we proceed. We may use your Personal Information for other purposes with your consent or as permitted or required by law.