DATA PROTECTION AND PRIVACY POLICY

This is the IIQAF group data protection and privacy policy that explains who we are, why and how we process your personal information (also referred to here as personal data) and your rights and how to contact us if you need to.

Our contact details are set out at the end of this policy. We are the controller in relation to the personal data processed in accordance

with this policy (except where this policy explains otherwise).

This policy and any other documents referred to on it sets out:

• Information we collect about you
• Cookies and other technologies
• How we use your information
• Our promotional updates and communications
• Who we give your information to
• Where we store your information
• Payment processing
• How we protect your information
• How long we keep your information
• Your rights
• Changes to this policy
• Contact us

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. Information we collect about you

We may process your personal data if:

• You or the company you work for are a customer or a supplier of ours.
• You or the company you work for use our products or services.
• You work for a customer or a supplier of ours, or for someone who uses our products or services.
• You are someone (or you work for someone) to whom we want to advertise or market our goods or services.

Information we collect from you or from a third party

We may process your personal data that we have either obtained from you, or obtained from somewhere else. Personal data which is not collected directly from you may be collected:

• From your employer in connection with your job and how it relates to us.
• If you use any websites operated by us. Personal data relating to you that we process may include:
• Your name.
• Who you work for, and your job function or department.
• Your address, phone number, email address or other contact details (these details may relate to your work or to you personally, depending on the nature of our relationship with you or the company that you work for).
• Information about you that you give us by communicating with us by phone, by e-mail, via our website, via social media or otherwise. It includes information you give us or that we obtain when you use our website, obtain our goods or services, supply us with goods or services, enquire about a product, promotion or survey, or contact us to report a problem, or do any of these things on behalf of the person that you work for.
• Information relating to transactions with us involving you or the company you work for (for example, details of goods or services that we have supplied to, or obtained from, you or the person you work for).
• Other information relating to you which it is necessary for us to process in order to enter into or perform a contract with you or the company you work for (for example, right to work information and information obtained from credit references agencies where this is necessary to enable us to carry out appropriate checks in relation to contracts with you or someone else that you work for or are otherwise related to).
• Information about events to which you or your colleagues are invited, and your personal information and preferences to the extent that this information is relevant to organising and managing those events (for example, your dietary requirements).
• Information relating to you that you give us or we otherwise obtain when you visit us (for example, if you sign in or are recorded on CCTV while visiting us, or you give us the registration details of your vehicle).