Common use of PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA Clause in Contracts

PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA. We have set out below, in a table format, a description of all the ways we plan to use your Personal Data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data. Contact us at ▇▇▇▇▇▇▇▇@▇▇▇▇▇▇▇▇.▇▇▇ if you need details about the specific legal ground we are relying on to process your Personal Data where more than one ground has been set out in the table below. PURPOSE/ACTIVITY TYPE OF DATA LAWFUL BASIS FOR PROCESSING INCLUDING BASIS OF LEGITIMATE INTEREST For the purposes of your subscription and the (a) Identity (b) Contact Performance of our agreement with you To carry out Services (a) Identity (b) Contact (c) Marketing and Communications Performance of our agreement with you To improve and provide you with customer service (a) Identity (b) Contact (c) Profile (d) Marketing and Communications (a) Performance of our agreement with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our Site/Services) To administer and maintain our Site and Services (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (a) Identity (b) Contact (c) Technical (a) Necessary for our legitimate interests (for running our business, provide for the administration and IT services, network security, and to prevent fraud) (b) Necessary to comply with our legal obligations To contact you (including sending information and updates relating to our Site and Services) (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical Necessary for our legitimate interests (to study how users use our Site and Services, and to develop them) To use data analytics to improve our Site and Services, marketing, customer relationships and experiences (a) Technical (b) Usage Necessary for our legitimate interests (to define types of users for our products and services, to keep our Site and Services updated and relevant and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you (a) Identity (b) Contact (c) Technical Necessary for our legitimate interests (to develop our Services) (d) Usage (e) Profile To provide a personalized (a) Identity Consent experience, including providing (b) Contact personalized discount offers (c) Profile (d) ▇▇▇▇▇ (e) Marketing and Communications (f) Technical

PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA. We collect, use, hold and share where necessary, information for the following purposes: • to deal with the service that you requested and to allow us to be able to communicate, and provide services appropriate to your needs and to monitor our performance in responding to your request • to ensure we meet our legal obligations • to prevent and detect fraud or crime • to process financial transactions including grants, payments, benefits and invoices involving us or when we are acting on behalf of other government bodies • to conduct research and surveys and to allow for the statistical analysis of data so we can plan the provision of services • where necessary to protect individuals from harm or injury • where you have consented to the processing • where otherwise permitted under Data Protection legislation It applies to information we collect about: • Service provision; • Visitors to our websites; • Use of cookies; • People who contact us via social media; • People who call us; • People who email us; • People who make a complaint to us; • Your rights; • Complaints and queries; • Disclosure of personal information • Access to personal information We have set out below, in a table format, a description of all the ways we plan to use your Personal Datapersonal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data. Contact us at ▇▇▇▇▇▇▇▇@▇▇▇▇▇▇▇▇.▇▇▇ if To register you need details about the specific legal ground we are relying on to process your Personal Data where more than one ground has been set out in the table below. PURPOSE/ACTIVITY TYPE OF DATA LAWFUL BASIS FOR PROCESSING INCLUDING BASIS OF LEGITIMATE INTEREST For the purposes of your subscription and the as a new customer (a) Identity (b) Contact (a) Performance of our agreement a contract with you and in accordance with our contractual requirements with UoE (and Ultimately MHCLG) (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) If you register for a newsletter (a) Identity (b) Contact (a) Performance of a contract with you and in accordance with our contractual requirements with UoE (and Ultimately MHCLG) (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) To carry out Services enable you to provide information to complete any application for our services (a) Identity (b) Contact (c) Marketing Profile (d) Personal credit check where a company credit check cannot be obtained (e) Anonymised ethnicity, age and Communications disability (a) Performance of our agreement a contract with you and in accordance with our contractual requirements with UoE (and Ultimately MHCLG) (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) To improve and provide manage our relationship with you with customer service which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey (a) Identity (b) Contact (c) Profile (d) Marketing and Communications (a) Performance of our agreement a contract with you and in accordance with our contractual requirements with UoE (and Ultimately MHCLG) (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) (b) Necessary to comply with a legal obligation (c) Necessary to comply with a legal obligation To enable you to complete a survey (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (a) Performance of a contract with you and in accordance with our contractual requirements with UoE (and Ultimately MHCLG) (b) Necessary for our legitimate interests (to keep our records updated and to study how customers use our Siteproducts/Servicesservices, to develop them and grow our business) To administer and maintain protect our Site business and Services this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (a) Identity (b) Contact (c) Technical (a) Necessary for our legitimate interests (for running our business, provide for the provision of administration and IT services, network security, and to prevent fraudfraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with our a legal obligations To contact you (including sending information and updates relating to our Site and Services) (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical Necessary for our legitimate interests (to study how users use our Site and Services, and to develop them) obligation To use data analytics to improve our Site and Serviceswebsite, services, marketing, customer relationships and experiences (a) Technical (b) Usage Necessary for our legitimate interests (to define types of users customers for our products and services, to keep our Site and Services website updated and relevant relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile Necessary for our legitimate interests (to develop our Services) (d) Usage (e) Profile To provide a personalized (a) Identity Consent experience, including providing (b) Contact personalized discount offers (c) Profile (d) ▇▇▇▇▇ (e) Marketing products/services and Communications (f) Technicalgrow our business)

PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA. We have set out below, in a table format, a description of all the ways we plan to use your Personal Datapersonal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your Personal Data personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Contact Please contact us at ▇▇▇▇▇▇▇▇@▇▇▇▇▇▇▇▇.▇▇▇ if you need details about the specific legal ground we are relying on to process your Personal Data personal data where more than one ground has been set out in the table below. PURPOSEPurpose/ACTIVITY TYPE OF DATA LAWFUL BASIS FOR PROCESSING INCLUDING BASIS OF LEGITIMATE INTEREST For the purposes Activity Type of your subscription and the data Lawful basis for processing including basis of legitimate interest To register you as a new customer (a) Identity (b) Contact Performance of our agreement a contract with you To carry out Services process and deliver your order including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us (a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications (a) Performance of our agreement a contract with you (b) Necessary for our legitimate interests (to recover debts due to us) To improve and provide manage our relationship with you with customer service which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey (a) Identity (b) Contact (c) Profile (d) Marketing and Communications (a) Performance of our agreement a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our Siteproducts/Servicesservices) To enable you to partake in a prize draw, competition or complete a survey (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (a) Performance of a contract with you (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) To administer and maintain protect our Site business and Services this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (a) Identity (b) Contact (c) Technical (a) Necessary for our legitimate interests (for running our business, provide for the provision of administration and IT services, network security, and to prevent fraudfraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with our a legal obligations obligation To contact deliver relevant website content and advertisements to you (including sending information and updates relating measure or understand the effectiveness of the advertising we serve to our Site and Services) you (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical Necessary for our legitimate interests (to study how users customers use our Site and Servicesproducts/services, and to develop them, to grow our business and to inform our marketing strategy) To use data analytics to improve our Site and Serviceswebsite, products/services, marketing, customer relationships and experiences (a) Technical (b) Usage Necessary for our legitimate interests (to define types of users customers for our products and services, to keep our Site and Services website updated and relevant relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communications Necessary for our legitimate interests (to develop our Services) (d) Usage (e) Profile To provide a personalized (a) Identity Consent experience, including providing (b) Contact personalized discount offers (c) Profile (d) ▇▇▇▇▇ (e) Marketing products/services and Communications (f) Technicalgrow our business)

PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA. We collect, use, hold and share where necessary, information for the following purposes:  to deal with the service that you requested and to allow us to be able to communicate, and provide services appropriate to your needs and to monitor our performance in responding to your request  to ensure we meet our legal obligations  to prevent and detect fraud or crime  to process financial transactions including grants, payments, benefits and invoices involving us or when we are acting on behalf of other government bodies  to conduct research and surveys and to allow for the statistical analysis of data so we can plan the provision of services  where necessary to protect individuals from harm or injury  where you have consented to the processing  where otherwise permitted under Data Protection legislation It applies to information we collect about:  Service provision;  Visitors to our websites;  Use of cookies;  People who contact us via social media;  People who call us;  People who email us;  People who make a complaint to us;  Your rights;  Complaints and queries;  Disclosure of personal information  Access to personal information We have set out below, in a table format, a description of all the ways we plan to use your Personal Datapersonal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data. Contact us at ▇▇▇▇▇▇▇▇@▇▇▇▇▇▇▇▇.▇▇▇ if To register you need details about the specific legal ground we are relying on to process your Personal Data where more than one ground has been set out in the table below. PURPOSE/ACTIVITY TYPE OF DATA LAWFUL BASIS FOR PROCESSING INCLUDING BASIS OF LEGITIMATE INTEREST For the purposes of your subscription and the as a new customer (a) Identity (b) Contact (a) Performance of our agreement a contract with you and in accordance with contractual requirements with UoE (and Ultimately MHCLG) (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) If you register for a newsletter (a) Identity (b) Contact (a) Performance of a contract with you and in accordance with contractual requirements with UoE (and Ultimately MHCLG) (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) To carry out Services enable you to provide information to complete any application for our services (a) Identity (b) Contact (c) Marketing Profile (d) Personal credit check where a company credit check cannot be obtained (e) Anonymised ethnicity, age and Communications disability (a) Performance of our agreement a contract with you and in accordance with contractual requirements with UoE (and Ultimately MHCLG) (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) To improve and provide manage our relationship with you with customer service which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey (a) Identity (b) Contact (c) Profile (d) Marketing and Communications (a) Performance of our agreement a contract with you and in accordance with contractual requirements with UoE (and Ultimately MHCLG) (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business) (b) Necessary to comply with a legal obligation (c) Necessary to comply with a legal obligation To enable you to complete a survey (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (a) Performance of a contract with you and in accordance with contractual requirements with UoE (and Ultimately MHCLG) (b) Necessary for our legitimate interests (to keep our records updated and to study how customers use our Siteproducts/Servicesservices, to develop them and grow our business) To administer and maintain protect our Site business and Services this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (a) Identity (b) Contact (c) Technical (a) Necessary for our legitimate interests (for running our business, provide for the provision of administration and IT services, network security, and to prevent fraudfraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with our a legal obligations To contact you (including sending information and updates relating to our Site and Services) (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical Necessary for our legitimate interests (to study how users use our Site and Services, and to develop them) obligation To use data analytics to improve our Site and Serviceswebsite, services, marketing, customer relationships and experiences (a) Technical (b) Usage Necessary for our legitimate interests (to define types of users customers for our products and services, to keep our Site and Services website updated and relevant relevant, to develop our business and to inform our marketing strategy) To make suggestions and recommendations to you about goods or services that may be of interest to you (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile Necessary for our legitimate interests (to develop our Services) (d) Usage (e) Profile To provide a personalized (a) Identity Consent experience, including providing (b) Contact personalized discount offers (c) Profile (d) ▇▇▇▇▇ (e) Marketing products/services and Communications (f) Technicalgrow our business)