Ruleguard offers our website visitors an easy option to request a call back or a demo. If you decide to register, we will collect basic contact information about you, such as: 1. Your name 2. Company phone number 3. Company email address 4. Company name

Our website enables you to register your interest in working for us or applying for an advertised vacancy. For more detail about the recruitment process, visit the careers section of our website. As part of the initial application process we will collect information about you, your job history and your experience including: Your name Email address Phone number CV References from both your past employer(s) and personal reference Passport/Right to Work documents Other additional information may be requested depending on the job role and will be discussed with you during the application process. If you are unsuccessful in the application then your data will be kept for 6 months and then deleted. If you are successful then please refer to the HR Privacy Notice for more information which is available internally.

Ruleguard may conduct surveys via our website or third-party sites. Survey participants may be asked for personal information in addition to opinions or feedback. The type of information collected in surveys will vary. Personal information may include: Your name Company email address Company name Job title You may opt-out of surveys at any time by clicking on the unsubscribe button at the bottom of all communications. You may also contact Ruleguard at dataprotection@ruleguard.com.

Ruleguard may occasionally require registration in exchange for our thought leadership: blogs, training videos, white papers, etc. Your personal information may be requested in registration forms and the type of information collected from you will vary. Ruleguard reserves the right to distribute certain thought leadership materials only to those who supply the requested information. Please note that only business email addresses are accepted when registering for thought leadership material. Personal information may be collected such as: Your name Company email address Company name Job title Country You may opt-out of thought leadership material at any time by clicking on the unsubscribe button at the bottom of all communications. You may also contact Ruleguard at dataprotection@ruleguard.com.

Ruleguard may facilitate event registration (for Ruleguard events, our partner events or third-party events) via our website or, at times, via third party web sites. Personal information may be collected via event registration forms and the type of information collected will vary. Ruleguard may share registrant information with third parties in association with the event Examples of "third parties" include event venues, sponsors or co-sponsors, promoters, event organisers (including via third party web sites), speakers, panellists, etc. Personal information that is collected can include: Your full name Company email address Company phone number Device information – make/model Anonymised behavioural data regarding the way the users interact with the website. Thought leadership activities may also include: o Behaviour tracking, i.e. tracking when emails are opened as well as read You may opt-out of event registration emails at any time by clicking on the unsubscribe button at the bottom of all communications. You may also contact Ruleguard at dataprotection@ruleguard.com.

Ruleguard may contact you in relation to direct marketing which is aimed at corporate subscribers, if it relates to your role. This is via our Pardot (Salesforce) platform. Information may be collected under licence from the FCA Registry and LinkedIn for use with our direct marketing. Ruleguard will ensure that PECR is followed when marketing our services. Personal data collected may include: Firm type Firm size Job title Your name Your company email address Pardot marketing activities may also include: a. Behaviour tracking i. Tracking when emails are opened as well as read b. Profiling ii. Creating personas to identify how particular groups of people respond to certain marketing campaigns c. Data matching iii. Involves combining data from multiple sources (FCA Data, LinkedIn) iv. FCA Data will be updated every 6 months d. Invisible processing v. As part of the behaviour tracking this will be invisible processing however you may unsubscribe from marketing emails at any time to opt-out You may opt-out of direct marketing at any time by clicking on the unsubscribe button at the bottom of all communications. In order to opt out of tracking and profiling you will need to unsubscribe from the email communications. You may also contact Ruleguard at dataprotection@ruleguard.com.

When you visit Ruleguard, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not directly identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. We use the information to report on visitor numbers, and to make improvements to our service. This information is collected only if visitors opt in. The information collected is classed as personal data because Google assigns a unique identifier to each visitor. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. To opt in you will need to accept the Analytics cookies when you first visit the site or when you clear your cookies. Analytics may also involve tracking which pages users visit on the website, how many times a page has been visited, whether a page has been visited through an advertisement or by other means.

When you connect with us on social media, we may collect the following data such as: Number of clicks on a post Information that you make available to us when you interact with our posts (depending on your profile settings) Profile names of individuals that have interacted with our posts

Ruleguard collects and processes data based on the following: Your consent Legitimate interests Contractual obligations Legal obligations Ruleguard is committed to ensuring that the information we collect and use, is appropriate and does not constitute an invasion of your privacy.

We will retain your personal information for no longer than necessary to provide our services, our website and to comply with our legal obligations, resolve disputes and enforce our policies. Retention periods are determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time. We may rectify, replenish or remove incomplete or inaccurate information, at any time. We will never keep personal information for longer than is necessary.

Please note that some sub processors/data recipients may be located outside the UK or EEA. In such cases we will transfer your data only to such countries as approved by the ICO (Data Protection Act, UK GDPR) and the European Commission (EU GDPR), as providing adequate level of data protection, or enter into legal agreements (such as IDTAs and SCCs) ensuring an adequate level of data protection.

Under data protection law, you have rights to how your data is processed, collected, used and retained. If you make a request, we have one month to respond to you. Please contact us at dataprotection@ruleguard.com if you wish to make a request. These rights are including: Your Right of Access You have the right to ask us for copies of your personal information. You can find out more about this right here: https://ico.org.uk/your-data-matters/your-right-to-get-copies-of-your-data/ Your Right To Rectification You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. You can find out more about this right here: https://ico.org.uk/your-data-matters/your-right-to-get-your-data-corrected/ Your Right To Erasure Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. You can find out more about this right here: https://ico.org.uk/your-data-matters/your-right-to-get-your-data-deleted/ Your Right To Restriction of Processing Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. You can find out more about this right here: https://ico.org.uk/your-data-matters/your-right-to-limit-how-organisations-use-your-data/ Your Right To Object To Processing Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances. You can find out more about this right here: https://ico.org.uk/your-data-matters/the-right-to-object-to-the-use-of-your-data/ Your Right To Data Portability Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. You can find out more about this right here: https://ico.org.uk/your-data-matters/your-right-to-data-portability/

If you have any complaints, requests or concerns about our use of your personal information, you can contact us at dataprotection@ruleguard.com. You can also complain to the ICO if you are unhappy with how we have used your data. ICO website: https://www.ico.org.uk

As part of the processing activities mentioned above, Ruleguard does not collect or process special category or criminal offence data such as ethnic origin, political opinions, religious beliefs, criminal convictions, genetic data or biometric data, or data of minors from its website visitors.

We reserve the right to periodically amend or revise this Privacy Notice; material changes will be effective immediately upon the display of the revised Privacy Notice on our website. The last revision will be reflected in the “Last Modified” section at the end of this notice. Your continued use of this site, following the notification of such amendments on our website, constitutes your acknowledgement and consent of such amendments to the Privacy Notice and your agreement to be bound by the terms of such amendments.

This Privacy Notice was last modified on 16th June 2022.