This privacy statement clarifies the utilization of any personal data collected by Faiden Commercial Ltd (Company No: 14128278). Throughout this privacy disclosure, the pronouns "we," "our," and "us" pertain to Faiden Commercial Ltd (Faiden Commercial).

The information we may gather from you includes:

Personal data obtained through your communication with us via phone, email, or other means. This encompasses details furnished while utilizing our services, information submitted on our website, and data you supply when we request verification of your information.

Personal data received from alternative sources, including third-party entities with whom we have close collaborations, who offer services to either you or us, as well as data sourced from publicly accessible outlets. We will merge this information with the data you furnish directly to us.

The personal data we may process comprises your name, address, email address, phone number, as well as any comments or additional information you provide.

Using your personal information:

• We utilize your personal information to ensure an exceptional customer experience. More specifically, we employ it for the following purposes:

• Fulfilment of Agreements: To fulfil our commitments stemming from any agreements established between you and us.

• Information Provision: To furnish you with the information you have requested from us.

• Statistical Analysis: For statistical purposes, enabling us to analyse data and manage our business effectively while strategizing for the future.

• Tailored Services: To inform you about services we offer that have been identified as particularly pertinent to your needs.

• Legal Compliance: To ensure compliance with our legal obligations

• Marketing Communication: To send you marketing information regarding our services, subject to your consent.

Legal grounds for using your personal data:

• To ensure compliance with GDPR regulations and uphold the principles of lawful data processing, we must establish a legal basis for handling your personal data. We rely on the following legal grounds to process your data, depending on the specific activities we are engaged in:

• Contractual Necessity: We process certain personal data as required to fulfil our obligations under a contract, both prior to its formation and during its execution. This processing is essential to meet our contractual responsibilities.

• Legitimate Interests: We process your personal data when it is necessary to pursue our legitimate interests, unless your rights, interests, or freedoms override these interests. Our legitimate interest lies in processing your data to provide you with the most efficient and effective service.

• Legal Obligation: We process personal data when it is necessary to comply with legal obligations to which we are bound.

• Consent: In cases where you have provided explicit consent for the processing of your personal data for specific purposes, we rely on your consent as a legal basis for such processing.

By adhering to these legal grounds, we strive to ensure that your personal data is processed in a manner that aligns with the GDPR's regulatory framework and respects your rights and privacy.

Keeping your data:

We only keep your data for as long as we need it to fulfil the purposes that we have described in this privacy notice. Upon completion all personal information is deleted.

As an example; in the case of contractual obligations we will keep personal data for up to 12 years.

Sharing your data:

We will only disclose your personal information to:

Business Partners, Suppliers, or Sub-contractors: When necessary for the execution of any contract entered into between you and us, we may disclose your personal information to our business partners, suppliers, or sub-contractors.

Third-Party Suppliers and Service Providers: Your personal information may also be shared with third-party suppliers and service providers for the purposes outlined in the "using your personal information" section of this notice.

We may disclose your personal information to third parties under the following circumstances:

• Business Transactions: If we engage in the sale or acquisition of any business or assets, we will disclose your personal data to prospective buyers or sellers of such businesses or assets.

• Change of Ownership: In the event that Faiden Commercial Ltd or a substantial portion of its assets are acquired by a third party, personal data related to its customers will be one of the transferred assets.

• Legal Obligation: If we are obligated to divulge or share your personal data in order to comply with any legal requirements or to enforce and apply our terms of use, terms and conditions of service, or other agreements. This may also include sharing information with other companies and organizations for purposes such as fraud prevention and reducing credit risk, with the overarching aim of safeguarding the rights, property, or safety of Virtus, our customers, or other parties.

We are committed to ensuring the security of your data. Here are the measures we have in place to protect your information:

• Secure Servers: Your data will be stored on secure servers located within the European Economic Area (EEA). These servers adhere to rigorous security standards to protect against unauthorized access.

• Technological Safeguards: We implement all reasonable technological measures to enhance the security of your data. This includes firewalls, intrusion detection systems, and encryption protocols where applicable.

• Data Encryption: Whenever feasible, any personally identifiable information is encrypted to provide an added layer of protection against unauthorized access.

• Data Minimization: We practice data minimization, ensuring that we only collect and store the information necessary for the intended purpose. This reduces the risk associated with storing unnecessary data.

Our commitment to data security is paramount, and we continuously update our security measures to stay ahead of emerging threats and protect your data from unauthorized access.

Your data rights:

Under the data protection legislation, you have the right to:

• Access personal data held by us about you.

• Rectify any inaccurate personal data held by us about you.

• In certain circumstances, have personal data restricted or destroyed.

• Object to processing of personal data that is likely to cause, or is causing, damage or distress.

• Withdraw consent, where we are relying on it to use your personal data.

• Receive personal data, which you have provided to us, in a structured, commonly used, and machine-readable format.

• You also have the right to require us to transfer this personal data to another organisation, at your request.

• Claim compensation for damages caused by a breach of the data protection legislation.

If you would like to find out more about our data retention policy and how we use your personal data, or if you want to see a copy of the information about you that we hold, please contact Nick Flanagan at admin@faidengroup.com

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office at https://ico.org.uk/concerns/