Republic Financial Holdings Limited Group Data Privacy Statement

Introduction
Our concern for safekeeping your personal information is important to the Republic Financial Holdings Limited Group, hereinafter referred to as “the Group”. It applies to all personally identifiable information about you that is obtained by the Group. At any time you decide to close your account or become an inactive customer, we will continue to adhere to the procedures described in this statement and any proper opt-out requests you make. This Privacy Statement also serves as our Privacy notice. This Privacy Statement contains important information about your choices in relation to sharing personal information with the Group.

You regard your personal information as yours, and so do we. We do not sell or share your information with third parties not associated with the provision of services or activities of the Group or as allowed by the law. Further, any sharing of information with third parties requires your consent and are identified under our ‘Disclosure of Information’ section. Limited information related to your credit history may be shared with our credit bureaus and/or other credit providers.

Purpose
This Privacy Statement explains how the Group may collect, share, use, and protect information when you visit or use any digital services offered by the banking and non-banking affiliates and subsidiaries of the Group that link to or reference this statement, hereinafter referred to as our “Online Services”. This Privacy Statement covers the Group’s many , including subsidiary websites, online and mobile services, branded social media sites or pages as well as any interactions you may have while viewing content provided through one of the Group’s digital advertising campaigns.

Scope
As you review this Privacy Statement, here are a few general principles to keep in mind:

• Our Online Services are not intended for children under 13. We do not knowingly collect personal information from children under 13 without parental consent.
• If you have a financial product or service with us, we may use and share any information that we collect from or about you as outlined in section entitled “Use of Information” of this document.
• The Group’s Online Services may have additional terms to this Privacy Statement about the privacy of your information. Please review the privacy statement for the specific online service you are using.

Collection, Retention and Use of Customer Information
Personal Information
We collect and use various types of information to service your accounts, to save you time and money and better understand your needs. We collect personal information about you from the following sources:

• Information we receive from you on applications, information updates or other forms;
• Information we receive from you on surveys (originated from the entities within or contracted by the Group), complaints, problem reports and other contact correspondence;
• Information about your transactions with us, our affiliates or others;
• Information we receive from a consumer reporting agency;

When you visit or use our Online Services, we may collect personal information from or about you such as your name, email address, mailing address, telephone number(s), account numbers, limited location information (for example, a city name to help you find a nearby ATM), user name and password, mobile PINs and answers to security questions for password recovery purposes. We may also collect payment card information, when you provide such information while using our Online Services and where we believe it is reasonably necessary for ordinary business purposes.

Usage and Other Information
Additionally, we may collect certain information about your use of our Online Services. For example, we may capture the IP address of the device you use to connect to the Online Services, the type of operating system and browser you use, and information about the site from which you came, web pages of the Group’s website that you browse and interact with as well as the parts of our Online Services you access. We or our third-party partners may also use cookies, web beacons or other technologies to collect and store other information about your visit to, or use of, our Online Services. In addition, we may later associate the usage and other information we collect online with personal information about you.

Social Media Channels
When you use any of our social media channels we may record and retain information (anonymous or otherwise) about you. This may include your use of our sites and the frequency of your visits. The individual social media platforms may also be permitted to share certain information with us in accordance with your personalized privacy settings on those platforms.

Any information you provide or that we record through your use of our social media channels may be shared with other companies of the Group, and any third parties who are acting on our behalf to enhance your user experience of our social media channels, provide you with customer assistance and/or provide you with information about our products and services. We are always striving to understand our customers better, so we may also record comments and opinions that you make publicly on our social media channels.

By using our social media channels and providing us with, or posting personal information to our social media channels you are agreeing that you accept these terms. If you disagree with any of these terms you should not access our social media channels.

Online and Mobile Services
For your convenience, some subsidiaries of the Group offer you the ability to access some products and services through mobile applications and mobile-optimized websites. When you interact through online and mobile services, information such as unique device identifiers for your mobile device, your screen resolution and other device settings, information about your location and analytical information about how you use your mobile device may be collected.

Additional Sources of Information
We may also collect information about you from additional online and offline sources including from co-branded partner sites or commercially available third-party sources, such as credit reporting agencies. We may combine this information with the personal and other information we have collected about you under this Online Privacy Statement.

Use of Information
We use the information discussed above in a number of ways:

• Processing applications and transactions;
• Verifying your identity (such as when you access your account information);
• Preventing fraud and enhancing the security of your account or our Online Services;
• Responding to your requests and communicating with you;
• Managing your preferences;
• Performing analytics concerning your use of our Online Services, including your responses to our emails and the pages and advertisements you view;
• Providing you tailored content and marketing messages;
• Operating, evaluating and improving our business (including developing new products and services; improving existing products and services; performing data analytics; and performing accounting, auditing and other internal functions);
• Complying with and enforcing applicable legal requirements, relevant industry standards, contractual obligations and our policies; and
• For any other purposes that we may specifically disclose at the time you provide or we collect your information.

Disclosure of Information
We may share the information we collect from and about you with our affiliates and other third parties. For example, we may share your information with:

• The Group’s third-party service providers, but no financial information will be shared in this case;
• Subsidiaries’ affiliated websites and businesses in an effort to bring you improved service across our family of products and services, when permissible under relevant laws and regulations;
• Affiliates in connection with a corporate transaction, such as a sale, consolidation or merger of Group businesses;
• Credit bureaus and other credit providers;
• Other third parties to comply with legal requirements such as the demands of applicable subpoenas, regulators and court orders; to verify or enforce our terms of use, rights, or other applicable policies; to address fraud, security or technical issues; to respond to an emergency; or otherwise to protect the rights, property or security of our customers or third parties; to address fraud, security or technical issues; to respond to an emergency; or otherwise to protect the rights, property or security of our customers or third parties.

We may share anonymous or aggregated information with third parties to help deliver products, services, and content that is tailored to the users of our Online Services and for other purposes.

Online advertising
You will see advertisements when you use many of our Online Services. These advertisements may be for our own products or services (including pre-screened offers of credit) or for products and services offered by third parties. Which advertisements you see is often determined using the information we or our affiliates, service providers and other companies that we work with have about you, including information about your relationships with us (e.g., types of accounts held, transactional information, location of banking activity). To that end, where permitted by applicable law, we may share with others the information we collect from and about you.

Online behavioural advertising (also known as “OBA” or “interest-based advertising”) refers to the practice of collecting information from a computer or device regarding a visitor’s web-browsing activities across non-affiliated websites over time in order to deliver advertisements that may be of interest to that visitor based on their browsing history. Through OBA, we hope to deliver advertisements that are most likely to be of interest to you using information about your other web-browsing activities (e.g., the web pages you visit, search terms you enter, and the way you move through our Online Services on your computer or device) or your personal profile (e.g., demographic or location information). Certain companies we work with may set cookies and use related tracking technologies, such as the clear GIFs discussed above, throughout our Online Services or in our communications to support these OBA efforts.

Linking to Third-Party Websites
The Group may provide links to websites that are owned or operated by other companies ("third-party websites"). When you use a link online to visit a third-party website, you will be subject to that website’s privacy and security practices, which may differ from ours. You should familiarize yourself with the privacy statement, terms of use and security practices of the linked third-party website before providing any information on that website. The Group does not guarantee and is not responsible for the privacy or security of these sites, including the accuracy, completeness, or reliability of their information.

Security
We maintain physical, electronic, and procedural safeguards to protect the integrity and confidentiality of your information. The Group also limits access to your non-public personal information to those employees who need to know that information in order to provide products and services to you. All our employees are trained to understand and comply with these information principles.

Please note that information you send to us electronically may not be secure when it is transmitted to us. We recommend that you do not use unsecured channels such as public Wi-Fi connections that do not use authentication (password) and other unverified internet connections to communicate sensitive or confidential information to us. Never quote your full account number, card number, personal identification number (PIN), card verification value (CVV) or any other sensitive banking data on open forums, social media sites and emails, which can be viewed or forwarded without your consent.

Updating Your Information
Keeping your information up-to-date is very important. You may review or update your information using our Online Services. If you cannot change the incorrect information online, or you prefer to request changes offline, please use the Contact Us option on our site, or call or write to us using the contact information listed on your account statements, records, or other account materials. You can also speak to one of our branch representatives, your financial advisor, or your designated account representative.

Changes to this Online Privacy Statement
We may change this Online Privacy Statement at any time in the future. When we do, we will let you know by appropriate means such as by posting the revised statement on this page with a new “Last Updated” date. Any changes to this Online Privacy Statement will become effective 30 days after being posted or on such date as is permitted by the relevant authorities. You agree to revisit this page regularly and your continued access to or use of the website will mean that you agree to the changes.