Developer Portal Privacy Notice

About This Notice

Welcome to our Developer Portal Privacy Notice.

C. Hoare & Co. is committed to protecting your personal information when you interact with us. This notice explains how we collect, retain and process your personal information when you access or use our developer portal.

A copy of our full notice is available https://www.hoaresbank.co.uk/privacy.

Contacting us

For the purposes of data protection legislation, C. Hoare & Co. is a "data controller" meaning that we determine the purpose and means of processing the information we collect from you. If you ever have any questions, comments or complaints about this notice, please contact us via any of the following means and we will be pleased to assist you:

• By post: The Data Protection Officer, 37 Fleet Street, London EC4P 4DQ
• By email: DPO@hoaresbank.co.uk
• By telephone: +44 (0)20 7353 4522.

We use MuleSoft, a solution platform for API design, management and publishing, which hosts our developer portal. MuleSoft act as a "data controller" in respect to the use of cookies found on the developer portal. A copy of their privacy notice which explains this processing is available at https://www.salesforce.com/company/privacy/full_privacy/.

Information that we collect

This section details the types of information C. Hoare & Co. collect from you and how we use information about you:

• Identity data such as your name, device ID and IP address
• Contact data including email address and telephone number
• If you contact us, we will keep a record of that correspondence and the information that you provide to us in that correspondence
• If you speak to us on the telephone, the call will be recorded and copy of the call will be retained
• Details of your visits to any of our websites.

How we use your information

C. Hoare & Co. use information supplied by you:

• To confirm your identity
• To improve the products and services that we offer
• To assist you and respond to any queries that you submit to us
• For general statistical analysis.

The basis for processing your information

When you interact with us, we will process your information to respond to queries and support you in your use of C. Hoare & Co.'s developer portal. We will do this to:

• Meet our legal obligations and
• As it is our legitimate interest to do so, to
• ensure the quality of the information and service that we provide to you and
• for statistical and reporting purposes.

Sharing your information

Your data will be used by C. Hoare & Co. for the purposes outlined in this notice. We may also share your information:

• With our service providers to allow them to assist us with delivering the developer portal and to maintain the security of your data and
• When the bank is legally required to do so (by a court, government body, law enforcement agency or other authority of competent jurisdiction, including HM Revenue and Customs, the FCA and the PRA).

Security

C. Hoare & Co. have put in place measures to protect the security of your information. These measures are intended to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

Keep your information

C. Hoare & Co. will keep your information only for as long as necessary and to meet our legal obligations.

Your rights

Under certain circumstances, by law you have the right to:

• Object to the processing of your personal information where we are relying on a legitimate interest and there is something about your particular situation that makes you want to object to processing on this ground.
• Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see above)
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example, if you want us to establish its accuracy, or the reason for processing it
• Request the transfer of your personal information to another party in a machine-readable, commonly used and structured format.

If you want to exercise your right, please contact the Data Protection Officer.

Right to complain

If you wish to request further information about any of the above rights, or if you are unhappy with how we have handled your information, contact the Data Protection Officer.

If you are not satisfied with our response to your complaint, or believe our processing of your information does not comply with data protection law, you can make a complaint to the Information Commissioner's Office ("ICO"):

• https://ico.org.uk/global/contact-us
• ICO Helpline: 0303 123 1113

Changes to our Privacy Notice

C. Hoare & Co. keep our privacy notices under regular review and may be updated from time to time. Please check this site periodically to ensure you are familiar with the current version.