The purposes and legal bases upon which we process your personal information include: Category of Personal Information Purpose of Processing Lawful Basis for Processing All personal information in Section 3 above other than Usage Information, Beneficiary Information and Device Information Registration and Administration: We use your personal information to enable you to register with us. Once you have an account with us we will use your personal information to contact you and to reply to any queries or requests. We will use your personal information in the administration of your account, which includes us contacting you in order to update your account details (this assists with keeping our records up to date) or in order to notify you of changes or improvements to our products or services that may affect our service to you – you cannot opt-out of the receipt of these service messages. To perform a contract (Art. 6(1)(b) GDPR) To comply with a legal obligation e.g., financial tax reporting and bookkeeping laws (Art. 6(1)(c) GDPR) All personal information in Section 3 above other than Usage Information and Device Information Provide our Products and Services: We use your personal information in order to supply our products and services to you (including, enabling transactions and facilitating payments) and to meet our contractual obligations to you (including under our Terms of Use). This will include the sharing of your personal information with Banking Partners (see Section 4 below).   To perform a contract (Art. 6(1)(b) GDPR) To comply with a legal obligation (see below) (Art. 6(1)(c) GDPR) To pursue our legitimate interests to operate and improve our business and minimise any unintended disruption, risk or fraud to the services that we offer to you, to transfer your personal information within the WorldFirst Group for internal administrative purposes, and to make your experience of our products and services efficient and effective (Art. 6(1)(f) GDPR) Usage Information, Device Information Improve our Products and Services: To understand our customers’ actions, behaviours, preferences, transactions, expectations, and feedback in order to improve our products and services, develop new products and services, and to improve the relevance of offers of products and services by us To pursue our legitimate interests to make your experience of our products and services efficient and effective and to improve the same (Art. 6(1)(f) GDPR) Account Information, Profile Information, Identification Information, KYC/AML Information, Beneficiary Information, Transaction Information Prevention and Detection of Crime: We are subject to strict anti-money laundering and counter-terrorist financing regulations which requires us to undertake due diligence on our customers and their beneficiaries. This may include the conduct of soft searches through an identity-referencing agency and through other sources of information and the use of scoring methods to identify risk and to verify identity. These activities may involve the use of electronic verification tools (such as, facial recognition technologies) and the collection of biometric data. It may also include the sharing of personal information with police, law enforcement, tax authorities or other government and fraud prevention agencies To comply with a legal obligation e.g., laws relating to anti-money laundering and financial crime (Art. 6(1)(c) and Article 9(2)(g) GDPR) To pursue our legitimate interests to cooperate and assist law enforcement in the fight against financial crime (Art. 6(1)(f) GDPR) Name and contact details Direct Marketing: We may use your information to keep you up to date concerning WorldFirst Group Companies’ products and services, tell you about new products/services or to ask about your experience with us . You can opt-out from the receipt of these communications at any time To pursue our legitimate interests to send you marketing communications (Art. 6(1)(f) GDPR) Where required under applicable law, we will ask for and rely on your consent (Art. 6(1)(a) GDPR) Call Recording Information Monitoring: We record all our telephone calls for security and training purposes e.g., to assess the quality of our customer services and to provide staff training  To pursue our legitimate interests to assess the quality of our customer services (Art. 6(1)(f) GDPR). All personal information in Section 3 above To defend and enforce our rights including, against legal claims that involve us or other WorldFirst Group companies, and to manage regulatory matters, investigations, data breaches, and/or data subject requests To comply with a legal obligation, e.g. to respond to an official request or data subject request (Art. 6(1)(c) GDPR) To pursue our legitimate interests to defend and enforce our rights (Art. 6(1)(f) GDPR) All personal information in Section 3 above To enable any due diligence and other appraisals or evaluations for any actual or proposed merger, acquisition, financing transaction or joint venture contemplated by us or any WorldFirst Group company To pursue our legitimate interests to operate and improve our business (Art. 6(1)(f) GDPR) You have a right to object to the processing of your personal information (including profiling) where that processing is carried out for our legitimate interests. Please note however that we may not be able to fulfil this request in all instances. Where we need to collect the abovementioned categories of personal information by virtue of a legal obligation or in light of a contract entered or to be entered into with you, and you do not provide this personal information when requested, we may not be able to comply with our legal obligations, provide you with a service or perform the contract we have or are trying to enter into with you. In such case, we may have to terminate our relationship with you. Where we ask for your consent to use your personal information (e.g. to send you direct marketing), you have the right to withdraw your consent at any time by: emailing privacy@worldfirst.com; or managing your preference through the WFO trading platform, if you are a registered user; or clicking the link at the bottom of any email that you receive. You will not miss any service we provide by not choosing to receive marketing from us and you can change your mind whenever you like and as often as you like. However please note that your withdrawal of consent does not affect the lawfulness of our processing of your personal information based on consent before such withdrawal.