PEOPLE RESPONSIBILITY INVESTOR RELATIONS PRIVACY POLICY This Privacy Policy covers the use of your information by the Mapeley group. The Mapeley group entity that will be the Controller of your information will be the entity with which you have a relationship. In relation to the use of this website (the “website”) the Controller is Mapeley Estates Limited (“MEL”). WHAT INFORMATION DO WE HOLD? We will collect, process and store personal information about you which will include: your name and email address when you contact us for information; and in relation to business contacts: organisation, name, address, email address, telephone number and information related to our business relationship with you. Most of the information described above comes directly from you but we do obtain some from third parties, for example, personal information may be passed to us by clients, suppliers or customers who, as your employer, may have designated you as their contact person. When you visit our website, we collect some basic information such as your internet service provider’s domain name, which pages you accessed on the site and when. We use this information only to analyse the use of our website to help guide improvements, and we do not tie this to any information that can be used to identify you. COOKIES When you visit our website, we use cookies, which are small pieces of information that allow them to maintain your connection to the website. The website may use cookies for detecting what kind of device you have in order to present content in the best way, for a language switch and/or for other purposes. These cookies do not collect or store any personally identifiable information. You can refuse the use of cookies. GOOGLE ANALYTICS Our website uses Google Analytics, a web analytics service provided by Google, Inc. (‘Google’). Google Analytics uses cookies (text files placed on your computer) to help the website operators analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. HOW TO REFUSE THE USE OF COOKIES By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You may refuse the use of cookies by selecting the appropriate settings in your browser. However, if you do this you may lose some useful functionality. HOW AND WHY DO WE USE YOUR PERSONAL INFORMATION? We will use your information for the purpose of legitimate interests being pursued by us in relation to the services or properties that we provide. For example, we will use your information to contact you to discuss our services and properties (and any changes to them); to respond to any questions or concerns you have raised; to deal with administrative matters such as contacting you for business purposes and (where applicable) to prevent fraud. We may also provide marketing information to you in relation to our services or properties where you have given your consent, or we are otherwise legally entitled to do so and it is in our legitimate interests to provide such information to you. If you do not wish to be contacted in this way, you can tell us by contacting us using the details set out at the end of the Privacy Policy or using the “unsubscribe” option in communications sent to you. We may also use your information in order to comply with any legal obligation that we have, in connection with any legal proceedings or in order to establish, exercise or defend our legal rights. Where we have relied on our legitimate interests to process your personal data, you may contact us to obtain more information, including in relation to our assessment of the impact on you. WHO DO WE SHARE YOUR INFORMATION WITH? Your information will be shared internally amongst our staff but they will only use it to carry out their duties in line with the purposes set out above. We will need to share your personal information with others from time to time, including: our professional advisers, such as our accounting and legal advisers where they require information in order to provide advice to us; our group companies for the purposes of business operations; if another entity acquires us or our assets, your information may be disclosed to that entity as part of the due diligence process and, if the acquisition goes ahead, your information will be transferred to that entity; and our service providers who operate our website, or provide and support our management and data storage systems. We will also disclose your personal information if we are required to do so by law or to a law enforcement agency. WHERE IS YOUR INFORMATION STORED? Your personal data will be stored locally by your Controller, but may also be stored and backed up on servers located inside the European Economic Area. We ensure that your data is protected by requiring the recipient of your data to enter into standard contractual clauses that have been approved by the European Commission. If you would like further information on the use of these clauses, you can contact us using the details set out at the end of this Privacy Policy. HOW LONG WILL WE KEEP YOUR INFORMATION? We only keep your information for as long as is reasonably necessary for the purposes set out in this Privacy Policy and to fulfil our legal obligations. We will securely erase your information if we decide that we no longer need it. YOUR RIGHTS You have the following rights regarding your information: Your rights What does this mean? 1. Right to be informed You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we are providing you with the information in this Privacy Policy. 2. Right of access You have the right to obtain access to your information (if we are processing it), and other certain other information (similar to that provided in this Privacy Policy). 3. Right to rectification You are entitled to have your information corrected if it is inaccurate or incomplete. 4. Right to erasure This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions. 5. Right to restrict processing You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. 6. Right to data portability You have the right to obtain and reuse your personal data in a structured, commonly used and machine readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party. 7. Right to withdraw consent If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). RIGHT TO OBJECT TO PROCESSING In addition to the above rights, you also have the right to object to certain types of processing, in certain circumstances. In particular, the right to object to the processing of your personal data based on our legitimate interests grounds (including processing for direct marketing). To exercise any of these rights at, any time, you can contact us using the details set out at the end of this Privacy Policy. WEB SERVICE PROVIDER The pages on this website are published by MEL. MEL will not collect any information about individuals, except where it is specifically and knowingly provided by them. When you visit this website, MEL’s web server collects some basic information such as your internet service provider’s domain name, which pages you accessed on the site, and when. We use this information only to analyse the use of our website to help guide improvements. We do not collect any personally identifiable information. CONTACTING US AND MAKING A COMPLAINT You can contact us by emailing enquiries@mapeley.com. Please do contact us if you have any questions or complaints about this Privacy Policy or about how we handle your information. Changes to this Privacy Policy From time to time we may make changes to this Privacy Policy to ensure that it is accurate and up to date and to reflect any changes in the law. This policy was last updated on 17 October 2019. If you are not satisfied with our response or you believe our use of your information does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (the “ICO”). ABOUT US PROPERTY SEARCH WHAT WE DO PARTNERS PEOPLE RESPONSIBILITY INVESTOR RELATIONS NEWS CONTACT US TAX STRATEGY ANTI-SLAVERY POLICY PRIVACY POLICY GUIDANCE INFORMATION ON COVID-19 © Mapeley 2021