Privacy Policy Last Revised: October 23, 2017 Pegasus Business Intelligence, LP d/b/a Onyx CenterSource, and its affiliates including without limitation Worldwide Payment Systems S.A.U. and Net Trans Services AS (together, “Onyx”) respects the privacy of individuals who visit Onyx’s websites and platforms (“Sites”) or use Onyx’s services (“Services”). This Privacy Policy discloses the privacy practices of Onyx including what information Onyx may collect in connection with the Sites and Services, how Onyx may use that information, and with whom Onyx may share it. By using the Site or Services, you are expressly consenting to the terms and conditions of this Privacy Policy. If Onyx decides to change this Privacy Policy in the future, Onyx will post the changes here, and may also post the changes to any other area Onyx deems as appropriate to put you on notice of any changes that could affect the information that you provide to Onyx through use of the Site or Services. Your continued use of the Site or Services constitutes your acceptance of the then-posted version of the Privacy Policy. Collection of Personal Information Personal Information If you use the Sites or Services, you may voluntarily submit to Onyx certain personal information including without limitation your name, IATA number, address, telephone number, and e-mail address (“Personal Information”). If you sign up for electronic deposits from Oynx, this Personal Information will include your bank information and your account number. Onyx may use such Personal Information to provide the Services to you, to respond to your requests, and for related business purposes. From time to time, Onyx may refer to Personal Information to better understand its customers’ needs and how Onyx can improve the Sites and Services. Onyx may also enhance or merge Personal Information with data obtained from third parties for the same purposes. Onyx may use Personal Information to email you about our current or upcoming products and services and other promotional information that may interest you If you provide Onyx any Personal Information about other people, you represent and warrant that you have any and all necessary permissions and rights to submit any such third party Personal Information to Onyx for the uses permitted hereunder. Customers who contract with Onyx for the Services may provide Onyx with Personal Information of third party travelers, guests, and other individuals (“Guest Data”). In this context, the customer is the “data controller” and Onyx is the “data processor,” as those terms are used in applicable law regarding data and privacy rights. Onyx only processes such Personal Information in accordance with the applicable customer contract, for purposes of providing the Services. Information Regarding Children The Sites and Services are not intended to be used by anyone under 18 years old, and Onyx does not knowingly collect information regarding any individuals under 18 years old. If Onyx discovers that it has information regarding such individuals, it will promptly take reasonable steps to delete such information. Correction and “Opt Out” Procedures To access, review, or update your Personal Information, you may do so by visiting your account or profile page (if applicable) or by contacting Onyx directly. Onyx also offers the opportunity to opt-out of whether your Personal Information may be aggregated, or used for a purpose other than the purpose for which it was originally collected or subsequently authorized by you. To request such access, update, or opt-out, please email Onyx at privacy@onyxcentersource.com. To stop receiving promotional emails, follow the unsubscribe or opt-out instructions in the email and we will take reasonable measures to promptly process your request. For third party Personal Information provided by our customers in our role as a data processors, we may have to refer your questions or requests to the applicable customer who is the data controller. Use of Your Information Onyx uses your Personal Information to: (a) provide the Sites and Services to you; (b) make payments and provide statements to you; (c) resolve disputes, or troubleshoot problems related to any Sites or Services; (d) enforce this Privacy Policy and others agreements associated with the Sites and Services; (e) customize, maintain and improve the user experience regarding the Sites and Services; and (f) contact you regarding your account, or respond to your inquiries. Onyx uses Guest Data only as instructed by the applicable customer who is the data controller for such Guest Data, and will not use or disclose such Guest Data except as necessary to fulfill such instructions and provide the relevant Services. Disclosure of Your Information Disclosure to Others Onyx will not sell or rent your Personal Information to third parties for their own marketing or other business uses. Personnel of Onyx may access Personal Information only with proper authorization and in compliance with this Policy. Onyx may share Personal Information with: (a) its affiliates; (b) its third party service providers, such as payment processors and IT consultants, who need such information to provide the relevant services to Onyx and who agree not to use such information for any other purposes; and (c) to third parties in connection with the sale, assignment, or other transfer of its business, in which case Onyx will require any such buyer to agree to treat Personal Information in accordance with this Privacy Policy. Disclosure By Law In rare circumstances where national, state, or company security is at issue, Onyx reserves the right to share Personal Information with the appropriate governmental authorities. You understand and agree that Onyx may disclose your Personal Information if required to by the order of any court or similar tribunal or any other governmental body or agency of appropriate jurisdiction, or if Onyx, in Onyx’s sole discretion, believe that the disclosure of some or all of such information is warranted to protect the rights, property, or safety of Onyx or a third party, or to comply with any applicable laws. De-identification Onyx may aggregate and de-identify databases containing Personal Information to derive non-personally identifiable data sets, and Onyx or its systems may automatically collect technical, non-personal information from you or your devices used to access the Sites or Services (including without limitation information about the user’s device, operative system, browser, page views, or clicks). Any non-personal data derived or collected by Onyx may be used by Onyx or disclosed to non-agent third parties by Onyx for any purpose whatsoever. Cookies and Tracking “Cookies” are small software files saved to the hard drive of your computer after accessing a website. Onyx employs the use of cookies as part of the Sites. A cookie contains a unique identifier. Onyx collects information through the use of cookies in order to track information while visitors use the website. Cookies help Onyx improve Onyx’s website and deliver a more personalized service to visitors. You may disable cookies in your browser settings, but if you do so then you may not be able to use some or all of the functions of the Site and related Services. The Site does not respond to do-not-track signals. Protection of Your Information Onyx uses appropriate and reasonable, market-accepted, security measures to help protect information from unauthorized access and disclosure by or to other individuals or third parties. Onyx takes protecting information very seriously; however, no system can be considered entirely secure. Therefore, you should not expect, and Onyx does not warrant or guarantee, that your information will remain protected and private. Third Party Sites The Site and Services may contain links to third party websites. Please note that Onyx does not control or endorse the content in, or policies for, such third party websites. Any information collected by such third party websites is not subject to this Privacy Policy, so please read any applicable privacy policies for such third party websites before using such websites. Contact Onyx If you have any questions or issues regarding this Privacy Policy, please contact privacy@onyxcentersource.com.