Personal Data provided by you to us or collected by us in order to manage your account. This includes the following: • Customer employees’ name. • Customer employees’ email address. • Customer employees’ business address. • Customer employees’ telephone number. • Customer credit card or direct debit information (if paying by those methods) including. Debit/Credit card name. Debit/Credit card type. DebitCredit card expiry date. Debit/Credit card number. Where you log a technical support case, we will process the name and contact details of the user logging the case and the other users involved in the case. If we are provided access to email content by you to deal with your support query (with your express permission having been granted), we will have access to any Personal Data set out in that email. If you choose a server side deployment, Personal Data provided by you to us or collected by us in order to provide the Services. This includes data aggregated from your Active Directory or Google Directory or from Lists and Content such as: • Sender’s/Recipient’s First, Last and Full name. • Sender’s/Recipient’s business address. • Sender’s/Recipient’s company name. • Sender’s/Recipient’s telephone number. • Sender’s/Recipient’s email address. • Sender’s email subject line and content information for the inclusion of the signature block. • Any other information that you expose to us via Custom Attributes within the signature block. If you choose a client side deployment, the only Personal Data we collect are the contact details of those employees of yours that we may interact with to deliver the Service (such as your IT admin or finance person (for invoices). No sensitive data is processed by us unless you include it in the content of emails.

We will process Personal Data provided by you or collected by us in order to manage your account with us and to fulfil our contractual obligations to you. We may also process Personal Data in an aggregated and anonymised manner to analyse trends and to track your usages of and interactions with our Services to the extent necessary for our legitimate interest in developing and improving our Services and providing you with more relevant content and service offerings. We will process the Personal Data for the duration of the period in which we provide Services to you.

Personal Data provided by you to us or collected by us in order to manage your account. This includes the following: • Customer name. • Customer email address. • Customer business address. • Customer telephone number. • Customer credit card or direct debit information. • Debit/Credit card name. • Debit/Credit card type. • DebitCredit card expiry date. • Debit/Credit card number. Where you log a technical support case, we will process the name and contact details of the user logging the case and the other users involved in the case. If we are provided access to email content by you (with your express permission having been granted), we will have access to any Personal Data set out in that email. Personal Data provided by you to us or collected by us in order to provide the Services. This includes data aggregated from your Active Directory or Google Directory or from Lists and Content such as: • Sender’s/Recipient’s First, Last and Full name. • Sender’s/Recipient’s business address. • Sender’s/Recipient’s company name. • Sender’s/Recipient’s telephone number. • Sender’s/Recipient’s email address. • Sender’s email subject line and content information for the inclusion of the signature block. • Any other information that you expose to us via Custom Attributes within the signature block. No sensitive data is processed by us unless you include it in the Content of emails.

Personal Data provided by you to us or collected by us in order to manage your account is stored for the duration of your relationship with us. Where you log a technical support case, the data relating to the case is stored within our CRM. Personal Data provided by you to us or collected by us in order to provide the Service(s) is aggregated from your Active Directory or Google Directory and stored. This stored copy of the data is then used during the processing of the signature block prior to inclusion within the signature. This data is held separately from the main signature block, with the signature block being deleted once it has been included within the email. The aggregated data is stored for the duration of your relationship with us, after which time it is deleted in its entirety.