This privacy notice applies to personal data that we collect and process as part of the services offered by Charge & Go through our Website or the Mobile App. We collect this personal data when individuals:

• Visit our Website.
• When you use our Mobile App, contact us, purchase (or are a recipient of) our services, or make an inquiry about the services.

By subscribing to any of our services or by accessing our Website or Mobile App, you acknowledge and agree that this privacy notice applies to all the services offered by us and to all the processing of personal data through the use of our Website or Mobile App, but excludes services and websites or apps that have separate privacy notices that do not incorporate this privacy notice.

The Personal Data We May Collect About You

Your "personal data" means any information, which allows us to identify you directly or indirectly. We may collect and process the following types of personal data, in accordance with applicable laws:

• Basic Personal Information: name, address, contact details, date of birth, nationality and gender.
• Government-Issued Identification: Passports or other official proof of identification (and the personal data contained in those IDs).
• Financial Information: payment details, credit or debit card data.
• Vehicle information: Vehicle make and model, vehicle identification number (VIN), registration number.
• Customer Traffic & Communication Data: Query records or other customer communication records.
• Photographic, Video and Location Information: User location information, CCTV images and footage.
• Your delivery and/or your billing addresses,
• Information on products and services purchased by you
• Your preferences for particular products and services
• Your demographic information, education level, occupation, household income, interests and activities
• The channel you chose to purchase our products or services
• How you use our products and services, which may include your traffic data and the date, time, duration and cost of your communications and the types of websites that you visit, your spend, your device details, your phone usage, your purchasing habits, your location, your searching and browsing history on our websites.
• Your amount of data usage, roaming information, internet protocol (IP) address which we collect when you visit our websites and your device details, the date and time of your visit of our websites, the type and version of browser used, the operating system and platform and the URL of any websites which you used to access our websites
• Your account information such as your billing history, the services you use and anything else relating to your account
• any information necessary to make a credit check with credit reporting agencies
• any other relevant information we need to provide a particular service
• If you give us personal data about another individual that we have requested in relation to the provision of a service, then you are responsible for ensuring that they know and agree to us keeping records about them and that we will process their personal data in accordance with this privacy notice.

Sources of Personal Data

Data Collected Directly from You

We generally collect personal data directly from you as part of your usage of our Website or Mobile App. For examples, this may occur when you:

• When you use our Website
• When you register on our Mobile App to use our services
• When you contact us through our Website, email or another communication channel, including social media;

Data Collected from Other Sources

We may also collect personal data about you from other sources, such as:

• Corporate Clients: instances where a corporate entity uses our services for their fleet or you use a parking/charging location of a third party we have partnered with.

Where we collect data from external sources, we ensure that this is done lawfully, and we only proceed with your authorisation where required by applicable laws.

How We Use Your Personal Data

We will process your personal data when you use our Website or our Mobile App. This may include the following activities:

• Account Setup & Charging Services: We use your personal data to manage your registration via the Mobile App. This includes managing your use of the service, verifying your identity, and enabling you to start and stop charging sessions at our physical chargers and show you other chargers around your location.
• Platform Management: We process your personal data to ensure you can access the Mobile App. This includes maintaining your profile and ensuring the technical features of the Mobile App are functioning correctly.
• Inquiries & Support: If you contact us via any communication channel, we use your personal data stored in our systems to verify your identify, resolve technical issues or answer questions about services.
• Marketing: We may use your personal data to contact you for marketing purposes, such as, providing information about our products and services, assisting with any questions or inquiries you have submitted, and sending newsletters if you have subscribed to them.
• Email Newsletter Programme: We process your information to manage our email newsletter programme, which keeps subscribers informed about our products and services. This information may also be used to refine future email campaigns and provide you with more relevant content based on your interests and activity.
• Legal and policy compliance: ensuring compliance with applicable laws and internal policies, including those related to payment processing and usage of our service by you.
• Other lawful purposes: carrying out any other lawful activities reasonably related to the services you are using.

We collect and use personal data to help us manage your account:

• to confirm process your orders
• to validate you as a registered customer when using our services or when calling the our contact centre
• to deliver products and services to you (whether we provide them or not)
• to manage your account with us and for billing purposes
• to improve our products and services and develop new ones
• to tell you about our products and services or allow trusted partners to tell you directly about their products
• to respond to any questions or concerns you may have regarding our network, products or services
• to comply with applicable laws, regulations, court orders, government and law enforcement agencies' requests
• to make credit decisions about you
• to ensure security for you and our staff
• to prevent and detect criminal activity, fraud and misuse of or damage to our services or networks
• to carry out statistical analysis and studies which may be shared with third parties, only in an anonymized form
• We may monitor your use of the services and record any calls made to our Contact Centre for training, financial control, quality control and regulatory purposes.

Grounds for Processing Personal Data

By using our services and accessing our Website, you consent to us processing your personal data in accordance with the terms of this privacy notice. We may also process your personal data to manage our relationship with you and improving our services. Additionally, we may process your personal data to comply with applicable legal and regulatory requirements.

Sharing or Disclosing Your Personal Data

Within Our Group of Companies

We may share your personal data with other members of our group for the purposes described above. We will take steps to ensure that the personal data is accessed only by authorised e& employees and authorised third parties that have a need to access the data for the purposes described in this notice.

With Third Parties Outside Our Group of Companies

We may need to share your personal data with third parties outside of our organisation for various reasons related to the provision of our services and managing our business operations. Third parties that we may share your personal data with include the following:

• Service Providers: companies that provide products and services to us, including IT and software providers (such as, app developers, cloud services and communications providers), payment processors, and data storage services.
• Professional Advisors: our accountants, lawyers, and other professional advisors who assist us in business, legal, or contractual matters.

In all cases, we will only share your personal data in accordance with applicable law and with organisations we have a written agreement with. We have strict internal controls to ensure that only the minimum necessary is shared with third parties and that is appropriately protected.

We may also disclose your personal data with public or government authorities in compliance with our legal obligations, such as, for security and crime prevention purposes if such disclosure is:

• permitted by applicable UAE laws;
• expressly permitted by the UAE telecommunications regulations or any other aspect of the UAE regulatory framework;
• in response to legal process (e.g. police, emergency services, etc.) in order to comply with a court order or applicable law or in connection with judicial proceedings or other legal process.
• necessary for the execution of the agreement between us and the provision of our services to you;
• made in order to protect us or our customers' legitimate interests;
• expressly permitted by you (express opt-in consent).
• We may share your personal information with reputable credit reporting agencies for the purposes of fraud protection and credit risk reduction.
• We may also share your personal information for emergency services, including your approximate location.

Cross-Border Transfers

To the extent permitted by applicable data protection law, the personal data that we collect from you may be transferred to, and stored at, a destination outside of the jurisdiction in which it was originally collected ("Relevant Location"). It may also be stored and processed by other companies and/or third parties in other countries.

Where your personal data is transferred outside of the Relevant Location, we aim to ensure that it is protected in a manner that is consistent with how your personal data will be protected by us in the Relevant Location. In all cases, we will ensure that any transfer of your personal data is compliant with applicable data protection law. You can get more details about the protection given to your personal data when it is transferred outside the Relevant Location by contacting us (see 'How to contact us').

How Long We Will Retain Your Personal Data

We will keep your personal data for as long as it is necessary to fulfil the purposes described in this privacy notice and in accordance with applicable data protection laws. The actual period of time that we hold your personal data may change and is determined by different factors, including, but not limited to:

• For business purposes where we need to keep information for the duration of our ongoing relationship with you and to provide you with the services you have requested (for example, for as long as you have an account on the Charge & Go Mobile App or keep using our services); or
• Whether there is a legal obligation to which we are subject that set minimum retention periods for your personal data (for example, we may need to keep information about your payment transactions for a certain period before we can delete them in line with applicable consumer and financial regulations).

Your Rights Concerning Your Personal Data

You have a number of legal rights in relation to your personal data. Depending on where your personal data is located, these rights may include the following:

• Right to a copy of your personal data: you can access or receive a copy of the personal data which we hold about you.
• Right to rectification: you can request that we correct your personal data if it is inaccurate or incomplete.
• Right to erasure: you can request that we erase your personal data in certain circumstances.
• Right to restrict processing: you can request that we restrict the means or manner in which we are processing your personal data in certain circumstances, even though we may continue to store it.
• Right to portability: where technically possible, you can request that we move, copy or transfer your personal data back to you (or to another controller) to reuse it;
• Right against discrimination: you have the right to not be discriminated against by us when exercising your rights;
• Right to object: you can object to the processing of your personal data by us in certain circumstances;
• Right to withdraw consent: you are entitled to withdraw your consent to personal data processing at any time. Please note, however, that if you withdraw your consent we will not be able to provide you services via our Mobile App. We may still be entitled to process your personal data if we have another legitimate reason for doing so (for example, we may need to retain personal data to comply with a legal obligation).
• Right to raise a complaint: you can lodge a complaint with the local data protection authority if you have any concerns about how your personal data is being processed.

You can exercise your rights in line with applicable data protection law in the relevant location by contacting us (see 'How to Contact Us' section below).

Direct Marketing

We may use the information you give us for direct marketing purposes if you have consented to receive marketing information, or if it has been identified that services may be of legitimate interest to you. We may use your personal data to:

• Inform you About Products & Services. This means we will use the information to provide you with information about the products and services we offer, promotions, discounts and details of events or other communications that we think you will be interested in. We will only do this with your consent (where required by law).
• Answering Queries: we may use your personal data to assist you in answering any questions or queries you may have submitted to us
• Sending Newsletters: if you have opted in to receive newsletters, we will use your personal data to send you these newsletters

Our marketing emails campaigns may include tracking features that help us understand how you engage with our content. This tracking allows us to collect data such as email open rates, link clicks, forwards, access times, dates, and frequency of interaction. This information is used to enhance your experience by refining our email campaigns and delivering more relevant content based on your interests.

We are committed to complying with all our legal obligations whenever we send any marketing to you. You have the right to stop us from contacting you for marketing purposes at any time. If you wish to opt-out of receiving marketing communications from us, you can do so by:

Clicking You can opt-out of receiving directing marketing from us at any time. You can do this by:

• clicking on the "unsubscribe" link in our marketing emails.
• Following other instructions provided by us in included at the end of any marketing communication that we send you, or
• contacting us (see 'How to contact us').

Username and password

Charge & Go may ask you to set up or provide you, from time to time, a username and password for access to our services. You acknowledge that any username or password used to verify your identity for access to the services is personal to you and should not be made available to any other person. You should stop using your username and/or password and notify us immediately if you suspect that someone else may be using them.

We will not be responsible for any loss you may suffer as a result of the misuse of your username or password.

Keeping Your Personal Data Secure We have appropriate security measures in place to prevent your personal data from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal data to those who have a genuine business need to access it. Those who may be processing your personal data will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Cookies and Tracking Technologies

We may use tracking technologies and other online identifiers such as cookies, to provide you with a better, more personal and relevant experience on our Website and Mobile App. By continuing to use our services, you are agreeing to our use of these. You can manage the use of cookies in your browser settings. However, refusing cookies may mean that you are unable to access certain parts of our Website and/or Mobile App.

Links to Third-Parties

Our Website and Mobile App may contain links to and from our partners, advertisers and affiliates ("Third-Parties"). If you follow a link to any of these Third-Parties, then please note that they have their own privacy policies and that we do not accept any responsibility or liability for these policies.

Directory Enquiry Services

Charge & Go will include your contact details including your name or trading name, address and mobile phone number in a directory, in the case of an individual, upon obtaining your prior consent, which will make your details available through directory enquiry services.

If you want your contact details to be updated or withheld from directory enquire services, please contact us.

What to Do If You Have a Complaint Relating to Your Personal Data

You can contact us (see 'How to contact us') if you have any concerns about how we have handled your personal data. If you are not satisfied with the manner in which we have dealt with your complaint, you may contact the relevant data protection authority in your jurisdiction.

How to Contact Us

If you would like further information on the collection, use, disclosure, transfer or processing of your personal data or the exercise of any of the rights listed above, please contact the e& Group Data Protection Officer at groupdataprotection@eand.com.

Changes to this Privacy Notice

Please review this privacy notice at regular intervals as we may update it from time to time at our discretion. If we intend to use your previously collected personal data for a new purpose that is incompatible with the purposes described in this privacy notice or at the time of collection, we will provide you with additional notice and, where legally required, seek your consent.