In this statement we explain how “Elgin Property Finance” respects your privacy in relation to interactions with this website. When we talk about “Elgin Property Finance” or “Elgin” or “us” or “we” in this policy we are referring to Elgin Property Finance Limited, its subsidiaries, affiliates and their respective parent and subsidiary companies.

If you are aged 18 or under, we do not provide any services that are suitable to you however some information may be recorded if you interact with our website or staff. As such please get your parent/guardian’s permission before you provide any personal information to us or use this website or contact us. Users without this consent are not allowed to provide us with personal information and therefore should not use this site.

Elgin Property Finance Limited, registered in Dublin, Ireland, company number 703822, with its registered office at 6 Suffolk Street, Dublin 2 and other companies in Elgin collect and use certain Personal Data. Elgin is responsible for ensuring that it uses that Personal Data in compliance with data protection laws.

At Elgin we respect the privacy of our clients and we are committed to keeping all your Personal Data secure. This Privacy Policy governs the handling of Personal Data by Elgin in the course of carrying out commercial activities.

We collect personal data about you as a User and data relating to your interactions with us on-line through www.elginpf.ie and/or www.elginpf.co.uk by phone or email. We will only collect and use individual user details where we have legitimate business reasons and where we are legally entitled to do so.

When you sign up to the platform personal information is gathered to enable us to provide services to you including but not limited to information specific to individuals and entities provided when completing the application process such as first name, second name, date of birth, nationality, postal addresses, telephone numbers, identification documents, bank documents, PPS number and e-mail addresses.

We may also collect information from third parties (including companies appointed to act as our agents or appointed to engage with you, such as our independent quantity surveyors, solicitors, valuers and other parties appointed to provide services to you or us.

We may also collect information from public sources including press articles or judgement searches.

This information may be shared with our third-party service providers, in order to facilitate our services, where we have in place appropriate confidentiality agreements to protect your information.

When you browse through our website our web servers collect data which relates to your visit such as:

1. What pages you have viewed;

2. Certain interactions you have had on those pages;

3. The number of times you may have visited a particular page; or

4. The amount of time you may have spent on certain pages.

In some cases the data we collect will be anonymous and it will simply tell us what pages have received the most activity and are of particular interest to our customers in general. Where you set up an account with us and/or log onto the Platform we will be able to identify what pages you have shown a particular interest in, what pages you have visited multiple times and also what pages you have spent the most amount of time on.

We will mostly do this work ourselves however sometimes we will use Google Analytics and other similar tracking tools to assist us. In all cases we will carry this work out in a responsible manner. This data enables us to provide you with a more efficient and effective customer service by developing a wider understanding and appreciation of our customer base. Where we are able to identify specific user activity, we can also offer those users a more bespoke user experience and assist them with customer service issues they may have experienced or may be experiencing.

Information shall be stored and used in strict compliance with Data Protection Laws applicable within the Republic of Ireland. For further information on this, please visit www.DataProtection.ie

We only share your information with a select number of individuals and companies, and only as necessary. Sharing can occur in the following circumstances and/or with the following persons:

Your authorised representatives:

o These include your broker/retail intermediary, solicitor (under a Power of Attorney) and any other party authorised by you to receive your personal data.

Third parties we need to share your information with in order to facilitate payments you have requested.

o for example, banks or payment service providers such as SWIFT; and

o those you ask us to share your information with.

Companies in the Elgin Group:

We share your information with members of the Elgin Group to protect our legitimate interests or where legally required to do so.

Guarantors:

We will share your information with any person or entity which guarantees your obligations to us (for example, if an entity provides a guarantee as part of a statutory scheme) or gives us an indemnity concerning these obligations.

Companies that provide support services for the purposes of protecting our legitimate interests:

Your personal information remains protected when our service providers use it. We only permit service providers to use your information in accordance with our instructions, and we ensure that they have appropriate measures in place to protect your information.

Our service providers include providers of marketing services such as advertising agencies or social media companies (so they can present messages from us to you) and market research companies, analytics companies, investment companies, IT and telecommunication service providers, software development contractors, data processors, debit/credit card producers, computer maintenance contractors, printing companies, property contractors, document storage and destruction companies, custodians and providers of administration services, archiving services suppliers, debt collection agencies, budgeting and advice agencies, tracing agencies, receivers, liquidators, examiners, Official Assignee for Bankruptcy and equivalent in other jurisdictions, auditors, and consultants, including legal advisors.

Statutory and regulatory bodies (including central and local government) and law enforcement authorities:

These include the courts and those appointed by the courts, government departments, statutory and regulatory bodies in all jurisdictions where the Elgin operates including: the Central Bank of Ireland, the European Central Bank, the Data Protection Commission, Financial Services Ombudsman, Credit Review Office, An Garda Síochána/police authorities/enforcement agencies, Revenue Commissioners, Criminal Assets Bureau, US, EU and other designated authorities in connection with combating financial and other serious crime, police forces and security organisations, ombudsmen and regulatory authorities, as well as fraud prevention agencies.

Credit reference/rating agencies, including the Central Credit Register and The Irish Credit Bureau:

We may search the Central Credit Register where permitted but we are not obliged to do so to protect our legitimate interests.

Third parties in connection with a sale or purchase of assets by a member of our Group:

Those who are interested in or participating in buying or selling assets of Elgin or in connection with a funding arrangement for Elgin.

Correspondent banks and other financial institutions engaged to supply status opinions in accordance with banking practice.

We will always let you know how we intend to use your information before collecting it, so that you can decide whether or not you wish to provide that information. You should read our Data Protection – Use of Information Notice or contact us directly for more information on how we use your information.

Personal data means any information relating to an identified or identifiable natural person. Elgin may process the following types of personal data you provide:

• Name, address, email address, telephone number and other contact information;

• Your Personal Public Service Number (PPSN) or Tax Reference Number (TRN).

• Date and place of birth;

• Nationality;

• Employment details;

• Copies of identity documents (passport, national ID card, driver’s license, employee identification numbers);

• Copies of utility bill, bank statement;

• Financial information you provide including ownership of companies;

• Statements you provide in relation to your relevant experience and education;

• Online profile and social media information and activity based on your interaction with us and our websites and applications, including for example, your online profile and login information, Internet Protocol (IP) address, smart device information, location coordinates, mobile phone network information, searches on our website and site visits.

• Where relevant you may notify us of health or medical conditions. Record of such Special Category information shall only be retained to the extent required by law, contract or with your consent.

If we have a lawful right to do so and in order to prevent crime, money laundering or other fraudulent activity, we will also use information about criminal convictions and alleged offences.

Where you have provided your consent for us to process your special category data, such as health or medical conditions, you can withdraw this consent at any time by contacting us.

Please note that the list is not exhaustive, and that Elgin may also collect and process personal data to extent this is useful or necessary for the provision of our services and required to satisfy legal or regulatory requirements or with your consent.

Where you provide any additional information, on a solicited or unsolicited basis, this information may be processed.

We know that you care about how your information is used, stored and shared. We appreciate your trust in us to do that. To protect your information, we use security measures that comply with Irish Law and meet international standards. This includes computer safeguards and secure files and buildings.

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. By submitting your personal data, you consent to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy and GDPR. As effective as modern security practices are, no physical or electronic security system is entirely secure. We cannot guarantee that information you supply will not be intercepted while being transmitted to us over the internet, nor can we guarantee the complete security of our database.

Under the Data Protection Acts you have the right to see the personal information we hold about you. To request a copy of this information, write to Data Control Officer, Elgin Property Finance, 5 Fitzwilliam Square, Dublin 2, D02R744 or email loans@elginpf.ie with the subject 'Subject Access Request' stating you wish to request a copy of your information from the Data Control Officer in your email. You may also call us on 01 -697 1325. Please note, your request must be sufficiently clear to act upon, and we must be able to verify the identity of the requester. As such, please be as specific as possible in relation to the personal data you wish to access.

Your request will be processed as soon as possible, taking no more than 45 days to process.

If your information changes or you believe we have information which is inaccurate or not up-to-date please let us know and we will change it.

We make every reasonable effort to prevent any loss, misuse, disclosure, or modification of personal information, as well as any unauthorized access to personal information. We use appropriate security measures when destroying personal information, including shredding paper records and permanently deleting electronic records.

We make every reasonable effort to ensure that personal information collected by us is accurate and complete. We rely on individuals to notify us if there is a change to their personal information that may affect their relationship with our organization.

If you are aware of an error in our information about you, please let us know and we will correct it on request wherever possible. In some cases, we may ask for a written request for correction.

This Privacy Statement is subject to the Terms and Conditions of Use of the Elgin Property Finance website, a copy of these is available on www.elginpf.ie.

It is important that you read the terms and conditions of use as where there is a conflict between this Privacy Statement and the Terms and Conditions of Use, the Terms and Conditions of Use shall prevail.

By accessing and continuing to navigate this website you acknowledge and agree to the processing of your personal data in the manner outlined above. You also agree that in certain circumstances we may be obliged to disclose personal information relating to you to third parties in order to prevent, detect or prevent fraud.

Information provided to Elgin Property Finance will be managed in a manner compliant with the Data Protection Laws of Ireland.

We collect and process personal information when you contact us and at the start of and for the duration of your relationship with us. Your personal information may be retained for up to 6 years following termination of your relationship with us, to the extent required to comply with regulation.

We collect and process your personal data where:

• You have given consent to the processing of his or her personal data for one or more specific purposes

• Processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract;

• Processing is necessary for compliance with a legal and regulatory obligation to which we are subject;

We may sometimes collect special categories of information for the purpose of detecting and preventing financial crime or to make our services accessible to you. We will only collect or use this information when we have your explicit consent or are otherwise lawfully permitted to do so according to the law.

In addition to such general, fair use of information users should explicitly note:

As a Borrower, you should note that:

Elgin reserves the right to use details relating to any loan applications, such as uploaded images, locations, descriptions, videos and amounts of funded projects in our promotional materials without notice or compensation. However, such promotions shall not contain any personal or otherwise commercially sensitive information without the express consent of the borrower.

Elgin does not currently use automated credit decisioning.

To provide you with products or services, we must create records that contain your information, such as your account records, records of your activity, any lending or borrowing records and any associated electronic or written instruction received. Records can be held on a variety of media (physical or electronic) and formats.

These records are necessary for us to comply with our legal obligations and to deliver our services to you. We retain information in line with our regulatory or legal requirement. Overall we do not look to retain or use personal information other than as we consider necessary to comply with our legal, contractual or regulatory obligations.

Retention periods for records are determined based on the type of records in question. We normally keep customer account records for up to seven years after your relationship with the us ends, whilst other records are retained for shorter periods. Retention periods may be changed from time to time based on business or legal and regulatory requirements.

We may on exception retain your information for longer periods, particularly where we need to withhold destruction or disposal based on an order from the courts or an investigation by law enforcement agencies or our regulators. This is intended to make sure that we will be able to produce records as evidence, if they're needed.

If you have a question or concern about any collection, use, or disclosure of personal information by Elgin please write to:

Data Control Officer, Elgin Property Finance, 5 Fitzwilliam Square, Dublin 2, D02R744.

We hope to address your concerns through our normal complaints process, however, we may escalate your complaint to our Data Protection Officer for further investigation.

You also have the right to complain to the Data Protection Commissioner. You can contact; the Data Protection Commissioner, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland. For more information, visit www.dataprotection.ie