Privacy Policy

Dun & Bradstreet Credit Bureaus Limited – Online Data Privacy Policy

Dun & Bradstreet Credit Bureaus Limited and/or its affiliates and entities (collectively ‶D&B‶, ‶we‶ or ‶us‶) values your security and privacy. Data Protection Law, Law No. 5 of 2020 (the ‶DP Law‶) is applicable to us and for certain types of personal data processing, we may be subject to laws from other jurisdictions.

As such, it is the policy of the D&B to respect the privacy of our website services. In accordance with DP Law, D&B collects information about you when you use or access our websites and other web-based products, information or services (collectively, the ‶Website Services‶) as well as through other interactions and communications you have with us. This data protection policy (the ‶Policy‶) sets out the basis on which any information, including any personal data, we collect from you, or you provide to us, will be processed by D&B. Each time you access or use the Website Services or provide us with information, by doing so you are accepting and, where possible, consenting to the practicesdescribed in this Policy.

1. Scope and Application

This Policy applies to persons anywhere in the world who access or use D&B′s Website Services (‶Users‶).

2. Collection of Information

This is the information you give us about you by providing information or filling in forms or any D&Bowned Website Services, or by corresponding with us (for example, by telephone, e-mail or any other digital or electronic form). It includes, for example, information you provide when you register using the D&B website.If you contact us, D&B will keep at least an electronic record of such correspondence, including personal information shared at that time. The personal information you give us may include your name, address, e-mail address and phone number, certain device information, username, password, residential building, work address, photograph and other registration information you choose to provide (‶Personal Information‶ or ‶Personal Data‶).

The Website Services collect and process Personal Data for specific, lawful purposes only.

The Website Services are not targeted, intended or expected to be of use to children. Apart from providing information for specific services or purposes, as directed by D&B processes, User-provided contributions of content or contact information regarding or about children are expressly prohibited.

Information we collect about you and your device

Each time you use our Website Services, we will automatically collect the following information:

• technical information, including the type of mobile device you use, a unique device identifier (for example, mobile network information, your mobile operating system, the type of mobile browser you use, device token, device type, time zone setting (‶Device Information‶);
• details of your use of our Website Services including, but not limited to traffic data, weblogs and other communication data, and the resources that you access (‶Log Information‶).
• location information, if the Website Services uses GPS technology to determine your current location. If you wish to use the particular feature, you may be asked to consent to your data being used for this purpose. You can alter your consent and sharing selections at any time via your device settings.

Other Information We May Collect Through Your Use of the Website Services: When you use any Website Services, we may collect Personal Information as well as demographic information, for example information that you submit, or that we collect, which may include, but is not limited to, post code, hometown, gender, username, mobile network information, your mobile operating system, the type of mobile browser you use, time zone setting, device location, IP address, SMS data, transaction information, age/birth date, browsing history information, searching history information, and registration history information (‶Demographic Information‶).

3.Use of Personal Data

We may use Personal Data which you provide to us or we collect from you to:

• Provide, maintain, and improve our Website Services, including, for example, to facilitate payments, send receipts, provide products and services you request (and send related information about them), develop new features, provide customer support to Users, authenticate users, and send administrative messages, whether information or required by applicable law;
• Perform internal administration and operations, including, for example, to prevent fraud and abuse of our Website Services; to troubleshoot software bugs and operational problems; to conduct data analysis, testing, and research; and to monitor and analyze usage and activity trends;
• Send you communications which we think will be of interest to you, including information about products, services, promotions, news, and events, where permissible underand in accordance with the applicable Laws;
• Notify you about changes to our Website Services;
• Allow you to participate in any interactive features of our Website Services;
• Keep our Website Services safe and secure; and
• Personalize and improve the Website Services, including to provide or recommend features, content, social connections, referrals, and advertisements.

4. Processing, Storage and Transfer of Personal Data

We will take all steps reasonably necessary to ensure your data is processed fairly and lawfully, in accordance with the applicable Law and this Policy. By submitting your Personal Data (including Log, Device and/or Demographic Information), you agree to such transfer, storingor processing in order for D&B to perform its general administrative and regulatory functions, including but not limited to responding to enquiries you raise via Website Services and maintaining contacts for future informational or promotional activities. Unless otherwise notified, D&B does not ordinarily engage in automated decision making when processing your Personal Data.

You agree that we have the right to transfer the Personal Data described in this Policy to and from, and process and store it in, the United Arab Emirates and (where applicable or required) with processors in other countries, some of which may have less protective privacy laws than those where you reside. Where this is the case, we will take appropriate security measures to protect your Personal Data in accordance with this Policy.

To preserve the integrity of our databases, to carry out on-going Website Services on behalf of all Users, for research, analytics and statistics purposes and to ensure compliance with applicable laws and regulations, we retain Personal Data submitted by Users for a reasonable length of time unless otherwise prescribed by applicable law. D&B is not responsible for the accuracy of the information you provide, and will modify or update your Personal Data in our databases upon your request, as further outlined below. We will erase or archive from active use your Personal Data upon request, unless we are required to retain it in accordance with the applicable laws or to perform agreed services. By accessing or using the Website Services, you do hereby represent and warrant that you understand that all information submitted by you through the Website Services or otherwise to D&B may be used by D&B in accordance with applicable laws and its policies.

5. Sharing of Personal Data

We may share Personal Data which we collect about you as described in this Policy or as described at the time of collection or sharing, including as follows:

Through Our Website Services:

We may share your Personal Data:

• With third parties to provide you a service you requested through a partnership or promotional offering made by a third party or us;
• With third parties with whom you choose to let us share your Personal Data, for example other a websites that integrate with our API or Website Services, or those with an API or Service with which we integrate; and

Other Types of Data Sharing:

We may share your Personal Data:

• With D&B subsidiaries and affiliated entities;
• With vendors, consultants, marketing and advertising partners, and other service providers who need access to such Personal Data to carry out work on our behalf or to perform a contract we enter into with them;
• In response to a request for information by a competent authority or government entities if we determine that such disclosure is in accordance with, or is otherwise required by, any applicable law, regulation, or legal process;
• With law enforcement officials, government entities or authorities, or other third parties as required by applicable law;
• With third parties in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company;
• If we otherwise notify you and you consent to the sharing;
• With third parties in an aggregated and/or anonymized form which cannot reasonably be used to identify you.

All sharing of Personal Data is in compliance of DP Law that governs fair and lawful sharing of Personal Data within the UAE and elsewhere.

6. Your Rights and Choices

Marketing and Opting Out:

D&B supports User's legal rights to opt-out of receiving communications from us and our partners. You have the option to ask us not to process your Personal Data for marketing purposes and to remove it from our database, to not receive future communications or to no longer receive ourWebsite Services.

You may change your preferences at any time.

Please note that we may continue to send you transactional or service-related e-mails despite your desire to not receive promotional or marketing e-mail messages. Additionally, please note that if you elect to opt-out of receiving promotional e-mails from one of our Website Services, you may continue to receive promotional emails from our other websites, providers or other, non-affiliated marketers whose services you may have accessed via the D&B Website Services.

Finally, while we may remove your individual contact information from our professional contacts database, please be aware that if such information is in a different third party's marketing directory through your request or election, you will need to request removal with such third party directly.

Access to and Correction of Your Personal Information