TSS Gulf Trading LLC treats all information processing seriously. We have a continuous awareness that some of the data that we process is personal
data, we need to ensure our processes treat personal information with respect and protect it from misuse. We take the processing of personal data very
seriously.

We process data only for our core business purpose, we only process data for the original purpose that it was collected for. We do not keep lists of
names for mail shots or cold calling, we will never pass on information to other parties for that purpose.

Here are the principles we operate to in respect of the personal data that we process

Services to our end user customers

• We process personal data about the individuals that we deliver Products or services to. We only take the information that we need to be able to
communicate with our customers about arrangements to plan the service, to deliver the service and then carry out any follow up work straight after the
service which may include a satisfaction survey. For this we hold their name, address, phone number and email address. We do not request, record or
process any other data, including Special data, about our customers.
• After the service is completed and invoiced we retain all the information about the service event to enable analysis of our services, for historical
trending and planning for the future of our business.
• If we use a supplier to deliver a service for us, customer details will be passed to them to enable the service. After the supplier completes their
tasks they will not retain that information.
• We never pass our customer data on to other parties after a service event is closed and we will not contact end user customers after all service
events are closed.
• All our customer data is held on our own database.

Services to our Corporate Partners / Resellers and customers

• We process personal data about the individuals that we deliver services to. We only take the information that we need to be able to communicate with
our customers about arrangements to plan the service, to deliver the service and then carry out any follow up work straight after the service which
may include a satisfaction survey. For this we hold their name, address, phone number and email address. We do not request, record or process any
other data, including Special data, about our customers.
• After the service is completed and invoiced we retain all the information about the service event to enable analysis of our services, for historical
trending and planning for the future of our business.
• If we use a supplier to deliver a service for us, customer details will be passed to them to enable the service. After the supplier completes their
tasks they will not retain that information.
• We never pass our customer data on to other parties after a service event is closed and we will not contact end user customers after all service
events are closed.
• All our customer data is held on our database only

Our suppliers and service partners

• We use suppliers and partners to deliver service for us. Our relationship with them is a contractual one, where they choose to work with us. We hold
information about them to enable us to contact them in relation to delivery of services. If we stop trading with a supplier we continue to hold the
information about them so that we can analyse our services, for historical trending and planning for the future of our business.
• We pass personal information about our customers to our suppliers in relation to a service event to enable our suppliers to deliver service to our
end users. In this case the supplier does not retain this information after the service event is completed and invoiced with us.
• Our supplier information is held our own database only.

Our relationship with our corporate customers

• We provide services to many customers and have many customers within our sales pipeline, where we have engaged with them and wish to do business
with them. For this purpose personal contact details are exchanged between peers (like project managers, sales teams and supplier managers) within our
organisation and theirs. The personal information is names, phone numbers and email addresses; the phone and email address will normally be for a
business location but some individuals choose to circulate personal contact details. The information is offered and exchanged in relation to
maintaining a business relationship.
• The information is never passed to other parties.
• The information is recorded on the internal database only

Our recruitment and vetting of supplier’s staff

• We process CVs for individuals where they apply for roles that we have advertised. This can be a direct applicant or, through one of our suppliers.
CVs contain personal information and we treat this information with care.
• As CV’s are always offered to us, we are assuming that the individuals are opting in to allowing us to process their data; they have offered their
CV information to us by applying for our role or by advertising their CV on a job board web site.
• We hold CVs within our database where access is restricted to only the staff needing to access it.
• As a vacancy is fulfilled, we ask unsuccessful applicants whether we can continue to hold their details, we do this for the purpose of finding them
employment in the future.

Our own HR services and employee information

• We process personal information, including Special information, about the people we employ and have employed. We need this information to be able to
gain references, check entitlement to work and pay our team, all normal employment processes. We process information on paper and on our internal
system only. Our paper files are under lock and key with our office only. All Documents are secured for its purpose and the personal information is
only available to our specified staff handling the data.

Special category data

• Within the rules and regulations, the term Special Category Data is defined (also called sensitive data) as this data needs more protection. The
term is used in this policy and refers to more sensitive data like ethnic origin, biometric information or health matters. We only process data of
this type within our system described.

Disclosing Your Information

We will not disclose your personal information to any other party other than in accordance with this Privacy Policy and in the circumstances detailed
below:

1. In the event that we sell any or all of our business to the buyer.
2. Where we are legally required by law to disclose your personal information to any Govt. or any such or related authorities.
3. To further fraud protection and reduce the risk of fraud.

Contacting Us

Please do not hesitate to contact us regarding any matter relating to this Privacy Statement at info @ tssgulf.com .If the nature of the enquiry is
specifically in regard to data protection and security.