Business Contacts Privacy Notice

This Privacy Notice describes how Kyriba Corp. and our affiliates and subsidiaries (collectively "Kyriba" or "we" or "us" or "our") collect and use information that describes or relates to you ("Personal Information"). This Privacy Notice applies to individuals who act as employees, representatives, or points of contact with our customers, prospects, service providers, and business partners (collectively, "Business Contacts").

We are committed to protecting your privacy and providing transparency regarding how your information is used and safeguarded. For information about our general privacy practices, including how we safeguard your information, international transfers, your privacy rights, and how to contact us, please refer to our Website Privacy Policy. If you are a job applicant or a candidate for a position at Kyriba, please refer to the Candidate Privacy Policy. If you are a user of the Kyriba technology platform, please refer to the Kyriba Technology Platform Customer Privacy Notice.

Personal Information We Collect And How It Is Used

We may collect Personal Information about Business Contacts from a variety of sources. This includes information provided directly by the organizations we work with through contract execution, onboarding, and the delivery of our services, as well as information provided by Business Contacts themselves during professional interactions, events, or other business activities. We may also collect information from publicly available sources, such as professional networking platforms and company websites, or from qualified third-party data providers that we engage to maintain the accuracy and currency of our contact records.

The Personal Information we collect in this context may include:

• Identification and contact data, such as your name, job title, job description, professional role, job start and end date, business email address, and business telephone number.
• Organizational data, such as your employer name, department, business unit, or location (general location and work location).
• Relationship data, including records of our communications and interactions with you in the course of our business relationship.

Our Business Purposes may include:

• Data Accuracy: We keep our contact records accurate and up to date, including by monitoring publicly available professional information to reflect relevant career developments such as changes in employer or role.
• Business Relationship Management: We communicate with relevant personnel on operational, commercial, and service matters.
• Marketing and Promotional Activities: We may contact existing and prospective customers about Kyriba products, services, and events. You may unsubscribe at any time by using the "unsubscribe" link in any email you receive from us, or by emailing [email protected].

How long do we keep your data for?

We retain your Personal Information for the purposes listed above, for the following periods:

• For the duration of any contractual or pre-contractual negotiations between Kyriba and the business you represent;
• For the duration of the contract between Kyriba and the business you represent;
• We may retain your data after you stop representing a particular business in order to maintain or pursue future business relationships. In such cases, we will not retain your data for longer than twelve months following a change in your job position. You may opt-out from this processing at any time by contacting us at [email protected].

How We May Disclose Your Personal Information

In certain situations, Kyriba may disclose Personal Information (described herein) that we collect about Business Contacts, in accordance with our legitimate interests and business purposes as stated in this Privacy Notice and set forth below.

• Maintaining Business Relationships and Providing Related Support. To manage and maintain our relationships with Business Contacts and the organizations they represent, communicate with relevant personnel on operational and commercial matters, respond to inquiries, and for similar relationship management and support purposes.
• Marketing. We may disclose Personal Information to partners, such as resellers and marketing providers, to identify prospects and share information about upcoming events and developments.

For information about additional rights that may be available to you based on your jurisdiction, how we may disclose your Personal Information in other circumstances, including in connection with legal processes, business transfers, or to protect the safety of individuals, please refer to our Website Privacy Policy.

We may disclose Personal Information to the following:

• Business Partners and Affiliates. We may disclose Personal Information to our subsidiaries, affiliates, and channel partners such as resellers and co-sellers for business purposes. Those business purposes include identifying prospects and facilitating the ability of those entities to share information with existing and potential business customers regarding Kyriba upcoming events and other new developments.
• Service Providers. We may share Personal Information with service providers who perform activities on our behalf, such as customer relationship management platforms, data intelligence and enrichment providers, marketing and promotional services, and technical support providers.

Lawful Basis for Processing

Applicable data protection laws, including but not limited to those of Europe and the UK, require a "lawful basis" for processing Personal Information. The processing described in this Privacy Notice is necessary for the purposes of the legitimate business interests pursued by Kyriba, which is applicable to activities such as maintaining accurate and up-to-date contact records, managing and developing business relationships, and engaging in marketing and promotional activities with existing and prospective customers, business partners and service providers.

For all other privacy matters, please refer to our Website Privacy Policy.