Privacy Statement

Privacy Statement (EU)

Xocean.com and its affiliates (collectively, “XOCEAN,” “we,” or “us”) want you to be familiar with how we collect, use and disclose personal information when you visit our website or enter a contractual agreement with us for one of our Services.

This privacy notice relates the data processing through our website. If you have any questions or would like to make any requests about your personal information such as opting out of marketing, please email carol.fitzgerald@xocean.com.

This privacy notice should be read in conjunction with any terms and conditions as may be applicable to you.

How XOCEAN uses personal information

Information that you provide to us

Categories of personal information we collect Purposes of use (“Processing Purposes” described in more detail below) Source of Information Legal basis

Contact information such as name, email and contact number

Analytics and preferences

Provide you with our Services, and register your account on the platform,

Marketing relevant products and personalising your experience on the platform.

You

Prospective customers

Performance of contract

Legitimate interests

Research and feedback

Provide you with our Services personalise your experience in the platform

You

XOCEAN customers

Prospective customers

Third party vendors

Legitimate interests

Information that we collect for business-to-business relationships only

Categories of personal information we collect Purposes of use (“Processing Purposes” described in more detail below) Source of Information Legal basis

Business contact information

Build and manage business-to-business relationships

You

Third party vendors

Performance of contract

Legitimate interests

Legal obligation

Transactional information (as permitted by law)

Build and manage business-to-business relationships

You

Third party vendors

Performance of contract

Legitimate interests

Due diligence and AML information (as permitted by law)

Compliance and risk management activities for business-to-business relationships

You or your company’s responses to our due diligence questions

Third party vendor risk compliance screening and data validation tools and databases,

Performance of contract

Legitimate interests

Legal obligation

Information we collect automatically from you and /or your device

Categories of personal information we collect Purposes of use (“Processing Purposes” described in more detail below) Source of Information Legal basis

Device information and identifiers

Provide you with our Services

Personalise your experience

Send you relevant marketing and advertising

Safety and security

Build and manage business-to-business relationships

You

Third party service providers

Legitimate interests

Legal obligation

Geolocation

*Please note: this information is considered “sensitive” under certain laws, and we process this information in accordance with applicable legal requirements.

Provide you with our Services

Personalise your experience

Send you relevant marketing and advertising

Safety and security

Build and manage business-to-business relationships

You

Legitimate interests

Information that we collect from third parties

Categories of personal information we collect Purposes of use (“Processing Purposes” described in more detail below) Source of Information Legal basis

Information from public and commercial sources

Build and manage business-to-business relationships

Analytics providers

Marketers

Third party vendors

Public records databases

Legitimate interests

Third Party Partners in Connection with providing our Services

For example: contact information such as authentication information, account legitimacy, search requests, payment provision, SDK analytics, log events and device identifiers such as IP addresses, device IDs or other unique identifiers.

Provide our Services

Personalise your experience

Provide seamless experience across platforms and devices

Obtain analytics through SDK providers such as (Google and Facebook) to improve performance

Safety and security

Send you relevant marketing and advertising

Analytics providers

Marketers

Partners

Third party vendors

Public records databases

Performance of contract

Legitimate interests

Legal obligation

Due diligence information (where required and permitted by law)

To conduct due diligence checks on potential and existing customers, selling partners and suppliers and background and suitability checks on individuals.

Compliance and risk management activities for business-to-business relationships

Build and manage business-to-business relationships

You or your company’s responses to our due diligence questions

Third party risk, compliance screening and data validation tools and databases,

Legal obligation

Performance of contract

Legitimate interests

Sensitive Data

Unless we request it, we ask that you do not provide or disclose any sensitive personal information (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health