• The Supplier hosts the Supplier Data
• The Supplier receives and processes End User Data in its capacity as an independent controller
• The Supplier is located in the United Kingdom
• The Supplier is a Credit Reference Agency (“CRA”) therefore the End User must include a reference to the Credit Reference Agency Information Notice (“CRAIN”) in its fair processing notice.
• A Default Matching Rule will be applied to this Dataset

The Supplier Data used to provide the Credit Data Datasets is supplied by GBG’s Supplier, Experian. GBG is obliged under the terms of its agreement with its Supplier to ensure that all End Users agree to comply with the provisions set out below. These terms apply to all Credit Data Datasets. Individual Credit Data Datasets are identified by the ID Number listed on the End User’s Order Form.

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.
“Permitted Purpose” means the purposes, restrictions and/or conditions for the use of the Dataset outlined by the Supplier as set out in clauses 2.3 to 2.10 below, in addition to the Customer Use Case set out in the Agreement and at clause 2.1
“Territory” means the UK, save for where the End User provides Online Gambling services (as defined in Appendix 2), then the territory is as defined in Appendix 2 of these Additional Terms.

2. USE OF THE DATASET
2.1. This Dataset may only be used for the Customer Use Case detailed in this clause 2.1, provided that such Customer use Case is selected on the End User’s Order Form and the End User complies with any use case restrictions set out in the Agreement or these Additional Terms:
• Fraud
• Law Enforcement
• Debt Collection or Recovery
• Asset Reunification

2.2. In addition to the Customer Use Case restrictions contained within clause 2.1 (including any conditions that apply to that Customer Use Case) the following terms set out in clauses 2.3-2.10 also apply.
2.3. Where the End User is using this Dataset for the purpose of consumer collections, the End User will only use the information provided for the purposes of assisting in the collection from debtors of amounts which have not been paid in accordance with the legal obligations of those debtors in circumstances which are or may be fraudulent.
2.4. Where this Dataset is being provided for the purpose of commercial collections, the End User agrees that it will only use the Dataset for the purposes of assisting in the collection from businesses of amounts which have not been paid in accordance with the legal obligations of those businesses or in circumstances which are or may be fraudulent.
2.5. Where this Dataset is being used for the purpose of tracing debtors the End User shall:
a) use the Dataset solely to locate the home address of debtors and (save as required by law) and not divulge or disclose all or any part of the Supplier Data to any other third party;
b) take reasonable steps to confirm the identity of a debtor before taking any action to recover the relevant debt where the Supplier Data provides a home address for that debtor; and
c) hold a current registration with the Information Commissioners Office for data processing activities and is authorised and regulated by the Financial Conduct Authority
2.6. Where the End User is using the Dataset for fraud investigation services, the End User shall:
a) comply with Appendix 1 to these Additional Terms;
b) not use the Supplier Data for any Prohibited Purposes. Prohibited Purposes are those not in listed in Appendix 1 to these Additional Terms;
c) only use the Supplier Data where there has been a prior indication of a potential fraud; and
d) Where Appendix 1, Part B applies, the End User shall enter into a separate End User Agreement with Experian in the form set out in Appendix 3 to these Additional Terms.
2.7. Where the End User is using the Dataset for Online Gambling services, the provisions of Appendix 2 to these Additional Terms shall apply.
2.8. The End User acknowledges and accepts that Experian is a CRA and in utilising the services of a CRA, the End User is required by Experian to include a link to the Credit Reference Agency Information Notice (commonly known as “CRAIN”) as set out below within their own fair processing notice or provide an off-line route to access information about CRAIN, such as printed copies The CRAIN notice link is as follows: https://www.experian.co.uk/legal/crain/
2.9. The End User shall fully indemnify GBG against all liabilities, costs, expenses, damages and losses incurred by GBG as a result of the End User’s failure to incorporate the CRAIN notice within their fair processing notice.
2.10. The End User shall not sell, transfer, distribute or otherwise make the Supplier Data available to, or use the Dataset on behalf of, any third party.
2.11. The End User warrants that it will not use the Dataset for any reason outside the Customer Use Case and Permitted Purpose.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1. The Supplier Data used to provide this Dataset is hosted by the Supplier in the United Kingdom. In order to provide the Dataset, the Supplier shall receive and process End User Data in its capacity as an independent controller.
3.2. Experian may, on an occasional and temporary basis transfer End User Data outside of the EEA and UK to third parties appointed as general suppliers of technology and services to Experian in order to support and maintain Experian’s service. In such circumstance, Experian shall ensure that appropriate safeguards are in place with such third-party supplier.

4. TERMINATION
4.1. GBG shall be entitled to terminate the End User’s access to the Dataset on giving 3 month’ prior notice if Experian serves notice on GBG that it cannot provide the Supplier Data as a result of a change in legislation, regulations, codes or other rules having equivalent force.

5. MATCHING RULE
5.1. This Dataset will be matched against the Default Matching Rule of Forename, Surname and Address. If required certain Variable Matching Rules may be requested by the End User in accordance with the Agreement.