To provide the Website and our services, we work with a number of carefully selected third parties. To do this, we may share your information with these third parties in the following limited circumstances:

• Group companies for business purposes: Treehouse is part of the Company. We may share your personal information with our subsidiaries and our group companies in place from time to time insofar as necessary in order to operate our business and provide the Website and services. Rest assured, their use of information is consistent with this Privacy Policy;

• Third party service providers for business purposes: to function properly, we rely on a number of carefully selected third parties to provide us with services and products. We permit these companies to use your personal information only to the extent necessary to provide us with their services and products. Below you can find the types of third parties we use:

Courier companies, that we use in order to deliver the products to you and, as such, they need to have access to your order information, including your name and address. These providers have a global outreach, with many local companies that can be engaged depending on your shipping address;

Payment providers that we use to process your payment information (including your credit/debit card details) so that we can collect payment from you. These are based in the European Union, United States and China and are engaged depending on your location;

Anti-fraud and credit check providers to keep us and you secure. They have access to and process your information and associated orders in order to check for any fraudulent behaviour. Our current providers are based in the United States, Europe and Israel.

Customer Service Management providers, that allow us to provide you our customer service and improve and manage your customer experience.

Analytics and search engine providers, like Google, that we use to assist us in the improvement and optimisation of the website. These providers are based in the United States and in Europe.

Marketing Tools providers that help us to enable our marketing. These providers are based in Hong Kong.

IT/technology providers that we use to support, maintain and provide our technology and IT infrastructure that supports our Website and the storage of your information. This includes Google and Mercury Technology Solution Company Limited that we use to host your information and that it is based in Hong Kong & Taiwan.

• advertisers for marketing purposes: we can provide your information to our advertising and social media partners (including Facebook and Twitter, where you choose) where they require the data to select and serve relevant adverts about our products and services to you and others;

• third party service providers to enrich data: We may also enrich, match or combine information we hold about you with data from other sources, for instance by sharing some of your personal data with selected business partners. These partners are based in the United States. We do this to better understand your customer profile and interests so that we can deliver customised offers and other personalised services;

• third parties where we are considering a corporate transaction: the Company is always looking for new opportunities and directions in which to grow. This means sometimes we may consider corporate transactions such as merger, acquisitions, reorganisations, asset sale, or similar. In these instances, we may transfer your information to enable the assessment and undertaking of that transaction. If we buy or sell any business or assets, your personal information may be one of the assets that are transferred;

• to comply with legal requests: on occasion we may be required to liaise with various regulators and law enforcement agencies in a number of different countries, whether as a result of law, a court order, or another legal process. Although we dispute requests wherever suitable, in some cases we may have to share your information with the regulators or law enforcement agencies. Where we consider it appropriate, and provided we are not prohibited from doing so by law or court order, we will attempt to notify you of these legal demands; and

• aggregated information with third parties: we may aggregate your information with the information of other customers, creating a dataset of information about the usage of our Website, purchase of products, and other general, grouped information about our customers on the basis of our legitimate interest to understand the usage of our service and demand for our product. Although this dataset is aggregated and anonymised, meaning it cannot identify you as an individual, it provides a valuable insight into the use of our Website and we may therefore share it with select third parties. These parties may include providers of plugins or similar technologies to help measure traffic, our partner boutiques and other providers to allow them to better stock products, and our investors. Please note that we do not share your information with any third party advertisers or networks for the provision of third party advertising on our Website.