This notice describes ePlus’ and IGX’s practices with respect to the collection, use, storage, and disclosure (“processing”) of Personal Information covered by the European Union’s General Data Protection Regulation (“GDPR”). ePlus is committed to complying with the GDPR. This notice applies to your interactions with any ePlus location (collectively “ePlus,” “us” or “our”), including IGXGlobal UK Limited and IGX Capital UK Ltd., located at 1 Fore Street Avenue, London EC2Y 9DT England.

You can contact ePlus' Office of General Counsel with any questions about this notice, our data collection practices, or your rights:

The Information We Process About You

We collect your name, and business contact information including address, telephone, and remittance information.

We process personal business information from you to communicate with you, to administer all aspects of our contractual relationship with you.

Purposes and Legal Basis for Processing Your Data

We also process your personal business information to fulfill the terms of your contract with us. We have a legitimate interest in collecting and processing your personal information to prevent fraud and for the other administrative purposes.

We may also be required to process your Personal Information to comply with applicable law, including laws applicable in the European Union or its member states.

Your Personal Information will be received and processed by ePlus employees and personnel, including third parties who provide services to us in connection with fulfilling our contractual obligations, including administrative functions in connection with our contractual relationship with you or our legitimate business interests.

Recipients of Your Personal Information

We share your Personal Information with our service providers only when they have agreed to process your Personal Information only to provide services to us and have agreed to protect your Personal Information from unauthorized use, access, or disclosure. Our service providers will only process your personal information on our behalf.

Transfers to Third Countries

We also may disclose your information to government authorities as required by laws that regulate insurance, immigration, tax, national security, and criminal activity. ePlus is located in the United States, and we transfer your personal information to the United States to fulfill the terms of the contracts you have with us.

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you and/or your employer.

You have the right to the following information regarding ePlus’ processing of your Personal Information:

• The purposes of the processing,
• The categories of Personal Information concerned,
• The recipients or categories of recipients to whom the Personal Information have been or will be disclosed,
• Where possible, the envisaged period for which the Personal Information will be stored, or, if not possible, the criteria used to determine that period.

This Privacy Notice is intended to provide this information. Any questions about these details may be directed to privacy@eplus.com, or General Counsel, ePlus, 13595 Dulles Technology Drive, Herndon, VA, 20171.

Your Rights

• You also have the following additional rights with respect to your Personal Information:
• The right to request access to the Personal Information that ePlus has about you, as well as the right to request rectification of any data that is inaccurate or incomplete.
• The right to request a copy of your Personal Information in electronic format so that you can transmit the data to third parties, or to request that ePlus directly transfer your Personal Information to one or more third parties.
• The right to object to the processing of your Personal Information for marketing and other purposes.
• The right to erasure of your Personal Information when it is no longer needed for the purposes for which you provided it, as well as the right to restriction of processing of your Personal Information to certain limited purposes where erasure is not possible.
• The right to lodge a complaint with the supervisory authority where you live, work, or where you believe that your rights have been violated.