As described in more detail in our Privacy and Cookies Policy, located on our website at www.pearsonvue.com, Pearson VUE and Certiport (collectively the “Pearson VUE Business Group”) are businesses of NCS Pearson, Inc., and process personal information from individuals’ residing in the European Economic Area, the United Kingdom, and Switzerland in support of certification, credentialing, licensure, regulatory, and academic admission test program owners ("test sponsors") and ourselves as a test sponsor. A test sponsor may require the Pearson VUE Business Group to collect, including, but not limited to, an individual’s first and last name, street address, city/state/country, email address, and telephone number for the purpose of a test taker’s registration scheduling, administration, delivery, and results reporting of taken exams. We will disclose a test taker’s personal information to the test sponsor (who owns this data) and we may disclose personal information: (a) in response to a subpoena, court order or legal process, to the extent permitted and required by law; (b) to protect a test taker’s security, or the security of other persons, consistent with applicable law; (c) to address actual or suspected fraud or other illegal activities; (d) in connection with a sale, joint venture or other transfer of some or all of the assets of NCS Pearson, Inc.; (e) to select third parties upon explicit agreement from the test taker; and (f) to our subcontractors or agents (for example, third parties hosting one or more of our websites; processing credit card transactions and payments; fulfilling and processing orders; assisting us with marketing and promotions; and collecting web analytics data, etc.), and our authorized testing centers, solely for the purpose of enabling them to perform services on our behalf. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

As described in more detail in our Privacy and Cookies Policy, located on our website at www.pearsonvue.com, Pearson VUE. Pearson Credential Management, and Certiport (collectively the “Pearson VUE Business Group”) are businesses of NCS Pearson, Inc., and process personal information from individuals’ residing in the European Economic Area, the United Kingdom, and Switzerland in support of certification, credentialing, licensure, regulatory, and academic admission test program owners ("test sponsors") and ourselves as a test sponsor. A test sponsor may require the Pearson VUE Business Group to collect, including, but not limited to, an individual’s first and last name, street address, city/state/country, email address, and telephone number for the purpose of a test taker’s registration scheduling, administration, delivery, and results reporting of taken exams. We will disclose a test taker’s personal information to the test sponsor (who owns this data) and we may disclose personal information: (a) in response to a subpoena, court order or legal process, to the extent permitted and required by law; (b) to protect a test taker’s security, or the security of other persons, consistent with applicable law; (c) to address actual or suspected fraud or other illegal activities; (d) in connection with a sale, joint venture or other transfer of some or all of the assets of NCS Pearson, Inc.; (e) to select third parties upon explicit agreement from the test taker; and (f) to our subcontractors or agents (for example, third parties hosting one or more of our websites; processing credit card transactions and payments; fulfilling and processing orders; assisting us with marketing and promotions; and collecting web analytics data, etc.), and our authorized testing centers, solely for the purpose of enabling them to perform services on our behalf. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

As described in more detail in our Privacy and Cookies Policy, located on our website at www.pearsonvue.com, Pearson VUE. Pearson Credential Management, and Certiport (collectively the “Pearson VUE Business Group”) are businesses of NCS Pearson, Inc., and process personal information from individuals’ residing in the European Economic Area, the United Kingdom, and Switzerland in support of certification, credentialing, licensure, regulatory, and academic admission test program owners ("test sponsors") and ourselves as a test sponsor. A test sponsor may require the Pearson VUE Business Group to collect, including, but not limited to, an individual’s first and last name, street address, city/state/country, email address, and telephone number for the purpose of a test taker’s registration scheduling, administration, delivery, and results reporting of taken exams. We will disclose a test taker’s personal information to the test sponsor (who owns this data) and we may disclose personal information: (a) in response to a subpoena, court order or legal process, to the extent permitted and required by law; (b) to protect a test taker’s security, or the security of other persons, consistent with applicable law; (c) to address actual or suspected fraud or other illegal activities; (d) in connection with a sale, joint venture or other transfer of some or all of the assets of NCS Pearson, Inc.; (e) to select third parties upon explicit agreement from the test taker; and (f) to our subcontractors or agents (for example, third parties hosting one or more of our websites; processing credit card transactions and payments; fulfilling and processing orders; assisting us with marketing and promotions; and collecting web analytics data, etc.), and our authorized testing centers, solely for the purpose of enabling them to perform services on our behalf. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

PRIVACY AND COOKIES POLICY NCS Pearson, Inc. respects your privacy and has adopted this Privacy and Cookies Policy for the Pearson VUE Business Group described below (hereinafter “Privacy Policy”). Pearson VUE is a business of NCS Pearson, Inc. This Privacy Policy is global in nature and describes our data protection practices and the types of information that you provide to us; information we may collect automatically in the operation of our websites, web pages, and emails that link to this Privacy Policy (collectively this Site(s)”); users of our products and services; individuals purchasing study aides, books, e-books, tests, practice tests, vouchers and our other products and services available on Pearson VUE’s Site; and Personal Data (as defined below) that we may receive from test sponsor’s or collect from you on behalf of certification, credentialing, licensure, regulatory, and academic admission test sponsors. This Privacy Policy is also applicable to those individuals who desire to access, manage, publish, and provide their current credential status to their designated and authorized third parties (for example employers and background checking firms). This Privacy Policy does not apply to the CompTIA Store located at https://store.comptia.org. In addition, this Privacy Policy describes your rights and responsibilities, our rights and responsibilities, how we use the information we collect or receive; with whom we share the information with; the measures we take to protect the security of Personal Data from loss, misuse and unauthorized access, the choices you can make about providing your Personal Data to us as it relates to your certification, credentialing, licensure, regulatory, and academic admission testing experience; and how you can contact us. All references to ‘our’, ‘us’, or ‘we’, in this Privacy Policy and within the opt-in notice are deemed to refer to the Pearson VUE Business Group, which for purposes of this Privacy Policy includes, Pearson VUE, Pearson Credential Management, and the Certiport businesses of NCS Pearson, Inc. as appropriate. The rights and responsibilities described in our Privacy Policy do not cover third party websites that may be linked to our Site(s) or referred to on this Site(s). These third party websites have their own privacy policies and we encourage you to read and review them. For purposes of this Privacy Policy “Personal Data” is any information that can be used to identify you or that when added with other Personal Data can be linked to you and includes, but is not limited to: personal contact detail (name, street address, email address, phone number, fax number, credit/debit card information, company and title). We may also collect or receive the following additional Personal Data at registration or in the testing process, as necessary or appropriate, including, but not limited to: language, date of birth, social security number, test sponsor’s identification number, employment Data, previous examination history, education Data, and source of financing for the test.; assessment details, including candidate ID number; credit card information; residence and country of citizenship; signature and photograph. In some cases, we may handle so-called ‘special categories of Personal Data’ about you, which may be considered sensitive. This would be the case, for example, if you at your test sponsor’s request, (i) provide your race or ethnic origin; (ii) provide your biometric (palm vein) template where permitted by law; or (iii) provide medical or health information when requesting a testing session accommodation. Before we collect sensitive Personal Data we will mark the question(s) as ‘optional’ or require your consent. Such consent may be withdrawn at any time. EPIDEMIC RESPONSE In order to comply with local COVID-19 (coronavirus) requirements, Pearson VUE may collect health information, including but not limited to body temperature and health code status. One such example of local COVID-19 (coronavirus) requirements is the local law in China requiring collection of this information in order to allow individuals to take their tests. This Privacy Policy describes: • YOUR RIGHTS AND RESPONSIBILITIES • OUR RIGHTS AND RESPONSIBILITIES • COMPLIANCE WITH THE EU-U.S. AND SWISS-U.S. PRIVACY SHIELD FRAMEWORKS • DESCRIPTION OF CERTIFICATION, LICENSURE, AND ACADEMIC ADMISSION TEST SERVICES • DESCRIPTION OF ONLINE PROCTORING TEST SERVICES • CERTIPORT EXAMS FROM HOME • NCS PEARSON, INC AS A TEST SPONSOR o PTE Professional o IC3 • INFORMATION POLICY RELATING TO TEST CENTER APPLICATIONS • INFORMATION POLICY RELATING TO BUSINESS DEVELOPMENT SUBMISSION FORMS • E-COMMERCE • DESCRIPTION OF CREDENTIALING SERVICES • THIRD PARTY WEBSITES AND SOCIAL MEDIA • INFORMATION RECEIVED FROM INTERNET SERVICE PROVIDERS THROUGH THIS SITE • DISCLOSURE AND TRANSFER OF INFORMATION • INFORMATION FROM CHILDREN • AGGREGATION OF NON-PERSON-SPECIFIC DATA • EMAIL NEWSLETTERS • PROTECTION OF CREDIT CARD INFORMATION • RESOLUTION OF CONCERNS • COOKIES AND WEB BEACONS • UPDATES TO THIS PRIVACY POLICY • HOW TO CONTACT US YOUR RIGHTS & RESPONSIBILITIES You agree that by visiting and/or providing, transmitting, or having another party you have authorized provide or transmit your Personal Data to us on any of our Sites, you are accepting the practices described in this Privacy Policy and any updates made to this Privacy Policy. It is your responsibility to read this Privacy Policy and check for updates on a regular basis. By continuing to use our Site, products or services after such updates have been made you are agreeing to be bound by any changes to this Privacy Policy. You are never required to provide us with your Personal Data. If you do not agree to this Privacy Policy, please do not provide, transmit or allow anyone else to provide or transmit your Personal Data to us; however, if you decide to not provide to us your Personal Data it may affect our ability to allow you to register, schedule, and take a test administered and delivered by us on behalf of the test sponsor; or to provide to you any other products or services offered. You agree that we may collect or receive, use, process, disclose, transfer and retain your Personal Data as described herein. This Privacy Policy governs your use of any and all of our Sites our testing services, and in purchasing our products and services in general. We will use your Personal Data only for the purposes set forth herein. As the subject of the Personal Data collected, you have rights related to the Personal Data that we hold about you. At any time you have the right to: • Request access to the information we hold, use, or disclose about you. • Ask us to correct or how to correct any inaccurate or incomplete information we have about you or request us to make the corrections. • Request us to delete your information from our records, subject to the approval of your test sponsor. • Withdraw consents you have given, where our collection and use is based upon your consent. Ask us to send a copy of your Personal Data to a third party in a data portable format, subject to the approval of your test sponsor. You may request access, correction, or deletion of the Personal Data you have submitted by contacting a Pearson VUE customer service representative, by logging into your account, or calling our toll-free number at 1-877-460-2204. To determine the correct Pearson VUE customer representative click on this link Pearson VUE Start here: select your program and search for the test sponsor’s name. Upon receiving your request, we may need additional information from you to verify your identity and to better understand what it is you are requesting. In this case, we may ask you to provide additional information, including information you have previously disclosed to us, to confirm your identity. If you wish to designate an authorized agent under any applicable law, please contact us by any means listed above and we will coordinate that designation. We will respond to access requests within a reasonable amount of time in accordance with state and national laws and requirements. We recognize that you may have a right to not receive discriminatory treatment by exercising any of the rights listed above. We will not charge a fee to respond to a request, unless it is excessive, repetitive or unfounded. If a fee will apply, we will advise the requester before completing the request, explain why a fee applies and provide an estimate of the fee. Additionally, if you have questions or requests regarding the above, please contact us as outlined in the HOW TO CONTACT US section below. OUR RIGHTS & RESPONSIBILITIES We will provide you access to these Rights and Responsibilities and any subsequent updates. We encourage you to periodically review this Privacy Policy to learn more about our information practices as they change over time. We reserve the right to update this Privacy Policy periodically, without notice. A change in the effective date will indicate that the Privacy Policy has been updated. Any changes to our Privacy Policy will become effective upon posting of the revised Privacy Policy on our Site(s). Your use of our Site(s), and any of our products and services following such changes constitutes your acceptance of the revised Privacy Policy then in effect. We rely on the following legal grounds to process your Personal Data: • Performance of a contract. We may need to collect and process your Personal Data as necessary to perform services subject to a contractual agreement with you. Examples of our legal grounds to process your Personal Data as being necessary for the performance of a contract include, but are not limited to: (i) when you make an online purchase in order for the purpose of allowing us to deliver the purchased product; and (ii) when you register and schedule to take a test sponsor’s test on Pearson VUE’s or Certiport’s website you will be entering into a Candidate Agreement by and between you, Pearson VUE or Certiport, and the test sponsor for the purpose of permitting us to collect, use, transfer, process and store your Personal Data consistent with this Privacy Policy. • Consent. Where we ask you for your consent, we will collect and use your Personal Data only to the extent you have consented. • Legitimate interests. We may use your Personal Data for our legitimate interests for the purposes of improving our products and services and improving the content of our Site(s); and improving our applications and systems; and for the legitimate interest of our test sponsors. The Pearson VUE Business Group and its subcontractors will at all times protect your Personal Data with operational, administrative, technical, and physical security safeguards. We do not disclose your Personal Data to third parties unless otherwise stated herein. We do not monetize Personal Data. We have not sold, within the last twelve (12) months, any Personal Data collected through this site, except to the extent that third party targeted advertising cookies are ultimately determined to involve a sale of personal information under California law. The following categories of personal information may have been collected and shared through such cookies and related technologies during the past 12 months within the digital advertising ecosystem: Identifiers (limited to a numeric identifier, such as an IP address) Commercial Information, Internet or Similar Network Activity, Geolocation Data and Inferences draw from other Personal Information. COMPLIANCE WITH THE EU-U.S. AND SWISS-U.S.PRIVACY SHIELD FRAMEWORKS EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield Certification The Pearson VUE Business Group maintains certification for and complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework (“Privacy Shield”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Data transferred from the European Union, the United Kingdom, and Switzerland, as applicable, to the United States upon reliance on the Privacy Shield. The Pearson VUE Business Group has certified to the U.S. Department of Commerce that we adhere to and comply with the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability (the “Privacy Shield Principles”) for Personal Data received from individuals residing in the EU, the United Kingdom, and Switzerland. To learn more about the Privacy Shield program, and to view the Pearson VUE Business Group’s certification, please visit https://www.privacyshield.gov. The Pearson VUE Business Group is responsible for the processing of Personal Data it receives, under each Privacy Shield Framework, and subsequently onward transfers to third parties to perform processing functions or to provide services on our behalf. The Pearson VUE Business Group has further committed to cooperate with the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved privacy or Personal Data use concerns. Click on Resolution of Concerns for more detailed information. Additionally, the Pearson VUE Business Group is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. As further explained on the Privacy Shield website at https://www.privacyshield.gov, as a last resort and in limited situations, you may invoke binding arbitration when other dispute resolution procedures have been exhausted. DATA CATEGORIES Depending on the Services, we may collect and/or disclose to third parties the following categories of data in order to manage day to day business needs including, but not limited to, providing you with our services, performing services on behalf of a business, payment processing and financial account management, business planning and forecasting, system improvements, security and fraud prevention, and compliance with legal and regulatory obligations: (A) Identifiers such as a real name, address, unique personal identifiers, or email address (B) Customer records such as signature (C) Characteristics of protected classifications under California or federal law (D) Commercial information, such as products or services purchased, obtained, or considered (E) Biometric information (any disclosure of biometric information is limited to the purposes described in the OTHER DISCLOSURE AND TRANSFER OF INFORMATION section below) (F) Internet or other electronic network activity information such as information regarding a consumer’s interaction with an Internet Web site, application, or advertisement (G) Geolocation data (H) Sensory data, such as audio, electronic, visual, or similar information (I) Professional or employment-related information (J) Education information (K) Inferences about preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes DESCRIPTION OF CERTIFICATION, LICENSURE, AND ACADEMIC ADMISSION TEST SERVICES We provide testing services as a service provider under the instructions of and on behalf of our test sponsors (that act as an autonomous data controller) and we provide testing services on behalf of ourselves. The test sponsor is the company or organization that offers certification, licensure, or academic admission testing and controls the test(s) that must be taken to secure such certification, credentialing, licensure, or academic admission. We collect or receive Personal Data from certification, licensure, and academic admission testing candidates and from the test sponsor. The information we may collect or receive includes, but is not limited to, your test registration, incident resolution (such as fraud prevention), collection of payment for testing services you’ve requested, and your test results of such testing. We use Personal Data in order to perform the testing services related to the administration and delivery of certification, licensure, and academic admission testing on behalf of the test sponsor. Upon completion of your exam we may collect and score your test responses and then derive a test score and generate a report about your certification, credentialing, licensure, or academic admission test results. In most cases, as it is necessary to perform the services, such scoring will be completed through automated means based on the criteria provided by your test sponsor. In the event that you submit a request for an accommodation for your certification, licensure or academic admission test, you may be asked to submit health information records in compliance with your test sponsor’s requirements, including but not limited to, documentation from your physician evidencing your need for the accommodations. We will work with the test sponsor to evaluate your eligibility for an accommodation and if an accommodation is granted we will implement an acceptable accommodation solution. Providing your Personal Data is voluntary, but may be necessary if you wish to receive certification, licensure, or academic admission testing services. We will retain your Personal Data for as long as needed to provide our services and for such period of time as instructed by the test sponsor. To the extent that you request Pearson VUE to delete your Personal Data, it may affect our ability to allow you to register, schedule, and take a test administered and delivered by us on behalf of the test sponsor; or to provide to you any other products or services offered, and such deletion may affect your certification, licensure or academic admission status, dependent on the policy of your test sponsor. In addition to the Personal Data that we may collect or receive in registering a candidate (“you”) for certification, licensure, or academic admission testing the test sponsor may also provide to us or instruct us to collect the following additional Personal Data, as necessary or appropriate, including, but not limited to: language, date of birth, social security number, test sponsor’s identification number, employment information, previous examination history, education information, and source of financing for the test. For candidate verification and identification purposes, we may be instructed to collect all or part of a government-issued identification number and mother’s maiden name. At the test center, depending upon the test sponsor and/or test security requirements, you may be required to provide two (2) forms of identification, your signature, photographic image, a palm vein pattern digitally where permitted by law (for the purposes of identity verification and to protect the security and integrity of the test) and you may be audio- and video-recorded during your testing session. In addition, you may be required to provide your palm vein pattern where permitted by law if your ID does not meet the requirements of identity verification. Where palm vein pattern collection is required by your test sponsor, by continuing with the test, you are consenting to such collection and use. We will handle and treat all Personal Data collected or received by us in connection with certification, licensure, and academic admission test registration and test administration in the manner as described in this Privacy Policy. How We Use the Personal Data We Collect. We use Personal Data to provide services and information, to administer testing programs on behalf of your test sponsor, and for our legitimate purposes in operating our business. Examples of our use or disclosure of your Personal Data include, but is not limited to: • Providing test delivery services to you, including test scheduling and administration, maintaining the integrity of the testing process, and score reporting as directed by your test sponsor. Where required by your test sponsor and permitted by law, your palm vein pattern will be used as described herein and to authenticate your identity, detect, and aide in the prevention of fraud or misrepresentation. • Our legitimate business purposes as needed to manage day to day business needs including, but not limited to, performing services on behalf of a business, payment processing and financial account management, business planning and forecasting, security and fraud prevention, and compliance with legal and regulatory obligations. Independent Testing Centers Certain certification, credentialing, licensure, and academic admission tests are administered through independent authorized testing centers. These authorized testing centers are required to use any data collected in compliance with this Privacy Policy. If you have unaddressed concerns about an independent testing center relating to certification, credentialing, licensure, or academic admission services provided by the Pearson VUE Business Group please contact us at PearsonVUEContracts@pearson.com or you may call us at 1 (952) 681-3918. ONLINE PROCTORING TEST SERVICES Description of Online Proctoring Test Services If a test sponsor offers their test outside of a Pearson VUE Business Group’s authorized testing center through online proctoring and if you choose to take the test through Pearson VUE’s online proctoring platform, in addition to the requirements of Description of Certification, Licensure, and Academic Admission Test Services, you will be monitored over the Internet through your computer via your webcam and microphone. Online proctoring means that you will log on to a test platform through the internet to take your test and you will be monitored during your entire testing session in real-time so that your face, voice, desk and workspace will be captured and a recording will be made of these images for the purposes of test security and the integrity of the testing process. It is your responsibility to monitor your online proctored testing environment. You must make sure that only you will be recorded during your testing session and that no one else will be physically in the room where you are testing and that no one speaks to you during your testing session. If at any time during an online proctored testing session another person enters the work space or if another person’s voice is detected on the audio recording your testing session may be immediately terminated and the test stopped. If this event occurs you will not receive a test refund or be credited for any portion of the test fee. Some test sponsors’ may elect to automate the check-in process. During this automated check-in process you will check yourself in, upload the photo you’ve taken of yourself, and share your identification documents (“IDs”) on camera. Images of your IDs will be used for the purpose of ID validation through the use of ID authentication protocols. We will use the ID authentication protocols in conjunction with biometric facial comparison technology to authenticate your identity. You understand and agree that Pearson VUE may, for some test sponsor’s, use facial comparison technology for the purpose of verifying your identity during the testing session by comparing your facial image to that presented on your ID and to your facial images captured during the testing session. Pearson VUE may use facial images collected during the testing process to develop, upgrade, and improve our online proctoring application in the event that automated facial comparison processes are determined to have resulted in a matching failure. In these cases, facial images will be reviewed manually to determine the cause and the results from such a review may be used to develop, upgrade, and improve our online proctoring application. The video and audio recordings are standard test procedures for all test sponsors’ online proctored tests and your video and audio recording will be used for purposes of identity verification, remote observation, incident resolution, such as fraud prevention, test security, and for the integrity of the test and the testing process. For more information about how the test sponsor may collect and use your Personal Data we encourage you to review the test sponsor’s privacy policy. Personal Data Collected for Online Proctoring Test Services All of the same Personal Data that we collect or receive as described above applies to you when you register to take a test sponsor’s online proctored test. Prior to the start of your online proctored test you may be required to hold up your ID documentation, (for example your driver license, passport or other approved ID that the test sponsor designates), to be recorded on the video for the purpose of identity verification. The collection of such data is optional, but necessary if you choose to use the online proctoring function. You understand that the audio- and video-tapes of your testing session will be supplied to the relevant test sponsor and any of their appointed agents to assist with their management of your test. Certiport Exams from Home Description of Certiport Exams from Home In limited circumstances, Pearson VUE’s Certiport business offers testing candidates the ability to take Certiport tests on their own device from home. The requirements of Description of Certification, Licensure, and Academic Admission Test Services will apply to your testing session along with additional requirements described on the Certiport Exams From Home webpage. Certiport Exams from Home are delivered in a virtual environment where you will log on to a test platform through the internet to take your test and Certiport or testing center staff will view and monitor your activities in that virtual environment for the purposes of test security and the integrity of the testing process. You may communicate with Certiport or test center staff via the Notepad application in the virtual environment if you have any questions during the Certiport Exams at Home process. TEST CANDIDATES SHOULD NOT ENTER ANY PERSONAL INFORMATION INTO THE NOTEPAD DURING THEIR TESTING SESSION. SHOULD A CANDIDATE PROVIDE PERSONAL INFORMATION IN THE NOTEPAD DURING A TESTING SESSION, THE CERTIPORT REPRESENTATIVE WILL IMMEDIATELY TERMINATE THE EXAM SESSION. Personal Data Collected for Certiport Exams from Home All of the same Personal Data that we collect or receive as described above applies to you when you register to take a Certiport Exam from Home. NCS PEARSON, INC. AS A TEST SPONSOR PTE Professional When you take the PTE Professional test NCS Pearson, Inc. is the data controller and the data processor of your Personal Data. When you take the PTE Professional test we may use your Personal Data to: • Administer the PTE Professional test, the English for Professionals Exam. • Process your requests for products, services, or information and to communicate with you regarding such requests. • Verify your identity, process payments and collect debts you owe us. • Improve the Site and our other business systems and procedures. • Conduct research and produce aggregate statistical studies and analysis related to our products and services. • Ask you to participate in brief surveys regarding the products and services offered by PTE Professional. • Provide you with information about products, services or special offers from PTE Professional. Please see the section below entitled “Your Choices” to better understand your choices with regard to these communications from PTE Professional. Your Choices PTE Professional endeavors to provide you with choices regarding our use of your Personal Data. For example, although we may occasionally use your Personal Data to contact you regarding products or services of PTE Professional we think might be of interest you, you will be given instructions on how to opt out of receiving further communications of this nature by email. Should you elect to opt out of receiving further communications you may still receive program-related messages and similar transactional communications by email. In addition, as noted above, you will have the opportunity to choose not to receive marketing materials and communications from our affiliates or third party partners. IC3 When you take the IC3 test, NCS Pearson, Inc. is the data controller and the data processor of your Personal Data. When you take the IC3 test we use your Personal Data to: • Administer the IC3 test, Internet and Core Computing Certification Exam. • Process your requests for products, services, or information and to communicate with you regarding such requests. • Verify your identity, process payments and collect debts you owe us. • Improve the Site and our other business systems and procedures. • Conduct research and produce aggregate statistical studies and analysis related to our products and services. • Ask you to participate in brief surveys regarding the products and services. • Provide you with information about products, services or special offers. Please see the section below entitled “Your Choices” to better understand your choices with regard to these communications from us. Your Choices We endeavor to provide you with choices regarding our use of your Personal Data. For example, although we may occasionally use your Personal Data to contact you regarding IC3 products or services we think might interest you, you will be given instructions on how to opt out of receiving further communications of this nature by email. Note, however, that in such a case, you will still receive program-related messages and similar transactional communications by email. In addition, as noted above, you will have the opportunity to choose not to receive marketing materials from our affiliates or third party partners. Testing of Minors under the Age of 13 for IC3 When children under the age of 13 wish to take an IC3 test requiring the collection of their Personal Data, we take steps to protect children’s privacy, including: • In accordance with applicable law, obtaining consent from parents for the collection of personal information of or from their children, or for sending information about our products and services directly to their children. • Limiting our collection of personal information from children to no more than is reasonably necessary to register, take and receive certification on an IC3 test. • Provide parents access or the ability to request access to personal information we have collected from their children and the ability to request that the personal information be updated accordingly. INFORMATION POLICY RELATING TO TEST CENTER APPLICATIONS Test Center Applications Through the Test Center Applications available on this Site, a firm may apply to become a Pearson VUE Business Group’s® Authorized Test Center. Providing business entity data is voluntary, but necessary for completing a Test Center Application. You may stop completing the Test Center Application at any time before submitting it. We will use the data you provide on the Test Center Application to evaluate and qualify your application. Test Center Applications are subject to our acceptance and an applicant will not be considered a Pearson VUE Business Group’s Authorized Test Center until a definitive written agreement has been signed by both the applicant and the Pearson VUE Business Group. Transfer of Information We may disclose and transfer to third parties the information supplied in a Test Center Application in the following situations: (a) in response to a subpoena, court order or legal process, to the extent permitted and required by law; (b) to protect user security or the security of other persons, consistent with applicable law; (c) in connection with a sale, joint venture or other transfer of some or all of the assets of NCS Pearson, Inc.; (d) to organizations who are working as contractors or agents to fulfill a service or supply a product on our behalf and who are committed or obliged to protect your privacy in a manner consistent with this Privacy Policy; and (e) as necessary or appropriate to evaluate and qualify the applicant. By submitting a Testing Center Application, you consent to this disclosure and transfer of information. Information Access and Corrections To access and correct any information supplied in a Test Center Application, please contact us at PVAmericasChannelSales@pearson.com or call (800) 247-8719 or +1 (952) 681-3000 (toll number). Questions If you have any questions or concerns about your Test Center Application or how we handle the data supplied in a Test Center Application, please con

PRIVACY AND COOKIES POLICY NCS Pearson, Inc. respects your privacy and has adopted this Privacy and Cookies Policy for the Pearson VUE Business Group described below (hereinafter “Privacy Policy”). Pearson VUE is a business of NCS Pearson, Inc. This Privacy Policy is global in nature and describes our data protection practices and the types of information that you provide to us; information we may collect automatically in the operation of our websites, web pages, and emails that link to this Privacy Policy (collectively this Site(s)”); users of our products and services; individuals purchasing study aides, books, e-books, tests, practice tests, vouchers and our other products and services available on Pearson VUE’s Site; and Personal Data (as defined below) that we may receive from test sponsor’s or collect from you on behalf of certification, credentialing, licensure, regulatory, and academic admission test sponsors. This Privacy Policy is also applicable to those individuals who desire to access, manage, publish, and provide their current credential status to their designated and authorized third parties (for example employers and background checking firms). This Privacy Policy does not apply to the CompTIA Store located at https://store.comptia.org. In addition, this Privacy Policy describes your rights and responsibilities, our rights and responsibilities, how we use the information we collect or receive; with whom we share the information with; the measures we take to protect the security of Personal Data from loss, misuse and unauthorized access, the choices you can make about providing your Personal Data to us as it relates to your certification, credentialing, licensure, regulatory, and academic admission testing experience; and how you can contact us. All references to ‘our’, ‘us’, or ‘we’, in this Privacy Policy and within the opt-in notice are deemed to refer to the Pearson VUE Business Group, which for purposes of this Privacy Policy includes, Pearson VUE, Pearson Credential Management, and the Certiport businesses of NCS Pearson, Inc. as appropriate. The rights and responsibilities described in our Privacy Policy do not cover third party websites that may be linked to our Site(s) or referred to on this Site(s). These third party websites have their own privacy policies and we encourage you to read and review them. For purposes of this Privacy Policy “Personal Data” is any information that can be used to identify you or that when added with other Personal Data can be linked to you and includes, but is not limited to: personal contact detail (name, street address, email address, phone number, fax number, credit/debit card information, company and title). We may also collect or receive the following additional Personal Data at registration or in the testing process, as necessary or appropriate, including, but not limited to: language, date of birth, social security number, test sponsor’s identification number, employment Data, previous examination history, education Data, and source of financing for the test.; assessment details, including candidate ID number; credit card information; residence and country of citizenship; signature and photograph. In some cases, we may handle so-called ‘special categories of Personal Data’ about you, which may be considered sensitive. This would be the case, for example, if you at your test sponsor’s request, (i) provide your race or ethnic origin; (ii) provide your biometric (palm vein) template where permitted by law; or (iii) provide medical or health information when requesting a testing session accommodation. Before we collect sensitive Personal Data we will mark the question(s) as ‘optional’ or require your consent. Such consent may be withdrawn at any time. EPIDEMIC RESPONSE In order to comply with local COVID-19 (coronavirus) requirements, Pearson VUE may collect health information, including but not limited to body temperature and health code status. One such example of local COVID-19 (coronavirus) requirements is the local law in China requiring collection of this information in order to allow individuals to take their tests. This Privacy Policy describes: • YOUR RIGHTS AND RESPONSIBILITIES • OUR RIGHTS AND RESPONSIBILITIES • COMPLIANCE WITH THE EU-U.S. AND SWISS-U.S. PRIVACY SHIELD FRAMEWORKS • DESCRIPTION OF CERTIFICATION, LICENSURE, AND ACADEMIC ADMISSION TEST SERVICES • DESCRIPTION OF ONLINE PROCTORING TEST SERVICES • CERTIPORT EXAMS FROM HOME • NCS PEARSON, INC AS A TEST SPONSOR o PTE Professional o IC3 • INFORMATION POLICY RELATING TO TEST CENTER APPLICATIONS • INFORMATION POLICY RELATING TO BUSINESS DEVELOPMENT SUBMISSION FORMS • E-COMMERCE • DESCRIPTION OF CREDENTIALING SERVICES • THIRD PARTY WEBSITES AND SOCIAL MEDIA • INFORMATION RECEIVED FROM INTERNET SERVICE PROVIDERS THROUGH THIS SITE • DISCLOSURE AND TRANSFER OF INFORMATION • INFORMATION FROM CHILDREN • AGGREGATION OF NON-PERSON-SPECIFIC DATA • EMAIL NEWSLETTERS • PROTECTION OF CREDIT CARD INFORMATION • RESOLUTION OF CONCERNS • COOKIES AND WEB BEACONS • UPDATES TO THIS PRIVACY POLICY • HOW TO CONTACT US YOUR RIGHTS & RESPONSIBILITIES You agree that by visiting and/or providing, transmitting, or having another party you have authorized provide or transmit your Personal Data to us on any of our Sites, you are accepting the practices described in this Privacy Policy and any updates made to this Privacy Policy. It is your responsibility to read this Privacy Policy and check for updates on a regular basis. By continuing to use our Site, products or services after such updates have been made you are agreeing to be bound by any changes to this Privacy Policy. You are never required to provide us with your Personal Data. If you do not agree to this Privacy Policy, please do not provide, transmit or allow anyone else to provide or transmit your Personal Data to us; however, if you decide to not provide to us your Personal Data it may affect our ability to allow you to register, schedule, and take a test administered and delivered by us on behalf of the test sponsor; or to provide to you any other products or services offered. You agree that we may collect or receive, use, process, disclose, transfer and retain your Personal Data as described herein. This Privacy Policy governs your use of any and all of our Sites our testing services, and in purchasing our products and services in general. We will use your Personal Data only for the purposes set forth herein. As the subject of the Personal Data collected, you have rights related to the Personal Data that we hold about you. At any time you have the right to: • Request access to the information we hold, use, or disclose about you. • Ask us to correct or how to correct any inaccurate or incomplete information we have about you or request us to make the corrections. • Request us to delete your information from our records, subject to the approval of your test sponsor. • Withdraw consents you have given, where our collection and use is based upon your consent. Ask us to send a copy of your Personal Data to a third party in a data portable format, subject to the approval of your test sponsor. You may request access, correction, or deletion of the Personal Data you have submitted by contacting a Pearson VUE customer service representative, by logging into your account, or calling our toll-free number at 1-877-460-2204. To determine the correct Pearson VUE customer representative click on this link Pearson VUE Start here: select your program and search for the test sponsor’s name. Upon receiving your request, we may need additional information from you to verify your identity and to better understand what it is you are requesting. In this case, we may ask you to provide additional information, including information you have previously disclosed to us, to confirm your identity. If you wish to designate an authorized agent under any applicable law, please contact us by any means listed above and we will coordinate that designation. We will respond to access requests within a reasonable amount of time in accordance with state and national laws and requirements. We recognize that you may have a right to not receive discriminatory treatment by exercising any of the rights listed above. We will not charge a fee to respond to a request, unless it is excessive, repetitive or unfounded. If a fee will apply, we will advise the requester before completing the request, explain why a fee applies and provide an estimate of the fee. Additionally, if you have questions or requests regarding the above, please contact us as outlined in the HOW TO CONTACT US section below. OUR RIGHTS & RESPONSIBILITIES We will provide you access to these Rights and Responsibilities and any subsequent updates. We encourage you to periodically review this Privacy Policy to learn more about our information practices as they change over time. We reserve the right to update this Privacy Policy periodically, without notice. A change in the effective date will indicate that the Privacy Policy has been updated. Any changes to our Privacy Policy will become effective upon posting of the revised Privacy Policy on our Site(s). Your use of our Site(s), and any of our products and services following such changes constitutes your acceptance of the revised Privacy Policy then in effect. We rely on the following legal grounds to process your Personal Data: • Performance of a contract. We may need to collect and process your Personal Data as necessary to perform services subject to a contractual agreement with you. Examples of our legal grounds to process your Personal Data as being necessary for the performance of a contract include, but are not limited to: (i) when you make an online purchase in order for the purpose of allowing us to deliver the purchased product; and (ii) when you register and schedule to take a test sponsor’s test on Pearson VUE’s or Certiport’s website you will be entering into a Candidate Agreement by and between you, Pearson VUE or Certiport, and the test sponsor for the purpose of permitting us to collect, use, transfer, process and store your Personal Data consistent with this Privacy Policy. • Consent. Where we ask you for your consent, we will collect and use your Personal Data only to the extent you have consented. • Legitimate interests. We may use your Personal Data for our legitimate interests for the purposes of improving our products and services and improving the content of our Site(s); and improving our applications and systems; and for the legitimate interest of our test sponsors. The Pearson VUE Business Group and its subcontractors will at all times protect your Personal Data with operational, administrative, technical, and physical security safeguards. We do not disclose your Personal Data to third parties unless otherwise stated herein. We do not monetize Personal Data. We have not sold, within the last twelve (12) months, any Personal Data collected through this site, except to the extent that third party targeted advertising cookies are ultimately determined to involve a sale of personal information under California law. The following categories of personal information may have been collected and shared through such cookies and related technologies during the past 12 months within the digital advertising ecosystem: Identifiers (limited to a numeric identifier, such as an IP address) Commercial Information, Internet or Similar Network Activity, Geolocation Data and Inferences draw from other Personal Information. COMPLIANCE WITH THE EU-U.S. AND SWISS-U.S.PRIVACY SHIELD FRAMEWORKS EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield Certification The Pearson VUE Business Group maintains certification for and complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework (“Privacy Shield”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Data transferred from the European Union, the United Kingdom, and Switzerland, as applicable, to the United States upon reliance on the Privacy Shield. The Pearson VUE Business Group has certified to the U.S. Department of Commerce that we adhere to and comply with the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability (the “Privacy Shield Principles”) for Personal Data received from individuals residing in the EU, the United Kingdom, and Switzerland. To learn more about the Privacy Shield program, and to view the Pearson VUE Business Group’s certification, please visit https://www.privacyshield.gov. The Pearson VUE Business Group is responsible for the processing of Personal Data it receives, under each Privacy Shield Framework, and subsequently onward transfers to third parties to perform processing functions or to provide services on our behalf. The Pearson VUE Business Group has further committed to cooperate with the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved privacy or Personal Data use concerns. Click on Resolution of Concerns for more detailed information. Additionally, the Pearson VUE Business Group is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. As further explained on the Privacy Shield website at https://www.privacyshield.gov, as a last resort and in limited situations, you may invoke binding arbitration when other dispute resolution procedures have been exhausted. DATA CATEGORIES Depending on the Services, we may collect and/or disclose to third parties the following categories of data in order to manage day to day business needs including, but not limited to, providing you with our services, performing services on behalf of a business, payment processing and financial account management, business planning and forecasting, system improvements, security and fraud prevention, and compliance with legal and regulatory obligations: (A) Identifiers such as a real name, address, unique personal identifiers, or email address (B) Customer records such as signature (C) Characteristics of protected classifications under California or federal law (D) Commercial information, such as products or services purchased, obtained, or considered (E) Biometric information (any disclosure of biometric information is limited to the purposes described in the OTHER DISCLOSURE AND TRANSFER OF INFORMATION section below) (F) Internet or other electronic network activity information such as information regarding a consumer’s interaction with an Internet Web site, application, or advertisement (G) Geolocation data (H) Sensory data, such as audio, electronic, visual, or similar information (I) Professional or employment-related information (J) Education information (K) Inferences about preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes DESCRIPTION OF CERTIFICATION, LICENSURE, AND ACADEMIC ADMISSION TEST SERVICES We provide testing services as a service provider under the instructions of and on behalf of our test sponsors (that act as an autonomous data controller) and we provide testing services on behalf of ourselves. The test sponsor is the company or organization that offers certification, licensure, or academic admission testing and controls the test(s) that must be taken to secure such certification, credentialing, licensure, or academic admission. We collect or receive Personal Data from certification, licensure, and academic admission testing candidates and from the test sponsor. The information we may collect or receive includes, but is not limited to, your test registration, incident resolution (such as fraud prevention), collection of payment for testing services you’ve requested, and your test results of such testing. We use Personal Data in order to perform the testing services related to the administration and delivery of certification, licensure, and academic admission testing on behalf of the test sponsor. Upon completion of your exam we may collect and score your test responses and then derive a test score and generate a report about your certification, credentialing, licensure, or academic admission test results. In most cases, as it is necessary to perform the services, such scoring will be completed through automated means based on the criteria provided by your test sponsor. In the event that you submit a request for an accommodation for your certification, licensure or academic admission test, you may be asked to submit health information records in compliance with your test sponsor’s requirements, including but not limited to, documentation from your physician evidencing your need for the accommodations. We will work with the test sponsor to evaluate your eligibility for an accommodation and if an accommodation is granted we will implement an acceptable accommodation solution. Providing your Personal Data is voluntary, but may be necessary if you wish to receive certification, licensure, or academic admission testing services. We will retain your Personal Data for as long as needed to provide our services and for such period of time as instructed by the test sponsor. To the extent that you request Pearson VUE to delete your Personal Data, it may affect our ability to allow you to register, schedule, and take a test administered and delivered by us on behalf of the test sponsor; or to provide to you any other products or services offered, and such deletion may affect your certification, licensure or academic admission status, dependent on the policy of your test sponsor. In addition to the Personal Data that we may collect or receive in registering a candidate (“you”) for certification, licensure, or academic admission testing the test sponsor may also provide to us or instruct us to collect the following additional Personal Data, as necessary or appropriate, including, but not limited to: language, date of birth, social security number, test sponsor’s identification number, employment information, previous examination history, education information, and source of financing for the test. For candidate verification and identification purposes, we may be instructed to collect all or part of a government-issued identification number and mother’s maiden name. At the test center, depending upon the test sponsor and/or test security requirements, you may be required to provide two (2) forms of identification, your signature, photographic image, a palm vein pattern digitally where permitted by law (for the purposes of identity verification and to protect the security and integrity of the test) and you may be audio- and video-recorded during your testing session. In addition, you may be required to provide your palm vein pattern where permitted by law if your ID does not meet the requirements of identity verification. Where palm vein pattern collection is required by your test sponsor, by continuing with the test, you are consenting to such collection and use. We will handle and treat all Personal Data collected or received by us in connection with certification, licensure, and academic admission test registration and test administration in the manner as described in this Privacy Policy. How We Use the Personal Data We Collect. We use Personal Data to provide services and information, to administer testing programs on behalf of your test sponsor, and for our legitimate purposes in operating our business. Examples of our use or disclosure of your Personal Data include, but is not limited to: • Providing test delivery services to you, including test scheduling and administration, maintaining the integrity of the testing process, and score reporting as directed by your test sponsor. Where required by your test sponsor and permitted by law, your palm vein pattern will be used as described herein and to authenticate your identity, detect, and aide in the prevention of fraud or misrepresentation. • Our legitimate business purposes as needed to manage day to day business needs including, but not limited to, performing services on behalf of a business, payment processing and financial account management, business planning and forecasting, security and fraud prevention, and compliance with legal and regulatory obligations. Independent Testing Centers Certain certification, credentialing, licensure, and academic admission tests are administered through independent authorized testing centers. These authorized testing centers are required to use any data collected in compliance with this Privacy Policy. If you have unaddressed concerns about an independent testing center relating to certification, credentialing, licensure, or academic admission services provided by the Pearson VUE Business Group please contact us at PearsonVUEContracts@pearson.com or you may call us at 1 (952) 681-3918. ONLINE PROCTORING TEST SERVICES Description of Online Proctoring Test Services If a test sponsor offers their test outside of a Pearson VUE Business Group’s authorized testing center through online proctoring and if you choose to take the test through Pearson VUE’s online proctoring platform, in addition to the requirements of Description of Certification, Licensure, and Academic Admission Test Services, you will be monitored over the Internet through your computer via your webcam and microphone. Online proctoring means that you will log on to a test platform through the internet to take your test and you will be monitored during your entire testing session in real-time so that your face, voice, desk and workspace will be captured and a recording will be made of these images for the purposes of test security and the integrity of the testing process. It is your responsibility to monitor your online proctored testing environment. You must make sure that only you will be recorded during your testing session and that no one else will be physically in the room where you are testing and that no one speaks to you during your testing session. If at any time during an online proctored testing session another person enters the work space or if another person’s voice is detected on the audio recording your testing session may be immediately terminated and the test stopped. If this event occurs you will not receive a test refund or be credited for any portion of the test fee. Some test sponsors’ may elect to automate the check-in process. During this automated check-in process you will check yourself in, upload the photo you’ve taken of yourself, and share your identification documents (“IDs”) on camera. Images of your IDs will be used for the purpose of ID validation through the use of ID authentication protocols. We will use the ID authentication protocols in conjunction with biometric facial comparison technology to authenticate your identity. You understand and agree that Pearson VUE may, for some test sponsor’s, use facial comparison technology for the purpose of verifying your identity during the testing session by comparing your facial image to that presented on your ID and to your facial images captured during the testing session. Pearson VUE may use facial images collected during the testing process to develop, upgrade, and improve our online proctoring application in the event that automated facial comparison processes are determined to have resulted in a matching failure. In these cases, facial images will be reviewed manually to determine the cause and the results from such a review may be used to develop, upgrade, and improve our online proctoring application. The video and audio recordings are standard test procedures for all test sponsors’ online proctored tests and your video and audio recording will be used for purposes of identity verification, remote observation, incident resolution, such as fraud prevention, test security, and for the integrity of the test and the testing process. For more information about how the test sponsor may collect and use your Personal Data we encourage you to review the test sponsor’s privacy policy. Personal Data Collected for Online Proctoring Test Services All of the same Personal Data that we collect or receive as described above applies to you when you register to take a test sponsor’s online proctored test. Prior to the start of your online proctored test you may be required to hold up your ID documentation, (for example your driver license, passport or other approved ID that the test sponsor designates), to be recorded on the video for the purpose of identity verification. The collection of such data is optional, but necessary if you choose to use the online proctoring function. You understand that the audio- and video-tapes of your testing session will be supplied to the relevant test sponsor and any of their appointed agents to assist with their management of your test. Certiport Exams from Home Description of Certiport Exams from Home In limited circumstances, Pearson VUE’s Certiport business offers testing candidates the ability to take Certiport tests on their own device from home. The requirements of Description of Certification, Licensure, and Academic Admission Test Services will apply to your testing session along with additional requirements described on the Certiport Exams From Home webpage. Certiport Exams from Home are delivered in a virtual environment where you will log on to a test platform through the internet to take your test and Certiport or testing center staff will view and monitor your activities in that virtual environment for the purposes of test security and the integrity of the testing process. You may communicate with Certiport or test center staff via the Notepad application in the virtual environment if you have any questions during the Certiport Exams at Home process. TEST CANDIDATES SHOULD NOT ENTER ANY PERSONAL INFORMATION INTO THE NOTEPAD DURING THEIR TESTING SESSION. SHOULD A CANDIDATE PROVIDE PERSONAL INFORMATION IN THE NOTEPAD DURING A TESTING SESSION, THE CERTIPORT REPRESENTATIVE WILL IMMEDIATELY TERMINATE THE EXAM SESSION. Personal Data Collected for Certiport Exams from Home All of the same Personal Data that we collect or receive as described above applies to you when you register to take a Certiport Exam from Home. NCS PEARSON, INC. AS A TEST SPONSOR PTE Professional When you take the PTE Professional test NCS Pearson, Inc. is the data controller and the data processor of your Personal Data. When you take the PTE Professional test we may use your Personal Data to: • Administer the PTE Professional test, the English for Professionals Exam. • Process your requests for products, services, or information and to communicate with you regarding such requests. • Verify your identity, process payments and collect debts you owe us. • Improve the Site and our other business systems and procedures. • Conduct research and produce aggregate statistical studies and analysis related to our products and services. • Ask you to participate in brief surveys regarding the products and services offered by PTE Professional. • Provide you with information about products, services or special offers from PTE Professional. Please see the section below entitled “Your Choices” to better understand your choices with regard to these communications from PTE Professional. Your Choices PTE Professional endeavors to provide you with choices regarding our use of your Personal Data. For example, although we may occasionally use your Personal Data to contact you regarding products or services of PTE Professional we think might be of interest you, you will be given instructions on how to opt out of receiving further communications of this nature by email. Should you elect to opt out of receiving further communications you may still receive program-related messages and similar transactional communications by email. In addition, as noted above, you will have the opportunity to choose not to receive marketing materials and communications from our affiliates or third party partners. IC3 When you take the IC3 test, NCS Pearson, Inc. is the data controller and the data processor of your Personal Data. When you take the IC3 test we use your Personal Data to: • Administer the IC3 test, Internet and Core Computing Certification Exam. • Process your requests for products, services, or information and to communicate with you regarding such requests. • Verify your identity, process payments and collect debts you owe us. • Improve the Site and our other business systems and procedures. • Conduct research and produce aggregate statistical studies and analysis related to our products and services. • Ask you to participate in brief surveys regarding the products and services. • Provide you with information about products, services or special offers. Please see the section below entitled “Your Choices” to better understand your choices with regard to these communications from us. Your Choices We endeavor to provide you with choices regarding our use of your Personal Data. For example, although we may occasionally use your Personal Data to contact you regarding IC3 products or services we think might interest you, you will be given instructions on how to opt out of receiving further communications of this nature by email. Note, however, that in such a case, you will still receive program-related messages and similar transactional communications by email. In addition, as noted above, you will have the opportunity to choose not to receive marketing materials from our affiliates or third party partners. Testing of Minors under the Age of 13 for IC3 When children under the age of 13 wish to take an IC3 test requiring the collection of their Personal Data, we take steps to protect children’s privacy, including: • In accordance with applicable law, obtaining consent from parents for the collection of personal information of or from their children, or for sending information about our products and services directly to their children. • Limiting our collection of personal information from children to no more than is reasonably necessary to register, take and receive certification on an IC3 test. • Provide parents access or the ability to request access to personal information we have collected from their children and the ability to request that the personal information be updated accordingly. INFORMATION POLICY RELATING TO TEST CENTER APPLICATIONS Test Center Applications Through the Test Center Applications available on this Site, a firm may apply to become a Pearson VUE Business Group’s® Authorized Test Center. Providing business entity data is voluntary, but necessary for completing a Test Center Application. You may stop completing the Test Center Application at any time before submitting it. We will use the data you provide on the Test Center Application to evaluate and qualify your application. Test Center Applications are subject to our acceptance and an applicant will not be considered a Pearson VUE Business Group’s Authorized Test Center until a definitive written agreement has been signed by both the applicant and the Pearson VUE Business Group. Transfer of Information We may disclose and transfer to third parties the information supplied in a Test Center Application in the following situations: (a) in response to a subpoena, court order or legal process, to the extent permitted and required by law; (b) to protect user security or the security of other persons, consistent with applicable law; (c) in connection with a sale, joint venture or other transfer of some or all of the assets of NCS Pearson, Inc.; (d) to organizations who are working as contractors or agents to fulfill a service or supply a product on our behalf and who are committed or obliged to protect your privacy in a manner consistent with this Privacy Policy; and (e) as necessary or appropriate to evaluate and qualify the applicant. By submitting a Testing Center Application, you consent to this disclosure and transfer of information. Information Access and Corrections To access and correct any information supplied in a Test Center Application, please contact us at PVAmericasChannelSales@pearson.com or call (800) 247-8719 or +1 (952) 681-3000 (toll number). Questions If you have any questions or concerns about your Test Center Application or how we handle the data supplied in a Test Center Application, please con

As described in more detail in our Privacy and Cookies Policy, located on our website at www.pearsonvue.com, Pearson VUE and Certiport (collectively the “Pearson VUE Business Group”) are businesses of NCS Pearson, Inc., and process personal information from individuals’ residing in the European Economic Area, the United Kingdom, and Switzerland in support of certification, credentialing, licensure, regulatory, and academic admission test program owners ("test sponsors") and ourselves as a test sponsor. A test sponsor may require the Pearson VUE Business Group to collect, including, but not limited to, an individual’s first and last name, street address, city/state/country, email address, and telephone number for the purpose of a test taker’s registration scheduling, administration, delivery, and results reporting of taken exams. We will disclose a test taker’s personal information to the test sponsor (who owns this data) and we may disclose personal information: (a) in response to a subpoena, court order or legal process, to the extent permitted and required by law; (b) to protect a test taker’s security, or the security of other persons, consistent with applicable law; (c) to address actual or suspected fraud or other illegal activities; (d) in connection with a sale, joint venture or other transfer of some or all of the assets of NCS Pearson, Inc.; (e) to select third parties upon explicit agreement from the test taker; and (f) to our subcontractors or agents (for example, third parties hosting one or more of our websites; processing credit card transactions and payments; fulfilling and processing orders; assisting us with marketing and promotions; and collecting web analytics data, etc.), and our authorized testing centers, solely for the purpose of enabling them to perform services on our behalf. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

NCS Pearson, Inc. through its Pearson VUE and Certiport businesses are under contract to perform global computer-based testing and assessment services on behalf of assessment, certification, licensure, and academic admission testing program owners and ourselves; and through its Pearson Credential Management that is under contract to provide verification services to third parties including current and potential employers and background checking firms.

NCS Pearson, Inc. through its Pearson VUE and Certiport businesses are under contract to perform global computer-based testing and assessment services on behalf of assessment, certification, licensure, and academic admission testing program owners and ourselves; and through its Pearson Credential Management that is under contract to provide verification services to third parties including current and potential employers and background checking firms. Pearson VUE, Certiport, and Pearson Credential Management (collectively the Pearson VUE Business) are businesses of NCS Pearson, Inc.

NCS Pearson, Inc. through its Pearson VUE and Certiport businesses are under contract to perform global computer-based testing and assessment services on behalf of assessment, certification, licensure, and academic admission testing program owners and ourselves; and through its Pearson Credential Management that is under contract to provide verification services to third parties including current and potential employers and background checking firms