| Code of Ethics & Business Conduct | 2024 27 Data privacy Data privacy generally refers to the protection of personal data (also called personal information, PII, or PI), which is any information that identifies or can be used alone or in combination with other information to identify an individual. We protect personal data to comply with several United States and International data protection regulations, to mitigate risks to Affirm and our customers, and to meet our obligations to protect an individuals rights in, and to, data we collect about them. Affirm is committed to protecting the personal information of our customers, merchant partners, employees, and other individuals. Promoting the data privacy and security of our customers information is a critical responsibilityone that cannot be ignored, minimized, or sacrificed. Affirm has adopted policies to handle and safeguard data carefully and sensibly in a secure and appropriate manner. In compliance with data privacy laws, we work to keep personal data private. We collect, access, use, store, retain, transfer, and share our customers information only for verifiable legitimate business purposes and always in accordance with our privacy, information security, and records and information governance policies and applicable laws. To be able to share information, we may be required to obtain an NDA, DSA, or other documentation containing the appropriate confidentiality provisions. In addition, consent from the customer, employee, or merchant partner, and/or a risk assessment and approval by the Privacy team is frequently required. Sharing personal data (unless its your own or otherwise permitted by law) with any external or internal parties without a legitimate business need and permission from Legal is prohibited. We also are required to store proprietary and confidential personal data in a protected environment in accordance with Affirms Information Security Policy. We count on Affirmers to adhere to Affirms Information Security and Privacy policies. If you ever have any questions or concerns about how you should collect, protect, use, or share personal information, or suspect any violation of our policies or the law, immediately contact the Privacy team. Refer to the Privacy Policy for additional information. Modern Slavery Act Affirm and its United Kingdom (UK) business are fully committed to preventing modern slavery and human trafficking in our business and supply chains. The Modern Slavery Act (Act) sets forth a range of measures to prevent modern slavery and human trafficking in the UK. The term modern slavery describes the deprivation of a persons liberty in order to exploit them for personal or commercial gain. It is a criminal offense, a violation of fundamental human rights, and can take a number of forms, including slavery, forced or compulsory labor, servitude, human trafficking, and trafficking for prostitution or sexual exploitation. At Affirm, we take a zero-tolerance approach to modern slavery and will not knowingly support or deal with any business or supplier involved in such practices. P r o t e c t i n g o u r c o m p a n y