Supplemental Provisions for Canadian Users:

Last Updated and Effective Date: May 14, 2023

Personal Information is maintained on our servers or those of our service providers and will be accessible to authorized employees, representatives and agents for the purposes described in this Privacy Notice. Our service providers provide services such as data hosting, risk based scoring, push notification delivery, and technical support. We and our service providers may process and store personal information outside of Canada, or outside of your province of residence, including in the United States, Ireland, Hungary, Netherlands, Singapore, Israel, India and Iceland. The laws in these jurisdictions may not provide the same degree of protection for your personal information as the laws of Canada or your province.

In addition to the rights described above, you have the right to withdraw your consent to our processing of your Personal Information at any time, subject to certain restrictions.

To exercise any of your data subject rights, or if you have any questions or would like to make a complaint, please write to:

Canada Chief Privacy Officer and Quebec Data Protection Officer

Citi
123 Front Street West

Toronto, Ontario M5J 2M3
Email: canada.privacy.office@citi.com