5. Storing and transferring your personal information <p> <strong>5.1 Retention period</strong>: We will store the personal information we collect about you for no longer than necessary for the purposes set out in Annex 1 and Annex 2 and in accordance with our legal obligations and legitimate business interests.</p> <p> <strong>5.2 Security</strong>: we implement appropriate and reasonable technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, change, or damage. All personal information we collect will be stored on our secure servers.</p> <p> <strong>5.3 Phishing</strong>: We will never send you unsolicited emails or contact you by phone requesting your account ID, password, credit or debit card information or national identification numbers.</p> <p> <strong>5.4 International Transfers of your Personal Information</strong>: the personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in where we and our third party service providers have operations. Some of these countries offer differing levels of protection in respect of personal information and may, in certain instances, be less protective than the country you are typically resident in. These international transfers of your personal information will be made pursuant to appropriate safeguards, such as the EU-U.S. Privacy Shield framework or standard data protection clauses adopted by the European Commission.