When we disclose personal information for a business purpose, we enter a data processing agreement that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the services for which we have agreed upon.