Morningstar Holdings Privacy Disclosures

Last updated: September 20, 2020

Your privacy is very important to us. At Morningstar, we want to make your experience with us satisfying and safe.

This Privacy Policy outlines the types of information we gather from your use of our products, how we use that information, with whom we might share it, the means by which we keep it secure, and the choices you have about the information you choose to share with us.

If you have any questions about the privacy practices of my.morningstar.com or this Privacy Policy, please contact us via privacyenquiries@morningstar.com

Personal information we collect

The types of personal information we collect depend on the product or service you ("You") receive from us. This information may include, but is not limited to:

• Your name, address, phone number, and physical or email address.
• Your demographic information, such as your age, gender, income range, investment preferences, etc.

Certain registration details (i.e., email address, password, and name) will be added to our global login database that resides in the U.S. This allows our subscribers to then use the same login details for various Morningstar products (my.morningstar.com being one of the products), when relevant and applicable.

Why we collect personal information

Morningstar may collect certain personal information to provide You with investment information and tools, perform marketing and research-related activities, supply other administrative services (e.g., setting up new accounts), respond to inquiries, etc. In addition, we may from time to time review your usage of the site to better provide You with information about products or services that we believe may be of interest to You.

It is not mandatory for You to provide your personal information to us. However, we will not be able to carry out the purposes described above if we do not have your personal information.

How we collect personal information

The personal information we collect may be captured from a variety of sources. These sources include, but are not limited to:

• Voluntary submissions (e.g., responses to surveys, requests for information on our products, or those of our advertisers/marketing partners).
• Registrations/applications to receive products or services.
• Reviews of site usage patterns.

Use of and access to your personal information by others

As a general rule, Morningstar will not make the personal information gathered using my.morningstar.com available to anyone outside of Morningstar and its affiliates––except as instructed by You or where required to comply with law. Please note, however, that there are several exceptions to this policy. First, if we use service providers, these service providers may have access to your personal information to perform contractually specified services on behalf of Morningstar or You. Second, if You indicate that You are interested in receiving information about a particular third party's products/services, or You opt to receive certain products or services through Morningstar, we may provide your personal information to that third party for purposes of fulfilling your request(s). With respect to service providers, Morningstar contractually requires that all personal information be kept confidential. Additionally, Morningstar takes reasonable steps to ensure that third parties receiving information about You at your request maintain the confidentiality of that information.

Morningstar collects, stores, and processes your personal information so it may administer your subscription to the various products and services it offers. Morningstar and its affiliated companies may also use your personal information to send You information about other products and services offered by Morningstar or its affiliated companies.

If You do not wish us to use your data as described, you may exercise your opt-out right by notifying us by following the instructions in the section on “Controlling your personal information” below.

Links to other websites

Morningstar may provide links to one or more other websites. We encourage You to read their individual privacy policies before providing any of your personal information to them.

Controlling your personal information

You may choose to restrict the collection or use of your personal data in the following ways:

• Whenever You are asked to fill in a form on the website, look for the box where you can indicate your consent regarding personal information usage.
• If you have previously agreed to us using your personal information for direct marketing purposes, You may change your mind at any time by writing to or emailing us at asiaevents@morningstar.com. Whilst we respect your decision to withdraw your consent, please note that this may affect the services we provide, depending on the nature and scope of your request.

Protection of your personal information

Morningstar puts reasonable security measures in place to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of personal information. These measures include internal reviews of our data collection, storage, and processing practices and security measures, as well as physical security measures to guard against unauthorized access to systems where we store personal data.

Morningstar operates secure data networks protected by industry-standard firewall and password protection systems. Our security and privacy policies are periodically reviewed and enhanced as necessary and only authorized individuals have access to the information provided.

Morningstar will keep your personal information for the time required to fulfil the identified purposes, our legitimate business purposes and to conform to legislative requirements. We will take all reasonable steps to ensure your personal information is destroyed or permanently deleted if it is no longer required for the purpose for which it was to be processed.

Use of cookies

Morningstar uses Cookies to set users' preferences, gather basic tracking information (such as login and password, date, time of visit, and preferences), and monitor the presentation of our site. Such information allows us to personalize the user experience and to improve the quality of our site navigation. Cookies do not reveal the identity of the individual user but only identify the computer utilized by that user. Please note that advertisers on our site may also deploy cookies and web beacon technology to measure and improve the effectiveness of advertising for their clients. For more information regarding Advertisers' Privacy Policies, they include but are not limited to the following:

• http://www.networkadvertising.org/optout_nonppii.asp
• http://www.advertising.com/privacy_policy.php
• http://www.revenuescience.com/site/privacy.asp
• http://mediaplex.com/MOJO_Privacy_Statement.shtml

Accuracy of your personal information

You are responsible for periodically checking to ensure that any personal information is updated and correct. You have the right to request access to your personal information that is in our custody or control, subject to limited exceptions prescribed by law. You can also request that information which is inaccurate or incomplete be rectified except where compliance with a request to such access or correction is refused under the Personal Data Protection Act 2010, Malaysia.

How to update personal information

If You desire to update any personal information, You may do so by accessing the membership section on my.morningstar.com. If You have any questions about the collection, storage, or processing of your information, You may contact Morningstar at the email or telephone number listed in the section on my.morningstar.com.

Your consent

By using my.morningstar.com, You consent to the collection and use of any personal information and any related information in the manner described in this Privacy Policy, including the transfer of your personal information to places outside Malaysia.

Changes to the Privacy Policy

Morningstar reserves the right to change this policy at any time by distributing and/or posting a new privacy policy without notice. We encourage You to review our privacy policy on a regular basis so that You will be aware of any changes to it.

If you have further questions about our privacy practices, please contact us via privacyenquiries@morningstar.com