have a legitimate business reason for doing so, e.g. to manage risk, verify your identity, enable another company to provide you with services you have requested, or assess your suitability for products and services; or