ADDITIONAL AUSTRALIA PRIVACY DISCLOSURES

Last Updated: August 30, 2026

This Additional Australia Privacy Disclosures addendum supplements our Privacy Notice and applies to individuals in Australia. It is expressly incorporated into and forms part of our Privacy Notice. Where this addendum conflicts with the Privacy Notice, this addendum controls for individuals in Australia. In this addendum, "Personal Information" has the meaning given in the Privacy Act 1988 (Cth) (the "Privacy Act") and is used interchangeably with "Personal Data" as used in our Privacy Notice.

‍

Scope: Employees, Contractors and Job Applicants

Our Privacy Notice states that our privacy practices relating to current employees, contractors, and other internal workforce members are addressed separately from that notice. For individuals in Australia, that statement is subject to the following clarifications:

• Employees. Our handling of employee records that are directly related to a current or former employment relationship between FSAI and an FSAI employee is generally outside the scope of the Australian Privacy Principles and is addressed separately from our Privacy Notice.
• Contractors and other non-employees. Our Privacy Notice and this addendum apply to Personal Information we collect and handle about contractors, consultants, and other individuals who are not FSAI employees, including where those individuals provide services to us.
• Job applicants and prospective employees. Our Privacy Notice and this addendum apply to Personal Information we collect and handle about candidates, job applicants, and prospective employees, including information collected through our recruitment processes.

‍

How We Collect Personal Information

The main ways in which we collect Personal Information, and the main consequences if we are unable to collect Personal Information, are set out in the "Personal Data we collect" section of our Privacy Notice. We collect Personal Information by lawful and fair means, and, where reasonably practicable, directly from the individual concerned. Where we collect Personal Information about you from a third party, we will take reasonable steps to notify you of that collection or otherwise ensure you are aware of the matters set out in our Privacy Notice.

‍

Sensitive Information

Some of the categories described as "Special Personal Data" in our Privacy Notice are "sensitive information" under the Privacy Act, including health or disability information, information about race or ethnicity, and criminal record information. We will only collect sensitive information about you with your consent, or where the collection is otherwise required or authorised by or under an Australian law or a court or tribunal order, or another exception under the Privacy Act applies.

‍

Dealing with Us Anonymously or Using a Pseudonym

Where it is lawful and practicable to do so, you may deal with us anonymously or by using a pseudonym. In many cases, however, we will need to collect Personal Information about you in order to provide our products and services, respond to your enquiry, or consider your application for a role with us.

‍

Overseas Disclosure of Personal Information

As described in the "International data transfers" section of our Privacy Notice, we may disclose Personal Information to recipients located outside Australia, including in the United States and Canada, where our group companies and service providers are located. Before disclosing Personal Information overseas, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles in relation to that information, unless an exception under the Privacy Act applies.

‍

Direct Marketing

Where we use or disclose your Personal Information for the purpose of direct marketing, we will provide a simple means by which you can request not to receive direct marketing communications from us. You may opt out at any time by using the unsubscribe function in our communications or by contacting us at privacy@futuresecure.ai.

‍

Notifiable Data Breaches

Where we become aware of an eligible data breach affecting your Personal Information, we will notify you and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

‍

Your Australian Privacy Rights

Subject to the exceptions in the Privacy Act, you may:

• Access. Request access to the Personal Information we hold about you.
• Correction. Request correction of Personal Information we hold about you that is inaccurate, out of date, incomplete, irrelevant or misleading.
• Complaints. Lodge a complaint with us about how we have handled your Personal Information.

To exercise any of these rights, please contact us at privacy@futuresecure.ai. We will respond to your request within a reasonable period, and in accordance with the timeframes required under the Privacy Act. We may need to verify your identity before responding to your request. If we refuse to give you access to, or to correct, your Personal Information, we will provide you with written reasons for that refusal and information about how you may complain about that decision.

‍

Complaints to the Office of the Australian Information Commissioner

If you are not satisfied with how we have handled your privacy complaint, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC), which can be contacted at www.oaic.gov.au or on 1300 363 992.

‍