ADDENDUM

Australia

Effective Date: Aug 1, 2026.

This Addendum (“Addendum”) forms part of and supplements the Personal Data Protection Policy of Cortina Holdings Limited located at https://www.cortinawatch.com/en/personal-data-protection-policy/ (“Global Policy”).

This Addendum applies to the collection, use, disclosure, and processing of personal data of individuals located in Australia by the Cortina Group, including Cortina Watch Pty Limited (ACN 120 699 149).  This Addendum has been prepared to address and reflect the requirements of the Privacy Act 1988 (Cth) (“Privacy Act”), and in particular, the Australian Privacy Principles (“APPs”).

In the event of any conflict between this Addendum and the Global Policy, the terms of this Addendum shall prevail in respect of the personal data of individuals located in Australia or that is processed in Australia.

In this Addendum, ‘personal data’ includes any information or opinion about an individual whose identity is apparent or can reasonably be ascertained.

1. Cross Border Transfers of Personal Information

As part of an international business, your personal data may be disclosed by the Cortina Group to recipients located outside Australia, including but not limited to members of the Cortina Group located outside Australia and third-party service providers who may provide the Cortina Group with, for example, data processing or storage services.

Such overseas recipients are likely to be located in the following regions/countries including:

• Singapore
• Malaysia
• Thailand
• Taiwan
• Hong Kong (SAR) of China
• Macau (SAR) of China

Where we disclose personal data to another party (including a party located outside Australia), we will require the third party to use the personal data only for the specific purposes for which we supply the information.

We take reasonable steps to ensure that any such overseas recipients do not hold, use or disclose your personal data in a way that is inconsistent with the obligations imposed under the Privacy Act and the APPs.

2. Disclosure

In addition to the circumstances and purposes of disclosure set out in the Global Policy, we may disclose your information where we are permitted or required by Australian law to make the relevant disclosure, for example to law enforcement bodies, regulators or in other circumstances permitted under the Privacy Act.

3. Artificial Intelligence

We may use artificial intelligence (AI) technologies to undertake our operations, enhance our services, better manage and improve your experience with Cortina. AI may be used for these purposes for tasks including data analysis or report generation. Personal information about you may be processed by us or our third party service providers using AI or other technologies for the purposes described in this privacy policy.  However, we do not use your personal information in AI or other automated programs to make decisions that significantly affect your rights or interests. If you have questions about how an AI-based process may have affected you, or if you wish to seek further information or review, you can contact us at: [email protected].

4. How to request access or correct personal information

Under the Privacy Act, you have the right to seek access to and correction of personal data we hold about you.

To request access to or correction of your personal information, or to obtain more information about this Addendum or the Global Policy, you can contact our Data Protection Officer:

By email: [email protected]

We will endeavour to respond to requests for access to or correction of personal data within a reasonable period of time (which will generally be within 30 days of the request or complaint being received by the Data Protection Officer). Where we refuse access, we will, where possible, provide you with a written notice setting out our reasons for the refusal and the avenues for complaint about the refusal.  If you are dissatisfied with our refusal to grant access to or correct your personal information, you may make a complaint to us using the process set out in paragraph 4 below or to the Office of the Australian Information Commissioner (whose details can be obtained at https://www.oaic.gov.au/).

We may charge a reasonable fee for providing access to personal information.  No fee is charged for the making of a request for access or correction.

5. Complaints

Please direct any questions about this policy or complaints about a breach of privacy by us to our Data Protection Officer who can be contacted as follows:

By email: [email protected]

Any complaint should be made in writing. At all times, privacy complaints:

• will be treated seriously;
• will be dealt with promptly; and
• will be dealt with in a confidential manner.

Our Data Protection Officer will investigate your complaint.  You will be informed of the outcome of your complaint following completion of that investigation.  In the event that you are dissatisfied with the outcome of your complaint, or an extension to the time in which we will resolve it, you may refer the complaint to the Office of the Australian Information Commissioner.