Overview

We are committed to protecting and using your personal information responsibly. If you have any questions about this privacy policy, please contact the person in charge of the protection of personal information within Hightech Payment Systems Australia PTY LTD at Email: DPO_HPSAustralia@hps-worldwide.com.

This privacy policy is for any individual:

It is important that you read this policy so that you are aware of how and why we are using such information. This privacy policy describes how we collect and use your personal information during and after your relationship with us, in compliance with all applicable Privacy Laws in Australia.

If you are an HPS Australia employee, you can find our privacy policy relating to employment on the intranet.

Who we are

Hightech Payment Systems Australia PTY LTD (“HPS Australia”, “we”, “our”, “us”) is an innovative payment solutions company providing payment solutions for issuers, acquirers, card processors, independent sales organizations, retailers, and national and regional switches.

PowerCARD is HPS Group’s comprehensive suite of solutions that covers the entire payment value chain by enabling innovative payments through its omni-channel solution that allows the processing of any transactions coming from any channels initiated by any means-of-payment.

Purpose(s) of personal information processing

Personal information we process on our own behalf

Personal information we process on our own behalf

HPS Australia will process your personal information based on your consent for the following business processes:

• To evaluate any application submitted in response to one of our job postings, or by any unsolicited application,
• To contact you if, for example, we wish to oWer you a job or obtain more information about your application, C2 – Interne / Internal
• To send you our newsletter,
• To conduct market research and prospection,
• To promote our services,
• To promote the website,
• To obtain or create statistics that allow us to evaluate the performance of the website,
• To ensure the functionality of the website,
• To facilitate the use of our website and to improve and measure its performance,
• To identify the most frequented pages of the website in order to measure their performance, interest in them and the interest of our potential customers in our services,
• To evaluate the eWectiveness of the website in acquiring and retaining visitors,
• To provide informative communications about the Services and, more generally, our activities and
• New Purposes (if applicable). We will notify you and ensure that we obtain any necessary consent for the collection, use or disclosure of your personal information for any purpose other than those listed above, if any.

How we collect your personal information

• Automatically via strictly necessary cookies from visitors to the HPS Group website.
  • Your IP address,
  • Your browser (Chrome, Microsoft Edge, Firefox, Safari, etc.),
  • Your operating system (Windows, Mac OS...),
  • The domain name of your internet service provider,
  • The date and time of your visit to the Site,
• The pages you visit on the Site, and the address of the website from which you are accessing the Site.
• During communications between a visitor and an employee or authorized representative of HPS Australia, in connection with the services offered by HPS Australia, whether through video conferences, emails, telephone calls, social media, instant messaging, electronic forms, or other.
• Through resumes sent electronically or via postal services to HPS Australia. Candidate personal information held typically consists of:
  • Your first and last name,
  • Telephone number,
  • Email address,
  • Curriculum vitae and cover letter, previous studies information,
  • Language preference,
  • Accommodation needs,
  • Previous employers,
  • Position held,
  • Salary expectations.
• From candidates, through the electronic application forms available on the HPS Group website, accessible by accessing the individual pages present for the positions offered.
• When candidates sign up for automatic notification when new available positions are posted.
• From candidates through various communications (videoconferences, emails, instant messaging, phone calls, faxes, social media, electronic forms, or other), inconnection with their potential hiring.
• When website visitors subscribe to our newsletter, through the electronic form foundin the pop-up window appearing for these purposes.
• When website visitors consent to voluntarily respond to surveys sent by HPS, through electronic forms.
• When registering website visitors for events or conferences, through electronic forms.
• On our CCTV equipment when you visit our premises

Personal information processed by HPS Australia on behalf of our clients

If you are customer of a financial institution such us Banks, Financial Services Companies or large retailers (Client), we might process your personal information on behalf of our Client, under its instructions.

We will only process strictly the minimum amount of personal information to fulfil the services we provide our Clients.

Within the personal information that we might process are:

• Your first and last name,
• Date of birth,
• Billing address,
• Telephone number,
• Email address,
• Card number,
• Card Type,
• Card expiry date,
• CVV number,
• Bank account details,
• Transaction details.

How we safeguard your personal information

We use administrative, organisational, technical, and physical safeguards to protect the security, availability, confidentiality, and integrity of personal information against loss, misuse and unauthorized access, disclosure, alteration, and destruction.

The safeguards we use include:

• Ensuring the physical security of our oWices, warehouses or other sites,
• Ensuring the physical and digital security of our equipment and devices by using appropriate password protection and encryption,
• Using standard security protocols and mechanisms (such as secure socket layer (SSL) encryption) to transmit sensitive personal information,
• Maintaining a personal information protection policy for, and delivering personal information protection training to all employees,
• Limiting access to your personal information to only those who need to use it in the course of their work.

Who we share personal information with

We may share your personal information internally within the HPS Group or externally with third parties or suppliers in Australia. Please note that we have suitable data protection agreements in place with all other parties. These parties include:

• HPS Australia's service providers, in terms of cloud hosting, website maintenance and administration, information systems, customer management systems, billing systems, insurance services and services for the secure destruction of personal information,
• HPS oWice in Morocco will receive the personal information arising from your use of our website,
• Our Clients – the banking, financial services and retailers on whose behalf we process your personal information.
• Federal, State or law enforcement agencies, when they request personal information according to the applicable law.

We reserve the right to disclose your personal information to any other person or entity where required or permitted by applicable law, or with your consent.

How we safeguard the international transfer of your personal information

We use Standard Contractual Clauses as a safeguard to enable the international transfer of personal information in addition to the standard organizational and technical security measures covered above. It is likely that HPS Australia will transfer information overseas including to other HPS oWices across the world, for further details please check the section “Locations” available in our website.

For personal information we process on behalf of our client, we perform international transfers only when expressly permitted under the terms of our agreement with our Clients.

Automated processing

Our information technology systems are configured to perform automated processing to ensure quick approval of your transactions. To obtain more information on this please use the contact details provided at the beginning and end of this policy.

How long we keep your personal information

Your Rights

How to make a complaint to the Supervisory Authorities?

If you have a concern regarding your personal information and how we are handling it please contact our privacy oWicer at DPO_HPSAustralia@hps-worldwide.com and we will try to solve the problem.

In case you are not satisfied with the outcome you can submit a formal complaint to us DPO_HPSAustralia@hps-worldwide.com, allow us approximately 30 days to resolve any privacy issues that you may have regarding your concerns.

In case you do not agree with the resolution of your complaint you can submit your complaint to the OWice of the Australian Information Commissioner (OAIC), you can find further information in the following links:

• Online privacy complaint form
• Via: https://www.oaic.gov.au/__data/assets/word_doc/0010/1135/privacycomplaint- form-v4.docx

The complaints can be withdrawn at any time without penalty

Where to send your complaint:

• mail, send it to GPO Box 5288, Sydney NSW 2001 (send it by registered mail if you’re concerned about sending it by registered mail if you're concerned about sending it by standard post)
• fax, send it to +61 2 6123 5145.

What a written complaint must include:

• your name and contact details — anonymous complaint can’t be investigated
• any relevant reference numbers or identifiers
• the name of the organisation or agency you’re complaining about
• a brief description of your privacy complaint (what happened and when)
• any action the organisation or agency you complained to has taken to fix the problem
• a copy of any relevant document (such as your complaint to the organisation or agency and their response)
• what outcome you’d like.

How to withdraw your consent from communication

You can withdraw or change your consent from processing you consented to subject to applicable law and your contractual obligations.

To do so, please contact our designated Privacy Officer using the contact information provided in this policy. Withdrawing your consent may have an impact on our ability to interact appropriately with you, particularly with respect to the performance of our services.

This Policy is reviewed at least annually.

Date of last review: October 2025.