We collect information necessary to provide our payment processing services, including: • Personal identification information (name, email, phone number, business details) • Financial information (bank account details, transaction data) • Technical information (IP address, device information, browser type) • Usage data (how you interact with our services) We only collect information that is necessary for providing our services and improving your experience.

Your information is used to: • Process payment transactions and provide our services • Verify your identity and prevent fraud • Communicate with you about your account and services • Improve our products and services • Comply with legal and regulatory requirements • Send important updates and security notifications We will never sell your personal information to third parties.

We may share your information with: • Payment networks and financial institutions to process transactions • Service providers who assist in operating our business (under strict confidentiality agreements) • Law enforcement or regulatory bodies when required by law • Business partners with your explicit consent All third parties are contractually obligated to protect your information and use it only for specified purposes.

We implement industry-leading security measures to protect your information: • End-to-end encryption for all transactions • PCI DSS Level 1 compliance • Regular security audits and penetration testing • Secure data centers with 24/7 monitoring • Multi-factor authentication options • Employee training on data protection While we strive to protect your information, no method of transmission over the internet is 100% secure.

You have the right to: • Access your personal information held by APS • Request correction of inaccurate information • Request deletion of your information (subject to legal requirements) • Opt-out of marketing communications • Withdraw consent for data processing (where applicable) • Lodge a complaint with the relevant privacy authority To exercise these rights, contact our privacy team at privacy@aps.com.au.

We retain your information for as long as necessary to: • Provide our services to you • Comply with legal and regulatory obligations • Resolve disputes and enforce agreements • Maintain business records Transaction data is typically retained for 7 years in accordance with Australian financial regulations.

Our website uses cookies and similar technologies to: • Remember your preferences and settings • Analyze website traffic and performance • Personalize your experience • Provide security features You can control cookie preferences through your browser settings. Some features may not function properly if cookies are disabled.

Your data is primarily stored and processed in Australia. If we transfer data internationally, we ensure: • Adequate protection measures are in place • Compliance with Australian Privacy Principles • Appropriate safeguards and security standards • Your rights remain protected We only work with international partners who meet our strict data protection requirements.

We may update this privacy policy from time to time to reflect: • Changes in our practices or services • Legal or regulatory requirements • Technological developments • User feedback We will notify you of significant changes via email or prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

If you have questions about this privacy policy or our data practices: Email: privacy@aps.com.au Phone: 1300 096 983 Mail: APS Payment Solutions Privacy Officer [Address] We aim to respond to all privacy inquiries within 30 days.