Australia

Wells Fargo International Privacy Notice
Effective: 28 March 2024
The Wells Fargo entity listed in Section 10 which you and/or your organization have a business relationship or otherwise
share Personal Data with (“we”, “our” or “us” or the “Company") provides this privacy notice ("Notice") to describe ourpractices regarding the collection, storage, use, disclosure and other processing of individually identifiable information
directly or indirectly identifying you or other individuals relating to your organization (“Personal Data”). If you or yourorganization has a business relationship or otherwise share Personal Data with a Wells Fargo entity in any country other thanAustralia, a different privacy notice at https://www.wellsfargo.com/privacy-security will govern the Personal Data collection
and processing activities of that Wells Fargo entity.

1. Types of Personal Data Collected
In Australia, we primarily have relationships and accounts only with corporations and other legal entities. However, we may
collect Personal Data about individual representatives (“Individuals”) of our customer organizations (“Customers”), such as
the individual’s:•

Work contact details: such as name, work address, phone number, mobile phone number, email address, and online
contact details, including but not limited to unique identification and password for access to our website, mobile
applications, and/or social media features.

•

Position description: such as employer, title, position held, duties, and length of employment.

•

Authentication data: such as passport, driver’s license, other governmental identification information, homeaddress and telephone number, documents that verify address, date of birth, country of domicile, documents thatverify employment, marriage certificate (if the Individual acts as a personal guarantor), and signature authorization.

•

Financial data: such as salary and other income, sources of wealth, assets, and documents that verify assets, credit
reports, financial relationships, and financial transactions.

•

Background check data: such as background check information including credit and criminal checks and screening,to the extent required or permitted by local law.

•

Surveillance data: such as images and voices captured by CCTV video and audio surveillance equipment installed (tothe extent permitted by local law) onto the business premises of a Wells Fargo entity, if your Individuals visit thebusiness premises.

•

Electronic and voice communications data: such as content, data, recordings, IP addresses and session
identification data relating to business communications exchanged with Wells Fargo through all applicablecommunication channels, including email, text, instant message or chat, transcriptions, telephonic communications,audio or video calls, communications on financial or trading platforms, voice recordings, video recordings, andpresentations hosted by Wells Fargo.

Among the above types of Personal Data, some of them may be considered sensitive Personal Data under privacy laws inAustralia. Sensitive Personal Data includes but is not limited to information about an individual’s racial or ethnic origin,political opinions, religious or philosophical beliefs, criminal records, political associations, professional or trade association© 2024 Wells Fargo Bank, N.A. All rights reserved.
IPN AUS2322 (Rev 28/03/24)

memberships, health, biometric and genetic traits, etc. Unless stated otherwise, references to Personal Data in this Noticeinclude sensitive Personal Data. However, sensitive Personal Data will be processed in accordance with applicable dataprotection laws, and only where processing is necessary to achieve the purposes described in Section 2.
We may collect Personal Data directly from Customers or the Individuals representing the Customers, including throughinteractions with the Bank and use of Bank systems, private lists, and publicly available sources (such as annual reports or
public registers/databases/websites of government entities, regulators or other authorities). We will process your Personal
Data in physical and electronic form and will do so in a way that adequately safeguards your Individuals’ personal rights andinterests in accordance with applicable data protection laws. You and your Individuals have the right to refuse to consent toproviding Personal Data. However, failure to provide this information may result in the Company being unable to provide orcontinue to provide the requested services to the Customer where Personal Data is necessary to provide those services.

2. Purposes of Collection and Use
The purposes of collection and use of Personal Data are:•

To provide services to our Customers, perform obligations under our agreements, and carry out related business
functions, including performing data and transaction processing, conducting credit checks, handling Customer
inquiries, providing information to or requested by Customers, enhancing and customizing our services and support
to our Customers, and managing the Customer relationship, we collect and use Personal Data including work contact
details, position description, authentication data, financial data, background check data, electronic and voicecommunications data, and other categories of Personal Data where needed.

•

To comply with legal obligations, regulations, regulatory guidance or codes of practice applicable to the Company
and its Affiliated Entities (defined below) in the United States and/or any relevant jurisdictions, including but notlimited to complying with “know your customer” obligations based on applicable anti-money laundering and antiterrorism requirements, economic and trade sanctions, customer due diligence, fraud prevention andinformation security, suspicious activity reporting, foreign exchange and international trade, tax reporting and otherapplicable laws, regulations, ordinances, and obligations, complying with any requests from any regulator or
authority to the extent permitted by applicable law, performing risk management to facilitate compliance with theabove, we collect and use Personal Data including work contact details, position description, authentication data,
financial data, background check data, electronic and voice communications data, and other categories of Personal
Data where needed.

•

To confirm a person’s authority as a representative or agent of a Customer, with which the Company or its
Affiliated Entities have entered or intend to enter into various arrangements, including but not limited to deposit
contracts, loan contracts, contracts for foreign exchange transactions, contracts for derivative transactions, andletters of credit, we collect and use Personal Data including work contact details, position description, backgroundcheck data, authentication data, and other categories of Personal data where needed.

•

To conduct recordkeeping and otherwise manage the business, such as to monitor or facilitate compliance with
Wells Fargo’s internal policies, to perform risk management, to maintain, improve or upgrade Wells Fargo’s
technology, operations or systems, to protect the business, rights or property of any Wells Fargo Group entity(defined in Section 3) by raising any legal claim, defense or proceedings, to support the conduct of audits,
support business transfers, combinations, restructuring, dissolutions or similar activities relating to any Wells
Fargo Group entity, etc., we collect and use Personal Data including work contact details, position description,authentication data, financial data, background check data, electronic and voice communications data, and othercategories of Personal Data where needed.

3. Disclosure of Personal Data
The Company may transfer your Personal Data to the recipients below for the purposes listed in Section 2.

2

IPN AUS2322 (Rev 28/03/24)

Affiliated Entities. The Company has Affiliated entities operating in the United States and around the world("Affiliated Entities"), including the group parent in the United States, Wells Fargo & Company, and Wells Fargo
Bank, N.A. (collectively, the Company and our Affiliated Entities are the "Wells Fargo Group"). We may disclose
Personal Data to our Affiliated Entities on a worldwide basis. A non-exhaustive list of Affiliated Entities is found in
this Wells Fargo & Company 10-K filing made with the US Securities and Exchange Commission:
https://www.sec.gov/Archives/edgar/data/72971/000007297124000064/wfc-1231x2023xex21.htm•

Beneficiaries, counterparties, and other parties related to a transaction. The Wells Fargo Group may disclose
Personal Data to beneficiaries, counterparties, or other parties related to a transaction on a worldwide basis, forexample, to provide the services requested by our customers and to comply with legal obligations and regulations.

•

Service providers. The Wells Fargo Group may disclose Personal Data to information technology providers or otherservice providers around the world that act under our instructions regarding the processing of such data ("Data
Processors"). Data Processors will be subjected to contractual obligations to implement appropriate administrative,
technical, physical, and organizational security measures to safeguard Personal Data and to process Personal Data
only as instructed. The Wells Fargo Group may also disclose Personal Data to independent external auditors or otherservice providers around the world that may not be acting as a Data Processor. Such service providers will be subject
to any necessary contractual obligations regarding the protection and processing of such Personal Data.

•

Legal requirements. Subject to applicable law, the Wells Fargo Group may disclose Personal Data if required or
permitted by applicable law or regulation, including laws and regulations of the United States and other countries,
or in the good faith belief that such action is necessary to: (a) comply with a legal obligation or in response to arequest from law enforcement or other public authorities wherever the Wells Fargo Group may do business; (b)protect and defend the rights or property of any Wells Fargo Group entity; (c) act in urgent circumstances to protect
the personal safety of Individuals, Customers, and contingent resources/employees of any Wells Fargo Group entity
or others; or (d) protect against any legal liability. In addition, the Wells Fargo Group may share your Personal Datawith U.S. regulators and with other self-regulatory bodies to which we are subject, wherever the Wells Fargo Groupmay do business.

•

Business transfers, combinations and related activities. As we develop our business, the Wells Fargo Group mightsell, buy, acquire, obtain, exchange, restructure, or reorganize businesses or assets. In the event of any actual or
proposed sale, merger, reorganization, transaction, restructuring, dissolution or any similar event involving ourbusiness or assets, Personal Data may be shared with the relevant entity or may be part of the transferred assets
and will be subject to any necessary contractual obligations to ensure the protection of Personal Data.

The recipients of Personal Data identified in this Section 3 may be in the United States or other jurisdictions outside thecountries where you or your Individuals are based. As such, these overseas recipients may not be required to comply withthe data protection laws of the countries where you or your Individuals are based. They may also not be required to provide
you or your Individuals with comparable levels of data protection or redress under the data protection laws where you or
your Individuals are based. Some of these recipients may also act as data controllers (rather than Data Processors) withrespect to your Personal Data. Notwithstanding the above, where required by applicable data protection laws, the Company
will: (i) address any applicable requirement to ensure an adequate level of data protection before transferring Personal Databy ensuring the execution of appropriate data transfer agreements or confirming other reasonable safeguards are in place;and (ii) establish that Personal Data will be made available to recipients on a need-to-know basis only for the purposes
described in Section 2 above. These measures enable us to transfer and use Personal Data in a secure manner anywhere in
the world where we have an establishment, or where we have contracted third parties to provide us with services.

4. Consents
To the extent consent is required by applicable law and our processing of Personal Data is not otherwise prohibited byapplicable law, you expressly consent to the collection, use, disclosure (including cross-border transfer), and other processingof Personal Data as described in this Notice by providing Personal Data to the Wells Fargo Group or authorizing ourCustomer to provide such information to us. Where you directly or indirectly provide any Wells Fargo Group entity with the
Personal Data of any individuals, you must have first informed such individuals about our data privacy practices by providing

3

IPN AUS2322 (Rev 28/03/24)

them with a copy of this Notice, and obtained all required informed consents from such individuals to permit the activities
described in this Notice before providing their Personal Data to the Wells Fargo Group. You expressly waive the bank secrecy
or confidentiality laws and obligations, if any, of the country or countries where you and the accounts are located to theextent permitted by applicable law.
You may revoke consent for the processing of your Personal Data at any time by notifying us at the address provided in
Section 8 of this Notice. Revocation of consent will not affect the lawfulness of Personal Data processing performed prior
to the withdrawal request, or processing based on lawful bases other than consent. Revocation of consent may result in our
inability to provide or continue to provide the requested services to the Customer where Personal Data is necessary toprovide those services.

5. Information Management, Security Control Measures, andRetention Periods
Personal Data will be safely stored in the databases of Wells Fargo. Appropriate measures are taken so that Personal Data
can be kept accurate and up-to-date, which will be in accordance with applicable security requirements. In an effort toprevent the loss, misuse, unauthorized access, disclosure, alteration, or destruction of Personal Data, Wells Fargo will takeappropriate legal, technical, physical and organizational security measures to protect Personal Data.
Your Personal Data is retained in a manner consistent with applicable law and for as long as necessary to fulfil the purposesof collection described in Section 2. Records are retained for varying periods depending on the requirements for theparticular record. The criteria used to determine these retention periods include but are not limited to the following:•

The length of time we have an ongoing relationship with you and provide the services to you (for example, for as
long as your organization has an account with us or keeps using the services);•

Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records ofyour transactions for a certain period of time after your organization no longer has an account with us);•

Whether retention is advisable considering our legal position (such as in regard to applicable statutes of limitations,litigation or regulatory investigations); and/or•

Whether our operational needs require maintaining your personal data (for example, for internal or external auditsof company operations, maintaining solicitation preferences (including for former customers and non-customers),
systems administration, or for fraud prevention).

While registering with our website, mobile applications, or social media features (each, a "Site"), we may provide you with aunique identification and password for accessing our products and services. We encourage you to choose your password
wisely such that no intruder or third party can obtain any unauthorized access to the Site. We also encourage you to keep
your password confidential and not have any written or other record of the password that can be accessible by an intruder
or third party.

6. Data Subjects Rights and Choice for Marketing Materials
Data Subject Rights
Your Individuals may have certain rights in relation to Personal Data we hold about them under data protection laws inAustralia. Your Individuals may have the right to access, correct, and be informed of the processing activities for any Personal
Data held about them. They may also have the right to seek relief from the data protection authority in Australia. Finally,
they have the right to consent to the processing of their Personal Data, and to withdraw any consent previously given.
However, their withdrawal of consent will not affect the lawfulness of Personal Data processing performed prior to thewithdrawal request, or processing based on lawful grounds other than consent.
Requests must be submitted by the Individual in writing to the address listed in Section 8 below. After we have verified theIndividual's identity, we will endeavor to respond promptly to valid data subject requests and take the other actions
4

IPN AUS2322 (Rev 28/03/24)

requested as specified by local law. Where permitted by law, we may charge an appropriate fee to cover the costsof responding to the request. These rights may not be absolute, and exceptions may be applicable. If Wells Fargo is not able
to accommodate the request, the requestor will be provided with reasons for the denial.
Choice for Marketing Materials
If you do not want to receive marketing and sales materials from Wells Fargo by direct mail, telephone, or email, please follow
the “unsubscribe” instructions provided in those communications or submit a written request to the address listed in
Section 8 below. We will comply with your request within a reasonable period of time after receiving it or within the time
period required by local law.

7. Complaints
You may have a right under applicable law to make a complaint if you think we have breached this Notice or any applicableprivacy law in handling your Personal Data. If you would like to make a complaint, please submit your complaint in writing to
the contact details below. We will respond to a written complaint within 30 days. If you are not satisfied with our response,
you may be able to pursue your complaint with the Office of the Australian Information Commissioner (“OAIC”). The details
on how to lodge a complaint with the OAIC are available here.

8. Inquiries
Please direct all requests relating to access, correction, and other legal rights regarding Personal Data, or any questions
regarding this Notice to:
APAC Regional Privacy Officer
138 Market St, #30-01 CapitaGreen, Singapore, 048946
Telephone: (65) 6395 6900
privacy.apac@wellsfargo.com

9. Modifications
This Notice may be modified as a result of amendments to the law or regulations or due to other reasons. In such case, anamended Notice will be posted on our website at http://www.wellsfargo.com/privacy-security/. The page providing the
Notice shall contain a date as to when the Notice was last updated.

10. Wells Fargo entity in Australia covered by this Notice
The name and address of the Wells Fargo entity collecting and processing Personal Data in Australia is as follows:
Entity Name

Address

Wells Fargo International Finance (Australia) Pty Ltd

Private Office 10.07
Level 7, 80 Collins Street
Melbourne
VIC 3000

5IPN AUS2322 (Rev 28/03/24)

Acknowledgement and Consent
By signing in the appropriate space below (or clicking the accept button if acknowledged electronically), the Customer,
Guarantor or Individual (as applicable) agrees that:a) the Customer/Guarantor/Individual has received this Acknowledgment and Consent before transmitting orotherwise providing any Personal Data to us;b) the Customer/Guarantor/Individual consents to the collection, use, processing, storage, and transfer of Personal
Data (with knowledge of the implications of such transfers described in Section 3) in accordance with the terms andconditions contained in the Notice;c) to the extent the Customer/Guarantor/Individual provides us with the Personal Data of any other individuals, it has
informed such individuals about our data privacy practices by providing them with a copy of the Notice (listed on
our website at the following link: www.wellsfargo.com/assets/pdf/personal/privacy-security/australia-customerprivacy-notice-english.pdf) and has obtained any and all required informed consents from such individuals necessary
to permit the activities described in the Notice;d) We may amend the Notice at any time by posting an updated version on our website referenced above, which theCustomer/Guarantor/Individual shall check periodically; in case of any update of the Notice, theCustomer/Guarantor/Individual shall: (i) to the extent permitted by applicable privacy law, be deemed to consent to
the terms in the updated Notice unless withdrawal of consent is communicated in writing to us using the contact
details in Section 8 of the Notice, and (ii) provide the individuals identified in (c) above with a copy of the updated
Notice and obtain any and all required informed consents from such individuals to permit the activities described in
the updated Notice; ande) the Notice supersedes any prior notice on this subject and shall cover all Personal Data collected or maintained by
us in connection with our relationship with the Customer/Guarantor/Individual.
If you are a Corporate Customer or a Corporate Guarantor, please complete the following section:

Customer/Guarantor Name (Borrower’s/Corporate Guarantor’s Legal Entity Name)

Signature (Please sign here)

Signatory’s Name (Please print)

Signatory’s Position/Job Title

Date

If you are an Individual/Sole Trader, please complete the following section:

6

IPN AUS2322 (Rev 28/03/24)

Signature (Please sign here)

Signatory’s Name

Date

7

IPN AUS2322 (Rev 28/03/24)