Company: IMXI
Filing Date: 2025-11-05
Form Type: DEFM14A
Source: 0001140361-25-040538
Chunk: 229

Company: International Money Express, Inc.
Filing Date: 2025-11-05
Form: DEFM14A
Chunk 229
---
 any material omissions of the Company’s privacy practices or practices concerning the Processing of Personal Information. The Company has made copies of all of the Privacy Policies available to Parent.

(c) The Company has not received any claim (whether written or unwritten), written complaint, inquiry or request for information or documents, and no proceeding is pending or, to the Knowledge of the Company, threatened in writing against the Company, in each case, (i) alleging that the Processing of Personal Information by the Company violates any Privacy and Data Security Requirements, (ii) alleging that the Company has breached any Marketing Laws, or (iii) otherwise relating to the security or Processing of Personal Information.

(d) The Company has at all times established a legal basis, made all required disclosures to, and obtained all consents from users, customers, employees, contractors, Governmental Authorities, and other applicable third parties required by all applicable Privacy and Data Security Requirements and as necessary for the Company’s Processing of Personal Information in connection with the conduct of its business as it has been conducted.

(e) The Company, to the extent required by applicable Privacy and Data Security Requirements: (i) maintains a record of Personal Information Processing activities; (ii) retains Personal Information only for as long as is necessary; and (iii) ensures all cross-border transfers of Personal Information are carried out in compliance with applicable Privacy and Data Security Requirements.

(f) To the extent that the Company uses any third party to Process Personal Information on its behalf, each such third party is subject to a binding written contract with the Company that requires such third party to maintain the confidentiality of, and ensure the security and integrity of, such Personal Information in accordance with applicable Law, the Company’s Information Security Program and the Company’s obligations under Contract, and comply at all times with Privacy and Data Security Requirements, and such written contracts include provisions as required by applicable Privacy and Data Security Requirements except as would not, individually or in the aggregate, be material and adverse to the Company and its Subsidiaries, taken as a whole. To the Knowledge of the Company, no such third party has violated or is in violation of any applicable Laws, the Company’s Information Security Program or the Company’s obligations under Contract with respect to the Processing and protection of any Personal Information. The Company has taken commercially reasonable steps to limit access to Personal Information to: (i) the Company’s personnel and to subcontractors and third-party vendors providing services to or on behalf of the Company, in each case to those