Regulatory Compliance Policy

1.1 Purpose

This Regulatory Compliance Policy explains Tool-O's commitment to complying with applicable laws, regulations and regulatory obligations relevant to the operation of the Platform.

The purpose of this Policy is to support lawful operations, promote responsible corporate governance and maintain the confidence of Users, regulators and other stakeholders.

1.2 Objectives

This Policy seeks to:

• promote compliance with applicable laws;

• support responsible corporate governance;

• reduce regulatory risk;

• strengthen operational integrity;

• encourage ethical business practices;

• support continuous compliance improvement;

• protect Users and the Platform.

1.3 Scope

This Policy applies to:

• Tool-O;

• Platform operations;

• User Accounts;

• Bookings;

• payments;

• data protection;

• consumer protection;

• workplace obligations where applicable;

• taxation;

• regulatory reporting;

• all other activities connected with the operation of the Platform.

1.4 Guiding Principles

Tool-O administers regulatory compliance in accordance with the following principles:

• legality;

• accountability;

• transparency;

• integrity;

• proportionality;

• continuous improvement.

1.5 Relationship with Other Policies

This Policy should be read together with the:

• Terms of Use;

• Risk Management Policy;

• Privacy Policy;

• Security Policy;

• Anti-Money Laundering & Sanctions Policy;

• Export Control & Trade Compliance Policy;

• Ethics Policy;

• all other Platform policies.

1.6 Updates

Tool-O may amend this Regulatory Compliance Policy from time to time.

The latest version published on the Platform replaces all previous versions.

2.1 Compliance Commitment

Tool-O seeks to conduct its business in compliance with all applicable laws, regulations, regulatory requirements and lawful directions relevant to the operation of the Platform.

2.2 Areas of Compliance

Regulatory compliance may include matters relating to:

• consumer protection;

• privacy and data protection;

• cyber security;

• anti-money laundering;

• sanctions;

• taxation;

• intellectual property;

• workplace obligations;

• online safety;

• electronic communications;

• competition laws;

• other applicable legal requirements.

2.3 Compliance Monitoring

Tool-O may monitor compliance through:

• internal reviews;

• operational monitoring;

• policy reviews;

• incident reporting;

• audit activities;

• legal updates;

• regulatory guidance;

• other appropriate governance processes.

2.4 Legal Developments

Tool-O may monitor legislative and regulatory developments that may affect:

• Platform operations;

• User rights;

• User obligations;

• payment services;

• privacy;

• information security;

• dispute resolution;

• other aspects of Platform operations.

2.5 Internal Controls

Tool-O may maintain internal controls designed to support compliance, including:

• operational procedures;

• governance processes;

• risk assessments;

• policy frameworks;

• staff awareness where appropriate;

• compliance monitoring;

• record keeping.

2.6 User Responsibilities

Users are responsible for complying with all laws that apply to their own activities conducted through the Platform.

Nothing in this Policy transfers a User's legal obligations to Tool-O.

2.7 Cooperation with Authorities

Where required or permitted by applicable law, Tool-O may cooperate with:

• regulators;

• law enforcement agencies;

• courts;

• government departments;

• statutory authorities;

• other competent authorities.

2.8 Compliance Reviews

Tool-O may periodically review its compliance framework to identify:

• legislative changes;

• operational improvements;

• compliance gaps;

• governance enhancements;

• emerging regulatory risks;

• opportunities for continuous improvement.

2.9 Record Keeping

Tool-O may maintain records relating to regulatory compliance including:

• compliance reviews;

• audit records;

• investigation records;

• regulatory correspondence;

• governance documentation;

• other relevant compliance information.

Records may be retained in accordance with the Data Retention Policy and applicable laws.

2.10 Commitment to Compliance

Tool-O is committed to maintaining an effective compliance framework that supports lawful operations, responsible governance and the continued trust of Users, regulators and other stakeholders.

3.1 Governance

Tool-O may maintain governance arrangements to support ongoing compliance with applicable laws, regulations and regulatory requirements.

Governance responsibilities may be allocated to appropriate personnel, service providers or authorised representatives based on operational requirements.

3.2 Risk-Based Compliance

Tool-O may apply a risk-based approach to regulatory compliance by considering:

• legal obligations;

• operational risks;

• User impacts;

• regulatory expectations;

• industry practices;

• available compliance resources.

The level of compliance monitoring may vary depending on the nature and significance of the relevant regulatory obligations.

3.3 Policy Framework

Tool-O may maintain policies, procedures and operational controls to support compliance across areas including:

• privacy;

• information security;

• fraud prevention;

• anti-money laundering;

• payment services;

• Trust & Safety;

• artificial intelligence governance;

• consumer protection;

• other relevant compliance areas.

3.4 Incident Reporting

Where appropriate, regulatory compliance issues identified through:

• User complaints;

• internal reviews;

• audits;

• security incidents;

• fraud investigations;

• operational events;

• regulatory enquiries,

may be investigated and managed in accordance with applicable Platform policies.

3.5 Corrective Action

Where compliance issues are identified, Tool-O may implement reasonable corrective measures including:

• policy updates;

• procedural improvements;

• operational controls;

• additional monitoring;

• governance enhancements;

• staff awareness or training where appropriate.

3.6 Regulatory Engagement

Tool-O may engage with regulators where reasonably appropriate to:

• respond to enquiries;

• provide information;

• comply with reporting obligations;

• address regulatory concerns;

• support lawful Platform operations.

3.7 Record Keeping

Tool-O may maintain records relating to regulatory compliance including:

• compliance reviews;

• audit findings;

• regulatory correspondence;

• corrective actions;

• governance decisions;

• compliance assessments;

• other relevant documentation.

Records may be retained in accordance with the Data Retention Policy and applicable laws.

3.8 Continuous Improvement

Tool-O may periodically review its compliance framework by considering:

• legislative developments;

• regulatory guidance;

• operational experience;

• emerging risks;

• User feedback;

• industry best practices.

3.9 User Cooperation

Users are expected to cooperate with reasonable requests made by Tool-O where necessary to support compliance with applicable legal or regulatory obligations, provided such requests are lawful and proportionate.

3.10 Responsible Compliance Management

Tool-O seeks to maintain an effective, proportionate and continually improving compliance framework that supports lawful operations, protects Users and promotes confidence in the long-term integrity of the Platform.

4.1 Governance

Tool-O is responsible for administering this Regulatory Compliance Policy and may maintain governance frameworks, compliance procedures and operational controls to support compliance with applicable laws and regulatory obligations.

4.2 Compliance

Tool-O seeks to operate the Platform in accordance with applicable laws, regulations, regulatory guidance and lawful directions issued by competent authorities.

Nothing in this Policy creates any representation that all regulatory risks can be completely eliminated or that every regulatory requirement will remain unchanged over time.

4.3 Policy Review

Tool-O may periodically review this Policy to reflect:

• legislative changes;

• regulatory developments;

• court decisions;

• operational experience;

• technological advancements;

• emerging compliance risks;

• industry best practices.

4.4 Continuous Improvement

Tool-O may periodically review and improve its compliance framework by:

• strengthening governance arrangements;

• updating operational procedures;

• enhancing monitoring activities;

• improving risk management;

• implementing corrective actions;

• incorporating lessons learned from reviews and incidents.

4.5 Regulatory Engagement

Tool-O may maintain constructive engagement with competent regulators where appropriate by:

• responding to lawful enquiries;

• providing information where required;

• participating in regulatory processes where appropriate;

• complying with reporting obligations;

• implementing regulatory recommendations where reasonably appropriate.

4.6 Relationship with Other Policies

This Regulatory Compliance Policy should be read together with the:

• Terms of Use;

• Risk Management Policy;

• Privacy Policy;

• Security Policy;

• Anti-Money Laundering & Sanctions Policy;

• Export Control & Trade Compliance Policy;

• Ethics Policy;

• all other Platform policies.

Where there is any inconsistency, the Terms of Use prevail to the extent permitted by applicable law.

4.7 Contact

Questions regarding this Regulatory Compliance Policy may be directed to Tool-O using the contact details published on the Platform.

4.8 Policy Updates

Tool-O may amend this Regulatory Compliance Policy from time to time.

The latest version published on the Platform replaces all previous versions.

4.9 Commitment

Tool-O is committed to maintaining a culture of compliance by promoting ethical conduct, responsible governance and ongoing adherence to applicable legal and regulatory requirements.

4.10 Final Statement

Strong regulatory compliance supports the integrity, sustainability and long-term success of the Tool-O marketplace.

By maintaining appropriate governance, continually improving its compliance framework and operating in accordance with applicable laws, Tool-O seeks to protect Users, support responsible business practices and maintain confidence in the Platform.

END OF REGULATORY COMPLIANCE POLICY