Privacy Policy

CORP-POL-019

1. Purpose and application

1.1. This document constitutes the privacy policy of the entities within the Atmos Renewables group, including Atmos TopCo Pty Ltd (ACN 645 165 448) and its subsidiaries (collectively, we, us or our).

1.2. This Privacy Policy outlines how we may collect, use, disclose and otherwise handle your personal information and other information in accordance with the Privacy Act 1988 (Australia) (Privacy Act), including the Australian Privacy Principles.

1.3. Personal information means information or opinion about an identified individual or an individual who is reasonably identifiable.

2. Collecting your personal and other information

We may collect personal information about you in different ways, including, without limitation, when:

a) you contact us to enquire about us or our renewable energy or energy storage projects (Projects);

b) we prepare proposals to provide you rights (including pursuant to land leases, easements, development consents and electrical grid connection agreements) and other assets relating to Projects (Project Assets);

c) you request, instruct or contract us to provide you Project Assets;

d) you consent to us or our nominees undertaking Project-related and other activities such as investigations at or in connection with the locations of Projects (Project Sites);

e) you bid or apply to provide us goods or services or Project Assets, whether as a landlord, supplier, contractor, subcontractor, consultant or otherwise;

f) we engage you to provide us goods or services, whether as a landlord, supplier, contractor, subcontractor, consultant or otherwise;

g) you apply for employment, sponsorship or a grant or we employ or sponsor you or provide a grant to you;

h) your employer provides us or our customers information about you and it would be unreasonable or impractical to collect such directly from you;

i) you meet with us, call us or send us email or other correspondence;

j) you visit one of our Project Sites or other locations;

k) you undertake a safety induction at one of our Project Sites or other locations;

l) you or someone you witness suffers an injury at one of our Project Sites or other locations;

m) you provide us your business card;

n) you visit or interact with our websites, social media accounts or online platforms;

o) you subscribe to one of our newsletters or sign up to one of mailing lists;

p) you attend an event we host such as a community consultation meeting in connection with a Project;

q) you make a complaint or we investigate such;

r) we deal with regulatory authorities, government agencies or third party service providers; or

s) we access electronic public databases or other publicly available sources.

2.1. We may collect and hold a range of different information about you as necessary for business or administration purposes. Some examples of business or administration purposes are set out under the heading Using your personal information . Other examples include:

a) verifying your identity;

b) contacting you; and

c) obtaining your feedback.

2.2. The types of information we may collect and hold includes, without limitation:

a) current and any former names;

b) age and date of birth;

c) place of birth;

d) residential address;

e) postal address;

f) other contact details such as email address, phone number or mobile telephone number;

g) nationality;

h) passport number;

i) visa details;

j) driver s licence number;

k) gender;

l) relationship status and history;

m) industry sector;

n) employment status and history;

o) positions and roles held with employers or other organisations;

p) education;

q) technical and other qualifications, certificates and licences;

r) financial information such as bank accounts and credit card numbers;

s) insurance policies and certificates of currency;

t) tax information such as tax file number;

u) superannuation details;

v) complaint details;

w) photographs;

x) information about how you use or confer or enjoy Project Assets;

y) locations where you operate or provide or receive goods or services or confer or enjoy Project Assets;

z) CCTV or surveillance footage of you at one of our Project Sites or other locations;

aa) if you or someone you witness suffers an injury at one of our Project Sites or other locations, information about the relevant health and safety incident such as cause of the incident, injuries sustained and treatment administered;

bb) if you are employed by us, your access to and use of our systems including your access to and use of data, websites and applications; and

cc) if you use our websites, social media accounts or online platforms, and perhaps subject to your cookie settings, your IP address, location, internet service provider, browser history and domain name.

2.3. We collect personal information orally, in writing, over the phone, by email, via our websites, social media accounts and through online platforms and through other modes of communication.

2.4. Our websites may contain links to other websites. We are not responsible for the privacy practices of linked websites and any linked websites are not subject to this Privacy Policy.

2.5. You are under no obligation to provide us personal information we request; however, not providing such information may mean we are unable or less willing to:

a) provide you employment or information or confer Project Assets; or

b) engage you to provide us goods or services or information or confer Project Assets;

c) effectively respond to a complaint.

2.6. You may choose to remain anonymous or use a pseudonym in your communications with us where it is lawful and practical; however, if you choose to do so, we may not be able to provide you with information or effectively manage our relationship with you.

3. Using your personal information

3.1. Personal information we collect and hold may be used by us for the purpose for which it was collected and otherwise as necessary for business or administration purposes, which may include, without limitation:

a) communicating with you;

b) sending marketing materials;

c) sending proposals to acquire or dispose of Projects or Project Assets;

d) sending contracts, notices under contracts, consents, information requests or other communications, including to or for our customers, landlords, suppliers, contractors, subcontractors or consultants;

e) sending progress reports, including regarding acquisition or disposal of Projects or Project Assets;

f) sending invoices for our Projects or Project Assets;

g) liaising with electrical grid operators, regulatory authorities, government agencies (such as local councils), or third party service providers;

h) sending updates about specific Projects or our business generally;

i) evaluating the technical, financial and other feasibility of Projects, which may include Project Site and impact investigations or other due diligence activities;

j) appraising creditworthiness or conducting other due diligence activities in relation to actual or prospective customers, landlords, suppliers, contractors or subcontractors, which may include sending information to credit reporting agencies;

k) preparing internal analysis of our Projects or actual or potential improvements thereto;

l) preparing internal research or market or other data analysis;

m) internal record keeping;

n) consider and process employment, sponsorship or grant applications;

o) consulting with and addressing the concerns of community members about our Projects;

p) upholding the security and health and safety of persons (including you and us) and property (including yours and ours); and

q) complying with our legal obligations. We may also use your personal information for any purpose that is incidental or related to the above-described purposes.

3.2. We will not use or disclose personal information we hold about you that was collected for a particular purpose for another unrelated purpose, unless:

3.3. you have consented to use or disclosure of the information for that other unrelated purpose; or

3.4. the use or disclosure is otherwise permitted under the Privacy Act.

3.5. Circumstances in which we may disclose your personal information to third parties include where:

a) you have expressly or impliedly consented to such disclosure;

b) we disclose to our related entities;

c) we disclose in confidence to our professional advisers (including lawyers, accountants and auditors), insurers, investors or financiers;

d) we disclose to service providers (which may be located offshore) whose services we consider essential for our business, such as data processing, back up and scanning;

e) we disclose in confidence to third parties to obtain their feedback on our Projects and enhance our Projects; or

f) disclosure is authorised or required by applicable law or a court or tribunal.

4. Information services and opting out

4.1. We may contact you via email or other means to provide you with updated or other information about our Projects, about our websites, social media accounts or online platforms or in relation to events.

4.2. If you no longer wish to receive such information from us, you can either unsubscribe directly within emails you receive (if the facility is made available) or contact our team at info@atmosrenewables.com.au.

4.3. Note that it may take at least 10 business days before any opt out becomes effective.

5. Securing your personal information

5.1. We are committed to taking reasonable steps to:

a) keep personal information you provide us secure;

b) safeguard it from misuse and unauthorised access, disclosure and interference; and

c) ensure that your privacy is respected.

5.2. Typically, we will store personal information on our information network within Australia. Personal information will not ordinarily be sent offshore to related bodies corporate, but if this does occur it will be done in accordance with the Privacy Act and other applicable law.

5.3. In addition, we, or our contractors, may utilise cloud and other technologies in connection with the storage of personal information, and this may result in offshore storage. It is not practicable for us to specify, in advance, the countries in which that personal information may be stored. Where we share your personal information with overseas entities, we will do so in compliance with the Privacy Act, and will take reasonable steps to ensure that such entities use, hold and disclose your personal information in ways consistent with the Privacy Act.

6. Accessing, correcting or updating your personal information

6.1. You have a right to request access to, or correction of, your personal information held by us.

6.2. If you wish to access, correct or update any personal information we may hold about you, please contact us as set out below.

6.3. Note that we may charge for providing access to this information and we may refuse access in certain circumstances, including where:

a) access may result in a breach of confidentiality;

b) access may materially affect the privacy of another person;

c) we are required by law not to disclose the information; or

d) it is otherwise lawful for us to refuse access.

7. Making and resolving complaints

7.1. If you have any questions or concerns about our collection, use or disclosure of personal information, or if you believe that we have not complied with this Privacy Policy or the Privacy Act, please contact us as set out below. When contacting us, please provide as much detail as possible in relation to your query, issue or complaint.

7.2. Your complaint will be taken seriously and will be assessed by an appropriate person with the aim of resolving any issue in a timely and efficient manner. We request that you cooperate with us during this process and provide us with relevant information we may require.

7.3. If your complaint is not resolved to your satisfaction, you may make a complaint to the Office of the Australian Information Commissioner as follows:

Call: 1300 363 992
Email: enquiries@oaic.gov.au
Write to: GPO Box 5218, Sydney NSW 2001
Online: https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us

8. Contacting us

8.1. If you have any questions about this Privacy Policy, you should contact:

Privacy Officer
Atmos Renewables
Email: info@atmosrenewables.com.au
Write to: Level 9 Angel Place, 123 Pitt St, Sydney NSW 2000

9. Updating this Privacy Policy

9.1. We may unilaterally review and modify this Privacy Policy from time to time and without notice. If we do modify this Privacy Policy, we will post the updated version of it on our main website and such updated version will apply to all of your information held by us at that time.

9.2. This Privacy Policy was last updated on 11th August 2025

Nigel Baker

Chief Executive Officer

11 August 2025

Document Information

Key Information

Owner	CEO
Filename	CORP-POL-019 Privacy Policy
Date of next review	August 2027

Version Control

Document Owner	Revision Details	Version	Authorised by	Date of Release
Nigel Baker	New Policy	1.0	Nigel Baker	11 August 2025