Region-Specific Supplemental Terms

Effective as of 23 April 2022

The following country-specific terms supplement the Master Subscription Agreement (hereinafter “Agreement”) may be applicable to your use of the Service. During the Subscription Term, we may update these Region-Specific Terms without notice as legal requirements evolve and as we deem reasonably necessary.

Australia

Notwithstanding anything to the contrary in this Agreement, any applicable rights you may have under Australian Consumer Law continue to apply in full force. This includes, but is not limited to, Sections 3.3, 4.3, 9.2, 13.2, 14.1 and 15 of the Agreement. “Australian Consumer Law” in this section means the Australian Consumer Law under Schedule 2 of the Competition and Consumer Act 2010 (Cth).

Where you are established in Australia or where your Agents and End Users access the Services in Australia, the definition of applicable Data Protection Law in this Agreement shall include the Australian Privacy Act 1988 (Commonwealth) and the Australian Privacy Principles with respect to such use of the Services in Australia.

You agree that you are responsible for notifying End Users that Personal Data collected, stored, used and/or processed by RideSuite, as described in this Agreement, is collected, stored, used and/or processed in compliance with the Australian Privacy Act 1988 (Commonwealth) and the Australian Privacy Principles. You agree you will obtain consent from End Users before collecting or inputting their “sensitive information” into the Services, where required and as defined by the Privacy Act. You are responsible for notifying End Users that if they are dissatisfied with our handling of a complaint or do not agree with the resolution proposed by us, they may make a complaint to the Office of the Australian Information Commissioner (OAIC) by contacting the OAIC using the methods listed on their website at http://www.oaic.gov.au. Alternatively, they may request that we pass on the details of their complaint to the OAIC directly.

In respect of disclosures or transfers of Service Data to a country outside Australia, RideSuite has ensured that the recipient of the Service Data (and any onward third-party recipients) will comply with obligations that are substantively similar and at least as strict as, if not stricter than, those required by the Australian Privacy Principles and the Privacy Act in respect of any Processing of Personal Data.

The Parties agree to cooperate in relation to the investigation and assessment of any relevant Service Data Breach, and in relation to any notification of such Service Data Breach required to be made under any applicable Data Protection Law to a regulator in any local or foreign jurisdiction, including without limitation the Office of the Australian Information Commissioner (each a “Regulatory Authority”), and to affected individuals. Any correspondence or notification to Regulatory Authorities and affected individuals must be in a form that is mutually agreed upon by both Parties. However, nothing in this Agreement will prevent either Party from complying with its respective legal obligations under applicable Data Protection Laws, including in respect of notifying a Regulatory Authority or individuals about a Service Data Breach.

Brazil

You agree that you are responsible for notifying End Users that Personal Data is collected, stored, used and/or processed by RideSuite, as described in this Agreement and is collected, stored, used and/or processed in accordance with Brazilian Law No. 13,709/2018, as amended.

Where you are established in Brazil or where your Agents and End Users access the Services in Brazil, the definition of applicable Data Protection Law in this Agreement shall include Brazilian Law No. 13,709/2018, as amended (LGPD), with respect to such use of the Services in Brazil.

Canada

You agree that you are responsible for notifying End Users that Personal Information (as the term is defined in the Personal Information Protection and Electronic Documents Act of Canada (PIPEDA) will be collected, stored, used and/or processed by RideSuite in compliance with RideSuite’s obligations under PIPEDA.

Where you are established in Canada or where your Agents and End Users access the Services in Canada, the definition of applicable Data Protection Law in this Agreement shall include PIPEDA with respect to such use of the Services in Canada.

Japan

You agree that you are responsible for (i) notifying the End Users using Our Services via your Account about how RideSuite may use End Users’ Personal Data as described in this Agreement; and (ii) obtaining prior consent from End Users to disclose their Personal Data to us where required by and in compliance with the Act on the Protection of Personal Information (APPI) in Japan and Applicable Data Protection Law.

New Zealand

You agree that you are responsible for notifying End Users that Personal Data collected, stored, used and/or processed by RideSuite, as described in this Agreement, is collected, stored, used and/or processed in compliance with the New Zealand’s Privacy Act (2020) and its 13 Information Privacy Principles (NZ IPPs).

Singapore

You agree that you are responsible for notifying End Users that Personal Data collected, stored, used and/or processed by RideSuite, as described in this Agreement, is collected, stored, used and/or processed in compliance with RideSuite’s obligations under the Personal Data Protection Act 2012 of Singapore (“PDPA”).

United Kingdom

Where you are established in the United Kingdom or where your Agents and End Users access the Services in the United Kingdom, the definition of applicable Data Protection Law in this Agreement shall include the Data Processing Act 2018 with respect to such use of the Services in the United Kingdom.

Switzerland

Where you are established in Switzerland or where your Agents and End Users access the Services in Switzerland, the definition of applicable Data Protection Law in this Agreement shall include the Swiss Federal Act of 19 June 1992 on Data Protection with respect to such use of the Services in Switzerland.

California, United States

You agree that you are responsible for (i) notifying End Users that Personal Data collected, stored, used and/or processed by RideSuite, as described in this Agreement, is collected, stored, used, and/or processed in compliance with the California Consumer Privacy Act (CCPA), as amended, and any regulations made under it and (ii) obtaining consent from End Users where it is required under the foregoing.