TOBIZI

CORPORATE POLICY

Document Type: Corporate Policy
Policy Category: Supplier Governance, Ethics & Sustainability
Document Owner: TOBIZI Management
Policy Status: Approved Corporate Policy
Version: 1.0
Effective Date: September 2026
Review Cycle: Annual or as required
Applies To: All TOBIZI Suppliers, Partners, Contractors and Service Providers
Approval Authority: TOBIZI Management / Board or Authorised Governing Body

DOCUMENT CONTROL

Document Change Control

1. POLICY STATEMENT

TOBIZI is committed to developing a tourism ecosystem founded on trust, integrity, respect, responsibility and sustainability.

TOBIZI recognises that its suppliers and business partners form an integral part of the customer experience and contribute directly to the reputation, credibility and sustainability of the TOBIZI platform.

Accordingly, TOBIZI requires suppliers to conduct their businesses lawfully, ethically and responsibly and to respect the rights, safety and dignity of employees, customers, communities and other stakeholders.

This Supplier Code of Conduct establishes the minimum standards expected from organisations and individuals supplying products or services to, through or on behalf of TOBIZI.

The principles in this Policy are intended to complement, and not replace, applicable legislation, contractual obligations and professional standards.

Where applicable law establishes a higher standard than this Policy, the higher legal standard shall apply.

2. PURPOSE

The purpose of this Policy is to:

1. Establish minimum standards of ethical and responsible conduct for TOBIZI suppliers;

2. Protect customers, workers, communities and other stakeholders;

3. Promote respect for human rights and labour standards;

4. Prevent bribery, corruption, fraud and unethical business practices;

5. Promote responsible tourism and environmental sustainability;

6. Protect confidential and personal information;

7. Establish clear supplier compliance and accountability requirements;

8. Provide a framework for supplier assessment, monitoring and corrective action;

9. Protect the integrity and reputation of the TOBIZI platform.

3. SCOPE

This Policy applies to all organisations and individuals that provide goods, services, facilities, experiences or other commercial services to, through or on behalf of TOBIZI.

This includes, without limitation:

• Hotels and resorts;

• Lodges and guesthouses;

• Short-term accommodation providers;

• Restaurants and food-service businesses;

• Tour operators;

• Travel businesses;

• Local tour guides;

• Experience providers;

• Cultural tourism providers;

• Transport companies;

• Vehicle-hire providers;

• Marine and boating operators;

• Adventure and recreational activity providers;

• Cleaning and maintenance providers;

• Technology and digital-service providers;

• Marketing and media suppliers;

• Consultants and professional-service providers;

• Contractors and agents;

• Subcontractors where relevant;

• Community-based tourism organisations;

• Other suppliers registered or approved by TOBIZI.

Suppliers are responsible for ensuring that relevant employees, representatives, agents and subcontractors understand and comply with the standards applicable to their activities.

4. DEFINITIONS

For the purposes of this Policy:

4.1 TOBIZI

The TOBIZI tourism platform and the entity or entities legally responsible for its operation.

4.2 Supplier

Any business, organisation, individual or other party providing goods, services, experiences or facilities to or through TOBIZI.

4.3 Partner

A supplier or other commercial organisation having an ongoing business relationship with TOBIZI.

4.4 Customer

A person who accesses, purchases, books or uses a product or service made available through TOBIZI.

4.5 Subcontractor

A third party engaged by a supplier to perform all or part of a service connected with its relationship with TOBIZI.

4.6 Human Rights

The fundamental rights and freedoms recognised under applicable national law and internationally recognised human-rights principles.

4.7 Forced Labour

Any work or service performed involuntarily under threat, coercion, intimidation or other prohibited circumstances.

4.8 Child Labour

Employment or work performed by a person below the minimum age permitted under applicable law.

4.9 Personal Data

Information relating to an identified or identifiable individual, as defined under applicable data-protection legislation.

4.10 Material Breach

A violation of this Policy that, because of its nature or consequences, may materially affect customers, employees, communities, the environment, TOBIZI or the integrity of the supplier relationship.

5. FUNDAMENTAL PRINCIPLES

TOBIZI's Supplier Code is founded on five fundamental principles:

PRINCIPLE 1

Conduct business lawfully and with integrity.

PRINCIPLE 2

Treat employees with dignity and respect.

PRINCIPLE 3

Respect human rights.

PRINCIPLE 4

Respect local communities.

PRINCIPLE 5

Run a sustainable and ethical business.

6. PRINCIPLE 1 — CONDUCT BUSINESS LAWFULLY AND WITH INTEGRITY

Suppliers shall conduct their businesses honestly, transparently and in compliance with applicable laws and regulations.

6.1 Legal compliance

Suppliers shall maintain all licences, registrations, permits, certificates and authorisations required for their activities.

Compliance includes, where applicable:

• Tourism legislation;

• Business and commercial legislation;

• Employment legislation;

• Health and safety requirements;

• Environmental legislation;

• Tax obligations;

• Consumer-protection requirements;

• Data-protection requirements;

• Anti-corruption legislation;

• Sector-specific regulatory requirements.

6.2 Business integrity

Suppliers shall not engage in:

• Fraud;

• False representation;

• Falsification of records;

• Deceptive business practices;

• Concealment of material information;

• Unauthorised use of TOBIZI's name or intellectual property;

• Other dishonest conduct.

6.3 Anti-bribery and anti-corruption

Suppliers shall not directly or indirectly offer, promise, authorise, request or accept:

• Bribes;

• Kickbacks;

• Improper commissions;

• Facilitation payments where prohibited;

• Undue benefits;

• Other improper advantages.

6.4 Conflicts of interest

Suppliers shall disclose actual or potential conflicts of interest that may affect their relationship with TOBIZI.

6.5 Fair competition

Suppliers shall compete fairly and comply with applicable competition laws.

6.6 Gifts and hospitality

Gifts and hospitality must be reasonable, lawful and appropriate and must never be used to improperly influence a business decision.

7. PRINCIPLE 2 — TREAT EMPLOYEES WITH DIGNITY AND RESPECT

Suppliers shall provide a workplace in which workers are treated fairly and with dignity.

7.1 Non-discrimination

Suppliers shall not unlawfully discriminate in recruitment, employment, remuneration, promotion, training, termination or other employment decisions.

7.2 No harassment or abuse

Suppliers shall prohibit:

• Physical abuse;

• Sexual harassment;

• Verbal abuse;

• Bullying;

• Intimidation;

• Threats;

• Humiliation;

• Other degrading treatment.

7.3 Fair employment

Suppliers shall provide workers with clear information regarding applicable employment conditions, remuneration, working hours and responsibilities.

7.4 Wages and working hours

Suppliers shall comply with applicable requirements concerning:

• Minimum wages;

• Working hours;

• Overtime;

• Rest periods;

• Leave;

• Statutory benefits.

7.5 Freedom of association

Suppliers shall respect applicable rights relating to lawful freedom of association and collective representation.

7.6 Health and safety

Suppliers shall provide a safe working environment appropriate to the nature of their operations.

Tourism suppliers shall give particular consideration to:

• Fire safety;

• Emergency preparedness;

• First aid;

• Food safety;

• Water safety;

• Transport safety;

• Equipment safety;

• Adventure-activity safety.

8. PRINCIPLE 3 — RESPECT HUMAN RIGHTS

TOBIZI expects suppliers to respect internationally recognised human-rights principles and applicable national law.

8.1 No forced labour

Suppliers shall not use forced, bonded, trafficked or involuntary labour.

8.2 No child labour

Suppliers shall comply with applicable minimum-age requirements and shall not employ children in prohibited or hazardous work.

8.3 Prevention of exploitation

Suppliers shall take reasonable measures to prevent:

• Human trafficking;

• Exploitation;

• Abuse;

• Forced labour;

• Child exploitation;

• Other serious human-rights violations.

8.4 Customer dignity

Customers must be treated fairly, respectfully and without unlawful discrimination or abuse.

8.5 Personal data and privacy

Suppliers handling customer, employee or business-partner information shall protect such information against:

• Unauthorised access;

• Loss;

• Theft;

• Disclosure;

• Misuse;

• Unauthorised alteration.

Suppliers shall comply with applicable data-protection and privacy requirements.

9. PRINCIPLE 4 — RESPECT LOCAL COMMUNITIES

TOBIZI seeks to promote tourism that creates positive economic, cultural and social value for local communities.

9.1 Respect for local culture

Suppliers shall respect local:

• Customs;

• Traditions;

• Languages;

• Cultural practices;

• Religious sites;

• Heritage;

• Community values.

9.2 Local economic participation

Where reasonably possible, suppliers are encouraged to:

• Employ local people;

• Source locally;

• Work with local guides;

• Support local businesses;

• Promote local products;

• Develop community-based tourism opportunities.

9.3 Community impact

Suppliers shall take reasonable measures to minimise negative impacts on communities arising from tourism activities.

9.4 Cultural and natural heritage

Suppliers shall not knowingly damage, exploit or facilitate the illegal trade of cultural, archaeological or historical resources.

9.5 Vulnerable communities

Suppliers shall take appropriate measures to prevent exploitation of vulnerable individuals and communities.

10. PRINCIPLE 5 — RUN A SUSTAINABLE AND ETHICAL BUSINESS

Suppliers shall seek to operate in a manner that is environmentally responsible, socially responsible and economically sustainable.

10.1 Environmental responsibility

Suppliers should, where relevant to their operations:

• Reduce energy consumption;

• Conserve water;

• Reduce waste;

• Recycle where feasible;

• Prevent pollution;

• Reduce unnecessary plastic;

• Use resources responsibly;

• Protect biodiversity.

10.2 Sustainable tourism

Suppliers shall seek to minimise adverse impacts on:

• Wildlife;

• Marine environments;

• Forests;

• Beaches;

• Rivers;

• Wetlands;

• Protected areas;

• Cultural and natural heritage.

10.3 Animal welfare

Where animals are involved in tourism activities, suppliers shall treat them responsibly and comply with applicable animal-welfare and wildlife legislation.

10.4 Responsible procurement

Suppliers are encouraged to consider the social and environmental performance of their own suppliers and subcontractors.

10.5 Quality and safety

Suppliers shall provide services consistent with applicable professional, legal and safety standards.

11. CUSTOMER PROTECTION

Suppliers have a direct responsibility for protecting TOBIZI customers.

Suppliers shall:

• Provide accurate information;

• Honour confirmed bookings;

• Clearly communicate prices;

• Disclose material restrictions;

• Provide services consistent with their descriptions;

• Maintain appropriate safety standards;

• Respect customer privacy;

• Handle complaints professionally.

Any significant incident involving a TOBIZI customer should be reported to TOBIZI promptly through the designated reporting channel.

12. RESPONSIBLE MARKETING

Suppliers shall ensure that all information provided to TOBIZI is truthful, accurate and current.

This includes:

• Descriptions;

• Photographs;

• Prices;

• Availability;

• Facilities;

• Activities;

• Locations;

• Safety requirements;

• Accessibility information;

• Terms and conditions.

Suppliers shall not:

• Fabricate reviews;

• Manipulate ratings;

• Use misleading photographs;

• Make false claims;

• Hide material restrictions;

• Misrepresent qualifications or licences.

13. INFORMATION SECURITY AND CONFIDENTIALITY

Suppliers that access TOBIZI systems or information shall implement appropriate safeguards.

Suppliers shall:

1. Protect confidential information;

2. Restrict access to authorised personnel;

3. Protect credentials and authentication information;

4. Prevent unauthorised disclosure;

5. Use information only for authorised purposes;

6. Report material security incidents promptly.

Where a supplier processes personal data on behalf of TOBIZI, additional contractual data-processing and security requirements may apply.

14. SUPPLIER AND SUBCONTRACTOR RESPONSIBILITY

Suppliers shall communicate applicable requirements of this Policy to relevant employees, agents and subcontractors.

A supplier shall remain responsible for services outsourced to subcontractors where those services form part of the supplier's obligations to TOBIZI.

TOBIZI may require additional controls for suppliers operating in higher-risk sectors or providing higher-risk activities.

15. COMPLIANCE FRAMEWORK

15.1 Supplier onboarding

Acceptance of this Code may form part of the TOBIZI supplier onboarding and approval process.

Depending on the supplier category, TOBIZI may require:

• Business registration documentation;

• Relevant licences;

• Tourism permits;

• Professional certifications;

• Insurance documentation;

• Health and safety information;

• Environmental permits;

• Identification and ownership information;

• Banking/payment information;

• Other relevant verification documents.

15.2 Supplier risk classification

TOBIZI may classify suppliers according to risk, considering factors such as:

• Nature of services;

• Customer safety exposure;

• Handling of personal data;

• Environmental impact;

• Geographic considerations;

• Use of subcontractors;

• Regulatory requirements;

• Human-rights risks.

15.3 Monitoring

TOBIZI may monitor compliance through:

• Supplier documentation;

• Customer feedback;

• Complaints;

• Incident reports;

• Performance reviews;

• Supplier declarations;

• Reasonable compliance enquiries;

• Other proportionate verification measures.

15.4 Corrective action

Where non-compliance is identified, TOBIZI may require the supplier to implement corrective measures within a specified timeframe.

Corrective actions may include:

• Additional information;

• Staff training;

• Policy improvements;

• Operational changes;

• Remediation of customer impacts;

• Enhanced monitoring.

15.5 Serious violations

Serious or repeated violations may result in:

• Temporary suspension;

• Removal of specific services;

• Deactivation of a supplier account;

• Suspension from the TOBIZI platform;

• Termination of the supplier relationship;

• Referral to competent authorities where legally required.

Any contractual rights and remedies remain applicable.

16. REPORTING CONCERNS

TOBIZI encourages suppliers, workers, customers and other stakeholders to report genuine concerns relating to this Policy.

Concerns may include:

• Fraud;

• Bribery;

• Corruption;

• Human-rights violations;

• Child labour;

• Forced labour;

• Harassment;

• Discrimination;

• Serious safety risks;

• Environmental harm;

• Customer exploitation;

• Data breaches;

• Other material misconduct.

Reports shall be handled through the designated TOBIZI reporting channel.

Reports should be made honestly and in good faith.

TOBIZI does not tolerate retaliation against persons who raise legitimate concerns in good faith, subject to applicable law.

17. ROLES AND RESPONSIBILITIES

17.1 TOBIZI Management

TOBIZI Management is responsible for:

• Approving this Policy;

• Providing appropriate resources;

• Establishing implementation requirements;

• Ensuring appropriate oversight;

• Reviewing significant compliance issues.

17.2 Supplier & Partner Management

The responsible supplier-management function shall:

• Incorporate the Code into supplier onboarding;

• Maintain supplier records;

• Communicate requirements to suppliers;

• Coordinate supplier assessments;

• Monitor relevant compliance indicators;

• Manage corrective actions.

17.3 Technology and Information Security

Where applicable, the responsible technology/security function shall oversee supplier requirements relating to:

• Information security;

• Data protection;

• System access;

• Cybersecurity;

• Security incidents.

17.4 Suppliers

Suppliers are responsible for:

• Understanding this Policy;

• Complying with applicable requirements;

• Communicating relevant requirements internally;

• Maintaining appropriate records;

• Reporting material concerns;

• Correcting identified non-compliance.

17.5 Employees and Representatives

TOBIZ employees and representatives involved in supplier relationships shall conduct themselves fairly, transparently and professionally and shall not request or accept improper benefits from suppliers.

18. RECORD KEEPING

TOBIZ and suppliers shall maintain appropriate records necessary to demonstrate compliance with applicable requirements.

Records should be:

• Accurate;

• Complete;

• Secure;

• Accessible to authorised persons;

• Retained in accordance with applicable legal and contractual requirements.

19. POLICY GOVERNANCE

This Policy shall be reviewed at least annually or earlier where required by:

• Changes in legislation;

• Changes in TOBIZ operations;

• Significant supplier-risk developments;

• Material incidents;

• Changes in technology;

• Changes in recognised standards;

• Changes to TOBIZ's business model.

Amendments shall be subject to appropriate approval under TOBIZ's corporate governance framework.

20. RELATED POLICIES AND DOCUMENTS

This Policy should be read together with applicable TOBIZ policies and contractual documents, including:

1. TOBIZ Supplier Terms and Conditions;

2. TOBIZ Partner Onboarding Procedure;

3. TOBIZ Privacy Policy;

4. TOBIZ Data Protection and Privacy Framework;

5. TOBIZ Information Security Policy;

6. TOBIZ Cybersecurity Architecture;

7. TOBIZ Customer Protection Procedures;

8. TOBIZ Complaints and Incident Management Procedure;

9. TOBIZ Environmental and Sustainability Policy;

10. TOBIZ Anti-Bribery and Anti-Corruption requirements.

21. SUPPLIER DECLARATION AND ACKNOWLEDGEMENT

The undersigned confirms that the supplier:

• Has received and reviewed the TOBIZ Supplier Code of Conduct;

• Understands the principles and requirements applicable to its activities;

• Agrees to conduct its business consistently with this Code;

• Will comply with applicable laws and regulations;

• Will communicate relevant requirements to its employees and subcontractors;

• Will cooperate with reasonable TOBIZ compliance enquiries;

• Will promptly notify TOBIZ of material circumstances affecting compliance;

• Will take appropriate corrective action where non-compliance is identified.

SUPPLIER INFORMATION

Legal Name:

Trading Name:

Business Registration Number:

Business Address:

Supplier Category:

Authorised Representative:

Position:

Email:

Telephone:

DECLARATION

I confirm that I am authorised to represent the supplier named above and that the supplier acknowledges and accepts the applicable requirements of the TOBIZI Supplier Code of Conduct.

Name: ___________________________________________

Position: ________________________________________

Signature: ________________________________________

Date: ____________________________________________

Company Stamp: __________________________________

22. TOBIZI APPROVAL

This Corporate Policy has been reviewed and approved in accordance with TOBIZI's governance framework.

Approved By:

Position / Authority:

Signature:

Date of Approval:

Effective Date:

Next Review Date:

23. FUNDAMENTAL COMMITMENT

TOBIZI believes that responsible tourism begins with responsible partnerships.

Every supplier contributes to the experience of the traveller and to the social, economic, cultural and environmental impact of tourism.

Accordingly, TOBIZI seeks to work with suppliers who share the commitment to:

DO BUSINESS WITH INTEGRITY.
RESPECT PEOPLE.
PROTECT HUMAN RIGHTS.
VALUE LOCAL COMMUNITIES.
BUILD A SUSTAINABLE TOURISM FUTURE.

TOBIZI

Connecting People, Places & Experiences

Supplier Code of Conduct — Corporate Policy

Version 1.0 | September 2026