TELUS Business Connect Mobile App Privacy Statement

This Privacy Statement applies to TELUS Business Connect Mobile App (the “App”)]. This App is offered to you as part of a product or service that your employer or another third party has engaged TELUS to provide to them. This Privacy Statement describes TELUS’ general practices relating to the collection, use, disclosure and other processing of personal information collected from and about you, the end-user, through your interaction with the App. Personal information that TELUS uses for its own purposes is not subject to this Statement.

With the exception of the below description of the personal information collected and processed by and through the App and its purposes, this Statement does not apply to TELUS team members who use this App. TELUS team members should refer to the TELUS Team Member Privacy Commitment, available on the TELUS intranet, to understand how their personal information is processed by TELUS.

When you download the App, and as you interact with it, TELUS will collect certain personal information about you.

This information may be shared with or accessible by your employer or another third party who engaged TELUS to provide a product or a service to them, as described below in more detail.

We may de-identify personal information for a variety of reasons, including to safeguard it, or to conduct analytics that don’t require personal information.

We may disclose your personal information in the following ways.

TELUS has implemented policies and procedures to protect personal information. TELUS uses security safeguards appropriate to the sensitivity of personal information. TELUS reviews its security policies and procedures on a regular basis and updates them as needed to maintain their relevance. TELUS makes reasonable security arrangements to protect personal information from and against risks, such as loss or theft, as well as unauthorized access, collection, use, disclosure, copying, modification, disposal, and destruction. The methods of protection include physical measures, organizational measures, and technological measures.

TELUS will retain your personal information for as long as necessary to provide the products and services your employer or another third party has engaged TELUS to provide to them. Following the termination of the contract with your employer or third party, TELUS will delete or, where possible and if requested by your employer or third party, return your personal information in accordance with the terms of their contract, unless retention is permitted by applicable laws and necessary for TELUS’ legitimate interest, or deletion is prohibited by law.

TELUS may transfer your personal information to TELUS entities and third parties who process personal information outside of the jurisdiction where you are located. These cross-border data transfers vary depending on the service, product, or features you are using. We implement safeguards required under applicable law to enable these cross-border transfers. For example, we may rely on standard contracts, or seek authorization from the relevant supervisory authorities.

In particular, for transfers outside of the European Economic Area, we rely on the European Commission’s approved Standard Contractual Clauses (“EU Standard Contractual Clauses”), which can be accessed

here

. For transfers from the United Kingdom, we rely upon the International Data Transfer Addendum to the EU Standard Contractual Clauses, which can be accessed

here

.

Local laws may provide you with certain rights with regard to your personal information such as the right to access and obtain a copy of the personal information we hold about you, the right to update and correct your personal information, the right to delete your personal information, the right to restrict or object to the processing of your personal information, and the right to have certain personal information transferred to another organization.

If you wish to exercise any of these rights, first contact your employer or other third party. If we receive a rights request from you, we will forward the request to our business customer, that is your employer or other third party, to fulfill.

If you have questions that are not addressed in this Statement, you can email us at data&trustoffice@telus.com.

TELUS will update this Statement periodically to reflect changes to our privacy practices and other factors. We will notify you when we make any material changes to this Statement.