The General Data Protection Law (Law 13,709, of August 14, 2018, "GDPL") establishes several requirements and obligations that must be implemented for the activities of processing personal data. There are several measures that need to be adopted by the treatment agents to demonstrate that these activities are carried out considering the best practices in relation to the treatment and focusing on the protection of the holder.

This document aims to establish guidelines for the processing of personal data of interested parties, considering:

• Processing of personal data in the appropriate manner.
• Protection of personal data from access or improper processing.
• Avoid the risk of leakage or other internal faults that may cause damage to the holders of this data.

Data is collected when entered or voluntarily submitted by individuals when completing the forms required to contact Wise for:

• Demands related to our products.
• Complaints.
• Requests for press.
• Requests for accreditation as a company supplier.
• Manifestations of interested parties.
• Any other communications made by the Wise website.

Wise only receives and/or collects the following types of personal information:

1. Personal information to enable communication between people and Wise.
2. Navigation data.

Data provided by peaple to:

• Contact us through our website.
• Request some information regarding products, services and initiatives.
• File a complaint.
• Contact us for press purposes.
• Register as prospective supplier.

The data normally collected are:

• Full name.
• Email address.
• Physical address.
• Phone number.
• Date of birth.
• CPF/CNPJ (social security number/company registration number).

It is possible that people may also send us data related to your application for selection processes. However, in the case of applications, the website will redirect them to a third party website or application. Once you are redirected to a third party website or application, the privacy practices will be governed by the privacy policy and terms of use of those third parties. Therefore, we recommend that you carefully read the applicable privacy policies.

Data related to access and activity on the Wise website, such as:

• IP address.
• Operating system of the device used.
• Browser of the device.
• Pages of the site accessed.
• Interactions performed.
• Technical data, such as URL information.
• Data from cookies.

The types of devices that are being used to access or connect to the website.

Attributes of the device.

We may use the data collected to meet, inter alia, the following purposes:

The data may be stored on our own servers or third parties contracted for this purpose, whether allocated in Brazil or abroad, in accordance with applicable law, may also be stored by means of cloud technology and/ or other technologies that arise in the future, always aiming at the improvement and improvement of our services.

Wise stores the data for as long as necessary for the purposes for which it was collected or as long as we are required to store it, in accordance with applicable law. The data are stored in a safe and controlled environment, for a minimum period of 6 (six) months, in accordance with the Marco Civil da Internet, observing the level of technique available.

We may record the activities performed on the website, creating, where possible and applicable, logs (logs of activities performed on the websites, applications, website and services) that will contain: the IP address of the device used, access and actions performed on the website, date and time of each action performed and information about the device used, such as operating system version, browser, and geolocation. We may use certain monitoring technologies for activities carried out on the platform, such as:

Cookies - A cookie is a data file that can be placed on a device when it uses the website. Cookies can be used for various purposes, including remembering users and their preferences, and tracking their visits and activities related to the site. The site may also use locally stored objects to provide certain content, such as video on demand, video clips or animation. The cookies used cannot be disabled, removed or blocked. Please note that if someone tries to disable or remove cookies, some parts of the website may stop working and your ability to limit cookies will be subject to your browser settings and limitations.

Analytics tools - these tools may collect information such as how people visit the site, including which pages and when they were visited, as well as other sites that were visited before, such as: hotjar (tool that aims to analyze the purchase funnel - how many customers accessed x logaram x bought), navigation heatmap (classifies the areas with the highest volume of clicks), NPS (analyzes all navigation in a confidential way, that is, the platform returns only a random ID and the volume of accesses).

All technologies used by Wise will always respect the terms of this policy.

Our database is our property and responsibility, and its use, access and sharing, when necessary, will be carried out within the limits and purposes of our business. We share the data only with third parties who assist us to meet the demands (questions, complaints and other requests) requested by people in our communication channels and with those necessary to carry out our business normally, within the previous paragraph. We may also provide personal information to third parties to keep our systems secure, or where necessary, to protect personal data or our best interests. We may also disclose personal data to law enforcement and government authorities, or authorized third parties if, and to the extent that we are required or authorized to do so, by law or court order. In general, data sharing occurs on the following occasions:

• Data sharing between Wise group units.
• Sharing with third parties (service providers, providers).
• Data sharing to comply with court order.

Please be advised that some of the Wise Group units and service providers with whom we share personal data may be located outside of Brazil. If your data is transferred to another country, Wise will take steps to ensure that your personal information remains protected in accordance with this Privacy Policy, subject to applicable laws in the countries to which it was sent.

As established by the GDPL, individuals have rights and guarantees regarding personal data. Wise provides mechanisms, detailed below, for clarity and transparency to exercise rights. When necessary, people can contact the Wise team for questions and requests. Rights include:

• Confirmation of processing and access to personal data: Individuals may request details about the processing and/or copying of personal data stored by Wise.
• Alteration or correction of incomplete, inaccurate or outdated data: if someone wants to change the data, or has reason to believe or suspect that any personal data we have is incomplete or wrong, please contact us.
• We store and make available to people your history of interactions with us: anyone can contact, as well as Wise is authorized to contact people to ask your questions, respond to complaints and suggestions through email, phone or the website. The conversations are stored by Wise, which may make them available to use their content as evidence in court or in other cases provided for in law.

Please contact us for any questions or other requests about your rights.

Wise employs all necessary precautions and technical measures to protect personal data. Our efforts are aimed at mitigating risks of destruction, accidental or unlawful loss, alteration, disclosure or unauthorized access, or any other form of unlawful or unauthorized or inappropriate treatment. We rely on strict access controls to Information Technology systems to protect data against a variety of threats, including:

• Loss or theft.
• Unauthorized access, use or disclosure.
• Improper copying, modification or tampering.
• Improper retention or destruction.
• Loss of integrity.

Wise may change the provisions of this Privacy Policy at any time. Each time the policy is materially amended, those changes will be valid, effective and binding after, alternatively:

• Loss or theft.
• Unauthorized access, use or disclosure.
• Improper copying, modification or tampering.
• Improper retention or destruction.
• Loss of integrity.

Be sure to check out the latest version available on the website regularly.