PRIVACY POLICY AND CUSTOMER PRIVACY 2025 Data Privacy TMX has established a privacy policy and a set of procedures that govern practices relating to collection, usage, and retention of personal information. These are based on global privacy principles in relevant jurisdictions. The privacy policy outlines a set of requirements to guide the development of privacy procedures and as a guide to inform employees and the public of its initiatives to protect the privacy of personal information. The practices set out in the privacy policy and accompanying standards and procedures seek to balance the right to privacy of individuals with respect to their personal information and TMX始s need to collect, use or disclose personal information for legitimate business purposes that a reasonable person would consider appropriate. Our privacy policies apply to our entire operations, under the oversight of the privacy compliance team. Our privacy policies are embedded in our enterprise risk and compliance management program and compliance with our privacy policies is part of the TMX employee code of conduct. The employee code of conduct contains provisions for confidential data handling. TMX largely relies on self-assessments to monitor privacy compliance. All incidents involving the handling of personal information are reported to our privacy compliance staff. TMX has implemented a vulnerability management program to ensure early identification and remediation of security vulnerabilities. Customer Privacy TMX obtains informed consent (including regarding the nature of information collected) for the personal information it uses, collects, and discloses in the course of its operations, except to the extent otherwise required or permitted by law. Individuals may give, withhold, or withdraw their consent to TMX始s use, collection, and disclosure of their personal information, where applicable. The following is available to individuals with regard to how their personal information is collected, used, retained, and processed, as applicable: an opt-out option is available; an opt-in consent is required where necessary; an ability to request access to data held by TMX Group is available; an ability to request their data be corrected is available. Our customer privacy policies are enforced by our Chief Privacy Officer. REPORT CONTENTS ABOUT THIS REPORT SUSTAINABILITY STRATEGY SUSTAINABILITY GOVERNANCE PROSPERITY PLANET PEOPLE APPENDICES 53 | TMX GROUP 2025 ANNUAL SUSTAINABILITY REPORT
RkJQdWJsaXNoZXIy MjgzMzQ=