1. About Henry Schein

Henry Schein Regional Pty Ltd as the trustee for The Henry Schein Regional Trust (ABN: 83 132 312 515) and its related companies (together Henry Schein, we, us, our and other similar expressions) are committed to protecting your personal privacy. This Privacy Statement (the "Statement") tells you how we collect, store, use and disclose your personal information and comply with the requirements of applicable privacy laws ("Privacy Laws"). We encourage you to read this Statement carefully so that you understand our information handling practices.

2. Overview

Henry Schein is committed to protecting the personal information that our employees, customers, prospects, suppliers and vendors have entrusted to us. We collect and use personal information to perform our business functions and provide quality health care products and services to our customers. This Statement applies to personal information in any format or medium relating to employees, customers, vendors and others who do business with Henry Schein in Australia and New Zealand.

By using our website or services, or by otherwise providing us with your personal information, you agree to the terms of this Statement and consent to the collection, use and disclosure of your personal information in accordance with this Statement. You may withdraw your consent at any time, and request that we cease collecting, using or disclosing your information.

This Statement does not apply to those sites and services that do not display or link to this Statement or that have their own privacy statement. Some subsidiaries and affiliates may operate under their own privacy statement. Each time you use our sites and services, the current version of this Statement will apply. If you do not agree to this Statement, please do not use our sites or services.

3. Categories of Personal Information We Collect and Use

We recognize personal information as any information that identifies, relates to, describes, is capable of being associated with or could reasonably be linked, directly or indirectly, with a particular individual or household. Depending on the context of your interactions with Henry Schein, we may collect and use different types of personal information from current and prospective employees, contractors, current and prospective customers and vendors. However, personal information does not include information that has been de-identified or aggregated under applicable law.

4. How We Collect Your Personal Information

Henry Schein receives and uses various types of personal information in order to conduct our day-to-day business activities.

We may collect categories of personal information listed above from the following categories of sources highlighted below:

• Personal information collected directly from you
• Third-party vendors
• Recruitment or talent agencies
• Our distributors
• When you browse or use our website, e-commerce services or social media pages
• Our business partners (non-vendors)
• Joint marketing partnerships
• Publicly available non-government and government data
• Contractors (e.g., consultants, agents and representatives)
• Consumer reporting agencies
• From other individuals, such as friends or family, with proper consent
• Third parties (e.g., data brokers) where permitted by law

Some of this data is collected in the following situations when:

• You apply for a position, or to do business, with our company
• We establish a contractual employment or commercial relationship
• We receive it from other companies within our corporate group
• You provide us with any type of service as a vendor
• When we provide you with any type of service, product or support
• When you browse or use our website, e-commerce services or social media pages

Where we collect your personal information from someone other than you, we will take reasonable steps to notify you of the collection, the purpose, the intended recipients and your rights of access and correction as soon as practicable.

5. Business Uses and Purposes for which Personal Information was Collected

The purposes for which we collect and use your personal information may vary depending on the type of relationship you have with us, such as if you are one of our employees, customers or a website user.

Generally, we collect, use and disclose your personal information to provide you with products and services and as otherwise related to the operation of our business. For more specific details on our disclosures of personal information, see the next section, "How We Share Your Personal Information." Subject to restrictions and obligations of applicable laws, Henry Schein and our vendors may use your personal information for some or all the following business purposes:

• Communicating with you
• Providing our products and services
• Marketing and advertising and promotional purposes
• Analytics, enhancement and personalization
• Security and fraud prevention
• Managing interactions and transactions
• Performing services
• Research and development
• Fulfilling regulatory requirements and quality assurance
• Internal business purposes
• Debugging and performance of systems
• Complying with law
• Registering security interests on the Personal Property Securities Register
• Assessing requests for credit or deferred payment terms, or interacting with you as guarantor
• Conducting credit checks via third party credit reporting bodies
• For any additional purposes to which you specifically consent

In addition, we may collect, use and disclose your personal information for the following additional operational business purposes:

• Affiliates: We may share information with our corporate affiliates and subsidiaries for purposes consistent with this Statement.
• Service providers: We may provide personal information to vendors, contractors, business and service partners or other third parties who provide services to us.
• Vendors and suppliers: If you have a business or professional relationship with us, we will use your information to develop and conduct our business relationship with you and to comply with tax and other regulations.
• Employees and candidates: If you apply for a position via our careers portal, we use your personal information to consider you for employment, administer your account, conduct performance evaluations and comply with legal obligations under Australian and New Zealand employment law
• Customers: We use our customers' information to maintain our commercial relationship, to ensure the proper operation of the day-to-day business, to comply with tax and other regulations and to administer sales and marketing activities.
• Patients of our customers: We provide support services to patients of our customers who use our health care products and services, when required.
• Prospective customers: We use information from prospective customers to respond to their requests for information, products or services and for marketing activities.
• Visitors of company facilities: Some of our buildings have physical access controls and video surveillance systems for security purposes.
• Website and social media users: We collect personal information from visitors and users of our website and social media pages and use the information to manage your account registration, to store your preferences and settings, to provide interest-based advertising, to conduct statistics and to analyze how you use our website and online services.
• Payment processors: If you pay for use of our services, you may use a third-party payment processor to take payment from you. These third parties are properly regulated and authorized to handle your payment information.
• In connection with a merger, acquisition or business transfer: If Henry Schein sells all or part of its business or makes a sale or transfer of its assets or is otherwise involved in a reorganization, merger or transfer of all or a material part of its business (including in connection with a bankruptcy or similar proceedings), Henry Schein may use, transfer or disclose your information to the party or parties involved in the transaction as part of that transaction.
• Service improvement and analytics: We may use your personal information to analyze your usage of the service, improve the service, improve the rest of our company and help us understand user activity on the service, including which pages are most and least visited and how visitors move around the service, as well as user interactions with our emails, and to develop new products and service.
• Comply with Law: In certain circumstances, we may be required to disclose personal information when required by law, when required to protect our legal rights or in an emergency where the health or security of an individual is endangered.
• Use for new purposes: We may use your personal information for reasons not described in this Statement where permitted by law and when the reason is compatible with the purpose for which we collected it. In some cases, we may specifically ask you for your consent to collect, use or share your personal information, such as where required by law.
• At your direction: We may disclose your personal information at your direction or with your consent.

De-Identified/ Anonymized Information. We may de-identify or anonymize the information we collect so it cannot reasonably identify you or your device. The use or disclosure of de-identified or anonymized information is not subject to this Privacy Statement, and we may use and disclose it to others for any purpose, without limitation. We will not take steps to re-identify de-identified information except to test the effectiveness of our de-identification processes.

6. How We Share and Disclose Your Personal Information to Third Parties

At times, Henry Schein engages third-party contractors, service providers and other vendors to help us accomplish our business objectives. When Henry Schein discloses personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. There are other circumstances where we are required by law to disclose personal information to third parties, such as public authorities.

We may disclose your personal information to the following categories of third parties:

• Third-party service providers, which can include providers of services such as data analysis, fraud prevention, information technology and related infrastructure provision, customer service, email delivery, auditing and other services.
• Our subsidiaries and affiliates, including Henry Schein offices and business entities, subsidiaries, affiliates or their successors or assigns, for any of the purposes described in this Statement.
• Payment service providers to perform payment processing functions on our behalf.
• Security, IT service providers and web hosting providers to help host, function and maintain our website and to ensure the safety and security of our website.
• Customer relationship management, advertising/ marketing agencies, to host and assist with our customer relationship management solutions, to send out communications on our behalf, to help us provide a personalized service on our website and provide recommendations as to goods or services you may be interested in.
• Advertising and analytics service providers to carry out analytics and compile statistics to help us improve and tailor our products and services and offer more personalized experiences to our customers.
• . Loyalty Scheme management, helps us manage our loyalty scheme including tracking monthly spend, tracking coupon eligibility, rebates and eligibility for business solutions and pricing discounts.Online signing, where legal documents need to be signed to enable us to provide a service, we employ other companies to provide an online e-document signing service.
• Credit reference agencies, law enforcement and fraud prevention agencies to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime in accordance with applicable law.
• Professional advisors, including legal advisors, tax and accounting advisors and business consultants, enable our advisors to provide their business services to us.
• Social media providers and advertisers, for marketing and analytics purposes, and to provide social media features on our website.
• Suppliers of our products, in limited circumstances, to administer the supply and sale of our products – for example, to claim rebates and for warranty purposes.
• Prospective buyer/seller, in the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser's adviser and will be passed to the new owners of the business.
• External parties, including external auditors, external agencies and public authorities or government bodies, as required by law.
• Internal personnel and departments, including executives, board of directors, finance and accounting teams, operation and maintenance teams, legal, compliance, regulatory-quality teams and other internal employees on a need-to-know basis.
• Authorized business contacts, such as B2B customers, business partners, customer service representatives and sales/marketing teams, representatives or agents.
• Other authorized third parties, including trade unions or work councils or those to whom you authorize us to disclose your personal information in connection with products or services we provide to you.

Notifiable Data Breaches: If a data breach occurs that is likely to result in serious harm to you, we are required to notify the relevant privacy regulator and affected individuals where required by applicable law as soon as practicable. We will assess any breach promptly and, where required, provide you with recommendations on steps you can take to protect yourself. If you believe your personal information held by us may have been compromised, please contact our Privacy Officer immediately using the contact details at the end of this Statement.

Unsolicited Personal Information: If we receive personal information about you that we did not request, we will promptly assess whether we are permitted to retain it. If we are not, we will destroy or de-identify it as soon as reasonably practicable. If we are permitted to retain it, we will handle it in accordance with this Statement.

7. Children's Privacy

Our services are not directed to children under 16. We do not request, or knowingly collect, any personal information from children under 16. If a parent or guardian becomes aware that his or her child has provided us with personal information without their consent, please contact us. If we become aware that a child has provided us with personal information without appropriate consent, we will promptly delete such information from our files. We do not use personal information about children for profiling or targeted advertising purposes.

8. Security

Henry Schein is committed to the security, confidentiality, and integrity of personal information in accordance with legal requirements. However, no data transmission over the Internet, mobile networks, wireless transmission or electronic storage of information can be guaranteed 100% secure. We take all reasonable precautions designed to keep personal information secure against unauthorized access and use, and we periodically review our security measures. We are committed to processing personal information in a secure manner and have put in place specific technical and organizational measures designed to protect the personal information we hold. Our employees participate in a training and compliance program and are required to safeguard your information.

9. Your Data Protection Rights and Choices

Under certain circumstances, you may have the privacy rights described in this section. Depending on where you are located, you may have certain rights under applicable privacy laws over the personal information we hold about you. These may include:

• Right of Access: You have the right to request access to the personal information we hold about you and to be told the purposes for which we hold and use it. We will respond to your request within 30 days. We may charge a reasonable fee to cover our costs in processing your request.
• Right to Correction: You have the right to request correction of personal information we hold about you that is inaccurate, incomplete or out of date. We will use all reasonable efforts to correct your information and will respond to your request within 30 days.
• Right to Withdraw Consent: If your personal information is processed on the basis of your consent, you have the right to withdraw your consent at any time by contacting us. Withdrawing your consent will not affect any processing conducted prior to your withdrawal.
• Right to Object to Direct Marketing: You have an absolute right to opt out of receiving direct marketing communications from us at any time, without charge. You may exercise this right by contacting us using the details below or by following the unsubscribe instructions in any marketing communication we send to you. We will action your request promptly.
• Rights in Relation to Automated Decision-Making: Where we use automated processes to make decisions that significantly affect your rights or interests, you have the right to request information about how that decision was made.
• Right to Make a Complaint: You have the right to complain to us about how we have handled your personal information, and to escalate your complaint to the relevant privacy regulator if you are not satisfied with our response. See the "Complaints" section of this Statement for further details.
• Denying Your Request: We may be unable to fulfil your request where:
• The request impacts on the privacy of other individuals;
• The request is frivolous;
• There are existing or anticipated legal proceedings; or
• Applicable law permits or requires us to refuse the request.

If we are unable to fulfil your request, we will explain the reason for our decision including any relevant exceptions under applicable Australian or New Zealand privacy law. We do not charge a fee to process your rights requests unless permitted under applicable Australian or New Zealand law.

Your Marketing Preferences: We may periodically send promotional materials or notifications related to our services. If you no longer wish to receive these, you may unsubscribe from marketing emails by following the instructions included in those communications. We will comply with your request promptly.

10. Automated Decision-Making

Henry Schein may use automated tools or analytics to assist in operational processes. However, we do not currently rely solely on automated or AI-driven decision-making that produces legal or similarly significant effects on individuals without appropriate human oversight.

11. International Data Transfers

The personal information we process may be accessed from, processed or transferred to countries other than the country in which you reside. Those countries may have data protection laws that are different from the laws of your country or jurisdiction. Where the need for such a transfer arises, we will put appropriate safeguards in place to protect your personal information and to make sure that these transfers comply with the relevant applicable privacy laws. In particular, when your data is transferred to third-party service providers, we establish and implement appropriate contractual, organizational and technical measures with such service providers.

12. Anonymity & Pseudonymity

Where it is lawful and practicable to do so, you have the option of interacting with us anonymously or by using a pseudonym. For example, you may browse our website or make a general enquiry without identifying yourself.

However, in most circumstances, we will need to collect your name and contact information to provide you with our products, services or credit facilities. Where it is not practicable for us to deal with you anonymously or by pseudonym, we will let you know.

13. Technology and Online Tracking

Our website uses cookies and similar technologies to improve your browsing experience and analyze site usage. These technologies may collect information about your device and how you interact with our website to help maintain functionality, improve performance and support our services. You can manage your cookie preferences at any time through your browser settings, although disabling certain cookies may affect the functionality of some parts of our website.

14. Links to Other Websites

We may provide links to other websites, applications or services that are not owned or controlled by us. We are not responsible for the privacy and security practices of other websites, applications or social media platforms or the information they may collect (which may include IP address or device identifiers). You should refer to such third parties' privacy policies on their sites to determine their respective privacy practices. Links to any other websites, applications, social media platforms or content do not constitute or imply an endorsement or recommendation by us of the linked website, application, social media platform and/or content.

15. Complaints

We are committed to constantly improving our procedures so that personal information is treated appropriately. If you feel that we have failed to deal with your personal information in accordance with this Statement or in accordance with the Australian Privacy Principles, please contact us, using the details listed below, so we have an opportunity to resolve the issue to your satisfaction. We will log your complaint and our Privacy Officer will:

• Listen to your concerns and grievances;
• Discuss with you the ways in which we can remedy the situation; and
• Put in place an action plan to resolve your complaint and improve our information handling procedures if appropriate.

We will respond to your complaints within a reasonable time. If you are not satisfied with the handling of a complaint, you may complain to the Office of the Australian Information Commissioner.

If you are located in New Zealand and you are not satisfied with our response, you may complain to the Office of the New Zealand Privacy Commissioner.

16. Third-Party Advertising

We use third-party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use our website and other websites or online services. You may receive advertisements based on information relating to your access to and use of our website and other websites or online services on any of your devices, as well as on information received from third parties. These companies place or recognize a unique cookie on your browser (including through the use of pixel tags). They also use these technologies, along with information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop.

Our website may use cookies and similar tracking technologies to collect information about your interactions with our website, including browsing behavior and device information. Cookies help us improve website functionality, analyze website usage, and support advertising and marketing activities. You can control or disable cookies through your browser settings, although doing so may affect the functionality of certain parts of the website.

If you would like more information about this practice and to learn how to opt out of it in desktop and mobile browsers on the particular device on which you are accessing this Statement, please visit www.youronlinechoices.com.au or adjust your browser or device settings.

17. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes as described in this Statement, including providing you with our services, or for as long as we have another legitimate business purpose to do so. When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, our legal and regulatory obligations and positions, retention periods provided by law and the relevant statute of limitations.

18. How We Store Personal Information

We take all reasonable steps to keep secure any personal information which we hold about you and to protect your personal information from loss, misuse or unauthorised alteration or access. Any personal information you provide to us is stored on secure servers. Access to personal information is limited to those of our personnel who specifically need it to carry out their business responsibilities. We implement both technical and organisational security measures to protect personal information, including encryption, access controls and regular security assessments. We also maintain physical security procedures to manage and protect the use and storage of records containing personal information. To help us protect your privacy, you should maintain the secrecy of the access credentials (i.e. username and password) you use to access and use our website.

19. Marketing

If you consent to receive information and marketing from us, we may use your personal information to advise you of new products and marketing initiatives that we think may be of interest to you. This may include product and service offerings, newsletters and general information about us. If you no longer wish to receive marketing communications from us, you can ask to be removed from the relevant circulation list by contacting us using the contact details at the end of this Statement, and requesting that you no longer receive such communications from us. We never disclose personal information to a third party for the purpose of allowing them to direct market their products or services to you, unless you have expressly consented to that disclosure. You have the right to opt out of direct marketing at any time, without charge.

20. Collection of Credit Information

If you are a customer and we give you credit, we may also collect credit information or credit eligibility information about you. Credit information and credit eligibility information are particular types of personal information regulated in Australia by Part IIIA of the Privacy Act 1988 (Cth) and the Credit Reporting Privacy Code.

The credit information and credit eligibility information we may collect about you includes:

• Identification information
• Credit liability information
• Repayment history information
• Details of any request for your information that we receive from a credit provider, mortgage insurer or trade insurer
• The type and amount of credit sought
• Default information
• Payment information
• Court proceedings information
• Personal insolvency information
• Information about any serious credit infringement by you
• Information disclosed in reports obtained from credit reporting bodies
• Information from property searches; and
• Information provided by trade references

We generally collect your credit information directly from you, for example when you complete our Commercial Account Application Form. We may also collect credit information from third parties where you have consented, including from Equifax and from publicly maintained records.

We collect this information directly from you, for example through our Commercial Account Application Form, or from third parties where you have consented. We use this information to assess whether to extend credit to you or to a customer where you have provided a personal guarantee.

21. Serious Invasion of Privacy

Henry Schein is committed to handling your personal information in a way that respects your privacy. If you believe your privacy has been seriously invaded in connection with our handling of your personal information, please contact our Privacy Officer immediately using the contact details at the end of this Statement.

22. Updates to this Privacy Statement

Henry Schein may update this Privacy Statement from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. The “Last Updated” date at the end of this Statement indicates when it was most recently revised. Any changes will take effect when the updated Statement is posted on our website.

23. Contact Us

If you require more detailed information about our information handling practices or if you have any concerns about our handling of your personal information, you can contact Henry Schein’s Privacy Officer by email: privacy@henryschein.com.au. We will endeavor to respond to your concerns as quickly as possible.