Privacy Policy

By conducting business with us, you agree that your information will be handled as described in this Privacy Policy. This notice explains how and why Latitude Energy Group uses personal data when you visit our website, engage with our services or otherwise communicate with us. We handle personal information in accordance with applicable data protection laws, including, where relevant, the General Data Protection Regulation (EU) 2016/679 ("GDPR").

This Privacy Policy sets out how Latitude Energy Group:

• collects and creates Personal Data;
• categorises the Personal Data that it processes;
• discloses Personal Data;
• transfers Personal Data internationally;
• applies security measures to protect Personal Data.

Additionally, this Privacy Policy describes:

• the lawful basis for our processing of Personal Data;
• the purposes of such processing;
• our principles of data accuracy, data retention and data minimisation;
• the rights of data subjects; and
• contact details for enquiries and the exercise of data protection rights.

Latitude Energy Group, acting as a data controller, may process information about you, your directors, officers, employees, affiliates and agents that may constitute personal data under applicable law ("Personal Data").

This Privacy Policy may be updated from time to time and you are encouraged to review it periodically. For any question relating to this Policy or its implementation please contact us at privacy@latitude-energy.com.

"Personal Information" means any information relating to an identifiable person who can be directly or indirectly identified, in particular by reference to an identifier such as a name, identification number, location data or online identifier.

"Sensitive Personal Data" means personal information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data, health data or data concerning a natural person's sex life or sexual orientation.

We may collect and generate information about you including your name, business contact details, company affiliation, professional role and, where relevant, information required to conduct counterparty due diligence.

We process your personal information to fulfil our contractual obligations, conduct our commercial activities in the sourcing, supply and trading of LNG, crude oil and refined petroleum products, comply with international laws and sanctions, perform know-your-counterparty and anti-money-laundering checks, and meet requirements imposed by regulators, banks and other third party stakeholders. We may also use your information for internal purposes such as audit, data analysis, statistical and research purposes and to monitor activities as permitted or required by applicable law.

We do not share your information with non-affiliated entities for marketing purposes. We may, however, share your information as follows:

• With our affiliates. As permitted by law, we may share your information with our affiliated entities within the Latitude Energy Group.
• Partners and financiers. We may provide your information to carefully screened entities that work with us in our business activities.
• Service providers. We may share your information with third party service providers acting on our behalf as processors, subject to written contracts imposing appropriate security standards.

Third parties we may share your information with include:

• consultants and professional advisors, including legal advisors and accountants;
• banks and payment processors in relation to business you conduct with us;
• IT support, website and data hosting providers and administrators;
• analytics providers;
• courts, court-appointed persons or entities, receivers and liquidators;
• business partners and joint ventures;
• insurers; and
• governmental departments, statutory and regulatory bodies.

We may also share your information:

• In business transfers. If we are acquired, merged, sell or reorganise part of our business or as part of an insolvency process.
• To protect us and others. Where necessary to investigate or prevent illegal activity, suspected fraud, threats to safety, or violations of our agreements or this policy.
• In response to legal process. To comply with the law, a court order or other regulatory process.
• Aggregate or anonymous information. For research and analytical purposes.

As an internationally active group, Latitude Energy has affiliates and group companies in several jurisdictions and we may share your information with them, including where support functions are provided centrally, to service client needs across offices, for authorisations and approvals with relevant decision makers, for reporting purposes, or where systems are provided on a shared basis such as compliance.

Access rights between Latitude Energy Group companies are limited and granted only on a need-to-know basis, depending on job function and role.

We will only collect and process your information where we have a legal basis to do so. Legal bases include your consent, the performance of a contract, compliance with a legal obligation (including sanctions and anti-money-laundering requirements), and our legitimate interests in conducting our commodities business in a safe, compliant and commercially sound way.

If you have any question about the legal basis on which we process your information, please contact privacy@latitude-energy.com.

We retain your information while you use our services, after you use our services and as needed to conduct our business and meet regulatory, legal and accounting requirements. This includes data you or others provide to us and data generated or inferred from our business with you.

Latitude Energy Group takes the security of all data, especially your personal information, seriously. We implement security features and procedures designed to protect your information against unauthorised access or loss. You should be aware, however, that transmission of information via the internet is never completely secure. You should take reasonable steps to protect your credentials, choose robust passwords and keep log-in details private.

As an internationally active group, information we collect from or about you may be transferred across borders, including to jurisdictions that do not provide the same level of data protection as your country of residence. Where such transfers take place, we take appropriate measures — including data processing agreements and, where required, standard contractual clauses — to safeguard your information.

Our website may contain links to and from third party websites. These websites have their own privacy policies and we do not accept responsibility or liability for those policies. Please review the privacy policies of those third parties before submitting any personal data to their websites.

Subject to applicable law, you have the right to:

• request access to the information we hold about you;
• request deletion of your information (right to erasure);
• request that we correct or update your information;
• restrict or object to our processing of your information;
• lodge a complaint with your local data protection authority.

If you request that we remove your information, we may retain some information for specific reasons — such as to resolve disputes, meet legal or regulatory obligations, or as retained in secure back-ups.

Our website may use cookies to distinguish you from other users and to help us improve the browsing experience. A cookie is a small file of letters and numbers stored on your browser or device.

Using cookies enables us to:

• recognise you when you return to our site;
• understand how often and when the site is visited;
• access traffic-source information;
• determine the start and end of a session.

Third parties may also use cookies over which we have no control. You can block cookies by activating the setting on your browser that refuses some or all cookies; however, if you block all cookies (including essential cookies) you may not be able to access all or parts of our site.

The data controller in respect of the personal data described in this Policy is Latitude Energy Group. If you have any questions, concerns or feedback relating to this Privacy Policy or its implementation, or if you wish to exercise any of your rights, please contact us at privacy@latitude-energy.com.

This Privacy Policy may be updated or revised from time to time and you are encouraged to review it periodically.