The personal information we seek in the application form is used to help us assess your suitability for the roles for which you are applying and to manage the recruitment process. For purposes of this Notice, “personal information” means any information about you regardless of whether it is held in paper, electronic or any other format. The following provides examples of the categories of personal information we may collect and how we process such information.

- Identification Information Type of Information: Name, date of birth, applicant identification number, government-issued identification number (e.g., driver’s license number, state identification card, passport, national identification number, Native American tribal document, birth certificate, social security number, etc.), including information embedded in the machine readable zone, residency and work permit status, and other similar documents used to verify work eligibility. Primary Purpose for Collection and Use of Information: We process this type of information for our legitimate business purposes, including general human resources administration and to comply with legal obligations, such as employment eligibility verification laws, identity authentication, and fraud prevention. - Contact Information Type of Information: Home address, telephone number(s), e-mail address(es), beneficiary and emergency contact details, and other similar contact information. Primary Purpose for Collection and Use of Information:We process this type of information for our legitimate business purposes, such as to review, assess, recruit, consider or otherwise manage applicants and candidates, and to make contact with you in relation to your application.

- Health Related Information Type of Information: Information about job-related medical conditions that impact your ability to perform your job with or without a reasonable accommodation, and health and sickness related information related to reasons for time away from work. Primary Purpose for Collection and Use of Information: We process this type of information for our legitimate business purposes (where permissible and in accordance with applicable law), including ascertaining your fitness to perform your job duties with or without a reasonable accommodation, managing absences from work, and complying with legal obligations related to health and safety. - Demographic Data Type of Information: Please note, under federal and some local laws, we are required to collect and report certain demographic workforce data to federal, state and or local government agencies for civil rights enforcement purposes. Your submission of this information is voluntary. This includes date of birth and gender as well as more sensitive personal information including information relating to racial and ethnic origin, religious, political, or philosophical beliefs, and trade union membership. We may also ask you to voluntarily self-identify whether you belong to additional protected classes (disability status, sexual orientation, veteran status, etc.), to promote diversity, equity, and inclusion within the company. Primary Purposes for Collection and Use of Information: We process this type of information for a variety of reasons, and this will vary in the different jurisdictions in which we operate. In some jurisdictions, we are required to collect and report certain demographic workforce data to federal, state and or local government agencies.We also process this type of information for our legitimate business purposes (where permissible and in accordance with applicable law), including promoting diversity, equity, and inclusion within the company.

- Recruitment Type of Information: Educational and professional background information, such as academic and professional qualifications, education, CV/Resume, reference letters, interview notes, credit history and criminal records data (utilized for background check and vetting purposes where permissible and in accordance with applicable law). We process this type of information for our legitimate business purposes, including determining eligibility for hiring, verifying references and qualifications, and making business decisions about your recruitment or employment. We also process information for background check and vetting purposes to comply with any statutory or regulatory requirements. - Qualifications and Training Type of Information: We collect information from individuals concerning the training that they have received. Where applicable, we also collect information related to licensing, certifications, and language skills. Primary Purposes for Collection and Use of Information:We process this type of information for our legitimate business purposes, including ensuring we have appropriate staffing and recording qualifications of applicants, and in some cases complying with any statutory or regulatory requirements.

- Video, Voice, and Images Type of Information:Audio visual information, such as photographs, video images like closed-circuit television (“CCTV”) as part of a remote or on-site interview process. Primary Purposes for Collection and Use of Information:We process this type of information for our legitimate business purpose in identity authentication, verification, and fraud prevention purposes, including during the virtual recruitment process. - Facial Recognition Type of Information: We may collect biometric information about you through the use of a facial recognition tool in the context of your job interview conducted remotely. Primary Purposes for Collection and Use of Information: We process this type of information based on your explicit consent and in accordance with applicable privacy laws.

How We Collect Your Personal Information Most often, we collect personal information from you directly, including through the application and recruitment process. In some cases, we also collect personal information about you from third parties, such as employment agencies, former employers, and personal and professional references, or public sources. For example, to the extent permitted by law, we may collect information from public social media sources, such as your LinkedIn profile. We may also conduct lawful background screenings, to the extent permitted by law, through a third-party vendor for information about your past education, employment, credit and/or criminal history. Before we conduct a background check, you will be provided with a separate acknowledgement and authorization form. If you fail to provide certain personal information when requested, we may be prevented from complying with our legal obligations in relation to the recruitment process.

The application form and the personal information you have included will initially be held on a CRM database that is stored on a secure cloud server system, located in the U.S. and operated by a third party vendor, currently Avature. The application will then be assessed by the hiring team supported by automated tools that help us give you an answer sooner on how the position’s requirements match your skills. Certain personal data of applicants considered potentially suitable, will be transferred to a secure assessment platform operated by Aspiring Minds, located in the U.S. (the rest remaining on the original CRM database for the time being) and those candidates will be invited to participate in a series of on-line tests to assess relevant skills. The results of those tests using an automated system will be sent to hiring team and successful applicants will be sent a job offer. Any personal information collected through Aspiring Minds assessment platform will be stored in the U.S. The personal data of applicants who accept a job offer will be transferred to our secure, cloud-based Workday database, located in Ireland. When personal data is transferred outside Canada, please be advised that such personal data is subject to the laws of that country and may potentially be accessible by the Courts, law enforcement and security or intelligence authorities of that country.

The servers on which your personal data is stored are located in Ireland, Europe and in the U.S. However Talent Acquisition (“TA”) managers, team leaders, members of TELUS Digital’s sourcing, recruiting, hiring, HR and legal teams who participate in or supervise the recruitment process will have access to the servers and some of these personnel, are themselves based outside of Canada. Further, your information will be made available to other companies in the TELUS Digital group with open positions for which you have applied. Other companies in the TELUS Digital group include the following: TELUS Digital Philippines Inc. (Philippines); TELUS Digital Holding (U.S.A.) Corp. (United States); TELUS Digital (U.S.) Corp (United States); Xavient Digital LLC (United States); Voxpro Group LLC (United States); Transactel S.A. (Guatemala); Transactel El Salvador S.A. de C.V. (El Salvador); CallPoint New Europe EAD (Bulgaria); CallPoint New Europe SRL (Romania);Voxpro Limited (Ireland); TELUS Digital (Chengdu) Digital Service Co. Ltd. (China); Xavient Software Solutions (India) Pvt. Ltd. (India); Xavient Infotech Pvt. Ltd. (India);

TELUS Digital may conduct a background verification during the employment application process. In Canada, where permitted by applicable law, which may vary from state to state, when you seek employment, such background verification may include, among other items, a criminal history report, a credit report, or both. If TELUS Digital seeks to obtain your criminal history or credit report, TELUS Digital will provide you advance notice and seek your consent, as required by applicable law. TELUS Digital will use such information consistent with applicable state and federal law, including the Fair Credit Reporting Act.

Some jurisdictions give you a right to make the following choices regarding your personal information: Request access to and obtain a copy of the personal information we have about you, or confirmation that we have information about you, including information about how we process your personal information; Request correction (or rectification) of any inaccurate or incomplete personal information we have about you; Request erasure (or deletion) of your personal information, subject to certain limitations and exceptions; Restrict or object to the processing of your personal information under certain circumstances; and If applicable, request to receive access to your personal information in a portable, machine-readable format. Under certain circumstances you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal information, including profiling, by us and we may be required to no longer process your personal information. This may include requesting human intervention in relation to an automated decision so that you can express your view and to contest the decision. If we rely on your consent to process your personal information, you may revoke your consent to such processing at any given time. Please note, not all these rights are absolute, and they do not apply in all circumstances. In some cases, we may limit or deny your request. This may occur because the law permits or requires us to do so. If you want to exercise any of the above rights, please contact us as indicated in the “Contact Information” section below. We do not discriminate against individuals that exercise state-conferred rights. Please note that in order to fulfil your request, we may need you to provide certain personal information to verify your identity. We may verify your identity in person, by phone call, or via email. Depending on your request, we will ask for information such as your name, your applicant ID, or the name of your direct supervisor. We may also ask you to provide a signed and declaration confirming your identity. In some cases, you may designate an authorized agent to submit a request on your behalf to access, correct, or delete your personal information. To do so, you must (1) provide that authorized agent written, signed, and notarized permission to submit such request, and (2) verify your own identity directly with us. If you are submitting a request on behalf of yourself or of another person, please contact us by: Sending an email to: DPO.EU@telusdigitalcom Completing an online request form at this link: https://submit-irm.trustarc.com/services/validation/7478848e-c349-4fb1-8f04-8d3d39c7ff3f

In addition, you have the right to contact the data protection authority in your country if you consider that TELUS has infringed your privacy rights. Please note that it is TELUS Digital's policy to only address requests coming directly from data subjects, once they have been authenticated appropriately, in order to protect their privacy.

The various databases on which your data is stored have security features built into them and our vendors who supply the relevant software regularly test these and have data recovery systems in place in the unlikely event of a crash. Vendor personnel are not given access to your personal data. Only authorized personnel within the hiring, sourcing, recruiting, HR or legal teams within the TELUS Digital group, (including TA managers and TA team leaders) can access the system. Their entry to the system is through individually-issued passwords and we have in place audit logs, encryption, intrusion detection software, anti-virus or malware protection and system integrity tools to further protect your data. Further information about the security features of our recruitment process can be obtained by emailing TI.Privacy.Office@telusinternational.com

The personal information of all candidates will remain in the original CRM, our assessment platforms and stored on our Workday databases as described above as long as TELUS Digital reasonably needs it to comply with our legal obligations. To the extent it is relevant to the candidate’s employment, the data will be stored and processed for the purposes of their future employment with TELUS Digital. The personal information of unsuccessful candidates will be deleted, unless required for TELUS Digital’ legitimate purposes (for example in the case of litigation with the candidate), or by law. Changes to this Notice We may update or change this Notice from time to time. You can see when this Notice was last updated by referring to the date at the end of this Notice. To the extent we make material changes, the Notice that was in place at the time you submitted personal information to us will generally govern that information. Contact Information If you have any questions about this Privacy Notice, would like additional information, or make a request to exercise any of your rights, please contact us by: Sending an email to: DPO.EU@telusdigital.com Completing an online request form at this link: https://submit-irm.trustarc.com/services/validation/7478848e-c349-4fb1-8f04-8d3d39c7ff3f If you are an applicant in the European Union and you are not satisfied with our response, you have the right to lodge a complaint with the data protection authority in your jurisdiction. Additional Information for California Residents California law requires us to disclose the following additional information related to our privacy practices. If you are a California resident, this section applies to you in addition to the rest of this Notice: Categories of Personal Information Collected and Disclosed. California law requires organizations to disclose whether certain categories of personal information are collected, “sold,” or disclosed for an organization’s “business purpose” (as those terms are defined under California law). We do not use third party cookies or similar tracking technologies that collect data over time and across different websites for purposes of targeted advertising with our applicant. We do not “sell” or “share” personal information about applicants (as such terms are defined under California law). The following describes the categories of personal information we collect and to whom we disclose such information for business purposes. Please note, in addition to the recipients identified below, we may disclose any of the categories of personal information we collect with government entities, as may be needed to comply with law or prevent illegal activity, and with professional services organizations such as auditors and law firms. Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, email address, account name, or other similar identifiers. Disclosures for Business Purposes Affiliates or subsidiaries Business partners Internet service providers Operating systems and platforms Other Service Providers Other identifying information such as physical characteristics or description, date of birth and signature. Disclosures for Business Purposes Affiliates or subsidiaries Business partners Other Service Providers Health and safety information such as health conditions (if relevant to your application), job restrictions, workplace illness and injury information, and health insurance policy information. Disclosures for Business Purposes Affiliates or subsidiaries Other Service Providers Characteristics of protected classifications under California or federal law, such as age, race, color, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, pregnancy or childbirth and related medical conditions), veteran or military status to the extent disclosed by the applicant. Disclosures for a Business Purposes Affiliates or subsidiaries Other Service Providers Sensory information, such as audio, electronic, visual, or similar information. This may include call monitoring and video surveillance and, in some cases, COVID-19 or other public health related temperature checks. Disclosures for a Business Purposes Affiliates or subsidiaries Other Service Providers Professional or employment-related information such as work history, academic and professional qualifications, educational records, references, interview notes, job title, position, hire dates, compensation, performance and disciplinary records, and vacation and sick leave records. Disclosures for a Business Purposes Affiliates or subsidiaries Business partners Other Service Providers Inferences drawn from any of the information listed above, such as profile or summary about a applicant's preferences, characteristics, attitudes, intelligence, abilities, and aptitudes. Disclosures for a Business Purposes Affiliates or subsidiaries Business partners Other Service Providers California Sensitive Information Disclosure. Some of the personal information we collect as described above is considered “sensitive personal information” under California law. We collect the following categories of sensitive personal information (as defined under California law): Social security, driver’s license, state identification card, or passport number; Racial or ethnic origin, religious, or philosophical beliefs, or union membership; Biometric information for the purpose of uniquely identifying an individual; Information concerning health; and Information concerning sexual orientation. This information is collected in order to administer your relationship with us, including fulfilling any obligation that we have to determine eligibility for employment; conduct background checks (where permitted by applicable law); comply with applicable laws and regulations; manage and monitor access to TELUS Digital facilities, equipment, and systems; investigate and enforce compliance with and potential breaches of Digital’s internal policies and procedures; and exercise or defend the legal rights of TELUS Digital and its employees and affiliates, customers, contractors, and agents. Note that we do not use such information for any purposes that are not identified within the California Privacy Rights Act Section 1798.121. We do not “sell” or “share” sensitive personal information for purposes of cross-context behavioral advertising.