Whistleblower Policy

Please direct any customer complaints or feedback to our Customer Care Team at careteam@mycar.com.au

Last updated: 05 November 2026

1. Scope

Tyre and Auto Pty Ltd trading as mycar Tyre & Auto ABN 57 164 707 484 (mycar), is committed to the highest standards of conduct and ethical behaviour in all our business activities and to promoting and supporting a culture of honest and ethical behaviour, corporate compliance and good corporate governance.

We encourage people to raise concerns of unethical, illegal, fraudulent or undesirable conduct (where there are reasonable grounds for doing so), in confidence and without fear of intimidation, disadvantage or reprisal. We will not tolerate retaliation, discrimination, or disciplinary action against anyone who raises reasonable concerns of attempted, actual, or suspected misconduct or violations of any provision of the Code of Conduct or other relevant policies and procedures.

This Policy is available to directors, officers, and team members via the mycar intranet (Drive online) as well as to non-employees and others via the mycar website (www.mycar.com.au). It forms part of the company’s risk management system and corporate governance framework.

2. Application

This Policy applies to all current or former officers and team members, casual team members, senior managers, and directors of mycar as well as others with a connection to mycar such as current or former contractors, consultants, service providers, suppliers and business partners and their employees. It also applies to a relative, dependent or spouse of any of these people.

The above disclosers within and outside the company (Eligible Whistleblowers), can make a disclosure that qualifies for protection under this policy. This Policy also has application to other persons who are Eligible Whistleblowers who have special protections under the Corporations Act 2001 (Cth) (Corporations Act) and Taxation Administration Act 1953 (Cth) (Taxation Administration Act).

3. Matters the Policy applies to

You may make a report under this Policy if you believe or suspect that a director, officer, senior manager, team member, contractor, supplier, tenderer or other person who has business dealings with mycar, has engaged in Reportable Conduct, as defined below.

4. What is Reportable Conduct and when is it protected by Whistleblower provisions?

Protected disclosures are defined at section 1317AA (4) of the Corporations Act. A notification of Reportable Conduct will be assessed in accordance with Whistleblower protection provisions, and you will be notified of this assessment. Reportable Conduct outlined below will be a disclosure that qualifies for the Whistleblower protections.

Reportable Conduct includes any conduct of a director, officer, senior manager, team member, contractor, supplier, tenderer, or other person who has business dealings with mycar, whether actual or suspected, which:

• Is dishonest, fraudulent, or corrupt, including bribery or other activity in breach of the mycar Gifts, Hospitality and Anti-Bribery Policy, or Business Ethics Standard.
• Is an illegal activity (such as theft, violence, harassment or intimidation, criminal damage to property or other breaches of state, territory, or federal law) where the potential penalty is 12 months imprisonment or more.
• Is unethical or in breach of mycar’s policies (such as dishonestly altering company records or data, adopting questionable accounting practices or a wilful breach of the Code of Conduct).
• Involves harassment, discrimination, victimisation, or bullying, other than personal work-related grievances as defined in the Corporations Act.
• Involves other misconduct, improper state of affairs, or circumstances as defined in the Corporations Act, Taxation Administration Act, or areas subject to Australian Prudential Regulatory Authority (APRA) supervision, such as insurance or superannuation.

Conduct that is not illegal but indicates systemic issues will also be disclosable. See section 1317AA Corporations Act for further information.

A Whistleblower is not required to have proof of the conduct to report it. Provided the discloser has reasonable grounds for reporting the conduct, they will still be entitled to protection in accordance with the Policy, even if it later turns out to be incorrect. However, if a person deliberately submits a false report, they will not be able to access the Whistleblower protections under the Corporations Act.

5. What is not Reportable Conduct or a Protected Disclosure?

Personal work-related grievances such as interpersonal conflict, decisions about transfer or promotion that relate to terms and conditions of employment or disciplinary matters as defined in the Corporations Act are generally not reportable conduct under this Policy.

While these topics do not qualify for special protection under legislation that protects Whistleblowers, we encourage complaints about such matters to be made through the normal channels open to team members at mycar, in accordance with the mycar Fair Treatment Policy. This includes through your manager, the People and Culture team, or to the Head of Risk, Audit and Compliance.

There may be some instances where a personal work-related grievance still qualifies for protection if a workplace dispute identifies issues falling within the above categories. When this is determined to be the case by the Whistleblower Protection Officer, a report will be considered Reportable Conduct and managed in accordance with this Policy.

As an example, a disclosure about a personal work-related grievance may still qualify for protection if:

• (a) it includes information about misconduct, or information about misconduct includes or is accompanied by a personal work-related grievance (e.g. a mixed report);
• (b) the entity has breached employment or other laws punishable by imprisonment for a period of 12 months or more, engaged in conduct that represents a danger to the public, or the disclosure relates to information that suggests misconduct beyond the discloser’s personal circumstances;
• (c) the discloser suffers from or is threatened with detriment for making a disclosure; or
• (d) the discloser seeks legal advice or legal representation about the operation of the whistleblower protections under the Corporations Act.

6. Whistleblower Hotline

The Whistleblower Hotline is a confidential service provided by an external provider. Whistleblowing notifications and reports will be assessed to ensure confidentiality and anonymity as required and assess what protections apply and make recommendations about progression.

You may remain anonymous or use a pseudonym when making a report if you wish. You may also make the complaint in a way that identifies you as requiring protection but require that your identity as a discloser, or any information that may tend to identify you, be kept confidential and anonymised.

Any matter that is assessed as a protected disclosure will be managed by the Whistleblower Protection Officer in accordance with the express confidentiality and anonymity requirements of the discloser. Depending on the requirements and circumstances, the recommendation may be to refer to the Police, a regulator such as the ATO or ASIC, to proceed to investigation or to manage locally.

By using the Whistleblower Hotline as a discloser you are consenting to recording and handling of the information you provide. If you provide your contact details to the Whistleblower Hotline, those contact details will only be provided to the Whistleblower Protection Officer, except where disclosure is permitted or required by law.

Whistleblowers can report to the Whistleblower Hotline via phone or email:

Phone: 1300 329 117

Email: wbline@ablawyers.com.au

Please use the Reference Code ‘mycar’ when making a disclosure via phone or email.

7. Whistleblower Protection Officer

You may seek support or advice regarding a disclosure from the mycar Whistleblower Protection Officer via email: whistleblower@mycar.com.au

The Whistleblower Protection Officer receives reports of all disclosures and complaints made to the Whistleblower Hotline. However, in the unlikely event that a whistleblower disclosure or complaint is made against the Whistleblower Protection Officer, the Whistleblower Hotline report will be sent to the Legal Counsel for independent review.

8. Other Eligible Recipients

In addition to the Hotline and Whistleblower Protection Officer, individuals may raise their concerns with any other Eligible Recipient prescribed by law in s1317AAC Corporations Act, such as an officer or senior manager of the company (including a director, company secretary or a member of the Senior Leadership Team), a relevant regulator such as the Australian Securities and Investments Commission (ASIC), the Tax Commissioner, or the internal or external auditor of mycar.

You are also able to make the disclosure to a legal practitioner for the purpose of obtaining advice.

There are special circumstances where you can make the disclosure as a secondary disclosure to journalists or Ministers of Parliament, but strict conditions must be met as set out at s1317AAD Corporations Act.

9. Anonymity and Confidentiality

Whistleblowers may choose to remain anonymous, or for the details they provide to be kept strictly confidential or limited. The Whistleblower Hotline will not disclose the identity of any Whistleblower without receiving their consent first, except as permitted or required by law. Any discussion with the Whistleblower Hotline will be on a strictly confidential basis.

If a Whistleblower agrees to provide their identity via the Hotline, the disclosure will be assessed, and the person notified of protections. No identifying information or contact details will be provided to any other parties without the Whistleblower’s consent.

The Whistleblower Protection Officer is able to disclose a complaint without the Whistleblower’s consent to ASIC, the Tax Commissioner or the AFP or where compelled by law to do so to meet mycar obligations.

10. Investigations

Where an investigation is undertaken reports will be directed to the Whistleblower Protection Officer, assessed and, where possible and necessary, investigated.

If you make a reportable conduct / protected disclosure anonymously, with a pseudonym or otherwise place restrictions on the ability to use the information you provide because the information may by its nature disclose your identity, this may affect the ability of mycar to investigate the matter or for findings to be made, though effort will be made to make reasonable enquiries. Where this is the case, you may be asked to consent to disclosure or to disclosure on a limited basis based on the circumstances of the matter.

Any investigation will be conducted in a timely, thorough, confidential, objective, and fair manner having regard to the circumstances of alleged conduct. The emphasis for any investigation will be to ensure adequate protection of disclosers, the collation and review of relevant evidence and obtaining relevant information from persons named in the disclosure where it is possible to do so.

The discloser will be advised if the disclosure is assessed as not being a protected disclosure, is not covered by the Whistleblower Policy or where it is considered that an investigation is not required.

Where the matter is investigated, the Whistleblower will be provided with a general report on the outcome of any investigation, recommendations arising, or steps taken, to the extent these matters are able to be disclosed without breaching confidentiality requirements.

Where an investigation identifies potential wrongdoing or conduct capable of amounting to misconduct, the report will, where required, be escalated to the appropriate regulatory body. Misconduct allegations arising from the disclosure and investigations process will be the subject of separate misconduct investigation and the subject of any such allegations will be accorded procedural fairness.

Where a matter has already been investigated through an alternative grievance procedure mechanism and the discloser separately raises the matter as being a case of Reportable Conduct or protected disclosure, consideration will be given as to whether the matter should be re-investigated or investigated by an external party.

11. Protection of Whistleblowers

The purpose of this Policy is to encourage team members and other relevant third parties to raise any concerns without fear of intimidation, disadvantage, or reprisal.

mycar is committed to ensuring confidentiality in all matters raised under this Policy. Whistleblowers will not be personally disadvantaged in their employment at mycar by having made a report in accordance with this Policy.

The following protections are available to Whistleblowers:

(a) Protection against detrimental conduct

Detrimental conduct includes dismissal, demotion, injury of an employee in their employment, alteration of an employee’s position or duties to their disadvantage, harassment, discrimination, disciplinary action, bias, injury to a person (including psychological harm), damage to a person’s property or reputation, or their business or financial position or any other damage connected with making a report.

If you believe you have been subjected to detrimental treatment as a result of making a report or because you may make a report under this Policy, you should inform the Whistleblower Protection Officer immediately or make a separate report under this Policy.

Actions that do not constitute detrimental conduct include administrative action that is reasonable to protect the discloser (for example, moving the discloser to another workspace or store) or managing a discloser’s unsatisfactory work performance in line with the employer’s performance management framework.

The following legal protections are also available to you for making a report:

• Protection from civil, criminal, or administrative legal action.
• In some circumstances, protection from having to give evidence in legal proceedings.
• Compensation or some other legal remedy if you have suffered detriment because of someone else’s belief or suspicions that you have made a report.

However, the discloser can still be pursued for having made a false disclosure and in connection with the discloser’s own conduct which is revealed by the matters highlighted in the disclosed information (i.e. the discloser’s own conduct in the misconduct, improper affairs or other circumstances which are revealed by the protected disclosure).

(b) Protection of files and records

All files and records created from the investigation will be retained securely.

Unauthorised release of information to someone not involved in the investigation (other than senior managers or directors who need to know to take appropriate action, or for corporate governance purposes) without your consent as a Whistleblower will be a breach of this Policy.

Any such breach will be regarded as a serious matter and will be dealt with under mycar’s disciplinary procedures.

12. Employee Assistance Program (EAP)

For mycar team members and their immediate family members, the Employee Assistance Program (EAP) provides free, confidential support services for personal or work-related issues by qualified professionals either face to face, over the phone or over the internet. For support contact Telus Health via phone: 1800 835 871 or online: www.one.telushealth.com

13. Reporting Procedures

mycar will use reporting to address any systemic issues at a broader level. Provided confidentiality and anonymity requirements allow, the Whistleblower Protection Officer will provide anonymised summary reports to the Risk and Audit Committee, and notify relevant members of the mycar Senior Leadership Team regarding the outcomes of investigations and recommendations to improve business integrity.

14. Policy Improvement

This policy will be subject to progressive review and improvement. Feedback from team members is welcome. More information and guidance material is available from the Australian Securities and Investment Commission (www.asic.gov.au).

15. Policy Contact

Whistleblower Protection Officer
mycar Tyre and Auto Pty Ltd
Postal address: PO Box H203, Australia Square NSW 1215

Email whistleblower@mycar.com.au

Last updated: 05 November 2026