Foundations & Associations - Legislation A list of legal documents pertaining to the formation, registration, governance and dissolution of a foundation or association. Main Legislation CAP 16 CIVIL CODE (in particular the SECOND SCHEDULE) Subsidiary Legislation S.L. 16.07 CIVIL CODE (Second Schedule) (Fees) Regulations S.L. 16.08 CIVIL CODE (Second Schedule) (Notifications and Forms) Regulations S.L. 16.10 CIVIL CODE (Second Schedule) (Existing Organisations) Regulations S.L. 16.17 CIVIL CODE (Second Schedule)(Register of Beneficial Owners – Associations) S.L. 16.18 CIVIL CODE (Second Schedule)(Register of Beneficial Owners – Foundations) Voluntary Organisation (Annual Return and Annual Accounts) Regulations https://legislation.mt/eli/sl/492.2/20200928/eng Advisory Committee Registrar / CEO Deputy Registrar / COO Registry Unit Compliance Unit Legal & Enforcement Unit Insolvency & Receirvership Service Unit Finanance & Admistration Unit Human Resources & Development Unit Information & Communication Technologies Unit Internation Affairs, Research & Communications Unit Money Laundering Reporting Officer Audit Committee Internal Audit Unit

Code of Ethics and Professional Conduct for Insolvency Practitioners Advisory Committee Registrar / CEO Deputy Registrar / COO Registry Unit Compliance Unit Legal & Enforcement Unit Insolvency & Receirvership Service Unit Finanance & Admistration Unit Human Resources & Development Unit Information & Communication Technologies Unit Internation Affairs, Research & Communications Unit Money Laundering Reporting Officer Audit Committee Internal Audit Unit

Duties and Liabilities of Directors General Duties of Company Directors Directors of a company are legally required to act in good faith and in the best interests of the company. Their key responsibilities include: Ensuring the proper governance, administration, and management of the company. Supervising the company’s affairs and making informed decisions. Specific duties include: Exercising care, diligence, and skill equivalent to a reasonably diligent person in the director's position. Avoiding secret or personal profits from their role and not misusing confidential company information. Ensuring their personal interests do not conflict with the company's interests. Not using company resources, information, or opportunities for personal gain without consent. Using their powers only for the purposes they were intended for, without abuse. Additionally, individuals may not serve as directors if they are: Undischarged bankrupts or subject to legal restrictions. Convicted of crimes involving public trust, theft, or fraud. Minors without emancipation or subject to a court disqualification order. Advisory Committee Registrar / CEO Deputy Registrar / COO Registry Unit Compliance Unit Legal & Enforcement Unit Insolvency & Receirvership Service Unit Finanance & Admistration Unit Human Resources & Development Unit Information & Communication Technologies Unit Internation Affairs, Research & Communications Unit Money Laundering Reporting Officer Audit Committee Internal Audit Unit

Privacy Policy - Malta Business Wallet Version 1.0. Last updated 14th May 2026 1.0. INTRODUCTION Welcome to the Malta Business Registry’s (“ MBR ”, “Controller” ) Privacy Policy relating to the provision of the Services provided via the Malta Business Wallet , a software application which you can download and install onto your mobile device and/or access via any related website, sub-website and/or associated domains (and/or sub-domains) under which the services of the Malta Business Wallet may be offered (“ MBW ”, “Software ”), where Personal Data is processed by the same relating to you. This Privacy Policy supplements the MBRs Master Privacy Policy which may be accessed via https://mbr.mt/privacy-policy/ . Whilst the storage, collection and other related processing activities relating to the Personal Data stored on the Software is dictated by this Privacy Policy, when the user of the Software decides to share documentation and/or reports he may have uploaded or generated through the Software with the MBR (as explained in this Privacy Policy), that Personal Data will be processed by the MBR in accordance with its Master Privacy Policy. MBR respects your privacy and is committed to protecting your Personal Data and processing it in compliance with any applicable data protection legislation. As a Government agency established in Malta, EU, the main privacy laws that are applicable to us in so far as you are concerned, are as follows: The Maltese Data Protection Act (Chapter 586 of the Laws of Malta) as well as the various subsidiary legislation issued under the same (the “DPA”); and The Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC ( General Data Protection Regulation ) (the “ GDPR ”). All the above, as may be amended from time to time, referred to together as the “ Applicable Data Protection Laws ”. 2.0. SUMMARY AND CONTENTS OF THIS PRIVACY POLICY In summary of this Privacy Policy we think that the following information is the most relevant for you: Purpose of processing: Primarily, we process your personal data for the purpose of providing you with our services, to allow your access and use of the Software, and to comply with our legal obligations; Controller: When processing your Personal Data, MBR acts as a controller; Your rights: You have a number of rights afforded by applicable laws. When we process your data on the basis of your consent, you can withdraw it at any time. You also have a right to request access to all of the personal data that is undergoing processing and a right to erasure of the data that are no longer necessary; and Implications of processing: Processing of personal data will result in the provision of services (or denial thereof of part or the entire use of the Software if certain data is not provided). We however recommend that you read this Privacy Policy in full, with care. For the ease of your understanding, these are the contents of this Privacy Policy: 1.0. INTRODUCTION 2.0. SUMMARY AND CONTENTS OF THIS PRIVACY POLICY 3.0. IMPORTANT INFORMATION AND WHO WE ARE 3.1. PURPOSE OF THIS PRIVACY POLICY 3.2. CONTROLLER 3.3. CONTROLLER’S CONTACT DETAILS 3.4. CHANGES TO THE PRIVACY POLICY AND OUR DUTY TO INFORM YOU OF CHANGES 4.0. THE PERSONAL DATA WE COLLECT ABOUT YOU 4.1. WHAT IS PERSONAL DATA? 4.2. WHAT ABOUT INFORMATION RELATING TO COMMERCIAL PARTNERSHIPS AND LEGAL ENTITIES? 4.3. DATA WE COLLECT ABOUT YOU 4.4. PERSONAL DATA RELATING TO THIRD PARTIES 4.5. SPECIAL CATEGORIES OF PERSONAL DATA 4.6. IF YOU FAIL TO PROVIDE PERSONAL DATA 5.0. WHY AND HOW WE USE YOUR PERSONAL DATA 5.1. WHY WE USE YOUR PERSONAL DATA 5.2 DETAILED PURPOSES AND LEGAL BASIS 6.0. RETENTION 7.0. RECIPIENTS OF YOUR PERSONAL DATA 7.1. DETAILS ON THE CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA 7.2. AUTHORISED DISCLOSURE 8.0. DATA ACCURACY 9.0. INTERNATIONAL TRANSFERS 10.0. DATA SECURITY 11.0. YOUR RIGHTS UNDER THE DATA PROTECTION LAWS 11.1. YOUR RIGHT OF ACCESS 11.2. THE RIGHT TO RECTIFICATION 11.3. THE RIGHT TO ERASURE (THE RIGHT TO BE FORGOTTEN) 11.4. THE RIGHT TO DATA RESTRICTION 11.5. THE RIGHT TO DATA PORTABILITY 11.6. THE RIGHT TO OBJECT TO CERTAIN PROCESSING 11.7. RIGHT TO WITHDRAW CONSENT (WHEN WE PROCESS YOUR DATA ON THE BASIS OF CONSENT) 11.8. THE RIGHT TO LODGE A COMPLAINT 11.9. WHAT WE MAY NEED FROM YOU 11.10. TIME LIMIT TO RESPOND 12.0. AUTOMATED PROCESSING 13.0. COOKIES 3.0. IMPORTANT INFORMATION AND WHO WE ARE 3.1. PURPOSE OF THIS PRIVACY POLICY This Privacy Policy aims to give you information on how we collect and process your personal data through or in conjunction with your use of the Software. This Privacy Policy stipulates details and conditions of collecting and processing your Personal Data and provides you with information in accordance with the transparency principle and requirements under the Applicable Data Protection Laws. 3.2. CONTROLLER The Malta Business Registry is a Government Agency registered in Malta whose address is Malta Business Registry, AM Business Centre, Triq il-Labour, Zejtun ZTN 2401, Malta and is the data controller responsible for processing your Personal Data that takes place via the Software. 3.3. CONTROLLER’S CONTACT DETAILS Although our goal is to always be as clear and transparent as possible, if you need any clarification on this Privacy Policy or a specific legal basis we are relying on to process your Personal Data for a specific processing operation, we would be happy to provide you with any such information you may need. Please feel free to contact Us at: info.mbr@mbr.mt or by writing to Malta Business Registry, AM Business Centre, Triq il-Labour, Zejtun ZTN 2401 or by phoning us using telephone number (+356) 2258 2300 (during normal office hours Monday – Thursday: 09:00 – 12:00 & 13:00 – 14:30 and Friday: 09:00-13:00). We have appointed a data protection officer (The “ DPO ”) who is also responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise rights please feel free to contact our DPO directly at dpo.mbr@mbr.mt 3.4. CHANGES TO THE PRIVACY POLICY AND OUR DUTY TO INFORM YOU OF CHANGES We reserve the right, at our complete discretion, to change, modify, add and/or remove portions of this Privacy Policy at any time. You shall be, in advance, informed by us of any material changes made to this Privacy Policy. We shall also archive and store previous versions of the Privacy Policy for your review. 4.0. THE PERSONAL DATA WE COLLECT ABOUT YOU 4.1. WHAT IS PERSONAL DATA? Personal Data means any information that identifies you as an individual or that relates to an identifiable individual. Information relating to legal persons (such as companies) does not amount to Personal Data. For more information on this important distinction, please read the section “ WHAT ABOUT INFORMATION RELATING TO COMPANIES? ” below. Whenever it is not possible or feasible for us to make use of anonymous and/or anonymised data (in a manner that does not identify any users of the Software or recipients of our services through the Software), we are nevertheless committed to protecting your privacy and the security of your Personal Data at all times. 4.2. WHAT ABOUT INFORMATION RELATING TO COMMERCIAL PARTNERSHIPS AND LEGAL ENTITIES? Information relating to legal persons as opposed to natural persons does not amount to Personal Data. Limited liability companies and other legal entities have a distinct legal personality that is separate from that of their owners or even their directors. This means that information relating to such legal entities (as opposed to the details of the owners, shareholders or even directors) will not, in most cases, constitute Personal Data and falls outside the scope of the Applicable Data Protection Laws. Having said the above, in all those cases where natural persons (such as company directors, shareholders, partners and even sole traders) are individually identifiable, and where information relates to such individuals in their personal capacity as opposed to them acting as representatives of a legal person, MBR will treat such information as Personal Data and will afford to such individuals (who would be deemed as data subjects) all the data protection rights listed below, as may be applicable. 4.3. DATA WE COLLECT ABOUT YOU You may, at your own choice and discretion (with the exception of data necessary to register, authenticate and securely verify your use of the Software), through your use of the Software, choose to upload onto the Software different forms of personal data relating to you which we have grouped together as follows: Registration Data provided by you when you register and/or open your account on the Software for the first time including first name, last name, date of birth, gender, nationality, country of birth, and your profile image. To simplify your registration, as well as for identification, security and verification purposes, the sign-up procedure is facilitated through third party providers including third party identity verification providers, the Electronic Identity Account or the eIDAS Node as issued by the Government of Malta. Once this procedure is utilised, the personal data (Registration and Contact Data) which would typically be provided by you during your registration, where available, will be automatically fed to your profile from such third party sources and used as further specified in this Privacy Policy. Any documents that you may upload onto the portal of any third party identity verification providers during your registration are only temporarily stored by such third party sources, until such documents are verified and authorised and any relevant metadata is extracted from such documents and fed into your profile as described above, upon which such documents will be securely deleted in line with the third party identity verification provider’s applicable privacy policies and/or notices. Company Involvement Data includes data related to your involvement and position within any legal entities. As explained above, whilst information relating to legal persons does not constitute personal data, information that directly identifies you and your involvement in a legal entity constitutes personal data. Identification Document Data includes any identification documents that you may freely choose to upload onto the Software, including your ID Card, Residence Card, Passport, or any other form of identification document which is accepted by the Software, and any personal information that may be contained within such documents. Verification of Address Data includes any personal data contained within documents which you may freely choose to upload onto the Software that may be used to verify any residential and/or commercial address, including rental agreements, bank statements, utility bills, and any government issued documentation. Source of Wealth Data includes includes any personal data contained within documents which you may freely choose to upload onto the Software that may be used to verify your source of wealth/income such as bank issued statements, statements of investments/shares, evidence of inheritance, contract of employment, payslips, income statements, profit and loss accounts, and receipts. Know Your Customer (KYC) Data refers to data stored within KYC reports generated through the Software by us at your request, which includes a compilation of your Registration Data, your Company Involvement Data, your Identification Document Data, your Verification of Address Data, and your Source of Wealth Data, as applicable. Contact Data includes your email address and telephone numbers. Payments Data includes bank/payment account details, as well as information pertaining to a transaction such as currency, location, amount/value, client IP, user ID, and token. Log in Data includes internet protocol (IP) address, your login logs, duration of logins, device/browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the Software. In order to prevent and detect fraud and misuse of our systems, certain Log In Data such as; IP address, device model/type, browser information, operating system and device or other identification data may be sourced and processed by us through the services of third-party fraud detection software providers. Profile Data includes internal notes to your account, your preferences, and feedback. Communications Data includes your preferences in receiving communications from us (opt in/opt out), as well as your Contact and Registration Data. It also includes other Communication Data generated as part of communications with us or with other third parties via the Software which may include various data such as network communication data, the free-text content of the communications, as well as internal communication and notes. Analytics Data include various data generated with respect to your use of our Software such as your language, location, browser data and device data. Certain information may be collected using cookies and/or similar tracking technology, for which we kindly direct you to the section “ COOKIES ” below. Many of the categories of Personal Data above are collected directly from you when you opt to upload documents and information on the Software. However, there are also instances where we may also collect personal data from other sources, including authorised members (e.g. directors or company secretaries) of the company or other legal entities you may be associated with as well as other Government agencies and Government bodies (both local as well as foreign bodies within the EU) and other third parties. 4.4. PERSONAL DATA RELATING TO THIRD PARTIES By providing us with or allowing us to access Personal Data relating to individuals other than yourself (such as when you list other involved persons pertaining to company registration or registration of other entities with MBR), you are letting us know that you have the authority to send us those Personal Data or the authority to permit us to access those data in the manner described in this Privacy Policy. 4.5. SPECIAL CATEGORIES OF PERSONAL DATA We do not knowingly and purposefully collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). However, from our experience, we may not exclude that you, at your own discretion and on the basis of your own explicit consent, upload such personal data on the Software. Please note that although ID cards and other forms of official government issued documentation are processed, images contained therein are not technically processed by the Controller to allow or confirm a unique identification match. Therefore, such data is not to be considered biometric data, and consequently shall not be considered a special category of personal data. Please also note that although there are instances where biometric authentication may be utilised to access the Software, this process will be carried out on the basis of your explicit consent and the MBR will have no access to or controls on any biometric data that may be utilised by any third party identity verification providers to allow your access to the Software, as the MBR only receives a positive or negative check by such third party identity verification providers. Please also note that in case you do not consent to biometric authentication you may still opt for a manual verification but please bear in mind that such manual verification may not be as time efficient and may delay your access to the Software until such manual verification is completed. 4.6. IF YOU FAIL TO PROVIDE PERSONAL DATA Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have with you for the provision of our services via the Software. 5.0. WHY AND HOW WE USE YOUR PERSONAL DATA 5.1. WHY WE USE YOUR PERSONAL DATA We will only use your personal data when the Applicable Data Protection laws allow us to. Most commonly, we will use your Personal Data in the following circumstances: To allow you access and use of our services via the Software; For identification, security, authentication and verification proposes; To facilitate and expedite your interaction/s with Government agencies, Government bodies and other third parties; To abide by our legal requirements to collect/use and to keep such personal data for a predetermined period of time; For the performance of a task carried out in the public interest; For the performance of a task carried out in the exercise of official authority vested in us as a Government agency; For the prevention and detection of illegal or fraudulent behaviour; and for analytics purposes. 5.2. DETAILED PURPOSES AND LEGAL BASIS We have set out below, in a table format, a description of the possible ways we plan to use your Personal Data, and which of the legal bases we rely on to do so. Note that we may process your Personal Data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your Personal Data where more than one ground has been set out in the table below. PURPOSE OF PROCESSING CATEGORIES OF PERSONAL DATA LEGAL BASIS FOR PROCESSING To register you as a user of the Software; to allow you to access the Software Registration Data Contact Data Log-in Data Company Involvement Data Contractual Necessity Official Authority Public Interest Legal Obligations To manage our relationship with you; to communicate with you; to give you access to our service via the Software Registration Data Contact Data Log-in Data Company Involvement Data Profile Data Communications Data Contractual Necessity Official Authority Public Interest Legal Obligations To set up a record on our system Registration Data Contact Data Log-in Data Company Involvement Data Profile Data Identification Documents Data (if provided) Verification of Address Data (if provided) Source of Wealth Data (if provided) Know Your Customer (KYC) Data (if report is generated) Contractual Necessity Official Authority Public Interest Legal Obligations Consent To pass on certain information to public authorities (including the Malta Financial Services Authority and National Statistics Office) & compile internal statistics and reports Registration Data Company Involvement Data Profile Data Identification Documents Data (if provided) Verification of Address Data (if provided) Source of Wealth Data (if provided) Know Your Customer (KYC) Data (if report is generated Legal Obligation Public Interest Further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes (within the limits permitted by law). To allow you to upload your documents onto our Software Identification Documents Data (if provided) Verification of Address Data (if provided) Source of Wealth Data (if provided) Contractual necessity Consent Public Interest Official Authority To generate KYC reports for you, as requested by yourself through the Software Registration Data Company Involvement Data Identification Documents Data (if provided) Verification of Address Data (if provided) Source of Wealth Data (if provided) Know Your Customer (KYC) Data (if report is generated) Contractual necessity Official Authority To allow you to share documents, information and Know Your Customer (KYC) reports you have uploaded and/or generated on the Software with Government agencies, Government bodies, and other third parties (where applicable) Registration Data Company Involvement Data Profile Data Communications Data Identification Documents Data (if provided) Verification of Address Data (if provided) Source of Wealth Data (if provided) Know Your Customer (KYC) Data (if report is generated) Contractual necessity Consent Public Interest Official Authority Legal obligations To establish and investigate and suspicious behaviour in order to protect ourselves from risk and fraud Registration Data Company Involvement Data Profile Data Log-in Data Identification Documents Data (if provided) Verification of Address Data (if provided) Source of Wealth Data (if provided) Public Interest Official Authority Legal obligations To process and manage payments transactions (where applicable) Payments Data Registration Data Profile Data Contractual necessity Web & Software Analytics Analytics Data Official Authority Public Interest Legal Obligations Should we need to process your Personal Data for a new purpose in the future, which is entirely unrelated to the above, we will inform you of such processing in advance and you may exercise your applicable rights (as explained below) in relation to such processing. When relying on consent, mainly when choosing, at your own discretion, to upload documents to the Software, the consent is granted by you when registering on our site. 6.0. RETENTION We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal or reporting requirements. The criteria we use to determine what is ‘ necessary ’ depends on the nature of the particular personal data in question. Our normal practice is to determine whether there is/are any specific EU and/or national law(s) permitting or even obliging us to keep certain personal data for a period of time (in which case we will keep the personal data for the maximum period indicated by any such law) and if not, whether there are any laws and/or contractual provisions that may be invoked against us by you and/or third parties and if so, what the prescriptive periods for such actions are. In the latter case, We will keep any relevant personal data that we may need to defend ourselves against any claim(s), challenge(s) or other such action(s) by you and/or third parties. Where your personal data is no longer required by us, We will either securely delete or anonymise the personal data in question. We will generally retain your personal data for a maximum period of five (5) years from the closure of your account on the Software or after five (5) years of inactivity on your account. There are some exceptions to this retention period, namely: If you are under investigation or where we have identified possible fraudulent or other criminal activity, we may retain your personal data for longer and as required in order to cooperate with the relevant authorities; and If there is a legal dispute, we will retain your personal data for at least the entire duration of the dispute and as may be required in order to defend our rights in any subsequent claim or any subsequent proceeding arising from the same. Further details of retention periods for different aspects of your personal data are available in our retention policy which you can request by contacting us. 7.0. RECIPIENTS OF YOUR PERSONAL DATA As the Controller’s business partners, suppliers or service providers are responsible for certain parts of the overall functioning or operation of the Software, Personal Data is also processed by them for the above-mentioned purposes on behalf of the Controller. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow third-party service providers to use your personal data for their own purposes unless this is permitted or required by law, and only allow them to process your personal data for specified purposes and in accordance with our instructions, after thorough vetting of these partners and on the basis of strict data processing agreements. Furthermore, you have the faculty, at your own discretion, to share any documentation and/or reports you may seek to upload and/or generate through the software with Government agencies, Government bodies and other third parties. Such access to your personal data, unless required to do so by our legal obligations, is not done automatically by us and you may freely choose with whom to share such documentation and/or reports with. However, in such scenarios, the recipients of your personal data with whom you may choose to share personal data with through the Software will not be acting on our behalf but will be acting in their own capacity as data controllers separate and independent from us. We are not responsible for whatever these entities may do with your personal data and encourage you to read through their respective privacy policies and/or notices to find out more about how they handle your personal data. 7.1. DETAILS ON THE CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA The third parties who we may disclose to and/or share your Personal Data with are, at the date of this Privacy Policy, the following: CATEGORY OF RECIPIENT PURPOSE OF PROCESSING Malta Information Technology Agency (MITA) Hosting of data under state of the art security protocols and our exclusive control Binderr Ltd Maintenance and support of our Software - with restricted access and under our strict controls Digital Application Providers To offer you our services on the Software and comply with our legal obligations, including the use of camera and/or recordings and audio permissions in relation to the verification of the user. Identity Verification Service Providers The IDV provider simply follows your instructions to check the ID against a database or perform a biometric "liveness" check. Auditors Compliance with our auditing obligations - with access granted only to essential personal data Advocates and/or Lawyers Compliance with our legal obligations or when necessary for the establishment, exercise or defence of legal claims. Subject Persons in terms of the Prevention of Money Laundering and Financing of Terrorism Regulations (PMLFTR) To offer you our services on the Software and comply with our legal obligations, during onboarding and due diligence as legally required by law. Government agencies, departments or entities and The Malta Police Force To offer you our services on the Software and comply with our legal obligations, in the public interest and/or our exercise of official authority Competent Authorities To offer you our services on the Software and comply with our legal obligations, in the public interest and/or our exercise of official authority in terms of the AML/CFT Laws. Other third parties with whom you choose to share your personal data To offer you our services on the Software Payment service providers (where necessary) To perform payment transactions and for the purposes of preventing fraud and enabling compliance with AML obligations 7.2. AUTHORISED DISCLOSURE Without prejudice to anything contained in this Privacy Policy and in the interest of full transparency, we reserve the right to disclose (and otherwise process) any relevant Personal Data relating to you which we may be processing (including in certain cases relevant IP addresses) to authorised third parties in or outside the EU/EEA if such disclosures are allowed under the Data Protection Laws (whether or not you have provided your consent) including but not limited to: For the purpose of preventing, detecting or suppressing fraud (for example, if you provide false or deceptive information about yourself or attempt to pose as someone else, we may disclose any information we may have about you in our possession so as to assist any type of investigation into Your actions); in the event of MBR being involved in a restructure, transfer or absorption into another Government department (or similar event analogously applicable to Government agencies); to protect and defend our rights (including the right to property), safety, or those of our affiliates, of users of our Software, of our members or even your own; to protect against abuse, misuse or unauthorised use of our Software; for any purpose that may be necessary for the performance of any agreement you may have entered into with us (including the request for provision of services by third parties) or in order to take steps at your request prior to entering into a contract; to comply with any legal obligations such as may arise by way of response to any Court subpoena or order or similar official request for Personal Data; or as may otherwise be specifically allowed or required by or under any applicable law, for example, under anti-money laundering legislation. 8.0. DATA ACCURACY All reasonable efforts are made to keep any Personal Data we may hold about you up to date and as accurate as possible. You can check the information that we hold about you at any time by contacting us in the manner explained above or by going on your profile page. If you find any inaccuracies, we will correct them and where required and in accordance with the law (provided that the law permits such deletion), delete them as necessary. Please see below for a detailed list of your legal rights in terms of any applicable data protection law. Kindly note that if any inaccuracies relates to any documentation you have uploaded onto the Software, you have the technical ability to delete such documentation unilaterally and upload the correct and/or updated documentation. If you require any assistance with this process please contact us. 9.0. INTERNATIONAL TRANSFERS Generally, the recipients of your Personal Data (as listed above) are based within the European Economic Area (EEA). However, if the processing of your Personal Data will involve a transfer of data outside the EEA, we will ensure that a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: The transfer of your personal data is performed to countries, territories, or subject to arrangements or mechanisms that have been deemed to provide an adequate level of protection for personal data by the European Commission. Where we use service providers which are not subject to an adequacy mechanism, we will ensure that additional contractual and non-contractual safeguards and measures are put in place as required (including by incorporating specific contracts approved by the European Commission such as the Standard Contractual Clauses). Please Contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA. 10.0. DATA SECURITY We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. This ensures confidentiality and integrity at all times. At an organisational level, the handling of all information is governed by our comprehensive Information Security Policies. This is complemented by an Information Security Awareness Programme designed specifically to ensure we embrace security best practices whenever it comes to handling information. In addition, we limit access to your Personal Data to those employees, agents, contractors and other third parties who have a need-to-know business requirement. They will only process your Personal Data on our instructions or subject to a lawful ground, as well as their duty of confidentiality. We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. Despite all the above, we cannot guarantee that a data transmission or a storage system can ever be fully secure. For more information about our security measures please contact us in the manner described above. Authorised third parties acting as our data processors with permitted access to your Personal Data (as explained in this Privacy Policy) are specifically required to apply appropriate technical and organisational security measures that may be necessary to safeguard the Personal Data being processed from unauthorised or accidental disclosure, loss or destruction and from any unlawful forms of processing. 11.0. YOUR RIGHTS UNDER THE DATA PROTECTION LAWS 11.1. YOUR RIGHT OF ACCESS You may, at any time, with reasonable intervals, request us to confirm whether or not we are processing any Personal Data that concerns you and, if we are, you shall have the right to access that Personal Data and to the following information: what personal data we have, why we process them, who we disclose them to, how long we intend on keeping them for (where possible), whether we transfer them abroad and the safeguards we take to protect them, what your rights are, how you can make a complaint, where we got your personal data from and whether we have carried out any automated decision-making as well as related information. 11.2. THE RIGHT TO RECTIFICATION Although all reasonable efforts will be made to keep your Personal Data updated, you are kindly requested to inform us promptly of any changes. To this end you have the right to ask us to rectify inaccurate Personal Data and to complete incomplete Personal Data concerning you. We may seek to verify the accuracy of the data before rectifying it. 11.3. THE RIGHT TO ERASURE (THE RIGHT TO BE FORGOTTEN) You have the right to ask us to delete your Personal Data and we shall comply without undue delay but only where: The personal data are no longer necessary for the purposes for which they were collected; You have withdrawn your consent (in those instances where we process on the basis of your consent) and we have no other legal ground to process your personal data; You have successfully exercised your right to object (as explained below); Your personal data have been processed unlawfully; There exists a legal obligation to erase the data to which We are subject; or Special circumstances exist in connection with certain children’s rights. Please note that if you wish to delete any data related to any documentation you have uploaded onto the Software, you have the technical ability to delete such documentation and any metadata derived therefrom unilaterally. If you require any assistance with this process please contact us. In any case, we shall not be legally bound to comply with your erasure request if the processing of your Personal Data is necessary: For compliance with a legal obligation to which we are subject (including but not limited to our data retention obligations); or For the establishment, exercise or defence of legal claims. There are other legal grounds entitling us to refuse erasure requests although the two instances above are the most likely grounds that may be invoked by us to deny such requests. You may request the erasure by contacting us. 11.4. THE RIGHT TO DATA RESTRICTION You have the right to ask us to restrict (that is, store but not further process) your Personal Data but only where: The accuracy of your personal data is contested (see the right to data rectification above), for a period enabling us to verify the accuracy of the personal data; The processing is unlawful, and you oppose the erasure of your personal data; We no longer need the personal data for the purposes for which they were collected but you need the personal data for the establishment, exercise or defence of legal claims; or You exercised your right to object and verification of our legitimate grounds to override Your objection is pending. Following your request for restriction, except for storing your personal data, we may only process your Personal Data: Where we have your consent; For the establishment, exercise or defence of legal claims; For the protection of the rights of another natural or legal person; or For reasons of important public interest. You may request the restriction by contacting us. 11.5. THE RIGHT TO DATA PORTABILITY You have the right to ask us to provide your Personal Data (that you shall have provided to us) to you in a structured, commonly used, machine-readable format, or (where technically feasible) to have it 'ported' directly to another data controller, provided this does not adversely affect the rights and freedoms of others. This right shall only apply where: The processing is based on your consent or on the performance of a contract with you; and The processing is carried out by automated means. 11.6. THE RIGHT TO OBJECT TO CERTAIN PROCESSING In those cases where we process your personal data for the performance of a task carried out in the public interest, you shall have the right to object to processing of your personal data by us. For the avoidance of all doubt, when we process your personal data when this is necessary for the performance of a contract, when necessary for compliance with a legal obligation to which we are subject or when processing is necessary to protect your vital interests or those of another natural person, this general right to object shall not subsist. 11.7. RIGHT TO WITHDRAW CONSENT (WHEN WE PROCESS YOUR DATA ON THE BASIS OF CONSENT) In those cases where we process Personal Data on the basis of your consent (which we will never presume but which we shall have obtained in a clear and manifest manner from you), you have the right to withdraw your consent at any time and this, in the same manner as you shall have provided it to us. Should you exercise your right to withdraw your consent, we will determine whether at that stage an alternative legal basis exists for processing your Personal Data (for example, on the basis of a legal obligation to which we are subject) where we would be legally authorised (or even obliged) to process your Personal Data without needing your consent and if so, notify you accordingly. When we ask for such Personal Data, you may always decline, however should you decline to provide us with necessary data that we require to provide the services of the Software, we may not necessarily be able to provide you with such services (especially if consent is the only legal ground that is available to us). Please note that consent is not the only ground that permits us to process your Personal Data as there are various grounds that we rely on when processing your Personal Data for specific purposes. 11.8. THE RIGHT TO LODGE A COMPLAINT You also have the right to lodge complaints with the appropriate Data Protection Supervisory Authority. Since the Malta Business Registry is a Government Agency registered in Malta, our Lead Supervisory Authority is the Maltese Information and Data Protection Commissioner (IDPC). We kindly ask that you please attempt to resolve any issues you may have with us first (even though, as stated above, you have a right to contact the competent authority at any time). 11.9. WHAT WE MAY NEED FROM YOU When exercising your rights by contacting us, we may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response. 11.10. TIME LIMIT TO RESPOND We try to respond to all legitimate requests within one month (unless a shorter period is required by law). Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. 12.0 AUTOMATED PROCESSING Your personal data will not be used for any decision solely taken on the basis of automated decision-making processes. 13.0. COOKIES If you are using a website instance of the Software, the Software uses cookies. For further information on what cookies are, which cookies we use, how and why we use cookies, and how you can control which cookies are dropped, please read our Cookies Policy. Advisory Committee Registrar / CEO Deputy Registrar / COO Registry Unit Compliance Unit Legal & Enforcement Unit Insolvency & Receirvership Service Unit Finanance & Admistration Unit Human Resources & Development Unit Information & Communication Technologies Unit Internation Affairs, Research & Communications Unit Money Laundering Reporting Officer Audit Committee Internal Audit Unit

Fee Structure The fees payable to the Registrar of Companies for the registration of a commercial partnership are calculated according to the company’s authorised share capital as indicated in the table below. Registration can be made in electronic format through the MBR web portal – BAROS and the fees levied vary accordingly: Authorised Share Capital Registration in Electronic Format: Fee Payable Up to €1,500 €100 Over €1,500 but not exceeding €5,000 €210 with the addition of€12 for each €500 or part thereof in excess of €1,500 Over €5,000 but not exceeding €10,000 €294 with the addition of €17 for each €1,000 or part thereof in excess of €5,000 Over €10,000 but not exceeding €50,000 €379 with the addition of €17 for each €2,500 or part thereof in excess of €10,000 Over €50,000 but not exceeding €100,000 €651 with the addition of €17 for each €10,000 or part thereof in excess of €50,000 Over €100,000 but not exceeding €250,000 €736 with the addition of €8 for each €15,000 or part thereof in excess of €100,000 Over €250,000 but not exceeding €500,000 €816 with the addition of €8 for each €10,000 or part thereof in excess of €250,000 Over €500,000 but not exceeding €1,000,000 €1,016 with the addition of €17 for each €20,000 or part thereof in excess of €500,000 Over €1,000,000 but not exceeding €2,500,000 €1,441 with the addition of €8 for each €50,000 or part thereof in excess of €1,000,000 Over €2,500,000 €1,900 Advisory Committee Registrar / CEO Deputy Registrar / COO Registry Unit Compliance Unit Legal & Enforcement Unit Insolvency & Receirvership Service Unit Finanance & Admistration Unit Human Resources & Development Unit Information & Communication Technologies Unit Internation Affairs, Research & Communications Unit Money Laundering Reporting Officer Audit Committee Internal Audit Unit

Terms and Conditions for Relying Parties of the Malta Business Wallet Version 1.0. Last updated 14 th May 2026 1.0. INTRODUCTION 1.1. Welcome to the Malta Business Registry ’s (“ MBR ”) Terms and Conditions (the “ T&Cs ”) relating to the provision of the services provided via the Malta Business Wallet , a software application which users can download and install onto their mobile device and/or access via any related website, sub-website and/or associated domains (and/or sub-domains) under which the services of the Malta Business Wallet may be offered (“ MBW ”, “ Software ”), and which You, a relying party, and your officer/s and/or employee/s, shall use to, inter alia , request, obtain, collect and receive data, information and reports made available through the repository by users ( “Relying Party” ) . 1.2. We recommend that you read these T&Cs in full. For the ease of your understanding, these are the contents of these T&Cs: 1.0. INTRODUCTION 2.0. DEFINITIONS 3.0. GENERAL 4.0. OVERVIEW, PURPOSE AND SCOPE 5.0. ELIGIBILITY AND OBLIGATIONS OF RELYING PARTIES 6.0. DATA SUBMISSION, VERIFICATION, AND AUDIT 7.0. DATA PROTECTION 8.0. DEVICE SECURITY 9.0. LIABILITY & INDEMNITY 10.0. INTELLECTUAL PROPERTY 11.0. BREACHES, PENALTIES AND TERMINATION 12.0. AMENDMENTS 13.0. FORCE MAJEURE AND MAINTENANCE 14.0. GOVERNING LAW AND JURISDICTION 15.0. ENTIRE AGREEMENT AND SEVERABILITY 2.0. DEFINITIONS 2.1 For the purposes of these T&Cs, unless defined elsewhere in these T&Cs, the following terms shall have the respective meanings or reference as indicated: “ Credentials ” includes identity documents, licences, or other professional authorisations submitted to evidence User status. “ Data ” means all information and materials that are submitted, uploaded, transmitted, provided, or otherwise made available by the User to the Software and/or the MBR and/or the Registrar, in any form or medium, including content, documents, files, data sets, messages and other communications, and any associated metadata to the extent relating to the foregoing. “ GDPR ” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. “ Intellectual Property ” means patents, rights to inventions, copyright and neighbouring and related rights, trademarks, domain names, rights in designs, rights in computer software, database rights, rights to use, and protect the confidentiality of, confidential information and all other intellectual property rights, in each case whether registered or unregistered and including all applications and rights to apply for and be granted, renewals or extensions of, and rights to claim priority from, such rights and all similar or equivalent rights or forms of protection which subsist or will subsist now or in the future in any part of the world. “ User ” or “ Users ” means any natural person, whether acting on his behalf or on behalf of another natural or legal person, who has created an account on the Software and is utilising the MBR’s services as provided by the Software, including but not limited to submitting Data, information, documents, or any other Credentials to the Software. “ Personal Data ” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked (directly or indirectly) to an identified or identifiable natural person, as referred to in Regulation (EU) 2016/679. “ Registrar ” means the Registrar of Companies as referred to under article 400 of the Companies Act, Cap. 386 of the Laws of Malta. “ Subject Person ” or “ Subject Persons ” means subject persons within the meaning of the Prevention of Money Laundering Act (Chapter 373 of the Laws of Malta). 3.0. GENERAL 3.1. The Software and all associated Intellectual Property is owned and operated by the Malta Business Registry, a Government Agency registered in Malta whose address is Malta Business Registry, AM Business Centre, Triq il-Labour, Zejtun, ZTN 2401. 3.2. These Terms and Conditions govern the use by Relying Parties of the Software as maintained and administered by the MBR under the direct responsibility of the Registrar. 3.3. In these T&Cs, “ you ” means you, as a Relying Party of the Software and “ your ” shall be interpreted accordingly. 3.4. By accepting these T&Cs and/or by using or accessing any features of the Software, you confirm that, You, including any officer/s and/or employee/s, have the authority to bind the entity you represent and agree to be legally bound by these T&Cs on its behalf. If you do not read, understand, or agree to these T&Cs or any part of them, you must not use the Software, register for an account, or access any of its features. 3.5. The application of any other general T&Cs other than these is expressly excluded. However, you understand and agree that you may have entered into further agreements dictating the use of the Software and you understand that you are equally bound by such agreements and it is your responsibility to be informed of the contents of such agreements and any obligations arising therefrom. 4.0. OVERVIEW, PURPOSE AND SCOPE 4.1. The Software is established to facilitate the lawful collection, secure storage, transfer and verification of Data in accordance with the Companies Act (Chapter 386 of the Laws of Malta), the Prevention of Money Laundering Act (Chapter 373 of the Laws of Malta), and any other applicable legislation. 4.2. The Software allows users to store virtual representations of Data, and to consequently share it with you, any public body, public authority, or third party who has been granted access to the Software by the MBR and/or the Registrar. Without prejudice to any legal obligations that the MBR and/or the Registrar may have to lawfully disclose the Data, users have complete control with whom they share their Data with, including you, and may opt to not share it with you, even if you have requested access to such Data. Similarly, they may opt to share one specific document with you that they have uploaded onto the Software but not the entire Data. 4.3. The use of the Software and its features, although considered to be legally binding and formally accepted as an official means of Data verification and transfer, remains a fully voluntary and optional service, meaning that nothing will stop Users from manually (and in any other manner as prescribed by you) sending Data (even if not uploaded to the Software), for whatever reasons, to you. Similarly, the Software does not bind and force you to request, collect, and verify Data solely through the Software. 4.4. Furthermore, the Software allows Subject Persons to act on behalf of their clients and to store virtual representations of their clients’ Data, and to consequently share it with you, in the same mode and manner in which the User would share their own Data. 5.0. ELIGIBILITY AND OBLIGATIONS OF RELYING PARTIES 5.1. Only duly authorised persons may access the Software and its features, and you warrant and represent that you are duly authorised to bind the entity you are representing and to access User’s Data on its behalf, and that such entity and yourself remain severally responsible for your acts and omissions. 5.2. If applicable, to set up and use the Software, you must also have a supported device running a version of an operating software that supports the Software (we always recommended, and in some instances require, that you use the latest available version). 5.3. You warrant that you understand that the collection, transmission, processing, or use of Data through the Software does not relieve the User of any legal, regulatory or statutory obligations to submit accurate, complete, and correct Data, and you expressly acknowledge that the submission of accurate and complete Data is a statutory requirement and remains the User’s sole responsibility for the purposes of regulatory compliance and oversight. 5.4. You are responsible for (i) maintaining the confidentiality and security of any account credentials issued to you or used by you to access the Software, (ii) ensuring that only authorised personnel access and use the Software under your account, and (iii) promptly notifying MBR of any actual or suspected unauthorised access or misuse. 5.5. You will ensure that all personnel accessing the Software on your behalf are appropriately trained and subject to confidentiality and data protection obligations at least as protective as those in these T&Cs. 5.6. You further represent and warrant that: I. Access by you to Data stored on the Software shall be limited to such data, information and reports as are necessary and proportionate for the purpose for which your access is requested, and done so in line with any applicable laws and regulations, in particular the Companies Act (Central Data Repository) Regulations; II. In accessing the Software and any of the Data contained therein, you shall comply with all applicable data protection legislation, including the General Data Protection Act (the “GDPR” ), the provisions of the Data Protection Act and any relevant regulations thereunder in relation to any personal data which you may access or receive through the repository; III. You will not use the Software for any illegal or fraudulent purposes, or any other purposes that are prohibited by the MBR and/or the Registrar including through these T&Cs; IV. Without prejudice to any other rights or remedies available at law, any Data accessed or otherwise obtained by you through the repository shall be treated as confidential and shall not be disclosed to any third party; V. You understand and agree that the MBR shall in no way or form be held liable for the submission of any false information by Users in connection with the Software and that you indemnify and hold the MBR harmless in accordance with the same; VI. You will not interfere with or disrupt the Software (including accessing the Software through any automated means), or any servers or networks connected to the Software, or any policies, requirements, or regulations of networks connected to the Software (including any unauthorised access to, use, or monitoring of data or traffic therein); VII. You shall not rely on the Registrar, the MBR and/or the Software as your sole or primary means of retaining, accessing, or retrieving copies of any Data that is submitted to the Software by a User; and VIII. Notwithstanding the MBR’s obligations at law, you remain responsible for maintaining your own complete, accurate, and up-to-date records, in accordance with applicable law and their internal record-retention requirements. 6.0. DATA SUBMISSION, VERIFICATION, AND AUDIT 6.1. You acknowledge that the Registrar, and in certain instances you, may from time to time, and in accordance with the Companies Act (Central Data Repository) Regulations, require the User to provide additional supporting documents, credentials, confirmations, or declarations in relation to any Data submitted to the MBR and/or the Registrar through the Software.. 6.2. The User will provide the requested information promptly and in any event within the period specified in the request. If the User does not respond within the applicable timeframe, or if the response is incomplete or inadequate, the Registrar and/or the MBR may, to the extent permitted by law and without prejudice to any other rights or remedies under the Regulations: I. Decline to process the relevant submission; II. Suspend review or acceptance of the Data pending receipt of a satisfactory response; and/or III. Require the User to resubmit or supplement the Data. 6.3. The Registrar will verify the Data submitted by the User to the extent required or permitted under applicable law and may, to the extent permitted by law, consult with or seek confirmation from any third party identification verification provider, competent authority or official body in Malta and/or in other jurisdictions for the purposes of verification, validation, or compliance checks. 6.4. Without limiting the foregoing, the MBR may verify, audit, and validate any Data submitted and may reject, suspend, or revoke acceptance of any Data where it has reasonable grounds to doubt the authenticity, legality, accuracy, completeness, or regulatory compliance of that Data, including where supporting evidence is not provided when requested. 7.0. DATA PROTECTION 7.1. You understand that the MBR shall process Personal Data relating to Users in its capacity as a Data Controller in accordance with the latest version of its Privacy Policy for the Software (the “ Privacy Policy ”) which is available at https://www.mbr.mt/website-pages/privacy-policy and details what Personal Data is processed by the MBR, the purposes for which Personal Data is processed, the applicable lawful bases under the GDPR, the categories of recipients and circumstances in which Personal Data may be shared, applicable retention periods including the criteria used to determine them, and the rights available to Users under the GDPR. 7.2. When accessing the Software, you agree that you will be processing Data relating to Users in your capacity as a separate and independent Data Controller and in accordance with ‘Annex I - Data Sharing Agreement’ to these T&Cs, which is for all intents and purposes of the law incorporated into these T&Cs by reference and forms an integral part of them. 7.3. Your acceptance of these T&Cs includes your full acceptance of the ‘Annex I - Data Sharing Agreement’. 7.4. Questions relating to ‘Annex I - Data Sharing Agreement’ may be directed to the MBR’s Data Protection Officer (the “ DPO ”) at dpo.mbr@mbr.mt . 8.0. DEVICE SECURITY 8.1. If you authorise or allow any other person other than those lawfully allowed to access the Software, you expressly agree and acknowledge that, without prejudice to any rights that the MBR and/or Registrar may have under these T&Cs and/or any applicable legislation, you will be held fully responsible for all access, verifications, and actions made by that person. 8.2. If you make any unauthorised modifications to your device, such as by disabling hardware or software controls, your device may no longer be eligible to access or use the Software. You acknowledge that the use of a modified device in connection with the Software is expressly prohibited, constitutes a violation of these T&Cs and the MBR and/or Registrar may exercise any rights they have against you arising from these T&Cs and/or any applicable legislation. 8.3. You may need to enable additional security measures as may be dictated by the MBR from time to time, such as two-factor authentication in order to access the Software or any particular features therein. If you subsequently decide to remove and/or decline the use of such additional security measures, you may not be able to continue to access the Software or any particular features therein. 9.0. LIABILITY & INDEMNITY 9.1. To the maximum extent permitted by applicable law, and without limiting any mandatory statutory duties that apply to the MBR in its capacity as a public authority, the MBR will not be liable for any losses, damages, claims, fines, penalties, costs, or expenses arising out of or relating to your receipt, processing, publication, retention, or other reliance on any Data submitted by a User that is inaccurate, incomplete, unlawful, misleading, or fraudulent, as well as any acts by the User or you which breach these T&Cs and/or any applicable legislation. 9.2. You shall indemnify, defend, and hold harmless the MBR and its officers, employees, agents, and representatives from and against any and all claims, actions, proceedings, investigations, demands, liabilities, losses, damages, judgments, settlements, fines, penalties, interest, and legal and professional fees arising out of or relating to: I. Your breach of these T&Cs; or II. Any allegation that the Data submitted by the User is unlawful, infringing, misleading, inaccurate, incomplete, fraudulent, or otherwise non-compliant with applicable law. 10.0. INTELLECTUAL PROPERTY 10.1. MBR is the sole owner of the Software and all Intellectual Property rights therein, including but not limited to brands, trademarks, logos, and all registered and unregistered names, signs and distinctive devices that may be used in the Software. Any unauthorised use of the above will result in legal action being taken against the infringer. 10.2. The Software and its contents may not be reproduced, transmitted or stored in whole or in part without the MBR’s written consent. Your registration and use of the Software does not confer any rights whatsoever to the Intellectual Property contained in or on the same Software. 10.3. You agree not to use any automatic or manual device to monitor the Software, or any content therein. Any unauthorised use or reproduction will result in legal action being taken against the infringer. 11.0. BREACHES, PENALTIES AND TERMINATION 11.1. Without prejudice to any other rights or remedies available to the MBR and/or the Registrar under these T&Cs, the Companies Act, Companies Act (Central Data Repository) Regulations, or otherwise at law, where the MBR and/or the Registrar reasonably considers that you have failed to comply with these T&Cs or applicable law, the MBR may, acting proportionately and to the extent permitted by law, take such measures as it considers appropriate, including suspending, restricting or terminating your access to the Software. 11.2. The MBR may terminate and restrict your access by electronic notice if: I. You commit a material breach of these T&Cs or any applicable law and, where capable of remedy, you do not remedy it within the period indicated by the MBR; or II. You commit repeated breaches of these T&Cs or any applicable law; or III. Your credentials are compromised/misused or you otherwise create a security risk; or IV. Termination is required or advisable to comply with law/regulatory requirements. Notwithstanding the above, and for the avoidance of doubt, the MBR may terminate and restrict your access immediately for fraud, deliberate misrepresentation, serious or non-curable breach, unlawful submissions, material security/integrity risk, or where required by law. 11.3. The MBR may also suspend, restrict, or terminate your access to the Software if the Software is discontinued, withdrawn, replaced, or materially modified, or if continued provision of the Software is not reasonably practicable due to legal or regulatory requirements, security risks, operational constraints, or decisions of the Registrar or any other competent authority. Where reasonably practicable, the MBR will provide advance notice of any discontinuance or material changes affecting the User. 12.0. AMENDMENTS 12.1. The MBR may amend, update, or replace these T&Cs from time to time. Unless a different effective date is stated in the notice, any amendment will take effect on the date in which the notice was published (the “ Effective Amendment Date ”) and will apply only from that Effective Amendment Date onwards. 12.2. By continuing to access or use the Software on or after the Effective Amendment Date, are deemed to have accepted the amended T&Cs. For clarity, unless and to the extent required by applicable law, amendments will not apply retroactively to any Data or submission that was accepted, processed, or otherwise finally recorded by the MBR prior to the Amendment Effective Date. 13.0. FORCE MAJEURE AND MAINTENANCE 13.1. The MBR will not be liable for any failure or delay in performing its obligations under these T&Cs to the extent caused by an event beyond MBR’s reasonable control (an “ Excusable Event ”). Excusable Events include, without limitation, natural disasters and public health emergencies; war, terrorism, civil unrest, sabotage, or malicious damage; acts, directions, restrictions, or failures of any government, court, regulator, or other competent authority; utility/telecommunications outages; failures or unavailability of third-party infrastructure or services (including hosting/cloud/network providers); cyber incidents (including ransomware or denial-of-service attacks); and software, system, or security failures (including planned or emergency maintenance). 13.2. Where reasonably practicable, MBR will; I. Notify you of an Excusable Event; and II. Take reasonable steps to mitigate the impact of the Excusable Event and restore service to the Software and its features. MBR may implement temporary procedures and may suspend, restrict, or defer access to the Software (in whole or in part) as reasonably necessary to address the Excusable Event and protect the integrity, security, and lawful operation of the Software. 13.3. Notwithstanding the above, you acknowledge that access to, availability of, or retrieval of Data from the Software (including any viewing, download, extract, or copy functionality) may be unavailable, restricted, suspended, delayed, or limited from time to time (including due to maintenance, security, legal, or operational reasons). 14.0. GOVERNING LAW AND JURISDICTION 14.1. These T&Cs shall be governed by and construed under the Laws of Malta. 14.2. Any dispute arising from these T&Cs shall fall under the exclusive jurisdiction of the Courts of Malta. 15.0. ENTIRE AGREEMENT AND SEVERABILITY 15.1. These T&Cs, including any other annexes that have been incorporated by reference, constitute the entire agreement between the MBR and you in relation to your access to and use of the Software and supersedes and replaces all prior and contemporaneous understandings, communications, representations, and agreements. 15.2. If any provision of these T&Cs is held to be invalid, unlawful, or unenforceable, that provision will be severed and, where permitted, modified to the minimum extent necessary to make it valid, lawful, and enforceable while preserving its intent as far as possible. If that is not possible, the invalid, unlawful, or unenforceable provision will be deemed replaced by a valid, lawful, and enforceable provision that most closely reflects the regulatory intent of the original provision. The remaining provisions will remain in full force and effect. ANNEX I - DATA SHARING AGREEMENT This Data Sharing Agreement is made by and between the Parties, and unless defined elsewhere, the following terms shall have the respective meanings or reference as indicated: ‘ Agreement ’ means the terms and conditions, and any other agreement that may have been entered into between MBR and the Relying Party as amended or further supplemented by any additional agreements which may apply from time to time; ‘ DSA ’ means this Data Sharing Agreement, including any Appendices attached or referred to herein and including any future amendments and additions in writing; ‘ Data Breach ’ means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data; ‘ Data Protection Laws ’ means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter ‘ GDPR ’), as amended from time to time, including national supplementary or implementation measures as applicable, together with any other regulation, law, including national legal instruments in the field of protection of personal data, as may be applicable by virtue of territorial or extra-territorial scope of application; ‘ Delete ’ shall mean deleting data in such a manner that restoring or recovering such data shall be impossible; ‘ Personal Data ’ means Personal Data that are shared by the MBR with the Accessing Party pursuant to this DSA, and vice versa as may be the case, and this in the mode and manner already specified and stipulated in this DSA; The terms “ Controller ”, “ Processing ”, “ Data Subject ”, “ Personal Data Breach ”, “ Joint Controller ”, and “ Supervisory Authority ” shall have the same meaning as in the Data Protection Laws. 1.0 BACKGROUND 1.1. The MBR and You, the Relying Party, are sharing Personal Data in their roles of separate controllers in conjunction with the MBR’s provision of services via the Malta Business Wallet, a software deployed by the MBR to facilitate the sharing of information, inclusive of personal data, between individuals involved in legal entities, government bodies, agencies, and other third parties. 1.2. The Parties hereby acknowledge that this DSA shall apply to any and all Personal Data that have been and shall be shared in conjunction with the above purpose. 1.3. This DSA expressly replaces and supersedes any and all other agreements, oral or written, between the Parties hereto with respect to the subject matter hereof. 1.4. In consideration of the above, in order to protect Personal Data and to ensure they are shared in accordance with Data Protection Laws, the Parties have, for their mutual benefit and for good and valuable consideration, agreed to the following terms for the said sharing of Personal Data. 1.5. Personal Data shared for the Purpose shall mean, the data which is stored on the Malta Business Wallet, which at the sole choice and discretion of the User of the Malta Business Wallet, or otherwise if required by applicable laws, is shared with you, which includes: I. Registration Data provided by the User when they register and/or open an account on the Malta Business Wallet for the first time including their first name, last name, date of birth, gender, nationality, country of birth, and profile image; II. Company Involvement Data which includes data related to Users’ involvements and positions within any legal entities; III. Identification Document Data which includes any identification documents that the user has uploaded onto the Malta Business Wallet, including the Users’ ID Card, Residence Card, Passport, or any other form of identification document which is accepted by the Malta Business Wallet, and any personal information that may be contained within such documents; IV. Verification of Address Data which includes any personal data contained within documents that the user has uploaded onto the Malta Business Wallet that may be used to verify any residential and/or commercial address, including rental agreements, bank statements, utility bills, and any government issued documentation; and V. Source of Wealth Data which includes any personal data contained within documents that the user has uploaded onto the Malta Business Wallet that may be used to verify the users’ source of wealth/income such as bank issued statements, statements of investments/shares, evidence of inheritance, contract of employment, payslips, income statements, profit and loss accounts, and receipts. 2.0 GENERAL DATA PROTECTION PROVISIONS 2.1. Each Party is acting as a separate Controller in its own right with respect to the Processing of the Personal Data it carries out towards its customers and/or users as understood under the Data Protection Laws. Each of the Parties independently determines the purposes and means of processing of Personal Data and acts Independently of the other Party. The Parties do not jointly determine the purposes and means of the processing and do not act as Joint Controllers. Neither of the Parties processes personal data on behalf of the other Party and neither of the Parties acts as a Data Processor of the other Party. Each of the Parties shall independently take all necessary measures to comply with applicable Data Protection Laws. 2.2. Each Party shall independently ensure that all processing of Personal Data carried out as an Independent Controller is done on the basis of the appropriate legal basis. 2.3. Any legal basis established for the processing of Personal Data by one Party, shall in no way affect the rights and/or obligations of the other Party. 2.4. Each Party, acting as an Independent Controller, shall ensure that the legal basis used for the sharing of Personal Data with the other Party, is valid and appropriate in terms of the Data Protection Laws. 2.5. Each Party shall ensure, to the best of its abilities, that any Personal Data it is responsible for is only shared with or sent to the other Party in a manner which is in full compliance with Data Protection Laws and such sending Party must also ensure, to the best of its abilities, that such Personal Data has been collected or otherwise processed lawfully and that where required, appropriate consent or other authorisation has been granted for sharing the personal data with the other Party. 2.6. Each Party shall ensure that Data Subjects to whom such Personal Data relates (to be shared with or sent to the other Party) have been provided with all the necessary information as required by the Data Protection Laws. 2.7. Each Party undertakes to fulfill all of its obligations arising under the Data Protection Laws which it may have with respect to the Data Subjects to whom the Personal Data Subject of this DSA relates and such Party shall be solely responsible for any of its failures to carry out any such obligations. 2.8. The Parties recognise that this DSA shall be interpreted in full compliance with the Data Protection Laws as well as any relevant applicable legislation. 2.9. For the avoidance of all doubt and in addition to anything else agreed between them, the Parties, in whatever role they may occupy and with respect to any sharing of Personal Data they may be involved in together, undertake to comply with the provisions of the Data Protection Laws. 3.0 OBLIGATIONS 3.1. The Parties confirm their ability to comply with the GDPR. 3.2. The Parties confirm that they both separately implement and/or provide sufficient guarantees to implement appropriate technical and organizational measures as well as any other additional measures which satisfy the requirements of Data Protection Laws and ensure the security of the Personal Data and the protection of the rights of the Data Subjects. 3.3. The Parties shall provide each other with all information necessary to demonstrate compliance with this DSA and the Data Protection Laws upon request. 3.4. You shall share Personal Data with MBR as an independent Controller in accordance with this DSA and in compliance with the Data Protection Laws. 3.5. The Parties shall not share any Personal Data with each other except as may be necessary for the performance of any service or task provided for MBR and, in particular, shall share the Personal Data strictly in line with the T&Cs and this DSA. 3.6. Each Party warrants that it shall not perform any of its obligations under this DSA in such a way as to cause either Party to breach any of its obligations arising under the Data Protection Laws or otherwise act or fail to act in such a manner that leads to such breach. 3.7. You shall inform MBR immediately if you think that any obligation pursuant to the T&Cs or this DSA does not comply with the Data Protection Laws. 4.0 AUTHORISED PERSONS AND THIRD PARTIES 4.1. The Parties shall ensure that Personal Data shall only be disclosed to persons authorized to process the Personal Data on a need-to-know basis (including employees). 4.2. Each Party shall ensure that Personal Data is not disclosed or transferred to any third party without the prior explicit written consent of the other Party, except as specifically stated in this DSA or as explicitly required by law. For the avoidance of doubt, third parties as understood in this clause do not constitute and/or include Relying Party or MBR subsidiaries, subcontractors, processors or sub-processors. Each Party shall assume its own responsibilities (in full) for any disclosures to such subsidiaries, subcontractors, processors and/or sub-processors. 5.0 ACCURACY OF DATA 5.1. The Parties shall ensure that all Personal Data, as provided by you to MBR and vice versa in the ordinary course of business, are kept accurate and complete, and where necessary (including upon any MBR Instructions), updated and/or rectified. 5.2. You shall use and are authorized to use all reasonable efforts to ensure that any Personal Data, which is inaccurate or incomplete, is erased or rectified. You agree that you shall not make any other changes to the Personal Data except as agreed with MBR. 6.0 ASSISTANCE 6.1. You shall assist MBR in ensuring compliance with the obligations pursuant to (i) Article 32 of the GDPR relating to the obligation to keep Personal Data Secure, (ii) Article 33 of the GDPR relating to the obligation to notify Personal Data Breaches to the supervisory authority, (iii) Article 34 of the GDPR relating to the obligation to advise data subjects when there has been a Personal Data Breach, (iv) Article 35 of the GDPR relating to the obligation to carry out data protection impact assessment (DPIA), (v) Article 36 of the GDPR relating to the obligation of prior consultation with the supervisory authority where the DPIA indicates there is an unmitigated high risk to the processing. 6.2. You shall assist MBR in responding to Data Subjects Rights requests as required by MBR. 6.3. You shall ensure that you will respond within a reasonable timeframe, provided that the response shall be provided by not later than 48 hours, to every request of MBR for the purpose of verification in relation to the processing of Personal Data as per this DSA. 7.0 DATA BREACHES 7.1. In the case of a Data Breach, you shall immediately and, in any case, not later than 24 hours after having become aware of it, notify such Data Breach to MBR, whether or not the breach was caused by yourself. 7.2. On its part, should MBR become aware of a Data Breach that MBR believes to be your responsibility, MBR shall, within reasonable time, inform you accordingly. 7.3. When notifying MBR of the Data Breach, you shall provide MBR with all information that may be considered necessary in addressing, restricting and minimizing the effects of the Data Breach and/or preventing further Personal Data Breaches. When notifying MBR of the Data Breach, you shall provide, at least, (i) a description of the Data Breach, including in so far as is possible the categories and approximate number of data subjects concerned, and the categories and approximate number of Personal Data records concerned, (ii) the name and contact details of a person who can provide more information on the matter, (iii) a description of the likely consequences of the Data Breach, (iv) a description of the remedial measures taken by you to address the Data Breach and (v) measures to mitigate its possible adverse effects. 8.0 TRANSPARENCY 8.1. Without prejudice to your rights at law, you shall be responsible for ensuring that Data Subjects are informed of all Data Sharing activity that you shall be undertaking and their rights in accordance with Data Protection Laws 9.0 DATA PROTECTION OFFICER 9.1. You shall ensure that you have appointed a Data Protection Officer (‘ DPO '); 9.2. You shall communicate the name and contact details of the DPO to MBR without undue delay. 10.0 TERM AND TERMINATION 10.1. This DSA shall become effective as of the effective date of the T&Cs. 10.2. After the termination of T&Cs, the Parties shall not share any Personal Data and shall continue to be bound by all the obligations relating to the processing of any Personal Data as independent controllers. 10.3. Without prejudice to your rights at law, upon termination of the T&Cs and insofar as the processing of personal data is exclusively required for the purposes of this Agreement, the Parties shall agree upon the process to delete and/or procure deletion of all Personal Data in your possession or control. 10.4. For the avoidance of doubt, this clause shall be without prejudice to any rights or obligations that either Party may have or be subject to at law to retain and/or further process the Personal Data in its capacity as Data Controller even after termination of the T&Cs. In such a case, each Party shall independently assume responsibility for ensuring that such Personal Data may be retained and/or otherwise processed lawfully by itself. 11.0 CONFIDENTIALITY 11.1. In virtue of the above, and without prejudice to anything stipulated in the T&Cs or any separate agreement on the matter, you may become privy to confidential information (which may or may not amount to Personal Data) pertaining to MBR, and therefore you agree to ensure that you and any of your employees, consultants, or agents to whom such confidential information is lawfully disclosed and/or made available to, covenant to keep such information confidential. 11.2. MBR may also become privy to confidential information (which may or may not amount to Personal Data) pertaining to the Relying Party, and therefore, without prejudice to anything stipulated in the T&Cs or any separate agreement on the matter, MBR agrees to ensure that itself and any of its employees and/or consultants and/or agents and/or any other authorized entity to whom such confidential information is lawfully disclosed and/or made available to, covenant to keep such information confidential. 11.3. The Parties agree that the confidentiality obligations described within this DSA shall survive the termination of the T&Cs. 12.0 LIABILITY 12.1. Notwithstanding anything to the contrary contained herein and/or in the T&Cs, you shall fully indemnify and hold and keep MBR (and its directors, officers, employees, shareholders, agents and representatives, consultants) fully indemnified and harmless: I. From and against any and all liabilities, claims, actions, proceedings, damages (including indirect damages), loss suffered (including loss of profits, revenue, business, contracts, anticipated savings) including costs of legal representation, attorney’s fees, court's fees; and/or II. From and against any finally awarded penalties, administrative or other fines or sanctions paid or to be paid by MBR, including costs of legal representation, attorney's fees, court's fees; and/or III. From and against any and all third-party liabilities, compensation claims, actions, proceedings, damages, loss suffered (including loss of profits, revenue, business, contracts, anticipated savings) including costs of legal representation, attorney's fees, court's fees; and/or IV. From and against any other expenses whatsoever; suffered or incurred by MBR or awarded against MBR in relation to or as consequence of or arising out of any breach, non-compliance or non-performance of any or all of the covenants, guarantees, warranties, representations, obligations, or provisions on the Relying Party's part (or any of its subcontractors or sub-processors) contained in this DSA and/or any other agreement between the Parties involving processing of Personal Data (including but not limited to the T&Cs) and/or any applicable laws, including without limitation the Data Protection Laws. 13.0 NO WAIVER 13.1. The failure of either Party hereto to insist upon the strict adherence to any term of this DSA on any occasion shall not be considered as a waiver of any right hereunder nor shall it deprive that Party of the right to insist upon the strict adherence to that term or any other term of this DSA at some other time. 14.0 DISPUTES AND GOVERNING LAW 14.1. Notwithstanding anything to the contrary in the T&Cs, this DSA shall be subject to the laws of Malta, and any dispute on the subject matter shall be settled exclusively by the competent court(s), tribunal(s) or other adjudicating authority/ies in Malta. 14.2. Each Party irrevocably submits to the exclusive jurisdiction of the Maltese courts over any claim, dispute or matter arising under or in connection with this DSA (including non-contractual disputes or claims) or its enforceability or formation or the legal relationships established by this DSA and waives any objection to proceedings in such courts on the grounds of venue or on the grounds that proceedings have been brought in an inconvenient forum. Advisory Committee Registrar / CEO Deputy Registrar / COO Registry Unit Compliance Unit Legal & Enforcement Unit Insolvency & Receirvership Service Unit Finanance & Admistration Unit Human Resources & Development Unit Information & Communication Technologies Unit Internation Affairs, Research & Communications Unit Money Laundering Reporting Officer Audit Committee Internal Audit Unit

Annual Filings Annual Returns and Annual BO confirmations All companies must prepare an Annual Return and Annual Beneficial Owners confirmation form (if applicable) in the prescribed format to be made up, upon each anniversary date of its registration. These must be filed with the Registrar of Companies within 42 days after the date to which the forms are made up. These can be currently filed online or in paper format at our offices. Both Forms need to be signed by a director or company secretary. A payment between EUR100 and EUR1,400 depending on the authorised capital is to be submitted along with the Annual Return. No payment is applicable with the Annual BO confirmation form. Together with Annual Return, a registration fee must be paid according to the authorised share capital. These are the relevant fees: Paper Format Electronic Format (i) does not exceed €1,500 €100 €85 (ii) exceeds €1,500 but does not exceed €5,000 €140 €120 (iii) exceeds €5,000 but does not exceed €10,000 €160 €135 (iv) exceeds €10,000 but does not exceed €50,000 €350 €300 (v) exceeds €50,000 but does not exceed €100,000 €400 €340 (vi) exceeds €100,000 but does not exceed €250,000 €600 €510 (vii) exceeds €250,000 but does not exceed €500,000 €800 €680 (viii) exceeds €500,000 but does not exceed €1,000,000 €900 €765 (ix) exceeds €1,000,000 but does not exceed €2,500,000 €1,200 €1,020 (x) exceeds €2,500,000 €1,400 €1,200 These fees are as per LEGAL NOTICE 354 of 2008, as amended by Legal Notice 381 of 2015, SUBSIDIARY LEGISLATION 386.03 COMPANIES ACT (FEES) REGULATIONS. In case, the Annual Return and Annual BO confirmation form is not submitted with 42 days from made up date, then company would start incurring penalties. Annual Accounts Companies are also required to file a copy of the annual accounts. These must generally be accompanied by a copy of the auditors’ report thereon, and the directors’ report unless a declaration Form is submitted. The annual accounts must be approved within 10 months from the end of the financial year and filed within 42 days following the 10 month-period. Annual Accounts are to be filed online through the Online portal. Physical submissions are no longer accepted . The format of the accounts to be submitted depends on the size of the company. Small companies may take advantage of the exemptions allowed under the Companies Act. A small company, according to the companies act, is a company which on its balance sheet dates does not exceed the limits of two of the three following criteria: · Balance sheet total: EUR 4,000,000; · Turnover: EUR 8,000,000 · Average number of employees during the accounting period: 50. Private companies which on their balance sheet date do not exceed the limits of two of the three following criteria: · Balance sheet total: EUR 46,600 · Turnover: EUR 93,000 · Average number of employees during the accounting period: 2; · shall be exempted from the requirements concerning, the auditor’s report. In case of accounts, with the first of financial statements there must also be filed the Form DD2 . Other Forms which are to be filed are ones such as the Form DD1 with every consequent set of accounts filed. If the company qualifies as a small company the first accounts must be accompanied with the Form DD4 whereas subsequent set of accounts for small companies must be accompanied with a Form DD3 . Advisory Committee Registrar / CEO Deputy Registrar / COO Registry Unit Compliance Unit Legal & Enforcement Unit Insolvency & Receirvership Service Unit Finanance & Admistration Unit Human Resources & Development Unit Information & Communication Technologies Unit Internation Affairs, Research & Communications Unit Money Laundering Reporting Officer Audit Committee Internal Audit Unit

Disclaimer General Information The Malta Business Registry (MBR) has made every effort to ensure that information on this site is reliable and accurate at the time of publishing. However, neither the MBR nor any of its employees make any express or implied representations or warranties regarding the material and facilities contained or referred to in this site, nor do we accept any liability for any loss or damage whatsoever which may arise in any way out of the use of any of the material or facilities; for errors in or omissions from the material or facilities; or for the accuracy of any information obtained through use of this site. The MBR shall have no liability for any loss or damage arising out of negligence or otherwise howsoever as a result of use of or reliance on the information on this site. Continuity of Service The Malta Business Registry makes no warranty or representation, express or implied, as to continuity of service and reserves the right to suspend, terminate or otherwise alter access to some or all of the site’s services at any time and without notice. Backlinks Hotlinking or linking directly to our content and/or images is bad but you are welcome to create a hyperlink to this site from another website. However, this link must not be presented on your site in any context that implies that this website has an association with your site, or endorses your site or product. The MBR logos may not be used on your site without the permission of the Malta Business Registry. Advisory Committee Registrar / CEO Deputy Registrar / COO Registry Unit Compliance Unit Legal & Enforcement Unit Insolvency & Receirvership Service Unit Finanance & Admistration Unit Human Resources & Development Unit Information & Communication Technologies Unit Internation Affairs, Research & Communications Unit Money Laundering Reporting Officer Audit Committee Internal Audit Unit

Company Changes Advisory Committee Registrar / CEO Deputy Registrar / COO Registry Unit Compliance Unit Legal & Enforcement Unit Insolvency & Receirvership Service Unit Finanance & Admistration Unit Human Resources & Development Unit Information & Communication Technologies Unit Internation Affairs, Research & Communications Unit Money Laundering Reporting Officer Audit Committee Internal Audit Unit

Formations of Foundations & Associations The Foundations and Associations Unit within MBR receives and processes applications for registration of organisations in terms of the Second Schedule of the Civil Code. The Deed/ Statute of the organisation, constituting the organisation, is forwarded to the Registrar for Legal Persons for registration. It should be accompanied by all relevant documentation, including copies of identification documents of involved parties. In case of an organisation which is registered with the Commissioner of Voluntary Organisation, evidence of such registration should also be produced. Upon registration, the Registrar will issue a certificate of registration, showing that the organisation has been officially registered. The certificate of registration can be collected from MBR. The applicable fees for the registration of an organisation are calculated according to the value of assets as indicated in below: Value of Assets Registration Fee Up to €1,500 €350 Over €1,500 but not exceeding €3,000 €350 with the addition of €23 for each €1,000 or part thereof in excess of €1,500 Over €3,000 but not exceeding €10,000 €420 with the addition of €11 for each €1,000 or part thereof in excess of €3,000 Over €10,000 but not exceeding €20,000 €652 with the addition of €11 for each €11,646 or part thereof in excess of €10,000 Exceeded €20,000 €815 with the addition of €11 for each €11,646 or part thereof in excess of €20,000 up to a maximum of €1,747 In case of an enrolled voluntary organisation, the above-mentioned fees shall be reduced to 10% of the above sums, with a minimum of €35. An administrative fee of 10% is levied on an application for registration which is withdrawn prior to registration, this is not applicable to an enrolled voluntary organisation. Advisory Committee Registrar / CEO Deputy Registrar / COO Registry Unit Compliance Unit Legal & Enforcement Unit Insolvency & Receirvership Service Unit Finanance & Admistration Unit Human Resources & Development Unit Information & Communication Technologies Unit Internation Affairs, Research & Communications Unit Money Laundering Reporting Officer Audit Committee Internal Audit Unit

TEST | C5567 Jurastiction: Malta TEST description Reporting Year Doc 5 | 03/07/2026 Download

We can’t find the page you’re looking for This page doesn’t exist. Go to Home and keep exploring. Go to Home