At Planet Nusa, we aim to follow the International Minimum Standard for Responsible Business Conduct (RBC), which integrates the UN Guiding Principles on Business and Human Rights (UNGPs) and the OECD Guidelines for Multinational Enterprises (OECD).

This Code of Conduct for Business Relationships (CoCBr) outlines the fundamental principles and expectations that apply to relevant business relationships, including suppliers, consultants, service providers and PR partners. Additional or more specific requirements may apply where relevant and communicated or agreed in writing.

This CoCBr supports our Policy Commitment on Sustainability Responsible Business Conduct. We recognise that business relationships differ in size, activities, resources and influence. The expectations in this Code should therefore be applied in a risk-based and proportionate way.

1. Commitment to responsible business conduct

We expect business relationships to conduct their activities responsibly and comply with applicable law. Business relationships should have practical processes suited to their activities and risks for identifying and addressing adverse impacts on people, the environment and responsible business conduct.

Planet Nusa does not require a particular management system or certification unless this has been agreed separately. We value open dialogue and a willingness to improve where gaps or concerns are identified. We recognise that business relationships may be at different stages in applying the expectations in this CoCBr. This does not affect the obligation to comply with applicable law or to address severe or urgent impact.

2. Risk management and due diligence

Business relationships should use risk-based due diligence appropriate to their activities and circumstances. This means identifying relevant actual and potential adverse impacts, taking reasonable steps to prevent or mitigate them, and following up on the actions taken. Relevant input from employees and affected stakeholders should be considered where appropriate and reasonably possible.

The appropriate response depends on how the business relationship is connected to an impact. Where it causes or contributes to an impact, it should cease or address the impact and, where relevant, provide for or cooperate in remediation. Where it is directly linked to an impact through another business relationship, it should use the influence reasonably available to prevent or mitigate the impact.

Due diligence is an ongoing process and is distinct from legal compliance. It should be proportionate to the severity and likelihood of the risk and to the resources and influence available.

3. Legal compliance

Business relationships must comply with the laws and regulations applicable to their activities and locations. References to international standards in this CoCBr describe Planet Nusa's expectations and is also a cornerstone in realizing our overarching Policy Commitment on Sustainability Responsible Business Conduct.

4. Principles and standards

4.1 Human rights

Business relationships are expected to respect all internationally recognised human rights, including the rights set out in the International Bill of Human Rights and the ILO Declaration on Fundamental Principles and Rights at Work.

The areas below are highlighted because they are particularly relevant to our industry. They are not an exhaustive list and do not limit the responsibility to respect other human rights.

• Forced labour and child labour: Employees must not be subject to forced, bonded or trafficked labour. The minimum age for work must comply with applicable law and should normally be at least 15. Persons under 18 must not perform hazardous work.
• Dignity and respect: Unlawful discrimination, harassment, violence, abuse and degrading treatment are not accepted. Workers should be able to exercise lawful rights to freedom of association and collective bargaining without intimidation or retaliation.
• Wages and working time: Wages, benefits, working hours, overtime, rest periods and leave must comply with applicable law and binding collective agreements. Overtime should be voluntary and managed so that working hours remain safe. Business relationships are encouraged to work towards wages that meet workers' basic needs, taking account of local conditions and recognised approaches to living wages.
• Health and safety: Business relationships must provide a safe and healthy working environment and take reasonable steps to prevent occupational injury and illness. Measures should reflect the nature of the work and the risks involved.

4.2 Product safety and information

Products, materials and packaging supplied to Planet Nusa must comply with applicable product safety and labelling requirements, including REACH where relevant, and with specifications agreed with Planet Nusa.

• Risk controls: Business relationships should have proportionate controls to identify and manage relevant product safety risks. Depending on the product, this may include physical hazards, restricted substances, unsafe exposure during production and harmful levels of substances in finished products.
• Product information and documentation: Information about product composition, materials, origin and testing must be accurate and sufficient to support applicable safety, traceability and labelling requirements. Relevant documentation should be retained and provided where required by law, agreed with Planet Nusa or reasonably requested in response to an identified risk.
• Notification and corrective action: Business relationships should inform Planet Nusa without undue delay if they become aware that a product, material or packaging supplied to Planet Nusa may be unsafe or non-compliant. They are expected to cooperate on appropriate investigation and corrective action, including withdrawal or recall where necessary.

4.3 Environmental responsibility

Business relationships must comply with applicable environmental law and should identify and manage significant environmental impacts connected with their activities. Depending on the nature of the business, this may include the use of energy, water and raw materials, chemical releases, emissions, wastewater and waste. We encourage practical improvements that reflect the scale of the impact and the resources and influence available.

4.4 Business integrity and transparency

Business relationships must act with integrity and comply with applicable laws on bribery, corruption, fraud, money laundering and fair competition. Records and information relevant to the relationship with Planet Nusa must be accurate and not misleading. Conflicts of interest that may affect the relationship should be disclosed.

A business relationship should inform Planet Nusa if it becomes aware of a severe adverse impact, serious legal breach or other material concern connected with products or services provided to Planet Nusa. Relevant information should be shared subject to applicable law, confidentiality and data protection obligations.

5 Responsibility in business relationships

Responsible business conduct works best when expectations are carried through business relationships. We therefore expect business relationships to communicate corresponding principles to relevant business relationships in their own value chain and to use the influence reasonably available to prevent or mitigate significant adverse impacts.

This expectation should be applied in a risk-based and proportionate way. It does not require a business relationship to guarantee the conduct of independent entities that it does not control. The approach should reflect the nature of the relationship, the severity of the risk and the resources and influence available.

6. Dialogue and improvement

Where a concern is identified, Planet Nusa will normally seek dialogue and appropriate corrective action. We may request relevant information or follow-up where this is proportionate to the issue. Assessments or audits may be used where they are agreed or reasonably necessary in response to a significant concern, with due regard for confidentiality, data protection and legitimate business information.

Our response will consider the severity of the impact, the business relationship's connection to it, the influence available and the willingness to improve. Planet Nusa may suspend or end a relationship in accordance with the relevant agreement and applicable law. Ending a relationship will not automatically be the first response where continued engagement can reasonably help prevent or mitigate harm.

7. Reporting concerns

We expect all business relationships to have a reporting system to ensure that affected stakeholders can voice grievances without fear of reprisals on any aspects of this CoCBr.

Planet Nusa welcomes concerns from any stakeholder, if serious or illegal misconduct is suspected or known. All stakeholders may voice concern through the following channels:

• Directly to your Planet Nusa contact person
• Our Speak Up channel available on our website

Planet Nusa will seek to protect confidentiality where reasonably possible and permitted by law and will not knowingly retaliate against a person for raising a concern in good faith. A reporting channel does not guarantee anonymity, a particular outcome or access to a specific remedy. It does not prevent anyone from using an available external mechanism or contacting a competent authority.

8. Signature

By doing business with Planet Nusa, business relationships acknowledge their commitment to complying with the principles outlined in this CoCBr and agree to uphold these standards in all their operations.

Name (first and last name):

Job title:

Company:

Date (DD-MM-YYYY):

Signature:

Please address any inquiries regarding this CoCBr to speakup@planetnusa.com