Health4Travel Partner Agreement

2.1. Platform Provider: For the purposes of this Agreement, “Health4Travel” and “Platform Provider” mean Health4Travel (iFlyIT B.V.), the legal entity identified in Clause 1.1 and the contracting party under this Agreement.

2.1.1. Health4Travel Group: “Health4Travel Group” means the Platform Provider, its parent company Health4Travel Enterprises Pte Ltd, Singapore UEN 202341292N, and any entity that from time to time directly or indirectly controls, is controlled by, or is under common control with either of them, including any present or future parent company, subsidiary, affiliated company or successor entity.

2.1.2. Third-Party Suppliers: “Third-Party Suppliers” means contractors, agents, payment service providers, technology providers, professional advisers and other external suppliers engaged by the Platform Provider or another member of the Health4Travel Group in connection with the Platform or the performance of this Agreement.

2.2. Platform: "Platform" refers to the Health4Travel platform and all its sub-pages and sub-sections, accessible through https://www.health4travel.com, operated by Health4Travel, which provides an online service for the listing, booking, financial transactions, and other solutions for services.

2.3. Partner: “Partner” means the individual, group or legal entity identified in Clause 1.2 and in the electronic acceptance record, including for the purposes of the performance of this Agreement its branches, service locations, official representatives, employees, healthcare professionals, contractors, subcontractors and agents, and any subsidiary, affiliate or related entity through which the Partner lists, arranges, supports or provides Services through the Platform (collectively, the “Partner Network”).

The Partner represents that it has the authority or other lawful basis necessary to list, arrange or administer Services provided through its Partner Network and undertakes responsibility to the Platform Provider for compliance with this Agreement by members of the Partner Network to the extent that they participate in Services or activities under this Agreement.

Inclusion within the Partner Network does not by itself make a separate legal entity or individual a contracting party to this Agreement or alter the allocation of clinical, professional or regulatory responsibility imposed by applicable law.

2.4. Services: "Services" shall mean any and all services listed, promoted, booked, transacted through, or otherwise processed through the Platform.

2.4.1. Regulated Services: “Regulated Services” means any Services whose provision is subject to professional licensing, registration, healthcare, patient-safety, professional-conduct or other sector-specific legal or regulatory requirements in the jurisdiction where the Services are provided.

2.5. The Agreement: This Agreement.

2.6. End-User: “End-User” means the natural person who receives, or is intended to receive, a Service booked or administered through the Platform.

2.6.1. Booking Party: “Booking Party” means any person or legal entity that makes, requests, authorises or administers a booking for an End-User, including an insurer, assistance company, third-party administrator, employer or other organisation acting on behalf of or for the benefit of the End-User.

2.6.2. Payer: “Payer” means the person or legal entity responsible for paying all or part of the Partner Price, Platform Fee or other amount arising from a booking. The Payer may be the End-User, the Booking Party or another person or organisation.

2.7. Partner Price: “Partner Price” means the price set or agreed by the Partner for the relevant Service, excluding any separate Platform Fee charged by Health4Travel.

2.8. Platform Fee: “Platform Fee” means any fee charged by Health4Travel for use of, access to or services provided through the Platform, separate from the Partner Price.

2.9. Settlement Amount: “Settlement Amount” means the amount payable by the Platform Provider to the Partner in respect of a Completed Booking, including the applicable Partner Price, less only refunds, chargebacks, taxes required to be withheld by law, or other deductions expressly authorised by this Agreement or agreed with the Partner.

2.10. Completed Booking: “Completed Booking” means a booking for which the Service has been provided and marked as completed on the Platform, or a booking treated as completed for settlement purposes under the late-cancellation or no-show provisions of Clause 14.

3. Background and purpose of the Agreement

3.1. The Platform Provider is the provider of an online Platform as a service for the booking of Services.

3.2. The Partner is a service provider that provides medical, wellness, travel-related, and/or healthcare-related services for different end-customer groups. The Partner wishes to use the Platform as a distribution channel for the sale and booking of Services offered by the Partner to individuals or corporations.

3.3. This Agreement sets out how the Parties will work together to allow bookings to be made using the online Platform.

3.4. Third-party introducers and coordinating partners: Where the Partner has been introduced, referred, arranged, or coordinated through a third-party introducer, arranger, assistance company, insurer, TPA, network manager, or other coordinating partner, this Agreement is intended to enable the Partner’s operational and technical onboarding to, and use of, the Platform.

3.5. Separate third-party arrangements: The Partner acknowledges that certain commercial, payment, referral, coordination, reporting, service-flow, or other operational arrangements may be governed by a separate agreement between the Platform Provider and the relevant third party. To the extent that any provisions of this Agreement relating to such matters differ from that separate agreement, the separate agreement shall prevail as between the Platform Provider and that third party.

4. Appendices to This Agreement: Acceptance of this Agreement includes the acceptance of

4.1. the Health4Travel Acceptable Use Agreement, appended hereto as Appendix A.

4.2. the Health4Travel Data Processing Agreement (incorporating processor terms), appended hereto as Appendix B.

5. Agreement to Terms: This Agreement is accepted by the Partner when its authorised representative completes the electronic acceptance form provided by Health4Travel, including confirmation of authority to bind the Partner. Acceptance may also occur by creating an account on, or otherwise utilising, the Platform to list services, accept bookings, and conduct financial transactions. The version of this Agreement accepted, together with the acceptance record (name, designation, e-mail address, and timestamp of the accepting representative), constitutes the agreement between the Parties, together with any additional terms and policies provided by Health4Travel.

5.1. Authority declaration: The person accepting this Agreement declares that they are duly authorised to enter into this Agreement on behalf of the Partner. The Partner shall be bound by such acceptance.

5.2. Versioning: This Agreement is identified by a version number and date. The version accepted by the Partner remains available to the Partner on request and at https://health4travel.com/medical-provider/partner-agreement

6. Service providers: This Agreement does not form any kind of legal partnership or ownership between the Parties. All Parties will carry out their duties independently and with full responsibility.

6.1. The Partner is fully responsible for all medical and/or wellness services they provide under this Agreement. The Partner confirms that they have, and will continue to maintain, all required qualifications, licences, registrations, and certifications needed to provide these services in line with applicable laws and professional standards. The Partner also confirms that they have appropriate and valid professional liability insurance in place. Health4Travel is not responsible for the quality, safety, legality, or results of any services provided by the Partner.

6.2. Use of Health4Travel Group and Third-Party Suppliers: The Platform Provider may perform its obligations and exercise its rights under this Agreement through members of the Health4Travel Group and may engage Third-Party Suppliers in connection with the Platform or the performance of this Agreement. The involvement of any such entity does not by itself make that entity a party to this Agreement. The Platform Provider remains responsible to the Partner for the performance of its contractual obligations where those obligations are performed on its behalf by a member of the Health4Travel Group or a Third-Party Supplier.

6.3. Partner Personnel, Partner Network, and Service Locations: Where permitted by applicable law, the Partner may provide, arrange or support Services through members of its Partner Network, including its employees, healthcare professionals, other personnel, contractors, subcontractors, branches, service locations, subsidiaries, affiliates and related entities, as described in Clause 2.3.

The Partner remains contractually responsible to the Platform Provider for the performance of the Services and for compliance with this Agreement by members of the Partner Network to the extent that they participate in Services or activities under this Agreement. A separate legal entity or individual does not become a Party merely because it provides, arranges or supports Services on behalf of or in cooperation with the Partner.

Nothing in this Agreement transfers clinical or professional responsibility from an individual healthcare professional, healthcare institution or other regulated person where applicable law places that responsibility upon that person.

6.4. Local Regulation of Regulated Services: The provision of Regulated Services remains subject to all mandatory laws, regulations, professional standards and regulatory requirements applicable in the jurisdiction where the Services are provided. The Partner is responsible for ensuring that Regulated Services offered through the Platform are provided by persons and entities holding all licences, registrations, qualifications, authorisations and insurance required by applicable law. Clinical, professional, organisational and regulatory responsibility shall remain with the Partner and/or the relevant individual professional or other member of the Partner Network to the extent allocated to them by applicable law.

Nothing in this Agreement requires the Partner or any professional providing Services to act contrary to an applicable legal, regulatory or professional obligation.

6.5. Professional Independence: The Platform Provider provides technology, booking, administrative and payment-related services. It does not direct or control clinical judgement, diagnosis, treatment, prescribing or other professional decision-making by the Partner or its professionals. Nothing in this Agreement requires the Partner or any professional providing Services to act contrary to an applicable legal, regulatory or professional obligation.

7. Partner information: Information provided by the Partner to the Platform in connection with registration, service listing, and cooperation is primarily business-related information. To the extent that such information includes personal data relating to identified or identifiable natural persons, it shall be processed solely for business communication and operational purposes, in accordance with applicable data protection laws and this Agreement.

7.1. Clause 7 does not apply to End-User or patient personal data, which is governed by Clause 8 and Appendix B.

8.1. Compliance. Each Party shall comply with Regulation (EU) 2016/679 (the "GDPR") and any other applicable data protection law in respect of personal data processed in connection with this Agreement. Where the Partner processes personal data as the Platform Provider's processor under clause 8.2(b), the Parties shall comply with Article 28(3) GDPR. If a Party is not established in the European Economic Area ("EEA") or is otherwise not directly subject to the GDPR, that Party shall nonetheless comply with the GDPR for all data originating from or related to this Agreement and the use of the Platform.

8.2. Roles of the Parties

(a) The Platform Provider is the controller of the personal data collected through the Platform for the purposes of operating the Platform and facilitating and administering bookings and payments.

(b) In respect of booking-coordination data that the Partner accesses through the Platform solely to receive and fulfil bookings, and only to that extent and for so long as the Partner acts solely on the Platform Provider's documented instructions, the Partner acts as the Platform Provider's processor, and clauses 8.3 to 8.9 and Part 2 of Appendix B apply to that processing.

(c) In respect of the healthcare and wellness Services it provides to End-Users — including any consultation, treatment, diagnosis, medical records, prescriptions and related health data — the Partner acts as an independent controller, determining its own purposes and means and complying with its own legal, regulatory, professional and record-keeping obligations. The Platform Provider is not the controller, processor or custodian of such data.

(d) The Parties are not joint controllers within the meaning of Article 26 GDPR.

8.3. In its capacity as processor under clause 8.2(b), the Partner shall not copy, retain, use, or disclose such data for any purpose not specified in this Agreement and its Appendices, and shall not buy or sell such data. This clause does not apply to personal data that the Partner processes as an independent controller under clause 8.2(c).

8.4. All primary storage of personal data by the Platform Provider shall take place within the European Union. Access to personal data by a Partner outside the EEA shall constitute a restricted transfer under Chapter V of the GDPR and shall be governed by the Standard Contractual Clauses referenced in clause 8.5.

8.5. To the extent personal data is transferred from the EEA to a location outside the EEA, or from outside the EEA into the EEA, the Parties agree that such transfers shall be subject to appropriate safeguards in accordance with Chapter V of the GDPR. In particular, the Parties agree to enter into the European Commission Standard Contractual Clauses adopted in Decision (EU) 2021/914 of 4 June 2021, using Module One (controller-to-controller) for transfers between the Parties acting as independent controllers and Module Two (controller-to-processor) for transfers of data processed under clause 8.2(b). The Parties acknowledge the SCCs constitute appropriate safeguards under Article 46 GDPR and that no additional data localisation obligation is imposed beyond compliance with applicable local law. Where the Partner is established outside the EEA, the Parties shall execute the applicable Standard Contractual Clauses as a separate signed document prior to or promptly following acceptance of this Agreement, and account activation may be conditional on such execution.

8.6. The Parties will only access the data for the period within which it is needed to fulfil their obligations under this contract.

8.7. On termination, the Partner shall return to the Platform Provider, and then delete, the booking-coordination data it processes as processor under clause 8.2(b), except to the extent retention is required by applicable law or the data relates to personal data the Partner holds as an independent controller under clause 8.2(c), including medical records.

8.8. The Parties agree to submit to any legally necessary audits and inspections, to provide the Platform Provider with whatever information is needed to demonstrate compliance with data protection obligations, and to notify the other Parties immediately if asked to do anything infringing applicable data protection law.

8.9. In case of any personal data breach affecting personal data shared under this Agreement, the affected Party shall, without undue delay after becoming aware of it and in any event within 72 hours where feasible, notify the other Parties, providing available detail. Each Party remains responsible for its own notifications to supervisory authorities and data subjects.

8.10. The Platform Provider does not collect health data on the Platform and does not require any Party to provide the health data of any End-User or patient of the Platform. Where clinical health data, medical records or prescriptions arise from a Service, they are created and held by the Partner as an independent controller and handled outside the Platform; the Platform Provider is not their controller, processor or custodian.

9. Professional indemnity: The Parties will maintain professional indemnity insurance cover in respect of The Parties’ business and provision of Services with and on standard terms offered by reputable insurers. This insurance cover must be maintained whether or not it is required by any relevant authorities.

10. Service Listing and Management:

10.1. Health4Travel’s Right To Manage Listings: The Partner hereby grants The Platform provider permission to list, edit, and manage services based on The Partner’s written instructions, including any necessary integrations including but not limited to APIs, on the Platform. The Platform Provider also reserves the right to correct, limit access to, or to remove from view any service listing or information that is incorrect, duplicate, or otherwise affecting the ethical use or optimal functioning of the Platform.

10.2. Partner’s Right To Manage Listings: The Partner retains the right to list, edit, and manage their services, locations, available times, prices or any other information. If the Partner requires the Platform Provider to execute any of these changes, the request has to come from an email address registered with the required level of authorisation in the Platform’s database.

10.3. The Partner understands that they must use the Platform to manage bookings for Services that come through the Platform.

10.4. Until a time slot becomes booked on the Platform, The Partner has the right to book it for other purposes or otherwise make the time slot unavailable for booking through the Platform.

10.5. Calendar Integrations: The Partner agrees to use the Platform’s booking calendar system for the management of bookings generated through the Platform. Where the Partner elects to integrate its own systems, such integration shall be subject to mutual agreement and limited to the extent necessary to enable booking coordination. The Partner shall not be required to provide unrestricted or direct access to its internal systems unless separately agreed under defined technical, security, and data protection terms.

10.6. The Partner agrees to manage their service availability and bookings effectively so that reasonable and legitimate bookings made through the Platform can be fulfilled by The Partner.

11.1. Financial and Regulatory Compliance: Each Party shall comply with the laws, tax requirements, payment regulations and other financial obligations applicable to its own activities under this Agreement and shall ordinarily bear its own costs of such compliance. The Partner remains responsible for taxes arising from the Services it provides, and the Platform Provider remains responsible for taxes arising from its own Platform Fees and services. Where the Platform Provider is required by law to deduct or withhold an amount from a payment to the Partner, it may do so and shall provide reasonable information concerning the deduction or withholding.

11.2. Payment Settlements: The Platform Provider shall pay the Settlement Amount for each Completed Booking to the Partner within thirty (30) calendar days after the booking becomes a Completed Booking, subject only to the circumstances described in Clause 11.4.

11.2.1. Self-Billing: The Partner expressly agrees that the Platform Provider may prepare and issue self-billed invoices in the Partner’s name and on its behalf for amounts payable under this Agreement. Each self-billed invoice shall be provided to the Partner electronically. The Partner shall notify the Platform Provider of any specific objection to an invoice within ten (10) business days after receipt. In the absence of such an objection, the invoice shall be treated as accepted to the extent permitted by applicable law.

Where applicable law requires an express invoice-acceptance procedure, supplier-issued invoices or other additional formalities, the Parties shall use the legally compliant procedure required in that jurisdiction without altering the underlying payment obligation under this Agreement.

11.2.2. Settlement Currency: Unless otherwise agreed, Settlement Amounts shall be calculated and paid in Euros.

11.2.3. Bank and Currency Costs: The Platform Provider shall bear charges imposed by its own bank or payment provider for initiating the settlement payment. The Partner shall bear charges imposed by its receiving bank or intermediary banks after the payment has been initiated, together with currency-conversion costs arising because the Partner elects to receive or maintain an account in a currency other than Euros, unless otherwise agreed in writing.

11.2.4. Payment Role: The Parties acknowledge that the Partner provides the underlying Service directly to the End-User and that the Platform Provider facilitates the collection and settlement of payment for technical and commercial convenience. Collection of the Partner Price by the Platform Provider does not make the Platform Provider the provider of the underlying Service.

11.3. Platform Fees: The Platform Provider may charge an End-User, Booking Party or Payer a Platform Fee in addition to the Partner Price and may determine or change the amount, description and structure of that Platform Fee. A Platform Fee charged by the Platform Provider shall not reduce the Partner Price or Settlement Amount for a booking unless the Partner has expressly agreed otherwise.

11.4. Payment Onboarding and Permitted Suspension: Payment is conditional upon the Partner completing and maintaining any reasonably required payment, identity, business, beneficial-ownership, sanctions or bank-account verification process. The Platform Provider may suspend payment of an affected Settlement Amount only to the extent reasonably necessary because of:

a) incomplete, inaccurate, expired or non-functional payment or onboarding information provided by the Partner;

b) a genuine and specific dispute concerning the relevant booking or Settlement Amount;

c) a refund, suspected fraud or chargeback affecting the relevant booking;

d) a legal, regulatory, sanctions, court or payment-provider restriction that prevents the payment; or

e) a payment-system failure or force majeure event beyond the Platform Provider’s reasonable control.

Where legally permitted, the Platform Provider shall inform the Partner of the reason for the suspension and shall release the payment promptly after the relevant issue has been resolved. No default interest shall accrue during a delay caused by the Partner or by a legal or regulatory prohibition on payment.

11.5. Regulatory Cooperation: Where currency-control, banking or other mandatory regulatory requirements affect a settlement, the affected Party shall notify the other Party as soon as reasonably practicable and the Parties shall cooperate in good faith to complete the settlement lawfully. This Clause does not convert the payment obligation in Clause 11.2 into a reasonable-efforts obligation.

11.6. Third-party coordinated payment arrangements: Where the Partner has been referred to Health4Travel as part of an arrangement where payment flows through a coordinating third party, Clauses 11.1 to 11.5 shall be subject to the arrangement between the Partner and that third party.

11.7. Payment to Partner: Unless the Platform Provider expressly agrees otherwise in writing, all Settlement Amounts shall be paid solely to the Partner identified in the electronic acceptance record. Payment of a Settlement Amount to the Partner fully discharges the Platform Provider from its payment obligation in respect of that amount, including where the underlying Service was provided by a member of the Partner Network. The Partner is solely responsible for allocating or paying any amounts due to its employees, healthcare professionals, contractors, agents, affiliates or other members of the Partner Network.

12. Bookings

12.1. The Partner shall maintain accurate information concerning its Services, Partner Prices and availability and shall use reasonable efforts to fulfil bookings confirmed through the Platform.

12.2. The Partner shall manage bookings received through the Platform using the Platform or another booking process agreed with Health4Travel.

13. Rescheduling

13.1. An End-User or Booking Party may request that a booking be rescheduled. Where the request is made at least twenty-four (24) hours before the scheduled start time, the Partner shall use reasonable efforts to accommodate the request, subject to availability.

13.2. A request made less than twenty-four (24) hours before the scheduled start time may be accommodated at the Partner’s discretion. Where it cannot reasonably be accommodated, it may be treated as a late cancellation under Clause 14.2.

14. Cancellations and No-Shows

14.1. Timely Cancellation: A booking cancelled at least twenty-four (24) hours before its scheduled start time is a timely cancellation. No Partner Price is payable to the Partner for a timely cancellation, and any Partner Price already collected for that booking shall be refunded to the applicable End-User, Booking Party or Payer.

14.2. Late Cancellation: A booking cancelled less than twenty-four (24) hours before its scheduled start time is a late cancellation. Unless mandatory applicable law requires a different outcome, the Partner shall be entitled to receive the Partner Price for a late cancellation unless the Partner waives that entitlement. Subject to Clause 14.4, the booking shall be treated as a Completed Booking for settlement purposes.

14.3. No-Show: Where the End-User does not attend a confirmed booking and the booking has not been timely cancelled, the Partner shall be entitled to receive the Partner Price unless the Partner waives that entitlement, provided that the Partner was ready and able to provide the Service at the agreed time. Subject to Clause 14.4, the booking shall be treated as a Completed Booking for settlement purposes.

14.4. Settlement Eligibility for Late Cancellations and No-Shows: A late cancellation or no-show shall not become eligible for settlement until seven (7) calendar days after the scheduled appointment time.

During that period, the End-User, Booking Party, Payer, Partner or Platform Provider may raise a genuine dispute concerning the booking.

Subject to applicable law and the remaining provisions of this Clause, an undisputed late cancellation or no-show shall become eligible for settlement upon expiry of the seven-day period and, unless the Partner has waived payment, shall at that time be treated as a Completed Booking for settlement purposes.

The Platform Provider may decline or suspend settlement where:

a) applicable law prohibits or restricts the relevant cancellation or no-show payment;

b) there is a genuine dispute as to whether the booking was a valid late cancellation or no-show;

c) fraud, duplicate booking or material error is reasonably suspected;

d) the Partner was not ready and able to provide the booked Service at the agreed time; or

e) the Partner has waived payment.

14.5. Mandatory Rights: Cancellation charges, refund rights and other patient or consumer rights remain subject to any mandatory law applicable to the relevant booking or Service.

15. Partner Non-Fulfilment

15.1. If the Partner becomes unable to provide a confirmed Service, it shall notify Health4Travel as soon as reasonably practicable so that the End-User, Booking Party or Payer may be informed and, where possible, offered an alternative booking.

15.2. Where the Partner gives Health4Travel at least twenty-four (24) hours’ notice, the Partner shall not be responsible for the cost of arranging a replacement booking solely because of that cancellation.

15.3. Where the Partner cancels less than twenty-four (24) hours before the scheduled start time for reasons within its reasonable control, the Partner shall be responsible for any reasonable and documented incremental cost actually incurred by Health4Travel in arranging a substantially equivalent replacement Service.

15.4. Clause 15.3 does not apply where the Partner’s inability to provide the Service results from a Force Majeure event under Clause 26 or another unforeseeable circumstance outside the Partner’s reasonable control.

15.5. Where a Service is not provided by the Partner, the applicable End-User, Booking Party or Payer shall be entitled to a refund of the Partner Price paid for that Service unless an alternative booking is accepted instead.

16. Intellectual Property Rights: The Platform and its entire contents, features, and functionality (including but not limited to all information, software, models, text, displays, images, video, and audio, and the design, selection, and arrangement thereof) are owned by the Platform Provider, its licensors, or other providers of such material and are protected by Dutch and international copyright, trademark, patent, trade secret, and other intellectual property or proprietary rights laws.

16.1. The Partner, their employees, and related entities that have access to the Platform must not reproduce, distribute, modify, create derivative works of, display, republish, download, store, or transmit any of the material on Health4Travel’s Website, except for the purpose of fulfilling the terms of this contract and providing Services to End-users.

16.2. No right, title, or interest in or to the Platform or any content on the Platform is transferred to The Partner, and all rights not expressly granted are reserved by the Platform Provider.

17. Use of Names and Marks

17.1. Operational Use: The Partner grants the Platform Provider a non-exclusive, royalty-free licence during the term of this Agreement to use the Partner’s business name, trading names, trademarks and logos (“Marks”) to the extent reasonably necessary to identify the Partner and its Services on the Platform, display Service listings, process bookings and communicate with End-Users, Booking Parties and Payers in connection with the Partner’s Services.

17.2. Health4Travel Marks: The Platform Provider grants the Partner a non-exclusive, royalty-free licence during the term of this Agreement to use Health4Travel’s name and Marks solely to identify Health4Travel as a booking, technology or commercial partner where reasonably necessary in connection with the Services.

17.3. Promotional Use Requiring Approval: Neither Party may use the other Party’s Marks in a case study, testimonial, press release, paid advertising campaign, prominent promotional campaign or other public promotional material outside the operational uses permitted above without the owning Party’s prior written approval.

17.4. Brand Protection: Each Party shall comply with reasonable brand guidelines provided by the other Party and shall not use the other Party’s Marks in a misleading, defamatory or unlawful manner, or in a manner that implies an endorsement, investment relationship or affiliation beyond the actual relationship between the Parties.

17.5. End of Use: On termination of this Agreement, each Party shall cease new use of the other Party’s Marks and shall remove them from publicly accessible materials within thirty (30) days, except where continued use is reasonably necessary for archival, legal, regulatory or record-keeping purposes.

17.6. Ownership: Nothing in this Agreement transfers ownership of either Party’s Marks to the other Party.

18. Acceptable Use: All Parties agree to use the Platform in a manner consistent with its intended purpose and in compliance with all applicable laws and regulations. Each Party is responsible for ensuring that all services listed and transacted through the Platform are lawful, accurately described, and ultimately fulfilled in accordance with the terms of the booking. All Parties agree to comply with the terms and conditions of the Health4Travel Acceptable Use Agreement (https://health4travel.com/h4t-partner-acceptable-use-agreement/), attached hereto and incorporated by reference.

19. Liability Disclaimer: All Parties acknowledge that Health4Travel is not responsible or liable for the provision of health or wellness services. Health4Travel acts solely as a platform and technology provider facilitating the booking and payment process. The Partner is solely responsible for the quality, safety, and legality of the Services provided.

19.1. Platform Operational Responsibilities:

19.1.1. The Platform Provider shall use commercially reasonable efforts to ensure that:

a) service listings, pricing, availability, and booking information displayed on the Platform reflect the information provided by the Partner;

b) bookings confirmed via the Platform are accurately transmitted to the Partner without undue delay; and

c) the Platform’s booking and payment systems operate in accordance with generally accepted industry standards.

19.1.2. The Platform Provider shall not be responsible for the medical outcome or clinical quality of the Services, but shall remain responsible for errors, inaccuracies, or technical failures attributable solely to the Platform’s systems or actions.

19.1.3. Nothing in this Agreement obliges the Platform Provider to obtain or document medical informed consent. The Partner remains solely responsible for obtaining all legally required patient consents prior to provision of medical Services.

19.2. Mitigation: Where an error, inaccurate information, unauthorised content change or technical malfunction attributable to either Party causes or is reasonably likely to cause material harm to the other Party, the Parties shall cooperate reasonably and in good faith to mitigate that harm, including by correcting inaccurate information where appropriate. This Clause does not create any category of damages or liability beyond that otherwise recoverable under this Agreement.

19.3. Limitation of Liability: Except in cases of gross negligence, wilful misconduct, fraud, breach of confidentiality, breach of data protection obligations or infringement of intellectual property rights, each Party’s total aggregate liability arising out of or in connection with this Agreement shall not exceed the greater of:

a) EUR 25,000; or

b) the total Platform Fees paid or payable to Health4Travel in connection with the Partner during the twelve (12) months preceding the event giving rise to the claim.

Where the Agreement has been in force for less than twelve (12) months, paragraph (b) shall apply to the period since the Agreement took effect.

Neither Party shall be liable for indirect, incidental, special or consequential damages, including loss of anticipated profit or opportunity, except to the extent that such liability cannot lawfully be excluded.

19.4. Payment Obligations: The limitations in Clause 19.3 do not reduce or limit an obligation to pay an undisputed Settlement Amount or other sum properly due from one Party to the other under this Agreement. Such amounts constitute payment obligations rather than damages for the purposes of the liability cap.

20. Modifications: Health4Travel reserves the right to modify these terms at any time by informing all Parties of such changes. Any change in these terms will be delivered to the email address listed in this contract. Continued use of the Platform after a notice period of 15 days following any such notification of modifications constitutes acceptance of the new terms. For material changes — including changes to fees, payment terms, liability, or data processing — Health4Travel may require active re-acceptance through a new electronic acceptance form, and continued use pending re-acceptance shall not constitute acceptance of such material changes beyond any period stated in the notice.

21. Confidentiality

21.1. Confidential Information: “Confidential Information” means any non-public commercial, financial, operational, technical, security, product, pricing, business or strategic information disclosed by or obtained from one Party by the other Party in connection with this Agreement where the information is identified as confidential or would reasonably be understood to be confidential from its nature or the circumstances of disclosure.

21.2. Permitted Use: Each Party shall use the other Party’s Confidential Information only to perform, receive or administer the Services and obligations contemplated by this Agreement and shall protect it using reasonable organisational and technical measures.

21.3. Permitted Disclosure: A Party may disclose Confidential Information to its employees, professional advisers, members of its corporate group, contractors and Third-Party Suppliers who reasonably need the information for purposes connected with this Agreement, provided that such persons are subject to confidentiality obligations appropriate to the information concerned.

21.4. Exclusions: Confidential Information does not include information that the receiving Party can demonstrate:

a) is or becomes publicly available other than through breach of this Agreement;

b) was lawfully known to it without an obligation of confidentiality before disclosure;

c) was lawfully received from a third party without an obligation of confidentiality; or

d) was independently developed without use of the other Party’s Confidential Information.

21.5. Required Disclosure: A Party may disclose Confidential Information where required by law, regulation, court order or competent authority, provided that, where legally permitted, it gives the other Party reasonable notice and discloses only the information required.

21.6. Competing Activities: Neither Party may use the other Party’s Confidential Information to develop, improve or assist the development of a product or service that competes with the other Party. This restriction does not prevent either Party from competing lawfully using information that is public, independently developed or otherwise lawfully available to it.

21.7. Data and Professional Confidentiality: This Clause supplements and does not limit the Parties’ obligations under Clause 8, Appendix B, applicable data protection law, medical confidentiality requirements or other professional confidentiality obligations.

21.8. Survival: The obligations in this Clause survive termination of the Agreement for five (5) years. Obligations relating to trade secrets or information that remains legally protected as confidential shall continue for so long as that protection applies.

22. Validity And Termination: The terms of the Health4Travel Partner Agreement are considered to be in force for three (3) years from the date of acceptance by the Partner. At the end of these three (3) years, continued use of the Platform will constitute a renewed acceptance of this Agreement for one (1) month from the date of last use. Either party may terminate this Agreement for any reason with one (1) months’ written notice to the other party. Termination will not affect the rights and obligations that have already accrued.

23. Assignment and Subcontracting: Except as permitted under Clause 24, neither Party may assign, transfer or novate this Agreement as a whole without the prior written consent of the other Party, such consent not to be unreasonably withheld or delayed. Nothing in this Clause prevents the Platform Provider from using members of the Health4Travel Group or Third-Party Suppliers in accordance with Clause 6.2, or the Partner from using its personnel or contractors in accordance with Clause 6.3.

24. Permitted Health4Travel Group and Business Transfers: The Platform Provider may transfer, assign or novate this Agreement, in whole or in part, to another member of the Health4Travel Group or to a successor to all or substantially all of the Health4Travel business to which this Agreement relates, including as part of a corporate reorganisation, merger, acquisition or transfer of business. The Partner gives its advance consent to such transfer, provided that the transferee assumes the relevant obligations of the Platform Provider under this Agreement and the transfer does not materially reduce the Partner’s contractual rights. The Platform Provider shall notify the Partner of such transfer. The Partner shall provide any further reasonable cooperation required to give effect to the transfer.

25. Severability: If any Clause (or part of a Clause) in this Agreement is unenforceable, invalid, or illegal for any reason, the other Clauses of this Agreement will remain in force as if they had been executed without the offending text appearing in this Agreement (and the offending text will be deemed to be substituted with drafting that has the closest effect and is enforceable).

26. Force Majeure: Neither party will be liable for inadequate performance to the extent caused by a condition (for example, natural disaster, act of war or terrorism, riot, labor condition, governmental action, and Internet disturbance) that was beyond the party’s reasonable control.

27. No Partnership or Agency: Neither party has the authority or power to bind, create a liability for, or enter any commitments for or on behalf of, the other party.

28. E-Signatures and Electronic Acceptance: Unless Applicable Law requires otherwise, this Agreement may be agreed and/or executed using electronic signatures or indicated acceptance through online processes, including completion of an electronic acceptance form. The Parties agree that Health4Travel's electronic records of acceptance constitute valid evidence of the conclusion and content of this Agreement. If an effective date has not been stated within this Agreement, it will come into effect on the date of acceptance by the Partner.

29. Jurisdiction and Netherlands Commercial Court: All disputes arising out of or in connection with this Agreement will be resolved by the Amsterdam District Court following proceedings in English before the Chamber for International Commercial Matters (“Netherlands Commercial Court” or “NCC District Court”), to the exclusion of the jurisdiction of any other courts, except that this choice of court shall not exclude the jurisdiction of a competent court in the jurisdiction where a Regulated Service is provided in respect of a dispute concerning the clinical, professional, licensing, patient-safety or other mandatory regulatory requirements applicable to that Regulated Service. An action for interim measures, including protective measures, available under Dutch law may be brought in the NCC's Court in Summary Proceedings (CSP) in proceedings in English. Any appeals against NCC or CSP judgments will be submitted to the Amsterdam Court of Appeal’s Chamber for International Commercial Matters (“Netherlands Commercial Court of Appeal” or “NCCA”). The NCC Rules of Procedure apply.

For the avoidance of doubt, the exception above applies only to the extent that the dispute concerns matters governed by mandatory local laws, regulations or professional requirements applicable to the provision of Regulated Services. All other disputes arising out of or in connection with this Agreement remain subject to the exclusive jurisdiction and NCC agreement set out above. Nothing in this Clause limits the jurisdiction or powers of any competent healthcare, professional, data-protection or other regulatory authority.

30. Governing Law: This Agreement and the commercial relationship between the Parties shall be governed by and construed in accordance with the laws of the Netherlands. This choice of law does not displace any mandatory law, regulation or professional requirement applicable to the provision of Regulated Services in the jurisdiction where those Services are provided, as set out in Clause 6.4.

31. Contact Information: For questions or concerns regarding this Agreement, please contact Health4Travel at info@health4travel.com .

32. Entire Agreement: This Agreement constitutes the entire agreement between the parties and supersedes all prior agreements and understandings, whether written or oral, relating to the subject matter herein.

By completing this form, the Partner accepts the Health4Travel Partner Agreement version 2.1 dated 17 August 2026, including Appendix A (Acceptable Use Agreement) and Appendix B (Data Processing Agreement).

Offered by Health4Travel (iFlyIT B.V.), represented by Marko Kauppinen, CEO.

For the Partner

• Business Name: [___]
• Business ID: [___]
• Address: [___]
• Name of representative: [___]
• Designation: [___]
• E-mail: [___]

[ ] I confirm that I am duly authorised to enter into this Agreement on behalf of the Partner.

Signature: [___]

Date: [___]

This Health4Travel Acceptable Use Agreement ("Agreement") is entered into by and between Health4Travel (iFlyIT B.V.) ("Health4Travel") and all users of the Health4Travel platform ("User").

A.1. Purpose

This Agreement sets forth the terms and conditions under which Users may access and use the Health4Travel platform ("Platform"). By accessing or using the Platform, you agree to be bound by the terms of this Agreement.

A.2. User Conduct

A.2.1 Users must use the Platform in a lawful and ethical manner.

A.2.2 Prohibited activities include, but are not limited to:

• a. Fraudulent or misleading practices.
• b. Harassment, hate speech, or threats.
• c. Unauthorised access to other users' accounts or data.
• d. Violation of intellectual property rights.

A.3. Content Guidelines

A.3.1 Users must adhere to the following content guidelines:

• a. Post accurate and non-deceptive content.
• b. Prohibit content that is offensive, harmful, or illegal.
• c. Respect intellectual property rights; do not use copyrighted materials without permission.

A.4. Prohibited Items or Services

A.4.1 Users may not offer, list, or promote:

• a. Products or services that are illegal, counterfeit, or infringe on intellectual property rights.
• b. Controlled substances, illegal drugs, or drug paraphernalia.
• c. Items or services that are prohibited by applicable laws or regulations.

A.5. Privacy and Data Handling

A.5.1 Users must comply with the Health4Travel Privacy Policy, available at https://health4travel.com/wp-content/uploads/2023/09/T2T-privacy-policy.pdf, when handling personal data on the Platform.

A.6. Intellectual Property

A.6.1 Users are responsible for ensuring they have the necessary rights and permissions to use intellectual property on the Platform.

A.6.2 Health4Travel respects intellectual property rights and will respond to valid infringement claims promptly.

A.7. User Accounts

A.7.1 Users are responsible for maintaining the security and accuracy of their accounts.

A.7.2 Do not share login credentials or allow unauthorised access to your account.

A.8. Termination of Accounts

A.8.1 Health4Travel reserves the right to suspend or terminate a User's access to the Platform for violations of this Agreement or for any other reason, in its sole discretion.

A.9. Dispute Resolution

A.9.1 Users agree to resolve disputes with other Users through peaceful means, including negotiation and mediation if necessary.

A.10. Reporting Violations

A.10.1 Users can report violations of this Agreement or other misconduct on the Platform through the designated reporting mechanism.

A.11. Liability Disclaimer

A.11.1 Health4Travel is a platform and technology provider and is not responsible or liable for the quality, safety, or legality of products or services offered by Users on the Platform.

A.12. Governing Law

A.12.1 This Agreement shall be governed by and construed in accordance with the laws of The Netherlands.

A.13. Updates to the Agreement

A.13.1 Health4Travel reserves the right to modify this Agreement and will provide notice of any changes via email and on the platform. Continued use of the Platform after a notice period of 15 days following any such notification of modifications constitutes acceptance of the revised Agreement.

A.14. Contact Information

A.14.1 For questions or concerns regarding this Agreement, please contact Health4Travel at info@health4travel.com

A.15. Acceptance

By using the Health4Travel Platform, you acknowledge that you have read, understood, and agree to abide by the terms and conditions of this Acceptable Use Agreement.

HEALTH4TRAVEL DATA PROCESSING AGREEMENT (CONTROLLER-TO-CONTROLLER, WITH PROCESSOR TERMS)

This Appendix governs the sharing of personal data between the Platform Provider and the Partner in connection with the Platform and forms part of the Agreement. The terms "controller", "processor", "personal data", "processing", "data subject", "special categories of personal data" and "personal data breach" have the meanings given to them in the GDPR.

Part 1 — Roles and controller-to-controller terms

B.1.1. Roles. As set out in clause 8.2: the Platform Provider is the controller of personal data collected through the Platform for platform operation and booking and payment facilitation; the Partner is an independent controller in respect of the healthcare and wellness Services it provides to End-Users (including medical records and health data); and the Partner acts as the Platform Provider's processor only in respect of booking-coordination data accessed through the Platform strictly to fulfil bookings on the Platform Provider's documented instructions. The Parties are not joint controllers within the meaning of Article 26 GDPR.

B.1.2. Purposes and lawful basis. Each Party shall process the shared personal data only for the purposes set out in Schedule 1 and any compatible purpose permitted by law, and shall maintain a lawful basis. Each Party, as controller, is responsible for providing its own transparency information to data subjects under Articles 13 and 14 GDPR.

B.1.3. Clinical health data outside the Platform. Medical records, prescriptions, diagnostic and treatment information and other clinical health data are created and held by the Partner as independent controller, outside the Platform. The Platform Provider does not require, collect or process such clinical health data through the Platform and is not the controller, processor or custodian of any medical record. Only administrative and booking information is exchanged through the Platform.

B.1.4. Special categories. The Parties acknowledge that the fact a data subject books a medical or wellness Service may itself reveal data concerning health (Article 9 GDPR). Each Party shall ensure it has a valid Article 9 condition for its own processing (for example, explicit consent under Article 9(2)(a) or, for the Partner's provision of healthcare, Article 9(2)(h)).

B.1.5. Data subject rights. Each Party shall handle requests it receives in respect of personal data it controls and shall provide the other Party with reasonable and timely cooperation.

B.1.6. Security. Each Party shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including as appropriate: access controls; authentication measures; encryption in transit; regular backups; logging and monitoring; and staff training and confidentiality procedures.

B.1.7. Personal data breach. Each Party shall notify the other without undue delay, and within 72 hours where feasible, of a personal data breach affecting personal data shared under the Agreement, with available detail. Each Party remains responsible for its own notifications to supervisory authorities and data subjects.

B.1.8. International transfers. International transfers of personal data are addressed in clauses 8.4 and 8.5 of the Agreement.

B.1.9. Retention. Each Party shall retain shared personal data only for as long as necessary for the purposes in Schedule 1 or as required by applicable law, and shall then delete or anonymise it.

Part 2 — Processor terms (apply only to clause 8.2(b) booking-coordination data)

B.2.1. The Partner shall process such personal data only on the Platform Provider's documented instructions, unless required by law (in which case it shall, where lawful, inform the Platform Provider).

B.2.2. The Partner shall ensure that persons authorised to process such data are subject to appropriate confidentiality obligations.

B.2.3. The Partner shall implement the security measures described in Part 1, clause B.1.6.

B.2.4. The Partner shall not engage a subprocessor for such data without the Platform Provider's prior written authorisation, and shall bind any authorised subprocessor to data protection obligations substantially equivalent to these terms, remaining liable for its performance.

B.2.5. Taking into account the nature of the processing, the Partner shall assist the Platform Provider, so far as possible, with data subject requests and with compliance with Articles 32 to 36 GDPR.

B.2.6. The Partner shall notify the Platform Provider without undue delay of any personal data breach affecting such data.

B.2.7. On termination, the Partner shall return and delete such data in accordance with clause 8.7, save where retention is required by law or the data is held by the Partner as an independent controller.

B.2.8. The Partner shall make available information necessary to demonstrate compliance with Article 28 GDPR and shall allow for and contribute to audits in accordance with clause 8.8.

Parties and roles:

• Platform Provider - controller (platform and booking data).
• Partner - independent controller (healthcare Services and medical records) and processor (booking-coordination data under clause 8.2(b)).

Categories of data subjects: End-Users / patients and, where applicable, natural persons acting for or representing a Booking Party or Payer.

Categories of personal data and purposes:

Special categories: The Platform Provider does not require or intentionally collect medical records or clinical health information through the Platform; clinical data is handled by the Partner outside the Platform as an independent controller. Booking data may nonetheless reveal data concerning health.

Retention period: the duration of the Agreement plus any period required by applicable law.