Ulloora Vendor Terms and Conditions | Version 1.1

Ulloora Vendor Terms and Conditions

Website terms for approved marketplace vendors Ulloora Pty Ltd ABN 40 699 387 221 Version 1.1 | Effective 3 October 2026

These Terms govern a Vendor’s access to Ulloora’s marketplace. Ulloora provides a digital marketplace and limited supporting services. Unless expressly stated, Ulloora does not supply, supervise, endorse or guarantee Vendor goods or services. The Vendor contracts directly with each Customer and remains responsible for its approved activities. Before activation, Ulloora displays the Vendor’s Commercial Terms Summary and links the applicable Category Schedules, Platform Policies and Partner Terms. The Vendor accepts all identified documents electronically during onboarding. The agreement becomes binding only when Ulloora activates the Vendor account.

Operator and Vendor

Ulloora Pty Ltd ABN 40 699 387 221 of 153 Beauchamp Drive, The Ponds NSW 2769, email admin@ulloora.com.au (Ulloora) The person or entity identified as the Vendor in the accepted Commercial Terms Summary (Vendor). If the Vendor acts as trustee, it contracts both personally and in its capacity as trustee of the trust identified in Schedule 1 and warrants that it has a full right of indemnity from trust assets.

Background

A. Ulloora operates an online marketplace through which customers can discover and transact with independent vendors. B. The Vendor wishes to offer only the goods and services approved in Schedule 1. C. The Parties agree that these Terms, the accepted Commercial Terms Summary, the applicable Category Schedules, the identified Platform Policies and Partner Terms form the Agreement.

1 Definitions and interpretation

1.1 In this Agreement: Approved Activities means the Vendor goods and services, categories, premises and service areas expressly approved in Schedule 1; Customer means a person using the Platform; Customer Data means personal information made available in connection with a Transaction; Data Incident means actual or suspected unauthorised access, disclosure, loss, misuse, alteration or compromise of data or credentials; Payment Provider means Stripe or another provider approved by Ulloora; Platform means Ulloora’s website, applications, portals and related marketplace systems; Platform Policies means the documents identified in Schedule 1; Transaction means an order, booking or engagement initiated through the Platform; Vendor Content means information, menus, listings, logos, photographs and other material supplied by the Vendor.

1.2 Australian Consumer Law means Schedule 2 to the Competition and Consumer Act 2010 (Cth). Applicable Law includes Commonwealth, state, territory and local laws, licences, codes, mandatory standards, regulator directions and legally binding requirements applying to a Party, activity or location.

1.3 Including is not limiting. A reference to a law includes amendments and replacements. A business day excludes weekends and public holidays in New South Wales. If documents conflict, the accepted Commercial Terms Summary prevails for the specific commercial matter it addresses, then the applicable Category Schedule, these Terms, and then Platform Policies. Partner Terms apply to the relevant integrated service. A policy cannot change Commission, liability or another material contractual term without fresh acceptance.

2 Term and approved scope

2.1 The Vendor applies by completing onboarding and accepting the Agreement electronically. Acceptance is the Vendor’s request to join. The Agreement starts only when Ulloora activates the Vendor account and continues until terminated. There is no minimum term.

2.2 Either Party may terminate without cause on 30 days’ written notice.

2.3 The Vendor may offer only Approved Activities. Approval is by category, not individual item, unless

Schedule 1 states otherwise. An unapproved category, regulated activity or prohibited item is a

material breach.

2.4 The Vendor must obtain Ulloora’s approval before adding a category, premises, regulated activity or materially different service. A new category requires fresh online acceptance of its Category Schedule and any revised Commercial Terms Summary before listing.

3 Marketplace role and customer contract

3.1 The Vendor is the supplier and seller of its goods and services. The contract for each supply is between the Vendor and Customer. The Vendor issues the receipt or tax invoice for its supply and is responsible for consumer guarantees, safety, quality, delivery, warranties, refunds and claims relating to that supply.

3.2 Ulloora provides marketplace, technology, communication and limited payment or delivery coordination services. Ulloora is not the Vendor’s employer, partner, franchisor or general agent and does not control how the Vendor performs its work.

3.3 No general agency exists. Any agency is limited to an express payment, communication or delivery coordination function in this Agreement and ends when that function is complete.

3.4 Ulloora does not display verification badges or represent that a Vendor is approved, continuously compliant or guaranteed safe. Internal checks are risk controls only and do not replace the Vendor’s duties or a Customer’s judgment.

3.5 Ulloora is not responsible for a transaction completed outside the Platform. Ulloora does not prohibit a Vendor and Customer from dealing directly, but Customer Data obtained through Ulloora must not be used for marketing without separate express consent.

4 Onboarding verification and continuing disclosure

4.1 Before activation the Vendor must provide accurate identity, entity, ABN, beneficial ownership, GST, banking, Payment Provider, premises, licence, qualification, clearance, insurance and other information reasonably required for its category.

4.2 Ulloora may directly verify core credentials where stated in a Category Schedule or reasonably required by risk. Where Ulloora accepts a copy or declaration, the Vendor warrants it is genuine, current, complete and applicable to every person and activity represented.

4.3 The Vendor must immediately disclose expiry, suspension, cancellation, conditions, regulator action, prohibition notices, insolvency events, relevant criminal charges, serious complaints, recalls, claims, ownership changes, premises changes and anything that makes earlier information inaccurate.

4.4 Ulloora may reverify at expiry, annually, after a serious complaint or material change, and by risk- based spot audit. Ulloora may pause onboarding or suspend affected activities until satisfactory evidence is provided.

4.5 The Vendor is responsible for employees, contractors and subcontractors and must ensure they meet the same relevant requirements. Nothing in this Agreement authorises sham contracting or avoids employment, workers compensation or workplace laws.

4.6 The Vendor must comply with all applicable laws, regulations, codes, licences, permits and approvals required to carry out its Approved Activities, and must maintain all such licences, permits and approvals in good standing for the duration of this Agreement. The Vendor must provide evidence of any such licence, permit or approval to Ulloora on request.

5 Listings and Vendor Content

5.1 The Vendor must ensure listings are accurate, current, lawful, not misleading and within Approved Activities. Prices must include GST where the law requires and disclose material fees and restrictions.

5.2 Ulloora may format Vendor Content without materially changing its meaning. Ulloora may reject, remove or suspend content reasonably suspected to be unsafe, unlawful, counterfeit, misleading, infringing, outside scope or contrary to Platform Policies.

5.3 The Vendor warrants it owns or may use Vendor Content and has all model, property, copyright, trade mark and moral-rights permissions required for Ulloora’s use.

5.4 The Vendor grants Ulloora a non-exclusive, worldwide, royalty-free licence during the Term to host, reproduce, adapt for format, communicate and promote Vendor Content for the Platform and Ulloora marketing. Ulloora may retain limited copies after termination for law, evidence, complaints and historical records.

5.5 Ulloora may use de-identified and aggregated analytics indefinitely, provided they do not reasonably identify the Vendor’s customers or disclose the Vendor’s confidential information.

6 Transactions fulfilment and customer complaints

6.1 The Vendor must accept, reject and fulfil Transactions within applicable timeframes and must promptly disclose inability to perform. Accepted Transactions must be completed after termination unless Ulloora cancels for safety, legal or serious operational reasons.

6.2 The Vendor initially handles complaints about its goods, services or fulfilment. A Customer may escalate an unresolved complaint after 48 hours or immediately for safety, fraud or serious misconduct.

6.3 The Vendor must provide requested records and cooperate with Ulloora, payment providers, delivery providers, insurers and regulators. Ulloora may take urgent action to protect Customers without deciding final liability.

6.4 Only verified Ulloora Transactions may generate reviews. Genuine positive and negative reviews are treated consistently. Ulloora may remove fake, unlawful, threatening, privacy-breaching, irrelevant or policy-breaching content. Vendors may respond or report reviews but may not edit or suppress them.

6.5 For scheduled services, the Vendor must select a category-specific cancellation policy approved by Ulloora. The policy must be displayed before booking. A Vendor may not impose an undisclosed or unlawful cancellation or no-show fee. If the Vendor cancels, the Customer is entitled to release of the authorisation or a full refund, subject to non-excludable law.

7 Payments commission GST and tax reporting

7.1 Each Vendor must establish and maintain its own verified Stripe Connected Account. Customer payments for Vendor goods or services are processed as direct charges for that account. Ulloora does not hold, bank, escrow or lend Vendor funds.

7.2 The Vendor is merchant and supplier for its goods or services and issues the relevant receipt or tax invoice. Ulloora separately receipts or invoices platform or delivery fees that it charges.

7.3 Ulloora invoices Commission monthly and each invoice is due within 7 days. Unless the accepted Commercial Terms Summary states a different expressly agreed rate, Commission for each completed Transaction is the greater of AUD 1.00 or 3% of the Commission base, plus GST. Commission is calculated on the GST-inclusive price actually paid for Vendor goods or services after Vendor-funded discounts, excluding tips, delivery fees and separately stated Ulloora fees. No Commission is payable on a fully cancelled or fully refunded Transaction, and Commission is recalculated on the amount retained by the Vendor after a partial refund or final chargeback reversal.

7.4 The Vendor must pay a subscription fee of AUD 30.00 plus GST for each month, or part month, in which its Vendor account is active. The fee is charged once per Vendor account, not per approved category or location, unless the accepted Commercial Terms Summary expressly states otherwise. The subscription

fee is invoiced monthly and is payable within 7 days. It is not calculated by reference to Transaction value and is not reduced by a refund or chargeback.

7.5 The Vendor bears all Stripe, card and other Payment Provider processing fees relating to its Transactions. The Vendor must account for those costs when setting its product or service prices and must not impose an undisclosed or unlawful payment surcharge. Processing fees are separate from Commission and the subscription fee and may not be deducted from amounts owed to Ulloora.

7.6 The Vendor authorises Ulloora to direct debit its nominated account on the invoice due date for due Commission, refunds, chargebacks and other properly invoiced amounts under a separate direct-debit authority. A changed debit account requires a new signed or securely authenticated authority. If a debit fails, Ulloora may retry once, notify the Vendor and suspend new Transactions if the invoice remains unpaid 7 days after its due date. A genuine and promptly notified dispute is reviewed before disputed recovery where reasonably possible.

7.7 The Vendor must notify Ulloora of an invoice dispute within 14 days, identifying the affected Transaction and reason. Undisputed amounts remain payable. Failure to notify is evidence of acceptance but does not remove statutory rights or correction of an obvious billing error. Adjustments may be made by credit note or corrected invoice.

7.8 The Vendor must provide accurate identity, ABN, GST and transaction information and authorises disclosure to the ATO and other authorised agencies where legally required, including for the Sharing Economy Reporting Regime. Ulloora does not provide tax advice.

7.9 If Stripe freezes, delays or reverses a payment, the Vendor’s rights are subject to Stripe’s applicable terms. Ulloora is not liable for independent Payment Provider action unless caused solely by Ulloora’s breach or unauthorised act.

7.10 The Vendor controls its prices and Vendor-funded discounts. Ulloora may discount a Transaction only with Vendor approval or where Ulloora fully funds the discount without reducing Vendor proceeds. Vendor-funded discounts reduce the Commission base. For an Ulloora-funded discount, Commission is calculated on the amount the Vendor is entitled to receive for its supply.

8 Payment authorisation capture cancellation and refunds

8.1 At checkout, Ulloora may direct Stripe to authorise the Customer’s payment without capture. Authorisation reserves the amount but does not complete the charge. Ulloora may send a capture instruction immediately after valid fulfilment confirmation.

8.2 Valid fulfilment confirmation includes a Customer collection PIN or QR code, an integrated delivery provider’s completed-delivery status, or a recorded service-completion status under the Platform process. For a later booking outside the authorisation window, Ulloora may securely save the payment method with Customer permission and seek authorisation closer to performance.

8.3 If a Transaction is cancelled before fulfilment and no fee is permitted, Ulloora may cancel the full authorisation. If a disclosed and lawful cancellation fee applies, Ulloora may capture only that fee and release the balance. Commission applies only to a cancellation fee actually captured. Consumer-law rights prevail.

8.4 After capture, the Vendor decides a refund request first and must respond within 24 hours. Ulloora may assess evidence and direct a full or partial refund if the Vendor does not respond within that period, or immediately where required by law, a regulator, a payment provider or serious safety considerations.

8.5 The Vendor bears refunds and chargebacks except to the extent caused solely by Ulloora’s platform error, unauthorised act or breach. The Vendor must provide fulfilment evidence promptly. Ulloora may coordinate or submit a chargeback response but does not guarantee success. The Vendor receives the benefit of an amount successfully recovered.

8.6 The Parties must cooperate on suspected fraud. Ulloora may apply Payment Provider rules and available evidence, including control of authentication, fulfilment and proof, but must not knowingly allocate loss to the Vendor on unsupported grounds.

8.7 The Vendor must secure credentials, use multifactor authentication where available, maintain individual authorised users, remove former users and immediately report compromise. Stripe verifies settlement-account changes. Ulloora does not accept manual settlement-account changes outside Stripe.

9 Delivery

9.1 Fulfilment may be Customer pickup, Vendor delivery or integrated third-party delivery. Ulloora does not physically deliver goods. Where Ulloora integrates DoorDash or another provider, the Customer pays the delivery provider's exact quoted delivery fee without an Ulloora markup. The fee must be displayed separately before checkout, is excluded from the Commission base and may vary according to the delivery provider's pricing and the circumstances of the delivery.

9.2 The Vendor remains the Customer-facing seller and is responsible for timely preparation, correct goods, packaging, labelling, allergens and legally compliant time and temperature controls. The delivery partner is responsible for collection and delivery to the extent stated in the applicable Partner Terms. Ulloora only facilitates the integration.

9.3 For a failed integrated delivery, the Vendor must provide the Customer remedy. Ulloora will pursue the claim against the delivery partner in accordance with the applicable Partner Terms and will pass to the Vendor any amount actually recovered for that loss. The Vendor's obligation to provide the Customer remedy is not dependent on the delivery partner paying or on any recovery by Ulloora. Ulloora does not fund the refund or guarantee recovery. Ulloora remains responsible for loss caused solely by its own platform error or unauthorised instruction, subject to clause 15.

9.4 Vendors using their own drivers warrant that each driver and vehicle is licensed and appropriately insured for commercial delivery. Ulloora relies on that declaration unless it reasonably requests evidence.

9.5 The Vendor must comply with clearly linked Partner Terms identified during onboarding, including pickup, packaging, handover, waiting-time, cancellation and evidence requirements. Ulloora may add or replace partners on notice, but a material new cost, liability or obligation requires fresh online acceptance.

10 Privacy cybersecurity and communications

10.1 Each Party must comply with applicable privacy, spam and direct marketing laws. The Vendor may use Customer Data only to fulfil the relevant Transaction, respond to a complaint, comply with law or for another purpose separately authorised by the Customer.

10.2 Ulloora will provide only information reasonably necessary for the fulfilment method. The Vendor must minimise collection, restrict role-based access, protect accounts and devices, use secure transfer and storage, train personnel, remove former-user access and not provide offshore or subcontractor access without lawful safeguards.

10.3 The Vendor must notify Ulloora immediately and no later than 24 hours after becoming aware of or reasonably suspecting a Data Incident. The initial notice may be incomplete. The Vendor must contain the event, preserve evidence, cooperate with investigations and provide continuing updates.

10.4 Neither Party may prevent a notification required by law. The Parties will coordinate notifications to the extent legally permitted. Each Party remains responsible for its own statutory assessment and notification obligations.

10.5 The Vendor must return, delete or de-identify Customer Data when no longer required, subject to documented legal retention duties. Customer access codes and similarly sensitive information must not be provided to or stored by Ulloora unless expressly required for a Platform function.

11 Insurance

11.1 Except for the Food and Beverage Schedule, which requires AUD 20 million combined public and product liability cover, the Vendor must maintain all insurance appropriate and legally required for its Approved Activities, risks, employees, contractors, vehicles, products, data and locations. Ulloora does not otherwise impose fixed minimum limits unless Schedule 1 states them.

11.2 The Vendor warrants its policies cover the actual Approved Activities and relevant personnel and do not contain an exclusion that materially defeats the required protection. Claims-made cover must have appropriate retroactive dates and run-off where reasonably available.

11.3 The Vendor must provide certificates, schedules or relevant policy information when reasonably requested. All Vendors must declare worker arrangements; evidence of workers compensation is required where legally required. Cyber/privacy cover is assessed individually.

11.4 Insurance does not cap liability unless clause 15 expressly says so and does not relieve the Vendor of its obligations.

12 Audit records and cooperation

12.1 The Vendor must maintain transaction, tax, compliance, training, licence, safety, recall, complaint and insurance records for the periods required by law and the applicable Category Schedule.

12.2 Ulloora may conduct or commission a reasonable audit on prior notice, except in an urgent safety, fraud or regulatory matter. The Vendor must provide reasonable access to relevant records and personnel and implement proportionate corrective actions.

12.3 The Vendor pays the reasonable cost of an audit only if the audit identifies a material breach of this Agreement or an applicable Category Schedule. Ulloora must provide the Vendor with a written estimate of the expected scope and cost of the audit before commencing it, and the audit may only proceed with the Vendor's prior written acceptance of that estimate. Ulloora must not require unnecessary, duplicative or punitive audits.

12.4 Ulloora may retain agreements, transaction records and compliance evidence for 7 years and longer where required by law, insurance, litigation hold, regulator direction or an unresolved claim.

13 Suspension and termination for cause

13.1 Ulloora may impose a temporary and proportionate hold where it has reasonable grounds to suspect a breach. Ulloora may immediately suspend all affected activity for serious safety, child-safety, fraud, credential, regulatory, privacy, payment or repeated-compliance risk.

13.2 There is no fixed review period, but Ulloora must review a suspension within a reasonable time, act in good faith, keep restrictions proportionate and provide updates where legally and operationally practicable.

13.3 Either Party may terminate for a material breach not remedied within 10 business days after notice, if capable of remedy. Ulloora may terminate immediately for fraud, deliberate misconduct, serious safety risk, prohibited activity, repeated breach, invalid core credentials, insolvency where lawful, or conduct that creates a substantial regulatory risk.

13.4 On termination, the Vendor must stop new Transactions, complete or cooperate in cancelling accepted Transactions, pay amounts due, address refunds and chargebacks, return Ulloora property and preserve required records. Clauses intended by nature to survive continue.

14 Electronic acceptance policies and changes

14.1 Only the account owner or an authorised administrator may accept or change contractual terms. The person must use an authenticated account, provide name, role and email, and declare authority to bind the Vendor. Ulloora may request evidence of authority.

14.2 Before acceptance, Ulloora must make these Terms, the personalised Commercial Terms Summary, each applicable Category Schedule, identified Platform Policies and Partner Terms available to open and download. Each document must carry a version or effective date.

14.3 Acceptance requires an unticked checkbox and an Accept and Continue action. Ulloora records the Vendor entity, ABN, accepting person, account email, authority declaration, date and time, IP address, document versions and activation event, and provides an emailed or downloadable confirmation.

14.4 The Platform Policies identified by title, version and effective date in the Commercial Terms Summary form part of the Agreement. One acceptance may cover all documents if each is clearly linked and identified.

14.5 Ulloora may update ordinary Platform Policies on 30 days’ notice. A legal, safety or security change may take effect immediately with notice as soon as practicable. A material change to Commission, payment obligations, liability, indemnities, dispute rights or important Vendor duties requires fresh online acceptance.

14.6 If the Vendor does not accept a material change by its effective date, Ulloora may stop new Transactions and suspend the listing until acceptance. Existing accepted Transactions remain governed by the applicable earlier terms unless law or safety requires otherwise. The Vendor may terminate without penalty before a materially detrimental non-urgent change takes effect.

14.7 A change to an individual Commission rate requires 30 days’ notice and express acceptance of an updated Commercial Terms Summary. It applies only to Transactions accepted from its effective date.

15 Indemnities and liability

15.1 The Vendor indemnifies Ulloora against third-party claims and direct loss to the extent caused by the Vendor’s breach, negligence, unlawful conduct, Vendor Content, goods or services, personnel, property damage, personal injury, intellectual property infringement, privacy breach, child-safety incident, product or food safety event, recall, tax information error, refund or chargeback responsibility.

15.2 The indemnity is reduced to the extent Ulloora caused or contributed to the loss, consistent with clause 15.6. Ulloora must take reasonable steps to mitigate loss and must not recover twice for the same loss.

15.3 The indemnified Party must give reasonably prompt notice, permit reasonable participation in the defence, and not settle an admitted-liability claim without the indemnifying Party’s consent, not to be unreasonably withheld. Urgent protective action is permitted.

15.4 To the extent law permits, the Vendor’s aggregate liability for Vendor-caused claims is capped at the applicable insurance limit required for the relevant risk, including AUD 20 million for food-vendor combined public and product liability risks. For other categories, the applicable limit is the limit of the appropriate insurance maintained or required to be maintained for the activity.

15.5 The insurance-based cap does not apply to fraud, deliberate misconduct, unpaid amounts or liability that cannot lawfully be limited. A failure to maintain required insurance does not reduce liability below the amount that would reasonably have been available under compliant cover.

15.6 Each Party is responsible only to the extent it caused or contributed to the loss. The Vendor does not indemnify Ulloora for Ulloora’s negligence, breach, platform error or unauthorised action.

15.7 Ulloora’s aggregate ordinary liability is limited to Commission actually received from the affected Vendor during the preceding 12 months, even if that amount is zero. This limitation does not apply to Ulloora’s fraud, deliberate misconduct or liability that cannot lawfully be limited.

15.8 To the maximum extent permitted by law, neither Party is liable for indirect or consequential loss, loss of profit, goodwill or opportunity, except where such loss forms part of a third-party claim covered by an indemnity.

16 Confidentiality

16.1 Each Party must protect the other’s confidential information and use it only for this Agreement, except for permitted disclosure to personnel, insurers, financiers, purchasers and professional advisers who are bound to protect it, or where law requires disclosure.

16.2 General confidentiality obligations continue for 5 years after termination. Obligations continue for as long as required by law for personal information and security information, and for as long as information remains a trade secret.

16.3 On request or termination, information must be returned or securely destroyed except for protected archival copies required by law, insurance, evidence or automated backups subject to access controls.

17 Force majeure

17.1 A Party is not liable for delay in an obligation genuinely prevented by an event beyond reasonable control, including natural disaster, government restriction, major provider outage, telecommunications failure, industrial action or epidemic, if it promptly notifies the other Party and mitigates the impact.

17.2 Force majeure does not excuse accrued payments, privacy, confidentiality, safety, incident reporting, reasonable business continuity or events reasonably preventable by the affected Party.

17.3 Ulloora does not guarantee uninterrupted or error-free Platform availability. It may conduct maintenance and make reasonable changes and will use reasonable efforts to restore a material outage. The Vendor must maintain reasonable backup processes for accepted Transactions. Subject to clause 15, Ulloora is not liable for indirect loss, lost opportunity or anticipated profit from ordinary downtime.

18 Disputes

18.1 A Party must give a written dispute notice with reasonable details. Senior representatives must negotiate in good faith for 20 business days.

18.2 If unresolved, either Party may refer the dispute to online mediation administered by a mutually agreed mediator. If the Parties do not agree within 5 business days, the mediator may be nominated by the Resolution Institute or its successor. Costs are shared equally unless agreed otherwise.

18.3 Either Party may terminate the relationship during a dispute under clause 2.2, but termination does not extinguish accrued obligations or claims. The Parties may settle and release a dispute in writing. A Party may commence NSW court proceedings only as a last resort after mediation ends or 30 days after referral if mediation has not occurred. This clause does not prevent urgent relief, recovery of an undisputed debt or action required to protect Customers.

19 General

19.1 NSW law governs this Agreement. Mandatory Commonwealth, state, territory and local laws continue to apply where the Vendor operates or a Transaction is fulfilled.

19.2 Formal notices are sent to the Vendor’s registered email, with a dashboard copy where appropriate. Important material-change, suspension, termination, payment-default and safety notices must be emailed. The Vendor sends notices to admin@ulloora.com.au. A notice is received when accessible before 5 pm on a business day, otherwise the next business day. An automated delivery failure means it was not received.

19.3 This Agreement is the entire agreement on its subject matter. A waiver must be clear. Invalid provisions are read down or severed. Rights do not merge. Electronic acceptance is permitted and has the effect stated in clause 14.

19.4 The Vendor may not assign, transfer or change the contracting entity, ABN, ownership or control without Ulloora’s approval. A new legal entity must complete onboarding and accept the Agreement. Ulloora may assign to a related body corporate, financier or genuine business purchaser that assumes its obligations, on notice, provided the assignment does not materially reduce Vendor rights. The Vendor may terminate before an assignment that materially disadvantages it takes effect.

Schedule 1 Commercial Terms Summary

S1.1 Schedule 1 is the personalised Commercial Terms Summary created and maintained electronically through the Ulloora website. It is not a paper form and is not completed, signed or countersigned within these Vendor Terms.

S1.2 Before acceptance, the website must display the Vendor's legal name, ABN or ACN, entity and trustee capacity where applicable, notice details, accepting authorised user, approved categories, premises and service areas, applicable Category Schedules, cancellation policy, insurance requirements, Platform Policies, Partner Terms and any additional negotiated terms.

S1.3 The Commercial Terms Summary must state: Commission equal to the greater of AUD 1.00 or 3% of the Commission base, plus GST; a subscription fee of AUD 30.00 plus GST per Vendor account per month; monthly invoicing payable within 7 days; Vendor responsibility for Stripe, card and other payment-processing fees; and Customer responsibility for the exact quoted DoorDash or other integrated delivery-provider fee without an Ulloora markup.

S1.4 The website must display the Commission, subscription fee, processing-fee allocation and delivery-fee allocation prominently before the Vendor accepts. The Vendor-specific information and accepted document versions form part of this Agreement without being reproduced in these Vendor Terms.

S1.5 The Vendor accepts Schedule 1 through the onboarding checkbox and Accept and Continue button described below. No handwritten signature, manual completion of this document or Ulloora countersignature is required.

S1.6 Ulloora must retain an immutable acceptance record containing the complete Schedule 1 displayed to the Vendor, the identity and authority of the accepting user, the acceptance timestamp, applicable document versions and the activation timestamp. Ulloora must make the accepted summary available to the Vendor by email, download or its account dashboard.

S1.7 A later change to Commission, the subscription fee or another material Vendor-specific commercial term requires 30 days' notice and the Vendor's fresh express online acceptance before it takes effect. If the Vendor does not accept by the effective date, Ulloora may stop new Transactions and suspend the account until acceptance, without affecting accrued obligations or accepted Transactions.

Schedule 2 Food and Beverage Vendors

F1 The Vendor must comply with the Australia New Zealand Food Standards Code and every applicable state, territory and council requirement. The Vendor must provide evidence of food-business

notification, registration or approval and Food Safety Supervisor and food-handler requirements where applicable, including Standard 3.2.2A requirements.

F2 Home-based food businesses are permitted only if all premises, council, notification, food-safety and insurance requirements are satisfied. Ulloora may apply enhanced verification and spot audits.

F3 Alcohol is prohibited at launch. The prohibited-goods policy also excludes tobacco, vapes, medicines, illegal drugs, weapons, dangerous or age-restricted goods, recalled or banned products and unlawful food.

F4 Every menu item must display applicable allergen declarations before publication. The Vendor is responsible for recipes, substitutions, cross-contamination controls and prompt updates. Special claims such as allergen-free, gluten-free, halal, kosher or organic require a formal declaration and supporting evidence available on request.

F5 The Vendor must notify Ulloora immediately and no later than 2 hours after awareness of suspected contamination, serious allergic reaction, recall, food-borne illness, prohibition order or other serious food-safety incident, and separately meet every regulator deadline.

F6 All Vendors must keep supplier and batch or lot traceability records appropriate to their business and maintain a written recall and withdrawal procedure. They must cooperate with affected Customers and regulators.

F7 The Vendor must use lawful packaging, labelling, storage and time-and-temperature controls and keep records available on request. It remains responsible throughout delivery, subject to the back-to-back delivery-provider recovery in clause 9.

F8 Vitamins, supplements or health-claim products may be sold only if lawfully supplied and compliant with applicable TGA, Food Standards Code, advertising and labelling requirements. Ulloora may request substantiation.

F9 The Vendor must maintain AUD 20 million combined public and product liability cover and all other appropriate or legally required insurance.

Schedule 3 Tutoring and Child Related Services

T1 Online and in-person services to people under 18 are permitted only within approved categories. The Vendor must verify the qualifications represented and must ensure every worker is suitable, supervised and bound by child-safety obligations.

T2 Before child-facing work, Ulloora will verify worker identity and all legally required child-work clearances through the relevant state or territory system. The Vendor must provide identifiers and consent, monitor status and disclose changes immediately.

T3 Communications must use approved channels with appropriate parent or guardian visibility. Unauthorised private messaging, grooming conduct, sexualised conduct, gifts intended to create secrecy, and unauthorised social-media contact are prohibited.

T4 Unsupervised in-person sessions require specific written parental consent, verified clearances and approved safeguards. A clearance is a screening measure and does not itself authorise an unsupervised arrangement.

T5 Tutors must never transport children in connection with an Ulloora booking.

T6 Photography, audio or video recording, publication or use of a child’s image or voice requires specific written parental consent identifying the approved purpose. General booking consent is insufficient.

T7 On a credible child-safety allegation, Ulloora may immediately suspend child-facing activity pending assessment, preserve evidence and make or support required reports. Precautionary suspension is not a finding of guilt.

T8 The Vendor must comply with applicable mandatory reporting, reportable conduct, Child Safe Standards and codes of conduct, and must immediately escalate safeguarding concerns to Ulloora and relevant authorities where required.

T9 The Vendor must not complete assessed work or facilitate cheating and must not guarantee academic results or admissions.

T10 The Vendor must maintain all appropriate and legally required insurance without fixed minimum limits. Ulloora may request evidence or impose a reasonable additional requirement following risk assessment.

Schedule 4 Beauty and Personal Care Services

B1 Only non-medical, non-invasive services within approved categories are permitted at launch. Cosmetic injections, prescription-only treatment, medical diagnosis, AHPRA-regulated treatment, tattooing, piercing, microneedling and all other skin-penetration services are prohibited.

B2 The Vendor must hold every required business, council, health, premises and practitioner approval, conduct suitable consultation, identify contraindications, obtain informed consent, follow product instructions and maintain hygienic equipment and premises.

B3 Services to people under 18 require written parental or guardian consent and compliance with all service-specific age and child-safety laws. Consent does not authorise prohibited services.

B4 Mobile services at Customer premises are permitted subject to worker identification, hygiene, safety assessment, appropriate insurance and the approved service categories.

B5 The Vendor must keep treatment, product batch, consultation, consent and adverse-event records for the period required by law, professional standards, insurance and the age of the Customer. A fixed two-year period does not override a longer duty.

B6 The Vendor must promptly respond to and report serious adverse reactions, injury, infection, product safety concerns and regulator action.

B7 The Vendor must maintain all appropriate and legally required insurance without fixed minimum limits. Ulloora may request evidence or require additional cover where reasonably justified.

Schedule 5 Home and Property Services

H1 All lawful services may be offered only within approved categories. Electrical, plumbing, gas, building and other regulated work requires every licence and statutory approval applicable in the place of work.

H2 Ulloora will collect copies and Vendor declarations but will not routinely verify official registers. The Vendor warrants every copy is genuine, current and applicable and must immediately disclose any restriction. Ulloora retains a verification and suspension right.

H3 Where home-building compensation or other statutory insurance is required, Ulloora relies on the Vendor’s formal declaration that it is in place. The Vendor remains solely responsible for certificates, consumer disclosures and compliance.

H4 Asbestos, hazardous-material, confined-space and comparable high-risk work is prohibited at launch.

H5 The Vendor and Customer agree property access, scope changes and price variations directly. Ulloora does not receive or store keys, alarm codes or access credentials and does not authorise off-platform variations. The Vendor remains responsible for secure handling and compliance with quotation, written-contract, variation and consumer laws.

H6 The Vendor must assess workplace risks, protect Customer property, report damage or suspected theft immediately, preserve evidence, and ensure subcontractors meet all flow-down obligations.

H7 The Vendor must maintain all appropriate and legally required insurance without fixed minimum limits, including workers compensation where required and appropriate vehicle or trade-specific cover.

Schedule 6 Agriculture and General Product Vendors

A1 The Vendor may sell lawful products only within approved categories. It is responsible for mandatory safety and information standards, bans, warnings, origin claims, weights and measures, traceability, warranties, repairs, authenticity, import legality and all product representations.

A2 Live animals and livestock are prohibited. Plants and seeds are permitted only in compliance with Commonwealth, state and territory biosecurity, quarantine, movement, pest, disease and labelling rules.

A3 Agricultural chemicals, pesticides, herbicides and veterinary products are prohibited at launch. Electrical goods, children’s products and toys are also prohibited at launch.

A4 Ordinary compliant cosmetics may be sold. Therapeutic goods, medicines and products making medicinal or therapeutic claims are prohibited at launch.

A5 Counterfeit, recalled, banned, unsafe and unlawfully imported products are prohibited. The Vendor is responsible for authenticity and lawful import evidence. Ulloora may immediately remove a listing on a credible complaint pending evidence and investigation.

A6 The Vendor must maintain supplier, batch, serial or lot records appropriate to the product and cooperate with recalls. It must notify Ulloora immediately and no later than 24 hours after awareness of a recall, ban, serious safety incident or circumstances likely to require regulator reporting.

A7 The Vendor must separately comply with statutory reporting deadlines, including Australian Consumer Law requirements that may require reporting a product-associated death, serious injury or illness, or a voluntary recall, within 2 days.

A8 The Vendor must maintain all appropriate and legally required insurance without fixed minimum limits. Ulloora may request evidence or require additional cover where reasonably justified.

Schedule 7 Delivery and Collection

D1 The approved methods are Customer pickup, Vendor delivery and Ulloora-coordinated third-party delivery. Ulloora does not physically deliver goods.

D2 The Vendor must prepare goods on time, verify the order, use tamper-evident and fit-for-purpose packaging where appropriate, label allergens and handling needs, and record documented pickup.

D3 For DoorDash or another integrated provider, Ulloora facilitates the delivery request and the Customer pays the provider's exact quoted delivery fee without an Ulloora markup. The fee is separately shown before checkout, excluded from Commission and applied in accordance with the applicable Partner Terms.

D4 The Vendor provides the Customer remedy. The delivery partner bears delivery loss to the extent required by the applicable Partner Terms. Ulloora will pursue the claim against the delivery partner in accordance with the applicable Partner Terms and pass to the Vendor any amount actually recovered under clause 9.3. The Vendor's obligation to provide the Customer remedy is not dependent on the delivery partner paying.

D5 The Parties must preserve pickup, tracking, temperature, delivery and complaint evidence. Customer and driver information may be shared only to the extent necessary for delivery and lawful claims handling.

D6 A valid collection PIN or QR code or an integrated provider completed-delivery status authorises Ulloora to send Stripe the capture instruction immediately. Cancellation before fulfilment is handled under clause 8.

Online acceptance declaration

The following declaration must appear immediately above an unticked checkbox during Vendor onboarding: I confirm that I am the Vendor’s account owner or authorised administrator and have authority to bind the Vendor. I have read and agree to the Ulloora Vendor Terms and Conditions, the Commercial Terms Summary, each applicable Category Schedule, the Platform Policies and the identified Partner Terms. I understand that the agreement becomes binding when Ulloora activates the Vendor’s account. The action button must read Accept and Continue. Ulloora must retain the complete acceptance record described in clause 14 and make an acceptance confirmation available by email or download. No handwritten signature or Ulloora countersignature is required. Acceptance record fields: Vendor legal name and ABN; accepting person, role, account and email; authority declaration; acceptance timestamp; IP address; each document title and version; Commercial Terms Summary; activation timestamp; and subsequent material-change acceptances.