Vendor Compliance Policy

1. Purpose

This Vendor Compliance Policy establishes expectations, protects data, and ensures ethical collaboration between Nineteen Marketing Services (SMC-Private) Limited ("NMS", "we", "our") and all vendors, suppliers, contractors, and service providers ("Vendors").

By engaging with NMS, Vendors agree to comply with this policy and all applicable laws and regulations.

2. Ethical Standards REQUIRED

All Vendors must adhere to the highest ethical standards, including:

• Strict compliance with anti-bribery and anti-corruption laws (including the U.S. Foreign Corrupt Practices Act)
• Prohibition of forced labor, child labor, and human trafficking
• Fair wage practices and safe working conditions
• Transparent business practices and accurate record-keeping

3. Data Protection GDPR/CCPA

Vendors handling NMS or client data must:

• Comply with all applicable data protection laws (GDPR, CCPA, etc.)
• Implement appropriate technical and organizational security measures
• Report data breaches to NMS within 48 hours of discovery
• Only process data as instructed by NMS and for specified purposes
• Provide evidence of compliance upon request

4. Communication Standards OPERATIONAL

To ensure smooth collaboration:

• Maintain prompt responses (within 24 business hours for urgent matters)
• Designate a primary point of contact for NMS communications
• Provide transparent updates on project status and challenges
• Use approved communication channels (email, project management tools)

5. AML & Financial Compliance LEGAL

Vendors must:

• Comply with anti-money laundering (AML) regulations in all jurisdictions
• Maintain accurate financial records for at least 5 years
• Cooperate with financial audits and due diligence requests
• Disclose any beneficial ownership (25% or more) upon request

6. Audit Rights ENFORCEMENT

NMS reserves the right to:

• Conduct scheduled or unscheduled compliance audits
• Request documentation proving compliance with this policy
• Inspect facilities (with reasonable notice) for service-related operations
• Require corrective action plans for any deficiencies

7. Consequences of Non-Compliance TERMINATION

Failure to comply may result in:

• Corrective action plans with strict deadlines
• Suspension of work orders or payments
• Termination of the vendor relationship
• Legal action for breaches causing harm or liability

8. Policy Updates

We may update this policy periodically. Vendors will be notified of material changes and are responsible for reviewing updates.

9. Contact Information

For compliance questions or to report concerns:

Email: compliance@nineteenmarketingservices.com

Phone: [+1/US or PK number as applicable]

Mail: Attn: Compliance Officer, NMS Group [address]