WHISTLE BLOWING POLICY

ITHCA Group is committed to upholding the highest standards of governance, transparency, integrity, and accountability. Therefore, ITHCA Group developed its own whistleblowing policy setting the principles and steps to be followed in reporting violations to the laws or to the Group bylaws and procedures. Reported violations shall be relevant to the Group’s business or activities regardless of being committed by ITHCA Group’s staff or its contractors for the Group undertake appropriate measures to investigate such violations.

What are the violations that could be reported?

Staff and any interested party, including any of the Group’s customers or suppliers, could report any irregularities without fear of retribution. Irregularities include any conduct contrary to the law and regulations or the Group policies, including its Code of Ethics and Business Conduct, and any conduct deemed as unethical behavior.

The protection provided under the Policy

The policy provides assurance and support for reporting violations committed while undertaking or in connection with the Group’s business or activities. It provides an option for a speedy, effective, and confidential investigation within the Group for the purported violations.

The Group will provide protection to the person reporting a violation from any unjust or arbitrary decisions, harassment, or act of reprisal attributed to bona fide reporting of the purported violations.

Policy applicability

ITHCA Group Stakeholders: Employees, Suppliers, Contractors, Consultants, Customers, Trainees, and any other third party engaged with ITHCA Group such as visitors.

 Reporting

The person may anonymously send an email briefly describing the misconduct/improper activity and how they know about it to: whistleblower@ithca.om

The report must include:

• Specify what, who, when, where, and how.
• If there is more than one allegation, number each allegation and describe them separately.
• The name of the person reporting the violation (optional if the person chooses not to disclose their identity).
• The details of the reported violation (description of the act or conduct being reported).
• Any supporting evidence, if available.
• Any additional information that may help in investigating the purported violation.