• We collect and handle your personal information in a lawful, fair, and open manner in accordance with this Privacy Policy.

• We only collect personal information that is reasonably necessary for our services or where required by law.

• We have security measures in place to protect your personal information from unauthorized access, modification or disclosure, misuse, interference or loss.

• We will take reasonable steps to ensure that any third parties who process your personal information also follow relevant privacy laws.

• We will give you access to and the ability to correct your personal information.

Depending on how you use our services (including our website), we may collect:

• Identity and Contact Details: Your first and last name, email address, phone number, and billing/shipping address.

• Account Information: A username and password if you create an account.

• Transaction & Payment Details: Your order history, payment information (processed by secure payment providers), and details related to enquiries, returns or refunds.

• Device & Usage Data: Your IP address, browser type, and browsing patterns (including pages you accessed and documents downloaded), often collected via cookies or similar technologies.

• Other Information: Any data you share voluntarily, such as feedback, survey responses, or contest entries.

We do not generally collect “sensitive information” as defined by the Privacy Act (such as information about ethnic origin, religious or political views, health information, tax file numbers etc) from you.

If you voluntarily submit sensitive information to us, you consent to our collection of such sensitive information and we will only use or disclose such information for the purpose for which it was provided or another directly related purpose or as allowed by law.

• Directly from You: When you use our services, visit our website or social media platforms, create an account, place an order, subscribe to our updates, or contact or communicate with us.

• Automatically: Through cookies, web beacons, or similar tracking technologies that gather data about your device and online activities.

• From Third Parties: Sometimes we receive personal information from delivery partners, payment gateways, social media platforms or other service providers.

We collect, store, use, and disclose personal information for the purposes for which it was initially collected or purposes related to such initial purpose (if such purpose would be within your reasonable expectations). For example, we collect, store, use and disclose personal information to:

1. Process and Deliver Orders: Handle orders, arrange shipping, and deal with returns or refunds.

2. Payments: Facilitate, process and obtain payment for any orders, and for billing and debt recovery purposes generally.

3. Customer Service: Register you to access and use our website, address inquiries, provide technical support, manage complaints and contact you when necessary.

4. Products: Help us tailor existing, or develop new, products, services or offers.

5. Marketing & Promotions: Send you special offers, promotions, or newsletters, subject to your preferences.

6. Analytics & Platform Improvements: Understand how you use our website, improve user experience, and develop new features.

7. Security & Fraud Prevention: Identify, investigate, and prevent fraudulent or illegal activities.

8. Legal Compliance: Fulfill our obligations under the Privacy Act, the Australian Consumer Law as set out on the Competition and Consumer Act 2010 (Cth) (“ACL”), and other relevant laws.

We use cookies and similar technologies to:

• Recognize you when you come back to our website;

• Store your preferences;

• Personalize your browsing experience; and

• Analyze site traffic and usage.

You can disable cookies in your browser settings. However, this may affect certain features or functionality of our website.

We may use third party payment providers to facilitate, collect and process payments made by you in connection with orders from time to time. When we do so, we do not have access to the credit card or billing information provided by you to our third party payment processor. If you are directed to a third party payment provider’s site or service, you may be subject to terms and conditions governing use of that third party’s site or service and that third party’s collection and disclosure practices in relation to personal information. Please review such terms and conditions and the third party’s privacy policy before using their services.

We may use your personal information with artificial intelligence or artificial intelligence powered tools to provide and improve our services, including to enhance user experience and personalise services.

We may provide links to third party websites within our website and social media sites. These linked sites are not under our control, and we do not accept responsibility for the conduct of companies the websites of which are linked to our website. Before disclosing your personal information to any third parties on such websites, we advise you to examine the terms and conditions of using that website and its privacy statement.

You have the option of not disclosing personal information to us or to use a pseudonym when dealing with us in relation to a particular matter. If you choose to withhold any personal information, we may not be able to provide you with part or all of our services or resolve a particular matter raised by you.

We may disclose your personal information where you have consented or when disclosure is necessary to achieve the purpose for which it was submitted or collected (as outlined above). In addition, we may receive and disclose personal information from or to our related entities.

We may share your personal information with:

• Service Providers: Organizations that carry out functions on our behalf, or assist us to deliver our services, such as our business associates, contractors, agents or service providers. These third parties may change from time to time. Some examples include payment processors, delivery companies, website hosts, marketing platforms and AI system developers or owners.

• Regulatory or Legal Authorities: Where required by law, court order, or for the protection of rights, property, or safety (ours, our customers’, or others).

• Business Transactions: If our business is sold or merged, your personal information may transfer to the new owner or relevant party.

Where we disclose your personal information to third parties, we take reasonable steps to ensure they handle your information in accordance with the Privacy Act, the APPs, and this Privacy Policy.

Personal information, including personal information obtained from our website, may be stored, disclosed, processed in or transferred outside of Australia from time to time, for example if we use data storage service providers to host or support our website or services and which store data on servers located outside Australia. The countries in which the personal information is received, stored or processed may not have data protection laws equivalent to those that apply in Australia.

You acknowledge and consent to such international data and information transfers with respect to personal information. Clause 8.1 of the APPs provides that if we disclose personal information about an individual to an overseas recipient, then we must take such steps as are reasonable in the circumstances to ensure the overseas recipient does not breach the APPs in relation to such information. An exception to this is if we obtain your consent. We intend to rely on this exception in the following way. Unless you notify us in writing to the contrary, you will be taken to have consented to the disclosure by us of personal information to overseas recipients on the basis that:

• clause 8.1 of the APPs will not apply to such disclosure;

• if the overseas recipient engages in any act that contravenes the APPs, you will not be able to seek redress under the Privacy Act;

• the overseas recipient may not be subject to any privacy obligations or to any principles similar to the APPs;

• you may not be able to seek redress in the overseas jurisdiction; and

• the overseas recipient may be subject to a foreign law that could compel the disclosure of personal information to a third party, such as an overseas authority.

We take reasonable steps to prevent unauthorised access to, disclosure, misuse or loss of, or interference with, your personal information, such as the following security measures:

• Secure servers and hosting;

• Payment encryption where possible;

• Limiting access to personal data to authorized staff; and

• Routine security assessments.

Despite these measures, no internet data transfer is entirely secure. While we strive to protect your information, we cannot guarantee absolute security. Except to the extent that liability cannot be excluded or limited due to applicable law, we assume no liability or responsibility for disclosure of your personal information due to unauthorised third party access, errors in transmission or other causes beyond our control.

We will take reasonable steps to destroy or permanently de-identify any personal information from our records and systems which is no longer required by us. We may retain your personal information even after you have completed your transactions with us if retention is reasonably necessary to comply with our legal obligations, meet regulatory requirements, resolve disputes, prevent fraud or abuse or enforce this Privacy Policy and our terms and conditions. We may retain personal information for a limited period of time, if requested by law enforcement.

• Access and Correction: We strive to keep your personal information accurate, up to date and complete. You have the right to ask for access to, or correction of, any personal information we hold about you. Please contact us using the details below. In order to protect your privacy and security, we will take reasonable steps to verify your identity before granting you access or enabling you to make corrections of your personal information. Except where the Privacy Act provides otherwise, we reserve the right to recover any reasonable costs involved in providing extensive access to personal information, for example the cost of supplying information held in archives. Our objective is to respond to any request to access personal information within a reasonable timeframe and no later than thirty (30) days after the request. We will endeavour to inform you if this timeframe is not achievable.

• Complaints: If you have any concerns about how we handle your personal information, contact us. We will investigate and respond within a reasonable time. If you’re unhappy with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

In some circumstances, we may not be in a position to grant access to your personal information, such circumstances include where:

• providing access is likely to pose a serious threat to the safety of an individual or the public;

• providing access is likely to unreasonably impact on the privacy of others;

• the request for access is frivolous or vexatious;

• providing access would reveal information which relates to existing or anticipated legal proceedings or otherwise impact on any negotiations;

• providing access is unlawful (including being unlawful as directed by a court or tribunal order) or is likely to impact on actions being taken in relation to alleged unlawful activities relating to our functions and activities; or

• granting access would impact on a commercially sensitive decision-making process.

If a data breach occurs that meets the “eligible data breach” criteria under the Privacy Act, we will notify both the OAIC and any individuals affected. Our notification will include information on how to protect yourself and reduce potential harm.

We may use your personal information to send you marketing updates or offers from time to time. By supplying us with your personal information, you give us permission to use your personal information for this purpose. You can opt out at any time by:

• Clicking “Unsubscribe” in any promotional email; or

• Contacting us using the details below.

Even if you opt out of marketing messages, we may still need to send important service or transactional messages (e.g., order confirmations).

• Refund and Return Requests: We may collect additional details (e.g., proof of purchase) for refunds or returns.

• Australian Consumer Law: This Privacy Policy does not alter your rights under the ACL.

• Data Retention: We keep records of refunds and returns as required by law or for legitimate business purposes (e.g., accounting, fraud checks).

Our services are not directed to children. We are committed to protecting the privacy needs of children and do not knowingly collect personal information from children. If you believe a child under the age of 15 has provided us with personal information, please let us know immediately. We will take steps to remove such information. Any such request must contain the child’s name and email address so we can locate such child’s personal information.

We may update this Privacy Policy occasionally to reflect changes in our practices or legal obligations. We will revise the “Last Updated” date at the top of this policy when changes are made. We encourage you to check this page regularly to stay informed and to ensure you are familiar with any chances. If you do not agree with the changes to our Privacy Policy, please notify us immediately in writing. Unless we hear from you, or if you continue to use our services, website or social media sites, you are taken to have accepted the changes to our Privacy Policy.

If you have any questions, concerns, or requests about this Privacy Policy or your personal information, please contact us at:

• Attention: Privacy Officer

• Email: info@nourishmefood.com.au

• Postal Address: PO BOX 311 Sydney Markets 2129 NSW

• Phone: 0404230093

We are committed to addressing any issues you have about our privacy practices and our compliance with Australian privacy laws.