AssetBase Privacy Policy
Effective date: 30 October 2025
Company name: ASSETBASE PTY LTD
ABN: 39 616 740 437
Contact: Privacy Officer — info@assetbase.com.au | (02) 7907 3968 | Suite 601 / 24
Montgomery St, Kogarah NSW 2217

1. Purpose & scope
   This Privacy Policy explains how ASSETBASE PTY LTD (“Assetbase”, “we”, “us”, or “our”)
   collects, holds, uses, discloses and secures personal information, and how individuals
   can access and correct their personal information or make a privacy complaint.
   It applies to all personal information we hold about customers, suppliers, contractors,
   employees, job applicants, and visitors to our website and offices in Australia.
   This policy aligns with the Privacy Act 1988 (Cth), the Australian Privacy Principles
   (APPs), the Notifiable Data Breaches (NDB) scheme, and relevant NSW privacy
   legislation where applicable.

2. What personal information we collect
   We may collect the following types of personal information:

• Identity and contact information: name, postal address, email address, date of
  birth and phone number.
• Transaction and billing information: invoices, payment details (note: we do not
  store full card details; card payments are processed by a PCI DSS–compliant
  provider).
• Professional and role-related information: employer, position title,
  qualifications, and related business details.
• Sensitive information: only where necessary and with consent (e.g., as required
  by law).
• Technical information: IP address, device type, browser, cookies, and analytics
  data from our website.

3. How we collect personal information
   We collect personal information directly from you when you:

• Use our services or make an enquiry.
• Communicate with us via phone, email, or our website.
• Apply for employment or provide services as a contractor.
• Visit or interact with our website (e.g., through contact forms, cookies,
  analytics).
  We may also collect personal information from third parties (such as referees, public
  sources, or service providers) where permitted by law, and will take reasonable steps to
  notify you when we do so.

4. Purposes for collection, use and disclosure
   We collect, use, and disclose personal information for purposes including:

• Providing our services, managing client relationships, and performing
  administrative functions.
• Processing transactions, invoicing, and payments.
• Recruitment and contractor management.
• Complying with legal and regulatory obligations.
• Internal operations, service improvement, and quality assurance.
• Direct marketing (where permitted by law and subject to your right to opt out).
  We will only use or disclose personal information for the primary purpose for which it
  was collected or for a related secondary purpose that you would reasonably expect,
  unless otherwise permitted or required by law.

5. Storage, security and retention
   Storage: Personal information is stored securely on our internal systems and/or
   reputable third-party cloud service providers (hosted in Australia, including providers
   such as AWS Sydney or Microsoft Azure Australia, where possible).
   Security measures: We apply appropriate physical, technical, and administrative
   safeguards, including:

• Secure networks, encryption in transit and at rest where practical.
• Role-based access controls and password protection.
• Multi-factor authentication for key systems.
• Staff training and regular security reviews.
  Retention: We retain personal information only for as long as necessary for business or
  legal purposes. When no longer required, it is securely destroyed or de-identified.

6. Cross-border disclosure and international transfers
   If we transfer personal information outside Australia (for example, to cloud service
   providers or software vendors), we will take reasonable steps to ensure the recipient
   protects it in accordance with the APPs or obtain your consent before disclosure.

7. Cookies and website tracking
   Our website uses cookies, analytics, and similar technologies to operate effectively,
   understand usage patterns, and support marketing activities. You can manage cookie
   preferences through your browser settings. Disabling cookies may affect website
   functionality.

8. Direct marketing
   We may send marketing communications about our products and services if you have
   provided consent or where there is a lawful basis. You may opt out at any time by
   following the unsubscribe instructions in our communications or by contacting us
   directly.

9. Access and correction
   You may request access to or correction of the personal information we hold about you.
   We will respond within a reasonable timeframe in accordance with applicable
   legislation.
   If we refuse access or correction, we will provide written reasons and outline available
   complaint options.

10. Data breaches and notification
    ASSETBASE PTY LTD maintains data breach response procedures. If an eligible data
    breach occurs that is likely to result in serious harm, we will comply with the Notifiable
    Data Breaches (NDB) scheme, including notifying affected individuals and the Office
    of the Australian Information Commissioner (OAIC).

11. NSW public sector interactions
    If we handle personal information on behalf of NSW public sector clients, we comply
    with the Privacy and Personal Information Protection Act 1998 (NSW) (“PPIP Act”)
    and any related privacy obligations or contractual requirements.
    We ensure that personal information collected, used, stored, or disclosed in
    connection with NSW public sector work is handled in accordance with the principles
    and safeguards established under the PPIP Act.

12. Third-party service providers
    We may share personal information with trusted third-party service providers who
    perform services on our behalf (e.g., IT hosting, payment processing, analytics,
    professional advisors). These providers are contractually required to protect the
    information and use it only for authorised purposes.

13. Overseas law enforcement or legal requests
    We may disclose personal information where required or authorised by law, including to
    law enforcement or government agencies. Where permitted, we will notify affected
    individuals of such disclosures.

14. Complaints and enquiries
    If you have a privacy concern or wish to make a complaint, please contact our Privacy
    Officer at:
    Privacy Officer — ASSETBASE PTY LTD
    Email: info@assetbase.com.au
    Phone: (02) 7907 3968
    Address: Suite 601 / 24 Montgomery St, Kogarah NSW 2217
    We will acknowledge your concern, investigate, and respond within 30 days. If you are
    dissatisfied with our response, you may contact the Office of the Australian
    Information Commissioner (OAIC) or the NSW Information and Privacy Commission
    (IPC).

15. Changes to this policy
    We may update this policy from time to time to reflect changes in law, technology, or
    our operations. The latest version will be published on our website with the effective
    date clearly shown.

16. Contact details
    Privacy Officer — ASSETBASE PTY LTD
    Email: info@assetbase.com.au
    Phone: (02) 7907 3968
    Address: Suite 601 / 24 Montgomery St, Kogarah NSW 2217