Privacy Policy — Henders Label

Personal Information Collection Statement (PICS)

This Personal Information Collection Statement ("PICS") is intended to inform you, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs):

• for what purpose your personal information collected by us will be used once it has been collected in connection with your use of this website ("Website") or your purchase of products sold through this Website ("Products");
• to whom your personal information may be disclosed; and
• to whom you may send requests to view or correct your data.

We may revise this PICS by amending this page. You should check this page from time to time to take notice of any changes we make.

1. User Data

1.1 ("we", "us", "our") means Henders Label, the entity collecting and handling your data.

2. Data Subjects

This PICS applies to personal information of ("you" or "your"): (a) Visitors: individuals who visit our Website; (b) Users: individuals who purchase, request or receive Products; (c) Contacts: individuals who contact us via our Website, email or other means.

3. What We Collect

3.1 We may collect, store, process, transfer and use the following types of personal information:

(a) From Visitors: IP address or other unique device identifiers.*

(b) From Users:

• Username;
• Account password;
• Full name;*
• Email address;*
• Billing address;*
• Delivery address;*
• Payment information;*
• Telephone number.

(c) From Contacts:

• Full name;*
• Email address;*
• Any other personal information you provide to us.

*denotes mandatory personal information

3.2 If you do not provide us with mandatory personal information, we may not be able to provide you with access to our Website, deliver our Products to you, or respond to your communications with us.

4. Purpose and Use

4.1 We may collect, store, process, transfer and use your personal information for the following purposes:

(a) To provide you with our Products, such as:

• to manage and fulfil your orders;
• if you choose to register an account on our Website, to create and update your account registered with us; and
• to process and facilitate the billing and payment of your orders;

(b) to monitor and analyse the use of our Website and to compile aggregate statistics about such use;

(c) to personalise your experience on our Website, including identifying your preferences and behaviour to better meet your individual needs;

(d) to improve our Website and our Products based on information and feedback we receive from you and based on our analysis of the use of our Website and the purchase of Products;

(e) for research and development, by using your personal information to test, research, analyse and support product development (including machine learning);

(f) for customer service and to help us respond more effectively to your service enquiries, feedback and support requests;

(g) for non-marketing communications relating to your orders, such as order confirmations and dispatch notifications;

(h) for technical purposes and for project management requirements;

(i) to maintain the security and integrity of personal information collected through our Website;

(j) for the prevention of fraud;

(k) for legal proceedings or as required by regulatory authorities, government agencies and official requests;

(l) for direct marketing, but only where we obtain your consent (see paragraph 9 below); and

(m) for other purposes directly related to the above.

4.2 The personal information we collect may not be used for any other purpose unless: (a) you have given your explicit consent to its use for the relevant other purposes; (b) the purpose is directly related to the purpose for which the personal information was collected; or (c) we may use the personal information for other purposes arising from an exemption or otherwise in accordance with applicable Australian laws and regulations.

5. Transferees

5.1 We may disclose your personal information to the following persons: (a) our employees and officers; (b) our subsidiaries and their employees and officers; (c) Shopify Inc. and its subsidiaries and parent companies, an IT service provider engaged by us to manage and maintain the Website and process your orders placed through the Website; (d) PayPal Holdings Inc. and its subsidiaries, and other payment processors or intermediaries ("Payment Processors") that we may engage to process payment transactions for us in relation to our Products or in the course of our business; (e) suppliers of our Products ("Suppliers") to facilitate the despatch of our Products to you; (f) other service providers and data processors engaged by us, such as:

• administrative service providers;
• IT services and software suppliers;
• data analytics providers;
• service providers for data input and processing;
• cloud service providers; and
• credit reference agencies; (g) our insurers and bankers; (h) our professional legal, financial and accounting advisors; (i) other companies, organisations or individuals as required by applicable law, regulation, legal process or governmental request, or where disclosure is appropriate due to security concerns this includes exchanging your personal information with other companies, organisations or individuals for the purposes of fraud protection and fraud prevention; and (j) other companies, organisations or individuals in the context of negotiations for a merger, sale of company assets, consolidation or reorganisation, financing or acquisition of all or part of our business by or into that other company.

5.2 If you make payments to us via Payment Processors, you enter into a contract directly with the Payment Processor and are subject to its terms of use and privacy policy. You should review the Payment Processor's privacy policy and, where applicable and at your discretion, provide your consent to any such policy that is not governed by this PICS or our Privacy Policy.

5.3 If we share your personal information with other people, we will ensure the confidentiality of your personal information by including confidentiality or other contractual clauses in the agreements with third parties with whom we share your personal information.

5.4 We may disclose your personal information to persons other than those described in paragraph 5.1 above if we inform you in advance and obtain your consent.

6. Cookies

6.1 Our Cookie Policy forms part of this Privacy Policy, through which you can access and use our Website.

6.2 A cookie is a small data file that a website can send to your computer or device when you visit our Website.

6.3 Cookies are used to make websites work better and more efficiently, usually by enabling them to recognise you and remember important information that makes your use of a website more convenient (for example, by remembering your user preferences).

6.4 We use cookies to: (a) store technical data to ensure that our Website loads and displays correctly and efficiently when you visit our Website; (b) remember choices you have made or information you have provided (such as your username, language or the region you are in) so that your preferences are remembered for your future visits to our Website and you do not have to re-authenticate on your future visits; (c) analyse how you navigate our Website to help us optimise the design; and (d) track your behaviour and preferences so that we can assess what type of information and Products from us you may be interested in.

6.5 We use: (a) session cookies, which are unique to each visit to our Website; and (b) persistent cookies, which are not deleted when you close your browser window and which are activated each time you visit our Website.

6.6 The cookies we use are either: (a) necessary cookies, which are essential for our Website to help you move from page to page and use the features of our Website; (b) functionality cookies, which enable our Website to remember choices you make and provide more personalised features; or (c) performance cookies, which collect information about your use of our Website and help us to improve the way the Website works.

6.7 We use a limited number of third-party cookies; these can be found in our Cookie Policy.

6.8 By continuing to use our Website without notifying us of your refusal to use cookies or withdrawing your consent, you agree to our use of cookies.

6.9 You can refuse the use of cookies or withdraw your consent at any time by selecting the appropriate settings on your browser. These settings can usually be found in the "Options" or "Preferences" menu of your internet browser, or by clicking on "Help" in your browser menu. Removing cookies may affect your use and experience of our Website.

6.10 We only store cookies for the duration necessary for the function for which they are used. This duration varies depending on the cookie.

7. Retention

7.1 We will retain your personal information for as long as necessary to fulfil the purposes for which it was collected. We may also retain your personal information for a longer period if this is necessary to fulfil our contractual or legal obligations.

7.2 Personal information that you have provided to us will be securely destroyed or de-identified at the end of the relevant retention period.

8. Access and Correction

8.1 In accordance with the Australian Privacy Principles, you have the right to: (a) request a copy of your personal information held by us, unless we are exempt from complying with a data access request; and (b) request that we make any necessary corrections to personal information that you believe to be inaccurate. We may refuse a request for correction if we believe the personal information is accurate, is an opinion expressed, or if the proposed correction is inaccurate.

8.2 If you wish to access or correct your personal information, please contact us at privacy@henderslabel.com.

8.3 We reserve the right to charge a reasonable fee for processing a request for access to or correction of personal information, in accordance with the Australian Privacy Principles.

9. Direct Marketing

9.1 We may use the personal information we collect about you to market our Products directly to you.

9.2 The types of personal information we use for direct marketing purposes are:

• Your full name;
• Your email address.

9.3 The direct marketing activities we may carry out using your personal information include:

• information and promotional material about our Products, similar products you have previously purchased, discounts and other promotions and information about us that we think you may find useful;
• updates in relation to our Website or Products; and
• seasonal or festive greetings.

9.4 Unless you expressly give your consent (e.g. by signing up to our newsletter), we will not use your personal information for the direct marketing activities described in this paragraph.

9.5 If we obtain your consent for direct marketing, we may disclose your personal information for direct marketing purposes to the persons referred to in paragraph 5.1 above.

9.6 You can ask us to stop using your personal information for direct marketing purposes at any time by emailing us at privacy@henderslabel.com or by clicking "unsubscribe" in any direct marketing communication from us.

10. Complaints

10.1 If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with us at privacy@henderslabel.com. We will investigate and respond to your complaint within a reasonable time.

10.2 If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

11. Contact Us

For any questions or concerns regarding this Privacy Policy, or to exercise your rights of access or correction, please contact us:

• Email: privacy@henderslabel.com