ZEROPLY PTY LTD Privacy Policy

Last updated: 3 September 2026

This Privacy Policy explains how ZEROPLY PTY LTD (ABN 75 698 579 494), trading as Zeroply (“Zeroply”, “we”, “us” or “our”), collects, holds, uses and discloses personal information when you visit our website, purchase or use our products and services, create an account, communicate with us or otherwise interact with Zeroply.

This Privacy Policy applies to our website, online store, customer accounts, subscriptions, communications, promotions, social media interactions, customer support and any other product or service that links to this Privacy Policy (collectively, the “Services”).

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (“APPs”), where applicable, and any other privacy laws that apply to our activities.

By using our Services, you acknowledge that your personal information will be handled as described in this Privacy Policy.

1. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our business practices, Services, technologies or legal and regulatory obligations.

When we update this Privacy Policy, we will publish the revised version on our website and change the “Last updated” date. Where required by law, we will provide additional notice or obtain consent before materially changing how we handle personal information.

2. What is personal information?

“Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable, whether the information or opinion is true and whether it is recorded in a material form.

“Sensitive information” is a category of personal information that may include information about a person’s health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record, professional memberships and certain biometric information.

3. Personal information we collect

The personal information we collect depends on how you interact with Zeroply and may include the following.

Identity and contact information

This may include:

• Your full name
• Username or account name
• Date of birth or age, where relevant
• Billing and delivery addresses
• Email address
• Telephone number

Account information

This may include:

• Account login details
• Encrypted passwords
• Account preferences
• Saved addresses
• Purchase history
• Subscription preferences
• Security and authentication information

Transaction and order information

This may include:

• Products or services purchased
• Order numbers
• Billing and delivery information
• Payment status
• Returns, refunds and exchanges
• Subscription information
• Discount or promotional codes
• Customer service history

Payment information

Payments may be processed by third-party payment providers.

Depending on the payment method used, we may receive limited payment-related information, such as:

• Payment confirmation
• Payment method
• Card type
• Masked card number
• Billing address
• Transaction identifiers

We generally do not directly store complete debit or credit card details when payments are processed by an external payment provider.

Communications and customer support

We may collect information you provide when you:

• Contact customer support
• Submit an enquiry or complaint
• Request a refund or return
• Communicate with us by email, telephone, social media or another channel
• Respond to a survey
• Provide feedback
• Submit a product review
• Participate in a promotion, competition or giveaway

Technical and usage information

When you use our website or Services, we or our technology providers may automatically collect:

• Internet Protocol address
• Device identifiers
• Browser type
• Operating system
• Device type
• Network information
• Referring website or URL
• Pages viewed
• Links selected
• Time spent using the Services
• Dates and times of access
• Approximate location based on IP address
• Cookie and advertising identifiers
• Information about how you interact with our website, advertisements and communications

Marketing and preference information

This may include:

• Marketing consent
• Communication preferences
• Product interests
• Survey responses
• Promotion entries
• Email and advertisement engagement
• Cookie preferences
• Information used to personalise our marketing

User-generated content

Where our Services allow you to submit content, we may collect:

• Product reviews
• Photographs
• Videos
• Comments
• Testimonials
• Social media content
• Other information you choose to make available

Business and recruitment information

If you interact with Zeroply as a supplier, contractor, business representative or job applicant, we may collect:

• Business contact details
• Employment history
• Qualifications
• Résumés
• References
• Professional information
• Information relevant to managing our relationship with you

4. Sensitive information

We do not actively seek to collect sensitive information unless it is reasonably necessary for our functions or activities and:

• You have consented to its collection;
• Collection is required or authorised by law; or
• Another exception under applicable privacy law applies.

We will not use sensitive information for direct marketing without your consent.

Please do not provide sensitive information through general website forms, reviews, messages or public areas unless it is necessary and specifically requested.

5. How we collect personal information

We may collect personal information:

• Directly from you;
• Through our website, store or customer accounts;
• When you purchase or use our products or Services;
• When you communicate with us;
• Through cookies, pixels and related technologies;
• From payment, delivery, fulfilment and technology providers;
• From marketing, analytics and advertising partners;
• From social media platforms;
• From publicly available sources;
• From our related entities or business partners;
• From another person where you have authorised them to provide the information; or
• Where collection is otherwise permitted by law.

We will generally collect personal information directly from you unless it is unreasonable or impracticable to do so.

6. Unsolicited personal information

If we receive personal information that we did not request, we will determine whether we could have lawfully collected it.

If we could not have collected the information and it is lawful and reasonable to do so, we will destroy or de-identify it.

7. Anonymity and pseudonymity

Where lawful and practicable, you may interact with us anonymously or by using a pseudonym.

However, we may need to confirm your identity to:

• Process a payment;
• Deliver an order;
• Manage an account or subscription;
• Provide account-based Services;
• Prevent fraud;
• Respond to an access or correction request;
• Resolve a complaint; or
• Meet legal and regulatory obligations.

8. How we use personal information

We may use personal information to:

• Provide our products and Services;
• Process payments and transactions;
• Fulfil and deliver orders;
• Manage accounts and subscriptions;
• Provide order and delivery notifications;
• Process returns, refunds and exchanges;
• Respond to enquiries and provide customer support;
• Authenticate users and maintain account security;
• Detect,ly investigate and prevent fraud, unlawful conduct or security incidents;
• Maintain and improve our website and Services;
• Conduct analytics and understand customer behaviour;
• Develop and test products, features and content;
• Personalise your experience;
• Administer promotions, competitions and surveys;
• Send marketing communications where permitted;
• Display or measure advertising;
• Maintain our business relationships;
• Assess job applicants;
• Conduct accounting, taxation, auditing and record keeping;
• Manage disputes, complaints and legal claims;
• Enforce our terms, policies and agreements;
• Comply with court orders and lawful government requests;
• Protect our rights, property, users and other persons; and
• Meet our legal, regulatory and insurance obligations.

We will generally use or disclose personal information only:

• For the purpose for which it was collected;
• For a related purpose you would reasonably expect;
• With your consent; or
• Where required or authorised by law.

9. Cookies and tracking technologies

We and our service providers may use cookies, pixels, software development kits, web beacons and similar technologies.

These technologies may be used to:

• Operate essential website features;
• Remember your actions and preferences;
• Maintain your shopping cart;
• Authenticate your account;
• Understand how visitors use our website;
• Diagnose technical problems;
• Measure website and marketing performance;
• Personalise content;
• Prevent fraud;
• Deliver relevant advertising; and
• Measure interactions with advertisements and communications.

Cookies may include:

• Strictly necessary cookies;
• Functionality cookies;
• Analytics cookies;
• Performance cookies;
• Advertising cookies; and
• Social media cookies.

You may be able to control cookies through our cookie-management tool or your browser settings. Blocking cookies may affect the operation of our website and prevent certain features from functioning properly.

Where required by law, we will obtain consent before using non-essential cookies or tracking technologies.

Browser-based “Do Not Track” signals are not interpreted consistently across the industry. You can use our available cookie controls and relevant third-party opt-out mechanisms to manage your preferences.

10. Marketing and advertising

Where permitted by law, we may use your personal information to:

• Send promotional emails or text messages;
• Inform you about products, services and offers;
• Recommend products that may interest you;
• Conduct promotions and competitions;
• Personalise advertising;
• Create marketing audiences;
• Measure advertising performance; and
• Display advertisements on third-party platforms.

You can opt out of marketing communications at any time by:

• Selecting the unsubscribe link in an email;
• Using the opt-out instructions in a message;
• Updating your account preferences; or
• Contacting us using the details at the end of this Privacy Policy.

Opting out of marketing will not prevent us from sending necessary transactional, account, order, security or legal communications.

We do not use sensitive information for direct marketing without consent.

11. Automated tools and decision-making

We may use automated tools to support:

• Fraud and security detection;
• Product recommendations;
• Website personalisation;
• Analytics;
• Customer support;
• Advertising; and
• Business administration.

We will not make a decision that produces legal or similarly significant effects based solely on automated processing unless this is permitted by applicable law and appropriate safeguards are provided.

12. How we disclose personal information

We may disclose personal information to:

• Website and e-commerce platform providers;
• Payment processors;
• Banks and financial service providers;
• Delivery, shipping and fulfilment providers;
• Warehousing providers;
• Cloud hosting and data-storage providers;
• Information technology and cybersecurity providers;
• Customer support providers;
• Marketing, advertising and analytics providers;
• Email and communication platforms;
• Accountants, auditors, insurers and professional advisers;
• Contractors and suppliers;
• Related bodies corporate and affiliates;
• Social media platforms where you use an integration or direct us to share information;
• Government authorities, regulators, courts and law-enforcement bodies;
• Parties involved in a merger, acquisition, financing, restructuring or proposed sale of our business; and
• Other parties where you direct us, consent to the disclosure or the disclosure is required or authorised by law.

Service providers may access personal information only to the extent reasonably necessary to perform services for us, subject to their contractual and legal obligations.

We do not sell personal information for monetary consideration.

We may disclose certain identifiers, transaction information and usage information to marketing or advertising partners for the purposes described in this Privacy Policy, subject to applicable law and your available choices.

13. Overseas disclosures

Some of our service providers may store or process personal information outside Australia.

The countries involved will depend on the technology, e-commerce, payment, communications, analytics and advertising providers we use.

The countries in which overseas recipients are likely to be located include:

[Insert all applicable countries before publication]

Where APP 8 applies, we will take reasonable steps in relation to overseas disclosures as required by law unless an exception applies.

Privacy protections and government-access laws in other countries may differ from those applying in Australia.

14. User-generated and public content

Our Services may allow you to publish product reviews or other user-generated content.

Information submitted to a public area may be visible to anyone and may be copied, shared or used by others. We cannot control how other people handle information that you voluntarily make public.

Please avoid including personal or sensitive information in reviews or other public content.

We may moderate, remove or retain user-generated content in accordance with our terms, legal obligations and legitimate business requirements.

15. Third-party websites and services

Our Services may include links to third-party websites, platforms or services.

We do not control and are not responsible for the privacy, security or content practices of third parties. Their handling of personal information is governed by their own privacy policies and terms.

The inclusion of a third-party link does not necessarily mean that we endorse that third party.

You should review the privacy policy of any third-party service before providing personal information.

16. Children’s privacy

Our Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children without appropriate consent or legal authority.

If you believe a child has provided personal information to us without appropriate consent, please contact us. We will investigate and, where appropriate, delete or de-identify the information.

17. Security

We take reasonable technical and organisational steps to protect personal information from:

• Misuse;
• Interference;
• Loss;
• Unauthorised access;
• Unauthorised modification; and
• Unauthorised disclosure.

Our security measures may include:

• Access controls;
• Authentication safeguards;
• Encryption where appropriate;
• Confidentiality requirements;
• Staff and contractor access restrictions;
• Vendor assessments;
• Monitoring;
• Secure backups; and
• Incident-response procedures.

However, no system or transmission method is completely secure. We cannot guarantee absolute security, particularly for information transmitted over the internet or through insecure communication channels.

You are responsible for maintaining the confidentiality of your account credentials. Please contact us immediately if you believe your account or information has been compromised.

18. Retention and destruction

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required or authorised by law.

Retention periods may depend on:

• The type and sensitivity of information;
• Whether you maintain an account or subscription;
• Transaction and customer-service requirements;
• Fraud-prevention and security requirements;
• Potential or existing disputes;
• Contractual obligations;
• Taxation and accounting requirements;
• Corporate and consumer laws; and
• Other legal or regulatory obligations.

When personal information is no longer required for a permitted purpose, we will take reasonable steps to destroy or de-identify it, unless retention is required or authorised by law.

19. Data breaches

We maintain processes to identify, investigate and respond to suspected data breaches.

Where the Notifiable Data Breaches scheme applies and an eligible data breach occurs, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

Our response may include:

• Containing the incident;
• Investigating its cause and scope;
• Assessing the risk of harm;
• Taking remedial action;
• Notifying affected individuals and regulators where required; and
• Reviewing our safeguards to reduce the risk of recurrence.

20. Accessing and correcting personal information

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading.

We may need to verify your identity before processing a request.

We will respond within a reasonable period. We do not charge a fee for making an access or correction request, although we may charge a reasonable amount for providing access where permitted by law.

In limited circumstances, we may refuse access or correction where permitted by law. If we refuse a request, we will generally provide:

• Written reasons for the refusal; and
• Information about available complaint mechanisms.

Depending on your location, you may also have rights to:

• Request deletion;
• Restrict or object to processing;
• Withdraw consent;
• Receive certain information in a portable format;
• Appeal a decision concerning your request; or
• Make a request through an authorised representative.

These rights are not absolute and apply only where provided by applicable law.

21. Privacy complaints

If you believe we have mishandled your personal information or breached an applicable privacy obligation, please contact us using the details below.

Your complaint should include enough information for us to understand and investigate the issue.

We will:

• Acknowledge your complaint;
• Investigate it fairly;
• Request further information where necessary; and
• Respond within a reasonable period.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner:

Website: www.oaic.gov.au
Telephone: 1300 363 992

You may also have the right to contact another regulator or data-protection authority depending on where you live.

22. International users

If we offer goods or services to individuals in other jurisdictions, additional privacy rights may apply.

Where applicable, overseas users may have rights concerning:

• Access;
• Correction;
• Deletion;
• Restriction;
• Objection;
• Withdrawal of consent;
• Data portability;
• Automated decision-making; and
• Complaints to a local supervisory authority.

Where required, international transfers may be supported by recognised safeguards, such as contractual protections or adequacy arrangements.

Nothing in this Privacy Policy represents that every foreign privacy law applies to Zeroply. We will honour additional rights where the relevant law applies to our activities.

23. Contact us

If you have questions about this Privacy Policy, wish to exercise a privacy right or want to make a complaint, please contact:

ZEROPLY PTY LTD
ABN 75 698 579 494
Email: info@zeroply.com.au

Required before publication

Complete and then remove this section before publishing the Privacy Policy:

• Insert Zeroply’s website address.
• Insert the privacy contact email.
• Insert the business telephone number.
• Insert the principal business or postal address.
• Identify the countries where information is likely to be processed.
• Confirm all payment, website, hosting, fulfilment and cloud providers.
• Confirm all analytics, advertising pixels and social media integrations.
• Confirm whether Zeroply offers subscriptions, promotions, reviews or customer accounts.
• Confirm whether Zeroply intentionally provides Services to anyone under 16.
• Confirm that the retention, security, complaints and data-breach statements reflect Zeroply’s actual procedures.
• Have an Australian commercial or privacy lawyer review the completed version before publication.