Privacy Policy

Effective Date: February 11, 2026

Collection of Personal Data

We will only collect your Personal Data when you voluntarily provide it to us, and we will clearly inform you of the purpose of collection at the time of request. You may be asked to provide Personal Data in the following scenarios:

– Registering and creating an account on the Website;

– Placing an order for our products or services;

– Contacting our customer service (by phone, email, letter or through the feedback section of the Website);

– Submitting inquiries, complaints or feedback;

– Opting in to receive promotional materials, discounts or special offers;

– Reporting issues with the Website or our Services.

The Personal Data we may collect includes, but is not limited to: your full name, email address (e.g., your personal email or the email used for registration), phone number, billing address, shipping address, credit card or other payment method details, order details, and communication records with our customer service team.

Collection of Non-Personal Data

We automatically collect Non-Personal Data when you access or use our Website, which does not identify you personally. This information is used to improve the Website, optimize user experience, and analyze user behavior. The Non-Personal Data we collect includes:

– The Uniform Resource Locator (“URL”) of the website you visited before and after accessing our Website;

– Your browser type and version;

– Your Internet Protocol (“IP”) address (anonymized to prevent identification);

– Pages you browse, click, view or search on our Website;

– Items you add to your shopping cart or purchase;

– Downloads and other content you access on our Website.

Methods of Collection

We collect information through the following methods:

– Direct collection: When you voluntarily provide information through the Website, forms, customer service communications or offline interactions;

– Automatic collection: Through the use of “Cookies” and other similar tracking technologies.

Purpose of Using Personal Data

We use your Personal Data only for the following legitimate and necessary purposes, which are clearly communicated to you at the time of collection:

– Processing and fulfilling your orders (including verifying payment details, arranging delivery, and notifying you of order status);

– Providing customer service and responding to your inquiries, complaints, feedback or requests;

– Sending you promotional materials, discounts, special offers or information about new products/services, but only if you haveexpressly opted in to receive such communications;

– Managing and maintaining your account on the Website;

– Improving our Website, products and Services (based on your feedback and usage patterns);

– Complying with legal obligations (e.g., responding to lawful requests from regulatory authorities);

– Preventing fraud, unauthorized access, and other illegal activities;

– Conducting personal data protection impact assessments.

We will not use your Personal Data for any purpose other than those stated above without your prior express consent.

Purpose of Using Non-Personal Data

Non-Personal Data is used solely for the following purposes:

– Analyzing user behavior and website traffic to optimize the Website’s design and functionality;

– Identifying trends in user preferences to improve our products and Services;

– Diagnosing server and software problems to ensure the smooth operation of the Website;

– Generating aggregated statistics for business analysis (which will not be linked to any Personal Data).

Retention of Information

We will retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. After the retention period expires, we will securely delete or anonymize your Personal Data to prevent identification.

Security Measures

Osimona is committed to protecting the security of your Personal Data and has implemented industry-standard security measures to prevent the loss, misuse, alteration, unauthorized access, or disclosure of your information. Our security measures include:

– Encryption Technology: We use Secure Socket Layer (SSL) and Transport Layer Security (TLS) encryption to protect your Personal Data during transmission (e.g., when you enter payment details). Sensitive information (such as credit card details) is also encrypted when stored.

– Access Control: We strictly limit access to your Personal Data. Only authorized employees or Data Processors who need the information to perform their specific duties have access. All authorized personnel are required to comply with our data protection policies and undergo regular training.

– Technical Protection: Our servers are located in a secure physical environment with firewalls, intrusion detection systems, and anti-virus software to prevent unauthorized access. We also conduct regular security audits and vulnerability assessments to identify and address potential risks.

– Data Backup and Disaster Recovery: We maintain regular backups of your Personal Data and have disaster recovery plans in place to ensure data can be recovered in the event of a system failure or security incident.

– Employee Accountability: Employees who violate our data protection policies will be subject to disciplinary action, including termination of employment if necessary.

Data Breach Notification

Despite our best efforts, no security measures are 100% secure.

– Immediately take remedial measures to contain the breach and minimize harm;

– Notify you and the PCPD within a reasonable time (in accordance with Australia regulations);

– Provide you with information about the breach, including the type of data affected and steps you can take to protect yourself;

– Cooperate with regulatory authorities to investigate the breach and take appropriate action.

You acknowledge that you transmit data through the Website or other Services at your own risk, and Osimona shall not be liable for any unauthorized access or disclosure caused by factors beyond our reasonable control (e.g., hacker attacks, third-party negligence).

What Are Cookies?

Cookies are small text files that are transferred to your computer’s hard drive when you access our Website. They help us recognize your browser, remember your preferences, and personalize your experience on our Website. Cookies do not contain any Personal Data and cannot retrieve other data from your computer hard drive or transmit computer viruses.

Types of Cookies We Use

We use two types of cookies: Necessary Cookies and Non-Necessary Cookies, in compliance with Australia’s cookie regulations.

– Necessary Cookies: These cookies are essential for the operation of our Website and Services. They enable you to navigate the Website, use its features (e.g., add items to your cart, complete checkout), and access secure areas. We may use these cookies without your consent, as they are necessary for providing the Services.

– Non-Necessary Cookies: These cookies are not essential but help us improve the Website and your experience. They include:

– Analytical Cookies: Used to track user behavior and website traffic (e.g., which pages are most visited) to optimize the Website;

– Advertising Cookies: Used to provide you with personalized promotional content based on your browsing history.

Cookie Consent and Management

When you first access our Website, we will display a cookie consent banner asking for your permission to use Non-Necessary Cookies. You can choose to accept or reject Non-Necessary Cookies. Accepting Non-Necessary Cookies is voluntary, and you can change your preferences at any time through our Website’s Cookie Settings Panel (accessible via the footer of the Website).

You can also manage cookies through your browser settings: most browsers allow you to erase cookies from your hard drive, block all cookies, or receive a warning before a cookie is stored. Please refer to your browser’s “Help” section for instructions on how to manage cookies. Note that rejecting Necessary Cookies may prevent you from using certain features of our Website (e.g., placing orders).

Right to Access

You have the right to request access to the Personal Data we hold about you, including details of how we collect, use and disclose your data.

Right to Correction

If you believe the Personal Data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.

Right to Erasure

You have the right to request that we delete your Personal Data if: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw your consent (and there is no other legal basis for processing); (c) the processing is unlawful; or (d) deletion is required by law.

Right to Restrict Processing

You have the right to request that we restrict the processing of your Personal Data if: (a) you dispute the accuracy of the data; (b) the processing is unlawful but you do not want it deleted; (c) we no longer need the data but you need it for legal claims; or (d) you have objected to processing (pending a decision).

Scope of Transfer

If you access our Website from a country or region other than Australia (where our servers are located), your communications with us may result in the cross-boundary transfer of your Personal Data. By accessing our Website or using our Services, you consent to such transfers, but only in accordance with this Section and Australia regulations.

Children’s Privacy

Our services are not intended for individuals under the age of 13 (“Children”). We do not knowingly collect personal data from children.

When you register an account or use our services, we may ask you to confirm that you are 13 years of age or older. If we discover that we have collected personal data from a child without the prior consent of the child’s parent or guardian, we will immediately take steps to remove that information from our servers.

Changes to This Policy

Osimona reserves the right to modify or update this Policy at any time to comply with changes in laws, regulations, business practices or customer needs. When significant changes are made, we will:

– Post the updated Policy on our Website with a new effective date;

– Notify registered users via email at least 30 days before the changes take effect;

– Display a prominent notice on our Website to inform all visitors of the changes.

Your continued use of our Website or Services after the changes take effect constitutes your acceptance of the updated Policy. We recommend you review this Policy regularly to stay informed of how we protect your data.

Contact Us

If you have any questions, concerns or requests regarding this Policy, your Personal Data, or our data protection practices, please contact our Data Protection Officer:
– Email: [email protected]

– Purpose: Handling data protection inquiries, processing requests to exercise your rights, and addressing complaints.

SUNHARBOUR GROUP PTY LTD

ABN: 689 926 029

Address: Unit 449, 29-31 Porter Street, RYDE NSW 2112, Australia

Phone: +61 480821697