{Privacy Policy}

Last updated 11th August 2025

HURNZY is committed to providing quality services to you and protecting your privacy. This Privacy Policy outlines our ongoing obligations to you in respect of how we manage your personal information in accordance with Australian federal law and the laws of New South Wales. We have adopted the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). The APPs govern the way we collect, use, disclose, store, secure, and dispose of your personal information. We also comply with any relevant New South Wales state privacy legislation to the extent it applies to our operations. (A copy of the Australian Privacy Principles may be obtained from the website of the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.)

Personal Information is information or an opinion that identifies an individual. Examples of personal information we collect include names, addresses, email addresses, and phone numbers.

We may collect your personal information in circumstances including (but not limited to):

• Direct interactions: When you complete a form or registration process on our website or otherwise provide information directly to us.
• Enquiries and communications: When you make an inquiry or otherwise communicate with us in person, over email, by phone, or through other channels.
• Website usage: When you interact with our website (for example, through the use of browser cookies or tracking technologies).
• Other situations: In other instances which we will inform you of, where we collect personal information that is reasonably necessary for the operation of our website or services.

We collect your personal information for the primary purpose of providing our services to you, as well as for related purposes such as providing information to clients and conducting marketing. We may also use your personal information for secondary purposes closely related to the primary purpose, in circumstances where you would reasonably expect such use or disclosure. You may unsubscribe from our mailing or marketing lists at any time by contacting us in writing.

Whenever we collect personal information, we will (when appropriate) explain to you why we are collecting it and how we plan to use it.

Sensitive information is a subset of personal information and is defined in the Privacy Act 1988 (Cth) to include information or an opinion about an individual's:

• Racial or ethnic origin
• Political opinions
• Membership of a political association
• Religious or philosophical beliefs
• Membership of a trade union or other professional body
• Criminal record
• Health information

Sensitive information will be used by us only for the purpose for which it was provided, or for a secondary purpose that is directly related to the primary purpose. We will only use or disclose sensitive information with your consent, orwhere required or authorised by law.

Where reasonable and practicable to do so, we will collect your personal information only from you. However, in some circumstances we may be provided with information about you by third parties (for example, if a third party has collected information on our behalf or is referring you to our services). In such cases, we will take reasonable steps to ensure you are made aware of the information provided to us by the third party.

Your personal information may be disclosed to others in certain circumstances, including:

• With your consent: We may disclose your information to third parties where you have consented to the use or disclosure.
• Where required or authorised by law: We may disclose your information when we are required or permitted to do so by law (for example, to comply with a court order or legal obligation).

Your personal information is stored in a manner that reasonably protects it from misuse, interference, loss, and from unauthorized access, modification, or disclosure. We implement a range of security measures to safeguard the information we hold about you.

When your personal information is no longer needed for the purpose for which it was collected, we will take reasonable steps to destroy or permanently de-identify that information. However, please note that most personal information is or will be stored in client files which we are required to keep for a minimum of 7 years (for legal and compliance purposes).

You have the right to access the personal information we hold about you and to update and/or correct it, subject to certain exceptions. If you wish to access your personal information, please contact us in writing (see contact details below).

HURNZY will not charge you a fee for making an access request, but we may charge a reasonable administrative fee for providing you with copies of your personal information if necessary.

To protect your privacy and the security of your information, we may require you to verify your identity before we provide access to your personal data.

It is very important to us that your personal information is accurate, complete, and up-to-date. We will take reasonable steps to ensure that the information we hold is correct and current. If you find that the personal information we have is inaccurate, out-of-date, or incomplete, please contact us as soon as possible so that we can correct our records. This helps us to continue providing quality services to you.

This Privacy Policy may change from time to time and any updates will be posted on our website. We encourage you to check our website periodically to ensure you are aware of our current Privacy Policy. This policy is effective as of the date listed at the top of this document and remains in effect until amended or replaced by us.

If you have any queries or complaints about our Privacy Policy or how we handle your personal information, please contact us at hi@hurnzy.com.au

We will respond to your inquiries or complaints as soon as possible and work with you to resolve any concerns. Your privacy is important to us, and we welcome your questions and feedback.

Thank you for trusting us with your experience.