Privacy Policy

(ABN 95 685 732 450) (we, us or our), understands that protecting your personal information is important. This Privacy Policy sets out our commitment to protecting the privacy of personal information provided to us, or collected by us, when interacting with you. This Privacy Policy takes into account the requirements of the Privacy Act 1988 (Cth) and the Australian Privacy Principles, as well as the New Zealand Privacy Act 2020 and the Information Privacy Principles. In addition to the Australian laws, individuals located in the European Union or European Economic Area (EU) may also have rights under the General Data Protection Regulation 2016/679 and individuals located in the United Kingdom (UK) may have rights under the General Data Protection Regulation (EU) 2016/679 (UK GDPR) and the Data Protection Act 2018 (DPA 2018) (together, the GDPR). Appendix 1 outlines the details of the additional rights of individuals located in the EU and UK as well as information on how we process the personal information of individuals located in the EU and UK.

The information we collect

Personal information: is information or an opinion, whether true or not and whether recorded in a material form or not, about an individual who is identified or reasonably identifiable.

The types of personal information we may collect about you include:

Identity Data: your name, age.
Contact Data: your email.
Financial Data: bank account and payment card details (collected via our third-party payment processor, who securely stores these details).
Transaction Data: details about payments to/from us and details of products and services purchased.
Technical and Usage Data: includes your IP address, login data, browser sessions, geo-location data, page statistics, device information, acquisition sources, search queries, cookie or tracking pixel data and communications with our website.
Profile Data: your username and password for Legz, profile picture, purchases/orders, content posted/shared, and support requests.
Interaction Data: information provided when participating in interactive features such as surveys, contests, promotions or events.
Marketing and Communications Data: your marketing preferences and communication choices.
Professional Data: details if you are a worker or applicant, including your work history and any necessary authorisations or licences.

Sensitive information: is a subset of personal information that receives extra protection. It covers details on racial or ethnic origin, political opinions, religion, trade union memberships, philosophical beliefs, sexual orientation or practices, criminal records, health or biometric information. We do not actively request this information. When required by law, we will ask for your consent before collecting it.

How we collect personal information

We collect personal information using various methods, including:

Directly from you (phone, email, or online).
When you complete forms (for events, newsletters, surveys, etc.).
Through our websites (including via analytics, cookie providers or marketing vendors).
From third parties.
From publicly available sources.

Why we collect, hold, use and disclose personal information

We have set out, in a table format, the purposes for which we plan to collect, hold, use and disclose your personal information.

Purpose of use / disclosure	Type of Personal Information
To enable you to access and use our software, including to provide you with a login.	Identity Data Contact Data
To work with you as a customer or supplier of our business, including to register your attendance at our events.	Identity Data Contact Data
To contact and communicate with you about our business, including in response to any support requests you lodge with us or other enquiries you make with us.	Identity Data Contact Data Profile Data
To contact and communicate with you about any enquiries you make with us via any website we operate.	Identity Data Contact Data
For internal record keeping, administrative, invoicing and billing purposes.	Identity Data Contact Data Financial Data Transaction Data
For analytics, market research and business development, including to operate and improve our business, associated applications and associated social media platforms.	Profile Data Technical and Usage Data
For advertising and marketing, including to send you promotional information about our events and experiences and information that we consider may be of interest to you.	Identity Data Contact Data Technical and Usage Data Profile Data Marketing and Communications Data
To run promotions, competitions and/or offer additional benefits to you.	Identity Data Contact Data Profile Data Interaction Data Marketing and Communications Data
If you have applied for employment with us, to consider your employment application.	Identity Data Contact Data Professional Data
To comply with our legal obligations or if otherwise required or authorised by law.	Any relevant Personal Information

Our disclosures of personal information to third parties

Personal information: We will only disclose personal information (excluding sensitive information) where necessary to conduct our business, with your consent or as permitted by law. This may include disclosure to:

Our employees, contractors and related entities.
IT service providers, data storage, web-hosting and server providers.
Marketing or advertising providers.
Professional advisors, bankers, auditors, insurers and insurance brokers.
Payment systems operators or processors.
Existing or potential agents or business partners.
Sponsors or promoters of our promotions or competitions.
If we merge with or are acquired by another company, or sell assets, advisers for prospective purchasers.
Courts, tribunals and regulatory authorities in cases such as non-payment.
Law enforcement as required or authorised by law.
Third parties that collect and process data, such as analytics providers and cookies.
Any other third parties as required or permitted by law (including subpoena recipients).

Sensitive information: We will only disclose this with your consent or where required/authorised by law. This follows a similar list as personal information.

Overseas disclosure

Australian Residents

We store your personal information in Australia. When disclosing to third parties, they may store, transfer, or access it outside Australia—only in accordance with the Australian Privacy Principles.

New Zealand Residents

Where your personal information is disclosed to third parties overseas, please note that local data protection may be different. We will only make such disclosures when:

You have authorised the disclosure after being informed of the safeguards.
The overseas recipient is subject to the Privacy Act 2020 or similarly comparable privacy laws.
The overseas recipient participates in a prescribed binding scheme or is in a prescribed country.
Or we otherwise believe the recipient will protect your data in a comparable manner.

Your rights and controlling your personal information

Your choice: Please note that if you provide personal information, we will process it according to this Privacy Policy. Not providing data may affect our ability to work with you.

Information from third parties: Any personal information received from a third party is protected as set out in this policy. By providing such information, you confirm that you have obtained the necessary consent.

Restrict and unsubscribe: You may object to direct marketing communications. Use the opt-out facilities provided or contact us.

Access: You may request access to your personal information (note that an administrative fee may apply, and in some cases access may be lawfully withheld).

Correction: If you believe that the information we hold is inaccurate or incomplete, please contact us. We will take reasonable steps to correct it.

Complaints: Should you have a complaint, please contact us with full details. If you are dissatisfied with our response, you may contact the relevant data protection authority (such as the Office of the Australian Information Commissioner for Australian residents or the Office of the New Zealand Privacy Commissioner for New Zealand residents).

Storage and security

We are committed to the security of your personal information. We have implemented physical, electronic, and managerial procedures to safeguard your data from unauthorised access, modification, or disclosure. However, we cannot guarantee the absolute security of information transmitted over the internet—use our services at your own risk.

User-Generated Content

You may post reviews, comments, photos, and other user-generated content. Please note that anything you submit will be publicly available, and we are not responsible for how third parties may use it.

Cookies and Analytics

We use cookies, tracking pixels, and similar technologies on our website and in our emails. Cookies are small text files used to remember your preferences, while tracking pixels (tiny invisible images) send information to our servers when loaded.

These technologies do not directly provide your email address or other identifying details but help recognise you on return visits and assist in displaying targeted advertisements. If you provide personal details on our website, that information may be linked to data collected via cookies or tracking pixels.

Google Analytics: We may use Google Analytics Advertising Features along with first- and third-party cookies. You can opt-out by using the Google Analytics Opt-out Browser add-on.

Facebook/Meta Analytics: Tools such as the Meta Pixel, advanced matching, and Conversions API may be used to measure ad performance and tailor ads to your interests. Adjust your Meta settings if desired.

For more details, please see our Cookie Policy.

Links to other websites

Our website may include links to third-party websites. We do not have control over their content or privacy practices, and these sites are not subject to our Privacy Policy.

Use of location services data

We collect your precise or approximate location via our mobile application for purposes such as:

Allowing our client to track order locations in real time;
Enhancing security and safety;
Preventing and detecting fraud;
And other purposes permitted by law.

You can disable location tracking in your device or within your account settings; note that this may affect service delivery.

Use of Artificial Intelligence (AI)

Overview

We may use AI and machine learning technologies provided by third parties in our business operations and to deliver our services. We only use these technologies when legally permitted and necessary.

How we use AI Technologies

To conduct analysis and processing;
To generate and modify content and coding;
To improve and optimise our services;
To automate routine tasks and communications;
To personalise your experience;
For quality assurance purposes;
To assist with customer support and queries.

Data Protection and Security

When using third-party AI services, we require that they handle your data in accordance with privacy laws, supported by proper contractual safeguards.

Your Rights and our Commitments when using AI

Transparency and control: We will notify you when AI is used to make significant decisions and maintain human oversight.
Security: We implement appropriate technical and organizational measures to safeguard your personal data.
Risk mitigation: We regularly assess risks related to our AI use and implement measures to mitigate them.

Amendments

We may update this Privacy Policy at our discretion by publishing the revised policy on our website. Please review it periodically to stay informed about our data protection practices.

For any questions or notices, please contact our Privacy Officer at: [To be incorporated] (ABN [insert]). Email: [insert]

Appendix 1: Additional Rights and Information for Individuals Located in the EU or UK

Under the GDPR, individuals in the EU and UK have additional rights concerning their personal data. This Appendix explains these rights and how we process your information.

What personal information is relevant?

This Appendix applies to all personal information described above – including any sensitive information (often termed “special categories of data” under the GDPR).

Purposes and legal bases for processing

We collect and process your personal information only when we have a lawful basis for doing so.

Data Transfers

If we transfer your personal data overseas, we take appropriate safeguards (for example, transferring only to countries with an adequate level of protection or using standard contractual clauses) to ensure your data is protected.

Data retention

We retain your personal information only as long as necessary to fulfil the purposes for which it was collected, including meeting legal and regulatory requirements. In cases such as complaints or litigation, data may be retained for a longer period.

Extra rights for EU and UK individuals

You have the right to request details of the personal information we hold, as well as to have this information rectified, deleted, or its processing restricted. If you are dissatisfied with our handling of your data, you may file a complaint with the relevant data protection authority.