1. ABOUT THIS POLICY

Tools Australia Pty Ltd (ABN 54 690 397 061, ACN 690 397 061) ("Tools Australia", "we", "us", "our") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy applies to our website (https://www.toolsaustralia.com.au ), competitions, memberships, reward points program, and all related services.

By using our services, you consent to the collection, use, and disclosure of your personal information as described in this policy. We may update this policy from time to time by posting changes on our website. Your continued use after changes constitutes acceptance.

2. INFORMATION WE COLLECT

3. HOW WE USE YOUR INFORMATION

We use your personal information to:

• Process membership purchases, manage accounts, and handle payments
• Allocate competition entries, conduct draws, verify eligibility, select winners, notify winners, and deliver prizes
• Manage reward points, process redemptions, track balances
• Provide customer service, respond to inquiries, resolve complaints, handle refund requests
• Comply with trade promotion permits, regulatory requirements, and legal obligations
• Detect and prevent fraud, unauthorized access, and abuse of services
• Improve our website, services, and user experience
• Send marketing communications (with your consent where required)
• Announce winners publicly on our website and social media (as required by permit conditions)
• Conduct analytics and research using aggregated, de-identified data

You can opt out of marketing communications at any time using the unsubscribe link in emails, replying "STOP" to SMS, or contacting us at support@toolsaustralia.com.au.

4. HOW WE SHARE YOUR INFORMATION

We may disclose your personal information to:

• Service Providers: Payment processors, draw services, prize suppliers, delivery services, IT providers, marketing platforms, customer support tools, verification services, and professional advisors. These providers are contractually required to protect your information.
• Legal and Regulatory Authorities: When required by law, court orders, gaming regulators (NSW Gaming and Racing), ACCC, OAIC, ATO, or to protect our legal rights.
• Public Disclosure: Winner names (first name and initial of surname), city/state of residence, prize won, and draw results as required by permit conditions. Published on our website and social media.
• Business Transfers: If we are acquired, merged, or sell assets, your information may transfer to the new owner with prior notice to you.
• With Your Consent: Other parties you authorize or provide consent for.
• Overseas Recipients: Some service providers are located overseas (USA, EU, Singapore) where Australian privacy laws may not apply. By using our services, you consent to overseas disclosure.

4.1 Partner Discount Portal

Our partner-discount catalogue is operated for us by iGoDirect Group (trading as MyRewards), a third-party rewards platform. It is a separate service from Tools Australia, with its own interface and its own terms.

When you choose to open the portal we single-sign you in, and only then do we send that provider your first and last name, your email address, and an internal account reference that links your redemptions back to your membership. We ask for your agreement on-screen before this happens the first time, and we ask again if what we send ever changes. We do not send your payment or card details, your billing address, your draw entries or your purchase history.

Details you edit inside the portal are held by that provider and do not update your Tools Australia account. If you would prefer we did not share these details, simply do not open the portal — the rest of your membership is unaffected.

5. DATA SECURITY AND RETENTION

We implement reasonable security measures including encryption (SSL/TLS), access controls, firewalls, monitoring, and staff training to protect your information from unauthorized access, disclosure, or loss.

We retain personal information as long as necessary to provide services, comply with legal obligations (typically 3-7 years for competition records), and resolve disputes.

Retention periods:

• Account information: While active, plus 7 years after closure
• Competition records: Minimum 3 years (permit requirement)
• Transaction records: 7 years (tax purposes)
• Marketing preferences: Until unsubscribe (opt-out records maintained indefinitely)

After retention periods, we securely destroy or de-identify information.

In the event of a data breach likely to cause serious harm, we will notify you and the OAIC as required by law. You are responsible for maintaining password confidentiality and notifying us of any unauthorized access.

6. YOUR RIGHTS

You have the right to:

• Access: Request access to personal information we hold about you
• Correction: Request correction of inaccurate, incomplete, or out-of-date information
• Deletion: Request deletion in certain circumstances (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing communications at any time

To exercise these rights, contact us at support@toolsaustralia.com.au with your request and verification details. We will respond within 30 days. We may charge a reasonable fee for access requests and may refuse requests in circumstances permitted by law.

Note: Even if you opt out of marketing, you will still receive transactional communications (account notifications, purchase confirmations, winner notifications).

7. COOKIES AND TRACKING

We use cookies and similar technologies to enhance your experience and analyze website usage.

• Essential Cookies: Required for website functionality (cannot be disabled)
• Functional Cookies: Remember preferences and settings
• Analytics Cookies: Track website usage (e.g., Google Analytics)
• Marketing Cookies: Enable targeted advertising (e.g., Facebook Pixel, TikTok Pixel, Google Ads)
• Session Recording: Record how pages are actually used — pages viewed, clicks, scrolling and mouse movement — so we can find and fix usability problems (e.g., Contentsquare)

In addition to browser pixels, we share conversion events (such as sign-ups and purchases) with Meta and TikTok via their server-side APIs to measure our advertising. Personal identifiers in these events (such as email address and phone number) are hashed before they are sent.

We use Contentsquare to record and replay how visitors move through our pages, to build aggregate heatmaps of where people click and scroll, and to run optional on-site feedback surveys. These recordings capture on-screen activity and page content, and for signed-in members the membership tier held on the account. They do not capture text you type into form fields, and they do not capture payment card details — card numbers are entered directly into our payment provider's secure fields, which we cannot see. Personal details that appear as text on a page, such as your name or a delivery address, are masked before the recording leaves your browser, and recording is switched off entirely on account settings pages and staff-only pages.

You can manage cookies through your browser settings, though disabling some may affect website functionality. Our website does not respond to "Do Not Track" signals.

Third-party cookies (Google Analytics, Facebook, TikTok, Contentsquare, payment processors, social media plugins) are subject to those providers' privacy policies.

8. CHILDREN'S PRIVACY

Our services are not intended for persons under 18 years of age. We do not knowingly collect information from children under 18. If we discover we have collected such information, we will delete it promptly. Parents who believe their child has provided information to us should contact support@toolsaustralia.com.au.

9. THIRD-PARTY LINKS AND SOCIAL MEDIA

Our website may link to third-party websites (partner retailers, social media, prize manufacturers). We are not responsible for their privacy practices. Review their privacy policies before providing information.

When you interact with our social media pages, the social media platform's privacy policy applies. We may collect publicly available information you share on our pages. For signing in with Google, see 2.4 Signing in with Google.

10. MARKETING COMPLIANCE

We comply with the Spam Act 2003 (Cth). We only send marketing messages to those who have consented, clearly identify ourselves, include contact information, and provide functional unsubscribe mechanisms. We honor opt-outs within 5 business days.

11. COMPLAINTS

If you have a privacy complaint:

1. Contact us: Email support@toolsaustralia.com.au with "Privacy Complaint" in subject line
2. We will acknowledge within 7 days and respond within 30 days
3. If unsatisfied, contact the Office of the Australian Information Commissioner (OAIC):
   • Phone: 1300 363 992
   • Email: enquiries@oaic.gov.au
   • Website: www.oaic.gov.au

12. CONTACT US

For privacy questions or requests, contact our Privacy Officer:

We aim to respond to inquiries within 5 business days.

13. DEFINITIONS

"Personal Information" means information about an identified or reasonably identifiable individual.

"Australian Privacy Principles" (APPs) means the privacy standards in Schedule 1 of the Privacy Act 1988 (Cth).

14. GOVERNING LAW

This Privacy Policy is governed by the laws of Victoria, Australia and the Commonwealth of Australia. You submit to the exclusive jurisdiction of the courts of Victoria for disputes.

By using our services, you acknowledge you have read, understood, and agree to this Privacy Policy.

Tools Australia Pty Ltd