Privacy Statement

PRIVACY STATEMENT

Protecting your privacy

Bodyline imports Pty Limited as trustee for Bodyline imports Unit Trust

ABN 55 158 647 002 is committed to providing you with the highest levels of customer service. This includes protecting your privacy.

About us

We supply a range of goods and services to individuals and business.

Your personal information

Personal information held by us may include your name, date of birth, current and previous addresses, telephone or mobile phone number, email address, bank account or credit card details, occupation, driver's licence number and PIN, username or password. We also hold details of the services that we supply you (including their status), as well as certain details about your personal interests.

If you choose not to provide certain personal information (e.g. your date of birth), we may not be able to provide you with the services you require, or the level of service on which we pride ourselves.

Occasionally, you may need to provide personal information about other individuals to us (e.g. about your authorised representatives). If so, we rely on you to inform those individuals that you are providing their personal information to us and to advise them that we can be contacted for further information.

How we collect personal information

We collect personal information in a number of ways, including:

• directly from you, for example, when you provide information by phone, in application forms or other agreements, or when you submit your personal details through our websites (eg. during www.bodylineimports.com.au registration);

• from third parties such as our related companies, credit reporting agencies or your representatives;

• from publicly available sources of information;

• from the organisations identified under 'When we disclose your personal information';

• from our own records of how you use the services that we provide to you;

• when you visit our websites; and

• when legally required to do so.

How we use your personal information

Your personal information may be used to:

• verify your identity;

• assist you to order goods and/or services from us;

• provide the goods and services you require;

• administer and manage those goods and services, including charging, billing and collecting debts;

• inform you of ways the goods and services provided to you could be improved;

• conduct appropriate checks for credit-worthiness and for fraud;

• research and develop our goods and services;

• gain an understanding of your information and communication needs in order for us to provide you with better or more appropriate goods and services; and

• maintain and develop our business systems and infrastructure, including testing and upgrading of these systems.

Also, your personal information is collected so that we, and our related bodies, can promote and market services to you (including by way of direct mail, telemarketing,

email, SMS and MMS messages). This is to keep you informed of products, services and special offers and may continue after you cease acquiring services from us. If you do not wish us, our related bodies or our dealers to contact you to promote and market products, services and special offers to you, please call (02) 9725 2228.

When we disclose your personal information

In order to deliver the services you require, we may disclose your personal information to outside organisations. Your personal information is disclosed to these organisations only in relation to us providing goods and services to you.

These organisations may carry out our:

• customer enquiries;

• mailing operations;

• billing and debt-recovery functions;

• information technology services;

• installation, maintenance and repair services;

• marketing, telemarketing and door-knocking services;

• market research; and

• website usage analysis.

We take reasonable steps to ensure that these organisations are bound by confidentiality and privacy obligations in relation to the protection of your personal information.

In addition, we may disclose your personal information to:

• your authorised representatives or your legal advisers (e.g. when requested by you to do so);

• credit-reporting and fraud-checking agencies;

• credit providers (for credit related purposes such as credit-worthiness, credit rating, credit provision and financing);

• our related businesses or companies;

• our professional advisers, including our accountants, auditors and lawyers; and

• government and regulatory authorities and other organisations, as required or authorised by law.

Help us to ensure we hold accurate information

We take all reasonable precautions to ensure that the personal information we collect, use and disclose is accurate, complete and up-to-date. However, the accuracy of that information depends to a large extent on the information you provide. That's why we recommend that you:

• let us know if there are any errors in your personal information; and

• keep us up-to-date with changes to your personal information such as your name or address. If you are a subscriber to one of our online products or services, you may change your personal details by using the relevant facility on our websites.

You can access your personal information

You have a right to access your personal information, subject to some exceptions allowed by law. If you would like to do so, please let us know. You may be required to put your request in writing for security reasons. We reserve the right to charge a fee for searching for and providing access to your information.

Bodyline provides products and services via its website (www.bodylineimports.com.au). Bodyline’s Website web server records anonymous information about each visit, such as the time, date and URL of a request. This information assists Bodyline to improve the structure of its

website and monitor its performance. Bodyline may use 'cookies' on its website. Cookies are an industry standard and most major websites use them. A cookie is a small text file that the Bodyline website may place on your computer. Usually, cookies are used as a means for Bodyline’s website to remember your preferences. As such, cookies are designed to improve your experience of Bodylineimports.com.au. In some cases, cookies may collect and store personal information about you. Bodyline extends the same privacy protection to your personal information, whether gathered via cookies or from other sources. You can adjust your internet browser to disable cookies or to warn you when cookies are being used. However, if you disable cookies, you may not be able to access certain areas of our websites or take advantage of the improved website experience that cookies offer. IP Addresses Bodyline also collects Internet Protocol (IP) addresses. IP addresses are assigned to computers on the internet to uniquely identify them within the global network. Bodyline collects and manages IP addresses as part of the service of providing internet session management and for security purposes. How to contact us

If you have any questions in relation to privacy, please contact us on (02) 9725 2228 between 8:30am and 4:30pm, Monday to Friday. Alternatively, you can send an email to our Privacy Manager at mail@bodylineimports.com.au.

Privacy Statement – April 2011

as trustee for Bodyline imports Pty Limited Unit Trust ABN 55 158 647 002

---------------------------------------------------------------------

PRIVACY POLICY (Effective as of September 1st 2020)

This is the Privacy Policy of Bodyline Imports Pty Ltd ABN 55 158 647 002 (Bodyline).

Protecting your privacy is important to Bodyline. We are committed to maintaining the security of all Personal Information provided to Bodyline, whether by individuals with whom we do business, visitors to and users of our websites or otherwise. This Privacy Policy details how we collect, use, and manage this Personal Information.

Bodyline has appointed a Privacy Officer who will ensure that our activities are carried out in compliance with applicable laws. For questions regarding this Policy, to exercise your rights or to lodge a complaint with us, please contact our Privacy Officer at privacy@bodyline.com.au.

For the purposes of this Privacy Policy and applicable data protection and privacy laws:

· Personal Information is defined as information and data, whether recorded in a material form or not, relating to an identified or identifiable natural person that is processed by or on behalf of Bodyline, whether by automated means; and

· Bodyline is considered the “data controller” in respect of the Personal Information that it collects, uses, and manages in connection with this Privacy Policy.

Whose information do we collect?

Bodyline collects Personal Information from a range of individuals in the context of its business activities, including:

· representatives of our suppliers, customers, and business partners;

· contractors;

· landowners;

· industry association representatives;

· users of Bodyline websites; and

· job applicants.

What information we collect and why we collect it

We collect Personal Information from you where it is relevant for our purposes as further detailed below.

Business use

Bodyline may collect a range of information in a business context, such as your name, gender, job title, photographic identification, email address, home address and other contact details, details of your business and other interests, experience and/or academic and professional qualifications, third party references, communications with you (including notes from meetings and telephone call recordings), feedback or survey responses that you provide to us, financial and payment information, and information collected from questionnaires and/or interviews.

Bodyline uses information collected from you for business-related purposes, including negotiating, concluding and performing contracts, managing business relationships, administering real estate leases and licences, recruitment, managing accounts and records, communicating with you and third-party contacts, supporting corporate social responsibility activities, security, legal, regulatory and internal investigations and debt administration.

Our websites

When you use our websites, Bodyline collects certain standard information that is sent by your browser to our website. This includes technical information, such as your IP address, browser type, operating system, language, time zone setting, access times, and any referring website addresses.

Bodyline uses this information to administer our websites and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes. Bodyline also collects certain information to provide users with a personalised experience when visiting our websites. Through the use of a ‘cookie’, Bodyline can record information about your visit to our website including the clickstream to, through and from our site (including date and time), the pages visited, page interaction information and methods used to browse away from the page. This information is used anonymously and in aggregate and is collected and logged for statistical purposes. Through analysis of these records, Bodyline can provide an improved service when users revisit our websites. See below for further information on our use of cookies and related technologies.

Other than as stated in this Privacy Policy, no attempt is made to identify our users of our websites or their browsing activities except:

· where a law enforcement agency exercises a warrant to inspect logs or any such information is otherwise required to be produced by Bodyline to authorities or regulators; or

· where Bodyline believes it is required to collect and produce relevant electronic documentation to fulfil its obligations to third parties, including statutory organisations under local law.

Access to other websites via hyperlink

Other websites that may be accessible via hyperlinks from Bodyline websites are owned and operated by third parties and are not subject to Bodyline’s Privacy Policy. Bodyline has no control over the content of those websites. Please review the privacy policy of each individual website you access and assess whether the policy is satisfactory to you before you use the other websites.

Cookies & Related Technologies

Our websites and mobile applications (“apps”) use cookies. A cookie is a small text file that is placed on your computer or mobile device when you visit a website or use an app. Cookies collect information about users and their visit to the website or use of the app, such as their Internet protocol (IP) address, how they arrived at the website (for example, through a search engine or a link from another website) and how they navigate within the website or app. A cookie cannot read data from your hard disk or read cookie files created by other websites.

Bodyline uses cookies and other technologies to facilitate your internet sessions and use of our apps, offer you services according to your preferred settings, track use of our websites and apps and to compile statistics about activities carried out on our web sites and/or through our apps.

You may set up your web browser to block cookies or remove cookies stored from your computer or mobile device. However, if you do so, you may not be able to use certain features and functions of our websites and apps.

Providing Personal Information

At times, Bodyline may ask you to voluntarily supply Personal Information, such as your name, email address, location, telephone number, and preferred means of communication, for purposes such as subscribing to Bodyline news alerts, direct marketing or requesting further information from Bodyline.

Where we ask you to voluntarily supply Personal Information, we will use it to provide you with the information or services that you have requested from us.

Job Applicants’ Personal Information

When you submit a job application to Bodyline, or to a recruitment agent or advisor engaged to administer our employment marketing initiatives and/or the recruitment/engagement process, we will collect more specific Personal Information about you, such as your name, email address and telephone number, qualifications and career history. We may also ask you for other information, such as information on your interests and the types of jobs in which you are interested. We may also collect your Personal Information from publicly available sources (such as Facebook and LinkedIn); and from third parties (such as references, psychometric test results, and police checks). The Personal Information you provide to Bodyline in, and in connection with, your job application, and the further information which we collect will only be processed for the purpose of considering employment or internship positions at Bodyline.

If any job application you make is unsuccessful, Bodyline may choose to retain your Personal Information for a period of up to 12 months for the purposes of considering you for other roles within Bodyline. Bodyline is under no obligation to retain your Personal Information for this purpose and may elect to delete your Personal Information at any time following an unsuccessful application. You may also request that Bodyline deletes your Personal Information if you do not wish to be considered for further roles. You can do this by informing Bodyline when you submit your job application, or at any time after applying, by emailing us at privacy@bodyline.com.au.

Sensitive Personal Information

Sensitive Personal Information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health or medical conditions, genetic or biometric information, sexual orientation, or criminal convictions and offences may be processed by Bodyline if such processing is necessary to comply with laws and regulations or where you provide this information voluntarily or otherwise consent for us to do so.

Email monitoring

Bodyline may monitor emails sent to and from its workforce, which may contain Personal Information relating to third parties. The information contained in such emails may be used for business-related purposes, for example when investigating incidents within Bodyline. Although Bodyline endeavours not to review the contents of personal emails, there may be occasions when this is necessary, for example, to investigate a breach of security within Bodyline, or in the context of legal proceedings.

The legal basis for Bodyline processing your Personal Information

To comply with applicable data protection and privacy laws, Bodyline is required to set out the legal basis for the processing of your Personal Information. In accordance with the purposes for which we collect and use your Personal Information, as set out above, the legal basis for Bodyline processing your Personal Information will typically be one of the following:

· your consent;

· the performance of a contract that we have in place with you or other individuals;

· Bodyline’s or our business partners’ legitimate business interests; or

· compliance with our legal obligations.

Disclosure of the information we collect

Bodyline may share your Personal Information with people within Bodyline who need to know that information for business or legal reasons, for example, in order to carry out an administrative function such as processing an invoice, or to direct a query that you have submitted to the relevant department within Bodyline.

We may disclose your Personal Information to third parties including the authorities, Bodyline's advisors, suppliers of IT services and third parties engaged by Bodyline for the purpose of providing services requested by you; to protect any intellectual property rights in any materials displayed on or otherwise available from Bodyline's websites; for the purposes of seeking legal or other professional advice; to respond to a legal request or comply with a legal obligation; and to enforce Bodyline's trading terms.

We may disclose your Personal Information to third parties if we sell, buy, or merge any business or assets, including to the prospective seller or buyer of such business or assets. Bodyline may also disclose the Personal Information you provide to us in connection with the job recruitment process to Bodyline HR practitioners and to Bodyline's recruitment advisors for the purpose of considering you for career opportunities with Bodyline.

Transfer of your Personal Information to other countries

Please note that any person to whom Bodyline may disclose your Personal Information under this Privacy Policy may be situated in a country other than your own and that such country may provide a lower level of data protection requirements than your own country. By agreeing to this Privacy Policy, you consent to the transfer of your Personal Information to a country other than your own.

Whenever we transfer Personal Information across borders, we take steps to put in place adequate safeguards to protect your Personal Information and to make sure it is treated in accordance with this Privacy Policy.

Access to Bodyline's Webstore and eBusiness websites

Access to Bodyline’s Webstore or other eBusiness websites or portals may be provided to Bodyline's customers to conduct ecommerce transactions or for supplier management purposes. Users of Bodyline's Webstore or eBusiness websites or portals may be required to register with the customer database by providing their email address; their name, company name, office name; their business address, business phone; and a valid Bodyline internal contact name.

Bodyline will collect details in the customer database that are relevant to the use of the Webstore or eBusiness websites. While Bodyline will use the registration details for demographic analysis and to personalise your web experience, Bodyline will not make customer details available to external parties.

Retention of Personal Information

Bodyline’s aim is to keep your Personal Information for no longer than is necessary for regulatory or Bodyline’s business reasons. The amount of time for which records are kept varies depending upon the type of Personal Information they contain.

Your rights in relation to your Personal Information

If you would like to access or obtain a copy (which may be in machine-readable form) of the Personal Information Bodyline holds about you, please email your request to privacy@bodyline.com.au.

Bodyline endeavours to ensure that the Personal Information it holds about you is complete, accurate, and up to date. If you consider that your Personal Information is incomplete, inaccurate, or out of date, you have the right to require us to correct it. To correct, erase or limit the processing of any of the Personal Information we hold about you, please email your request to privacy@bodyline.com.au.

If you do not provide us with the information sought in the required fields, we may be limited in our ability to provide you with services.

Complaints and Concerns

If you have a concern or complaint about how Bodyline has used your Personal Information, as a first step, you should raise this in writing with Bodyline, via email to privacy@bodyline.com.au.

If you are not satisfied with the handling of your concern or complaint by Bodyline, you can escalate this to the Australian Information Commissioner (www.oaic.gov.au) if you are in Australia.

Changes to this Privacy Policy

This Privacy Policy is effective from 1 September 2020. Any changes Bodyline may make to this Privacy Policy in the future will be posted on this page and will apply to all your Personal Information held by us at that time.

Contact

Questions, comments, and requests regarding this Privacy Policy are welcomed and should be submitted via email to privacy@bodyline.com.au.