Aegis9 Privacy Statement

Aegis9 respects and is committed to maintaining the privacy of all people who engage with us either via our websites, social media or through any of our projects. This policy(Privacy Policy) governs how Aegis9 deals with the collection, security,quality, use and disclosure of Personal Information, and is in accordance with the Australian Privacy Principles (APP’s) and the Privacy Act 1988.

Your use of our sites indicates that you accept the Privacy Policy, and consent to the collection and use by us of your PersonalInformation according to the terms below. Aegis9 may from time to time amend the Privacy Policy, and users are advised that continued use of our sites following amendment is deemed confirmation of acceptance.

Collection of personal information

Aegis9 only collect Personal Information (asdefined by the Privacy Act) where necessary to conduct our research and associated project activities. The nature of the Personal Information which is held by us will vary depending on the nature of the interaction between you and Aegis9. Aegis9 may collect information in a variety of ways including (but not limited to) by phone, text, electronic/forms completed and provided to us via our websites or by email, fax, social media activities and newsletters.

Aegis9 will only collect Personal Information which identifies you when we, you or one of our research partners expressly provides it as part of our research activities (for which you will have provided consent). If we do collect identifiable data, it may include names,mail and email addresses, phone numbers. As you would reasonably expect, we may also collect data for providing you with updates through our services. We may also collect website and mobile apps statistics (which includes pages accessed and search terms used) but this information is not identifiable.

Use and disclosure of personal information

Aegis9 uses Personal Information only to fulfil and undertake research projects and other activities and to provide certain services and advice.

You acknowledge that we may use your Personal Information to provide you with updated information on new projects, to alert you to events that we may organise or to conduct surveys or engage in other marketing purposes for which you would expect us in reasonable circumstances tocommunicate with you.

Subject to the exceptions listed in the Act,information which identifies individuals will stored securely, only be accessed by authorised Aegis9 staff and our project partners if applicable, or professional advisers if required, all of whom are bound by the Privacy Act andthis Privacy Policy. We will not give your personal information to advertisers and other unrelated or unaffiliated organisations without your consent.

You acknowledge that Aegis9’s obligation to disclose Personal Information may involve disclosure to entities located outside Australia (for example in relation to one of our projects in a foreign nation state). Where Aegis9 is required or authorised to disclose your Personal Information, you consent to the disclosure of your Personal Information to selected foreign entities. We may also disclose Personal Information to overseas recipients when storing Personal Information with ‘cloud’ service providers which may be situated outside Australia.

Security of information

Aegis9 will take all reasonable steps to ensure your Personal Information is protected from modification, misuse, disclosure,loss and unauthorised access. We also take reasonable steps to destroy or permanently de-identify Personal Information which is no longer needed for the purposes described in this Privacy Policy. Aegis9 may use Google Analytics or equivalent social media and other software to collect traffic data on the use of our website for continuous improvement purposes.

Access and correction of personal information

Under the APPs and the Privacy Act, an individual has the right to obtain access to any Personal Information which Aegis9 holds about them and to advise of any perceived inaccuracy. There are some exceptions to this right set out in the Act. To make a request to access or update any Personal Information Aegis9 holds about you, please contact the Aegis9 on enquiry@aegis9.com.au.

As Aegis9 relies on the accuracy of the information you provide us, please notify us of any changes to your personal information details. We will require you to verify your identity and specify what information you require updating.

Enquiries and complaints

If you would like further information about the way Aegis9 manages the Personal Information it holds, or wish to complain that you believe that Aegis9 has breached the Australian Privacy Principles, please contact the Aegis9 on enquiry@aegis9.com.au.

Aegis9 and its Project Partners will make every effort to respond within a reasonable time. If you are not satisfied with the way a complaint is handled by either Aegis9 or its Project Partners, you are entitled to have your complaint reviewed under the Privacy Act. Please refer tothe Office of the Australian Information Commissioner’s (OAIC) website at www.oaic.gov.au. The contact details for the OAIC is enquiries@oaic.gov.au.

Mandatory data breach notification

Aegis9 and its Project Partners are committed to doing all that they can to protect data and personal information. As the internet is inherently insecure no matter how many protection measures are taken, should there be a data breach, Aegis9 and/or its Project Partners may,in compliance with the law, notify the relevant parties as soon as practicable.

In the case of what is known under the law as an ‘eligible data breach’, Aegis9 and/or its Project Partners may notify the relevant parties of what has occurred, what information is involved, what the implications may be, what can be done and what Aegis9 and/or its Project Partners will do in the specific circumstances.