Who does this Privacy Statement apply to?

This Privacy Statement (“Statement”) applies to Compli3d Pty Limited (“Compli3d”, “we”, “our”, or “us”). We are committed to protecting your personal information and handling it in a transparent and responsible way.

This Statement applies to all individuals whose personal information we collect and handle in connection with:

• The provision of our compliance and consulting services;
• Use of our websites and online platforms (collectively, “our Website”); and
• Any other activities that form part of the operation of our business.

What does this Privacy Statement cover?

This Statement explains how Compli3d collects, stores, uses, and discloses personal information. It applies when:

• You or your organisation engage us to provide professional or compliance-related services;
• You interact with our Website or digital services;
• You participate in events, research, surveys or other business activities conducted by Compli3d.

Scope of our Website

This Statement covers all web pages operated by Compli3d that link directly to this Privacy Statement. Some areas of our Website may contain additional privacy notices relevant to specific activities, such as recruitment, which may take precedence over this Statement where applicable.

What privacy laws apply to Compli3d?

Compli3d complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) andother relevant legislation, including:

• State and Territory-based privacy and health records laws;
• The Spam Act 2003 (Cth);
• The Do Not Call Register Act 2006 (Cth);
• And, where applicable, international privacy laws such as the EU General Data Protection Regulation (GDPR).

What personal information do wecollect?

Information collected during thedelivery of our services:

We may collect personal information in connection with our services, including:

• From clients (about their employees, members, or customers);

• Directly from individuals; or
• From public sources or third-party data providers.

Examples of information we may collect:

• Contact details (name, email, phone, address);
• Date of birth and gender;
• Employment and financial details;
• Complaint or incident data;
• Sensitive information such as health, ethnicity, union membership, and criminal record (where relevant and legally permitted).

We also collect personal details from suppliers and contractors we work with to support our business operations.

Information collected for other business activities:

This may include:

• Feedback or data provided during surveys or research initiatives;
• Information submitted in connection with training sessions, events, or partnerships.

Information collected via our Website or events:

We may collect:

• Contact details when you sign up for updates, register for events, or download content;
• Website usage data via cookies and tracking technologies;
• Preferences and interactions related to marketing communications.

You can manage your cookie preferences via our Cookie Notice.

Children’s Privacy

Our Website is not intended for children under the age of 15. We do not knowingly collect personal information from anyone under this age.

How do we use your personal information?

For service delivery

We use personal information strictly for the purpose of delivering agreed services to our clients. These purposes are defined in client agreements and may include:

• Managing employee tax compliance;
• Supporting corporate restructuring or risk management;
• Improving client service delivery

For internal business activities:

We use data collected through research, surveys, or partnerships to:

• improve our services and tools;
• Develop insights and reports;
• Perform analytics using de-identified data.

For Website and marketing purposes:

We may use your personal information to:

• Send you industry updates, regulatory news, or event invitations;
• Improve Website functionality and user experience;
• Customize content and communications to align with your interests.

You may opt out at any time by clicking “unsubscribe” in communications or contacting us directly.

Other permitted uses:

We may also use your information to:

• Comply with legal and regulatory obligations;
• Protect our legal rights or enforce contracts.

Do we disclose your personal information?

Our Website is not intended for children under the age of 15. We do not knowingly collect personal information from anyone under this age.

We do not sell your personal information.

We may disclose it to:

• Our trusted third-party service providers and advisors;
• Legal or regulatory authorities, if required by law;
• International contractors or partners assisting with business operations (e.g. in the UK, Europe, the US, Singapore, or India).

All recipients of your information are required to maintain adequate data protection and security safeguards.

We may also share anonymised or aggregated data for analytical or promotional purposes.

Social media and interactive tools

If you engage with Compli3d via blogs, forums or social media linked to our Website, any personal information you post may be publicly accessible. Use caution when sharing personal content online.

Legal basis for processing your data

Where required by law (e.g., under the GDPR), we only process your data when:

• You have given consent;
• It is necessary to deliver a service or fulfill a contract;
• It is required by law or regulation;
• We have a legitimate business interest (e.g., improving services, maintaining security).

We may also process sensitive information where:

• You have provided explicit consent;
• It is required by law (e.g., compliance checks);
• It is needed for employment, legal claims, or social protection purposes.

How do we protect your personal information?

Compli3d takes the protection of your data seriously. Our safeguards include:

• Access controls and secure user authentication;
• Encryption and anti-malware systems;
• Staff training on privacy obligations;
• Physical security for office spaces and infrastructure.

Accessing or correcting your personal information

You have the right to:

• Access the personal information we hold about you;
• Correct it if it’s inaccurate or incomplete;
• Withdraw consent (where processing is based on consent);
• Request deletion or restriction of your data;
• Opt out of marketing communications;
• Transfer your data to another provider (where applicable under GDPR or similar laws).

Cookies Notice

Please refer to our Cookies Notice.

‍

To make a request, please contact us at: contact@compli3d.com.au

We will respond in line with applicable legal requirements.

Changes to this Privacy Statement

We may update this Statement from time to time. The latest version will always be published on our Website with the date of the most recent revision.

Effective Date: May 2025