Privacy Policy

How SBN Technology Pty Ltd (Strength By Numbers) collects, uses, discloses and stores personal information.

Overview

Thank you for using SBN Technology Pty Ltd (ACN 624 009 598) (Strength By Numbers, us or we). We provide a service that allows users to assess the physical strength and movement of their clients.

Your privacy is important to us and we are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) (Privacy Act), which includes the Australian Privacy Principles (APPs) and any related privacy codes.

This Policy outlines how we collect, use, disclose and store your personal information and lets you know how you can access that information. This Policy applies to our obligations when handling information in Australia.

Please read this Policy carefully and contact us using the details below if you have questions.

Consent

By providing personal information, you consent to us collecting, using, storing and disclosing your personal information in accordance with this Policy or as required or permitted by law.

If you continue using our services, then we will treat your use as your consent to us handling your personal information in accordance with this Policy.

What kinds of personal information do we collect and hold?

The type of personal information we collect depends on the circumstances of its collection and the nature of your dealings with us.

If you use our services or register an account with us, this information may include:

• your name, email address and phone number;
• employment information, such as place of employment, job title and employment contact details;
• date of birth;
• age;
• gender;
• height and weight;
• sports and activities regularly undertaken;
• payment details such as bank details, credit card number, expiry date and CVV code;
• your device ID, device type and information, geo-location information, Internet Protocol (IP) address, standard web log information, browser session data, device and network information, statistics on page views, acquisition sources, search queries, browsing behaviour and information gathered through internet cookies; and
• information contained in any communications between you and us.

If you are a prospective employee or independent contractor applying to work with Strength By Numbers, we may collect the following information:

• your name, address and contact details;
• business registration details, such as your Australian Business Number;
• your employment details and qualifications;
• billing and payment information; and
• information you provide to us as part of the recruitment process.

For general users that may not have subscribed to our service but interact with us, we may collect information when you connect with us or use our website. This may include information:

• provided in communications we have with you; and
• about your access and use of our website, including browser session data, device and network information, statistics on page views, acquisition sources, search queries, browsing behaviour and information gathered through internet cookies.

We collect some sensitive information from individuals. This may include examination data, test results and previous injury history including the type of injury and date of the injury. If you consent to providing us with this information, we will only use it for the purposes relating to our provision of services and to enable you to use our website.

You may choose to not identify yourself or use a pseudonym when you contact us, such as if you lodge a complaint. However, if you choose not to provide information as requested, we may not be able to service your needs. For example, it will not be possible for us to provide you with our service if you want to remain anonymous or use a pseudonym.

We sometimes receive unsolicited personal information. In circumstances where we receive unsolicited personal information we will usually destroy or de-identify the information as soon as practicable if it is lawful and reasonable to do so, unless the unsolicited personal information is reasonably necessary for, or directly related to, our functions or activities.

Why do we collect your personal information?

We collect your personal information primarily to provide you with our service of assessing individuals' physical strength and movement and to enable your use of our services.

Some ways we use your personal information are:

• for the purpose for which the personal information was originally collected;
• to identify and interact with you;
• to manage our relationship with you;
• to respond to requests for our services, or to tell you about our services that may be of interest to you;
• to perform administrative and operational functions;
• to comply with any legal requirements, including any purpose authorised or required by an Australian law, court or tribunal; and
• for any other purpose for which you give your consent.

In relation to the personal information of contractors or prospective staff members, we collect personal information for purposes including to:

• enable us to carry out our recruitment functions;
• correspond with you;
• fulfil the terms of any contractual relationship; and
• ensure that you can perform your duties.

For our customers, we may use the information we collect to better understand our users and gain insights into customer behaviour, and to facilitate our provision of our products and services to our customers.

How we collect your personal information

You give it to us

We collect personal information directly from you when you:

• use our services;
• set up an account or profile with us;
• interact or share personal information with us via our website and social media;
• complete a survey or test sent to you by (or on behalf of) us;
• register your interest in hearing more about Strength By Numbers; or
• communicate with us.

We collect it

We may also collect your personal information from third parties including:

• from publicly available sources;
• your employer if you are the contact for the employer's account;
• service providers;
• referrals who may have referred you to us; and
• organisations with whom we have an agreement to share information with.

We endeavour to only ask for your personal information if it is reasonably necessary for us to carry out our business activities and will generally obtain consent from the owner of the personal information to collect their personal information. Consent will usually be provided in writing; however, sometimes it may be provided orally or may be implied through a person's conduct. We endeavour to only ask for your personal information if it is reasonably necessary for the activities that you are seeking to be involved in.

Disclosing your personal information

We may disclose your personal information to the following third parties:

• our business or commercial partners;
• our professional advisers, dealers and agents;
• third parties and contractors who provide services to us, including support services, IT service providers, distributors, marketing and advertising organisations and payment processing service providers;
• payment system operators and debt-recovery functions;
• third parties that collect and process data, which are available in our list of sub-processors (Sub-processor List); and
• any third parties authorised by you to receive information held by us.

We may also disclose your personal information if we are required, authorised or permitted by law.

We may send information to third parties that are located outside of Australia. These third parties are located in the locations set out in our Sub-processor List, although this list may change from time to time. Disclosure is made to the extent that it is necessary to perform our functions or activities.

Using your personal information for direct marketing

From time to time, and in support of our future development and growth, we may use your personal information to contact you to promote and market our products and services. We may also share your personal information with our commercial and business partners for marketing purposes.

You can opt-out from being contacted for direct marketing purposes by contacting us at [email protected] or by using the unsubscribe facility included in each direct marketing communication we send. Once we receive a request to opt out from receiving marketing information, we will stop sending such information within a reasonable amount of time.

Security

We take all reasonable steps to protect personal information under our control from misuse, interference, loss and from unauthorised access, modification or disclosure.

We hold your personal information electronically in secure databases operated by our third-party service providers set out in our Sub-processor List.

We protect the personal information we hold by implementing the appropriate physical, electronic, and organisational measures, including pseudonymisation of customer and end user data, HTTPS encryption of data transmitted through the internet to protect against eavesdropping and tampering, employee access restriction, regular technical assessments and updates of the Strength By Numbers systems, systems and network monitoring for suspicious or irregular behaviour or use of our service, staff education and training in strong security practices, physical security measures and cyber security measures which we regularly review and update.

While we take reasonable steps to ensure your personal information is protected from loss, misuse and unauthorised access, modification or disclosure, security measures over the internet can never be guaranteed.

We encourage you to play an important role in keeping your personal information secure, by maintaining the confidentiality of any passwords and account details used to access our services.

Accessing or correcting your personal information

You are able to request access to personal information we hold about you. If you would like to access your personal information, please contact us using the details below. In certain circumstances, we may not be able to give you access to your personal information, in which case we will write to you to explain why we cannot comply with your request.

We try to ensure any personal information we hold about you is accurate, up-to-date, complete and relevant. If you believe the personal information we hold about you should be updated, please contact us using the details below and we will take reasonable steps to ensure it is corrected if appropriate.

Destroying or de-identifying personal information

We destroy or de-identify personal information when we no longer need it, unless we are otherwise required or authorised by law to retain the information.

Making a complaint

If you believe your privacy has been breached or you have a complaint about our handling of your personal information, please contact us using the details below.

We take privacy complaints seriously. If you make a complaint, we will respond within 5 days to acknowledge your complaint. We will try to resolve your complaint within 30 days. When this is not reasonably possible, we will contact you within that time to let you know how long we will take to resolve your complaint.

We will investigate your complaint and write to you to explain our decision as soon as practicable.

If you are not satisfied with our decision, you can refer your complaint to the Office of the Australian Information Commissioner by phone on 1300 363 992 or online at www.oaic.gov.au.

Changes

We may, from time to time, amend this Policy. Any changes to this Policy will be effective immediately upon the posting of the revised Policy on our website. By continuing to use the services following any changes, you will be deemed to have agreed to such changes.

Contact us

All questions or queries about this Policy and complaints should be directed to:

SBN Technology Pty Ltd (collectively, Strength By Numbers, we, us, our) is committed to protecting your privacy. We have prepared this GDPR Privacy Notice to describe to you our practices regarding personal information we collect from users of our services, including our website at www.strengthbynumbers.com, and all other services provided by Strength By Numbers (Services).

Our primary privacy obligations are derived from Australian law. Our Privacy Policy, available on our website, sets out how we comply with these obligations.

Sometimes, we also handle the information of European Union (EU) and United Kingdom (UK) citizens or share data with other organisations which do so or provide services to individuals located in the EU and UK. To the extent that we do so for individuals:

• based in the EU or who are citizens of the EU, this GDPR Privacy Notice for the EU General Data Protection Regulation applies (EU GDPR); or
• based in the UK or who are citizens of the UK, this GDPR Privacy Notice for the UK General Data Protection Regulation applies (UK GDPR).

The processing of Personal Information will always be in line with the Australian Privacy Principles contained in the Privacy Act 1988 (Cth), the EU GDPR and UK GDPR, and in accordance with country-specific data protection regulations and other applicable regulations to Strength By Numbers.

We have implemented a number of technical and organisational measures to ensure the most complete protection of Personal Information processed through the Services.

Your rights

The EU GDPR and UK GDPR provide you with eight key rights, being the right to:

• Be informed: anyone processing your data must make clear what they are processing, why and who else the data may be passed to.
• Access: the right to access what data is held about you.
• Rectification: the right to have your data corrected or amended if what is held is incorrect.
• Erasure: the right to ask for your personal data to be deleted, also known as the right to be forgotten, if permitted under applicable laws.
• Restrict processing: the right to require a temporary halt to the processing of personal data.
• Data portability: the right to request for any data supplied by you to us to be provided in a structured, commonly used and machine-readable format.
• Object: the right to object to further processing of your data which is inconsistent with the primary purpose for which it was collected.
• Consider automated decision making and profiling: the right not to be subject to a decision based solely on automated processing.

This Privacy Notice sets out, among other things, how you can exercise these rights when dealing with Strength By Numbers.

User consent

Where we rely on your consent as the lawful basis to process your data under the GDPR regime applicable to you, we will always ask for you to positively affirm your acceptance. By clicking to accept this Privacy Notice, you acknowledge and agree to be bound by this Privacy Notice.

We note that all contact or other data forms where consent is required to be given by you include no pre-checked checkboxes so that you are able to freely, affirmatively opt-in. We will also provide you with notice on the Services specifically detailing what it is that you are consenting to in clear and plain language, as well as ensuring that each matter that requires consent is clearly distinguishable.

For all areas of the Services where consent is given it is just as easily able to be withdrawn through the appropriate account settings on the Services or by contacting us at the details provided below.

If you believe that consent has not been given freely or in breach of the terms of this Privacy Notice, please contact us.

Personal Information we collect

We will only collect Personal Information from you if it is reasonably necessary for one or more of our functions or activities.

Personal Information means any information that allows someone to identify you, including, for example, your name, telephone number, e-mail address, date of birth, as well as any other non-public information about you that is associated with or linked to any of the foregoing data.

Information you provide to us -- Account and User Content

You need to create an account with us to use some of our Services. During your account registration and use of the Services, you may enter your details on different forms or provide us with additional content.

We may collect Personal Information from you, such as:

• your name, email address and phone number;
• employment information, such as place of employment, job title and employment contact details;
• date of birth;
• age;
• gender;
• height and weight;
• sports and activities regularly undertaken;
• payment details such as credit card number, expiry date and CVV code;
• examination data and test results; and
• previous injury history including the type of injury and the date of the injury.

This data is used to enable us to identify and verify you and provide you with support, services, mailings, sales and marketing actions. Certain functionality of the Services requires your Personal Information to function properly.

When you create or share content, or upload content such as notes, physical assessment results, photos, meta data (geographic tags), we may also collect this data.

The legal basis for this processing is based on:

• your consent through your voluntary submission of the form and agreeing to these terms;
• the Personal Information being necessary for the performance of a contract to which you are a party;
• for carrying out pre-contractual measures; and/or
• any other legitimate interests as detailed below.

Payment Data

If you are a customer or another individual who makes payment to us, we may collect information when we process that data. When you make a payment, we (or our third-party service provider) will collect all information necessary to complete the transaction, including:

• your name, address and contact details;
• business registration details; and
• billing and payment information.

The Personal Information we collect will be the data that you input in any payment area on the Services.

The legal basis for this processing is based on:

• your consent through your voluntary submission of the form and agreeing to our terms;
• the Personal Information being necessary for the performance of a contract to which you are a party including the payment of goods or services; and/or
• any other legitimate interests as detailed below.

This Personal Information is needed to enable us to process your payment for our Services.

Contact and Messaging Data

If you provide us feedback or contact us via e-mail, or other means including by phone call or by contracting with us, we will collect your name and e-mail address, as well as any other content included in the e-mail or conversation, in order to send you a reply. We will store and process your communications and information as needed. We may also collect contact information if you choose to upload, sync or import it from a device.

The legal basis for this processing is based on:

• either through your consent through your voluntary submission of the form and agreeing to these terms or by your voluntary submission of data to us in other means;
• the Personal Information being necessary for the performance of a contract to which you are a party;
• for carrying out pre-contractual measures; and/or
• any other legitimate interests as detailed below.

By submitting a form or contacting us, such Personal Information is transmitted on a voluntary basis and you consent to its collection.

Subscription Data

When you use the Services, you may have the ability to subscribe to our newsletters or other forms. We may collect the data when you input your details for subscription purposes.

The Personal Information is processed for the purpose of informing you regularly by means of a newsletter or other offer form. The personal information collected during the subscription will only be used for marketing materials or for reasons made known on the form.

The legal basis for this processing is based on:

• your consent through your voluntary submission of the form and agreeing to these terms; and/or
• any other legitimate interests as detailed below.

By submitting the form and voluntarily providing us with your data, you are providing consent to the use of such data by us for the purpose of providing subscription based materials. For the purpose of revocation of consent there is a corresponding unsubscribe link found in each subscription email. You may also contact us at [email protected] to revoke your consent. Please review the consent section above in this Privacy Notice for how we deal with consent. Where we use your data for direct marketing, we will ensure that it is in compliance with relevant laws. Where you are a customer of ours, we may be required to send you emails for legitimate reasons including but not limited to billing, reminders and account verification.

We retain information on your behalf, such as domain names, URLs, time zone preferences, Service invoices, transactional history, messages and any other information that you store using your Account.

We may also collect Personal Information at other points on our Services. These points state that Personal Information is being collected. In some circumstances, Personal Information is provided to us by third parties such as our related entities, service providers or other organisations conducting activities on your behalf. With your express consent, your Personal Information may be used and disclosed to us this way. The purposes as outlined above may include the processing of such Personal Information to the extent necessary for us to comply with a law, regulation or legal request or to protect the safety of any person or to prevent fraud.

Information we collect as you use our services -- Meta Data including Location Data

Some of our Services may allow you to add, or may have metadata added to your content such as geotags (to mark your location), comments or other data. This helps our Services and your content to be more searchable.

We use location data to help target and tailor the Services to your particular location and jurisdiction. With your consent, we may also collect information about your precise location using methods including wireless networks, Wi-Fi access points and other sensors.

Log Data

To make our Services more useful to you, our servers (which may be hosted by a third-party service provider) gather information automatically and store it in log files. This information includes Internet Protocol (IP) addresses, browser type and language, Internet service provider (ISP), referring and exit websites and applications, operating system, date/time stamp, and clickstream data.

We use this information to understand and analyse trends, to administer the Services, to learn about user behaviour regarding the Services, to improve our product and services, and to gather demographic information about our user base as a whole.

Strength By Numbers may use this information in our marketing and advertising services.

In some of our email messages, we use a "click-through URL" linked to content on our Services. When customers click one of these URLs, they pass through a separate web server before arriving at the destination page on our website. We track this click-through data to help us determine interest in particular topics and measure the effectiveness of our customer communications. If you prefer not to be tracked in this way, you should not click text or graphic links in the email messages.

Analytics

We use third party analytics tools to collect information anonymously and report website trends without identifying individual visitors. These tools collect information sent by your device or our Services, including the web pages you visit, add-ons, and other information that assists us in improving the Services.

Information we collect from others

We may also collect information and communications that other people provide when they use our Services. This can include information about you such as when others send messages, documents and information to you. If you are an employee of a business, this might include information that your employer provides to us. We may also collect your information if you are invited to participate in our Services. This may include information such as your name, phone number and email address relevant to the Services and is used for the purpose of enabling us to provide our Services to you.

We will only collect information about you directly from you, except where it is unreasonable or impracticable to do so.

How we use your Personal Information

We will only use or disclose your personal information for the purposes for which we advised you we were collecting it as noted in this Privacy Notice and including to:

• enable you to access and use our website, hardware and associated applications;
• correlate any information you have provided against our software as a service records;
• assess the physical strength and movement of end-users;
• maintain and update your account;
• maintain and update end-users' profiles;
• maintain internal records and administrative purposes;
• comply with our legal obligations and resolve any disputes that we may have;
• maintain your account and contact details;
• remember information so you don't have to re-enter it during your visit or the next time you visit the Service;
• provide personalised content and information to you and others;
• send marketing communications to you;
• conduct our business, generate content and provide customer support and payment options (including updates and improvements);
• administer contracts including to negotiate, execute and/or manage a contract with you;
• communicate with you;
• provide you with access to protected areas of the website or other Services;
• conduct surveys to determine use and satisfaction;
• detect, investigate and prevent potentially unlawful acts or omissions or acts or omissions with the potential to breach our Terms of Service, this Privacy Notice or any other terms;
• enforce our Terms of Service, this Privacy Notice or any other terms;
• verify information for accuracy or completeness;
• comply with our legal obligations;
• monitor metrics;
• use anonymised movement assessment data to improve our assessments of strength and movement;
• combine or aggregate your personal information with information we collect from third parties and use it for the purposes set out in this Privacy Notice;
• protect a person's rights, property or safety;
• process transactions to which you are a party;
• resolve disputes and to identify, test and resolve problems;
• improve our Services; and
• any other purpose made known in this Privacy Notice or other policy.

We agree to not use or disclose this information for a secondary purpose unless you consent to us doing so, or another exception applies under applicable laws.

For the purposes of the law, some information we hold about you may be considered 'sensitive' as a special category of data and therefore subject to greater protection. In the event that we hold sensitive information about you, we will only disclose or use that information with your consent or if another exception applies under applicable laws.

We will also use or disclose your personal information or special category data if we are required to do so by law or a court / tribunal order, or if we reasonably believe that the use or disclosure of the information is reasonably necessary for an enforcement related activity or on behalf of an enforcement body, in which case we will make a written note of the use or disclosure or another exception applies under relevant laws.

Creation of anonymous data

We also collect data in a form that does not, on its own, permit direct association with any specific individual. We may collect, use, transfer, and disclose non-personal information for any purpose.

We may collect information:

• regarding customer activities on our Services including the website; and
• regarding end users' strength and movement assessment data.

This information is aggregated and used to help us provide more useful information to our customers and to understand which parts of our website, products, and Services are of most interest, and for the purpose of providing and improving our Services and assessments of end users' strength and movement. Aggregated data is considered non-personal information for the purposes of this Privacy Notice.

We regularly review the anonymised data to ensure that any risk of possible re-identification of individuals is minimised as much as possible.

Disclosure of your Personal Information

We may disclose your Personal Information to third parties for the purposes contained in this Privacy Notice, including without limitation to:

Service Providers

We may share your Personal Information with service providers to:

• provide you with the Services that we offer you;
• conduct quality assurance testing;
• facilitate creation of accounts;
• provide technical support; and/or
• provide other services to Strength By Numbers.

The service providers (and if necessary, data processors) include:

• information technology service providers such as web host providers and analytical providers;
• mailing houses;
• payment providers;
• advertising partners;
• market research organisations to enable them to measure the effectiveness of our advertising; and
• specialist consultants.

These third party service providers are required not to use your Personal Information other than to provide the services requested by Strength By Numbers. If you would like to see a list of our service providers, please see our list of sub-processors (Sub-processor List).

Affiliates and Acquisitions

We may share some or all of your Personal Information with any of our parent companies' subsidiaries, joint ventures, or other companies under a common control (Affiliates), in which case we will require our Affiliates to honour this Privacy Notice. In the event we are involved in a merger, acquisition or sale of assets we may disclose Personal Information collected by us to such entities that we propose to merge with or be acquired by and will assume the rights and obligations regarding your Personal Information as described in this Privacy Notice. This includes the disclosure of information to our clients where we act as a data processor.

Third parties including those you choose to share your data with

We may disclose your Personal Information to third parties to whom you expressly ask us to send the Personal Information to or to third parties you choose to send your Personal Information to.

We may also, with your consent or at your direction, disclose your personal information to your authorised representatives.

Other disclosures

Regardless of any choices you make regarding your Personal Information (as described below), Strength By Numbers may disclose Personal Information if it believes in good faith that such disclosure is necessary:

• in connection with any legal investigation;
• to comply with relevant laws, regulations, enforceable governmental requests or to respond to subpoenas or warrants served on Strength By Numbers;
• to protect or defend the rights or property of Strength By Numbers or users of the Services;
• to investigate or assist in preventing any violation or potential violation of the law, this Privacy Notice, or our Terms of Service;
• to protect the safety of any person or to protect the safety or integrity of our platform including for security reasons; or
• to detect, prevent or otherwise address fraud, security or technical issues.

We may share your Personal Information with such third parties subject to obligations consistent with this Privacy Notice and any other appropriate confidentiality and security measures, and on the condition that the third parties use your Personal Information only on our behalf and pursuant to our instructions.

We will take reasonable steps to ensure that anyone to whom we disclose your personal information respects the confidentiality of the information and abides by the EU GDPR, UK GDPR or equivalent privacy laws.

We will not share, sell, rent or disclose your personal information in ways different from what is disclosed in this Privacy Notice.

If we can't collect your data

If you do not provide us with the Personal Information described above, some or all of the following may happen:

• we may not be able to provide our Services to you, either to the same standard or at all;
• we may not be able to run competitions and promotions in a way that benefits you;
• we may not be able to provide you with information about products and services that you may want; and/or
• we may be unable to tailor the content of our Services to your preferences and your experience of our Services may not be as enjoyable or useful.

Cookies Policy

What are cookies?

A cookie is a small piece of text sent to your browser by a website that you visit. It helps the website to remember information about your visit, like your preferred language and other settings. That can make your next visit easier and the site more useful to you. Cookies play an important role. Without them, using the web would be a much more frustrating experience.

Use of cookies

Strength By Numbers' Services, including websites, online services, email messages, and advertisements, may use "cookies" and other technologies such as pixel tags and web beacons. These technologies help us better understand user behaviour, tell us which parts of our websites people have visited, and facilitate and measure the effectiveness of advertisements and web searches.

We generally treat information collected by cookies and other technologies as non-personal information. However, to the extent that IP addresses or similar identifiers are considered personal information by local law, we also treat these identifiers as personal information. Similarly, to the extent that non-personal information is combined with personal information, we treat the combined information as personal information for the purposes of this Privacy Notice.

Strength By Numbers and our partners also use cookies and other technologies to remember personal information when you use our Services. Our goal in these cases is to make your experience with Strength By Numbers more convenient and personal. For example, knowing your first name lets us welcome you the next time you open the Strength By Numbers Services. Knowing someone using your computer or device has shopped for a certain product or used a particular service helps us make our advertising and email communications more relevant to your interests. And knowing your contact information, hardware identifiers, and information about your computer or device helps us personalise your operating system and provide you with better customer service.

Pixel tags enable us to send email messages in a format customers can read, and they tell us whether mail has been opened. We may use this information to reduce or eliminate messages sent to customers.

How to manage cookies

Some people prefer not to allow cookies, which is why most browsers give you the ability to manage cookies to suit you. If you want to disable cookies, you may do so using the function in your web browser. Please note that certain features of the Strength By Numbers Services may not be available once cookies are disabled.

Third party websites

When you click on a link to any other website or location, you will leave our website and go to another site and another entity may collect Personal Information or Anonymous Data from you. We have no control over, do not review, and cannot be responsible for, these outside websites or their content. Please be aware that the terms of this Privacy Notice do not apply to these outside websites or content, or to any collection of data after you click on links to such outside websites.

Managing your Personal Information

Subject to the EU GDPR or UK GDPR, you may request to access the Personal Information we hold about you by contacting us. All requests for access will be processed within a reasonable time.

Accessing or rectifying your Personal Information

We may, if required, provide you with tools and account settings to access, correct, delete, or modify the Personal Information you provided to us. You can find out more about how to do this by contacting us. In the event that you are unable to access your Account to access or rectify your Personal Information, you may submit a request to us to correct, delete or modify your Personal Information and download the data for you.

Deletion

We keep data for as long as it is needed for our operations. If you deactivate and delete your Account, your data will no longer be visible on your Account. Please keep in mind that third parties may still retain copies of information you have made public through our Services. If you wish to have us delete your data, please contact us.

Object, restrict or withdraw consent

You may submit a request to us if you object to any Personal Information being stored, or if you wish to restrict or withdraw any consent given for the collection of your Personal Information.

You may withdraw your consent to the processing of all your Personal Information at any time. If you wish to exercise this right, you may do so by contacting us.

You may withdraw your consent or manage your opt-ins by either viewing your account on the Services or clicking the unsubscribe link at the bottom of any marketing materials we send you.

Portability

We may, if required and possible, provide you with the means to download the information you have shared or generated through our services. Please contact us for further information on how this can be arranged.

In certain instances, we may not be required or able to provide you with access to your Personal Information. If this occurs, we will give you reasons for our decision not to provide you with such access to your Personal Information in accordance with the requirements of the EU GDPR or UK GDPR.

There is no application fee for making a request to access your personal information. However, we may charge an administrative fee for the provision of information in certain circumstances, such as if you make repeated requests for information or where the information is held by a third-party provider.

Where we act as a data processor, we do so on behalf of our customer and in accordance with their instructions. This means that should you wish to access, review, correct, transfer, modify or delete any Personal Information we process on behalf of a customer you should contact the customer with your request.

Storage and Security of Your Personal Information

Strength By Numbers stores Personal Information in our Services as well as with some of our sub-processors in our Sub-processor List.

Strength By Numbers takes the security of your personal information very seriously. We will take all steps reasonable under the circumstances to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. We will process Personal Information securely and apply and maintain appropriate technical and organisational measures to protect Personal Information.

The transmission and exchange of information is carried out at your own risk. We cannot guarantee the security of any information that you transmit to us or receive from us. Although we take measures to safeguard against unauthorised disclosures of information, we cannot assure you that personal information that we collect will not be disclosed in a manner that is inconsistent with this Privacy Notice.

International Transfer and Disclosure of Personal Information

Where we transfer Personal Information from within to outside of the EU, EFTA States or UK, we ensure an adequate level of protection for the rights of data subjects based on the adequacy of the receiving country's data protection laws.

We may disclose Personal Information to our related bodies corporate and third-party suppliers and service providers located overseas for some of the purposes listed above. We take reasonable steps to ensure that the overseas recipients of your Personal Information do not breach the privacy obligations relating to your Personal Information.

We may disclose your Personal Information to entities located outside of Australia, including the following:

• our related bodies corporate;
• our data hosting and other IT service providers, located in various countries as set out in our Sub-processor List; and
• other third parties located in various foreign countries.

We may disclose your Personal Information to entities within Australia who may store or process your data overseas.

Notifiable Data Breaches

We take data breaches very seriously.

We will endeavour to meet the 72-hour deadline as imposed by the EU GDPR and UK GDPR, to report any data breach to the supervisory authority or to the Information Commissioner's Office where a data breach occurs that will likely be a risk to you.

Further, where there is likely to be a high risk to your rights, we will endeavour to contact you without undue delay. We will review every incident and take action to prevent future breaches.

Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you, or similarly significantly affects you, as long as the decision is not necessary for entering into, or the performance of, a contract between us, or is not authorised by Union or Member State law or UK law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is not based on your explicit consent. If you wish to exercise your rights, please contact us.

Integrity and Retention of Data

We take all reasonable steps to ensure that the Personal Information we collect about you is accurate, up to date and complete. Where we collect that information from you directly, we rely on you to supply accurate information. Strength By Numbers makes it easy for you to keep your Personal Information accurate, complete, and up to date.

Where we use or disclose your Personal Information, we will also ensure that your Personal Information is relevant.

We will retain your Personal Information for the period necessary to fulfil the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. We may retain your information for fraud prevention or similar purposes.

Contact Information

Strength By Numbers welcomes your comments or questions regarding this Privacy Notice. If you have a question regarding this Privacy Notice or you would like to make a complaint, please contact us by email by using the details below.

If you reside in the EU, EFTA States, or the UK, the data controller that is responsible for your Personal Information is:

Representative

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

• European Union (EU)
• United Kingdom (UK)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter, or make use of your data subject rights, please visit the Prighter compliance landing page for SBN Technology Pty Ltd.

If you wish to raise a concern about our use of your information you have the right to do so with your local supervisory authority for individuals based in the EU or with the Information Commissioner's Office for individuals based in the UK.

Changes to this Privacy Notice

This Privacy Notice is subject to occasional revision and Strength By Numbers reserves the right, at its sole discretion, to modify or replace any part of this Privacy Notice. It is your responsibility to check the Privacy Notice periodically for changes. Continued use of our Services including the website shall indicate your acknowledgement that it is your responsibility to review the Privacy Notice periodically and become aware of any modifications.

We may amend this Privacy Notice from time to time. Not all changes to our Privacy Notice will require your consent, for example where office security procedures are changed. We will notify you of any change to our information handling policy that requires your consent before being implemented.