Privacy and Credit Reporting Policy

Mass Electronics Pty Limited ACN 010 508 497 trading as "Innotech Control Systems Australia", "KwikAz" and "Innotech Guardian Safety Systems" ("we", "us" or "our") acknowledges and respects the privacy of individuals.

This Policy explains how we manage your personal information. This Policy also includes our credit reporting policy, that is, it additionally covers how we manage your personal information collected in connection with a credit application such as details relating to your credit history, credit standing, credit capacity and credit worthiness ("credit information").

The types of personal information we collect and how we collect it

The types of personal information that we collect and hold about you may include:

• identification information such as your name, postal or email address, telephone numbers, and date of birth;
• financial details such as your credit card details or bank account details; and
• employment related information including job title and work contact details.

Generally we collect personal information of this nature when you voluntarily provide it to us, for example:

• when you register on one of our websites to become a company member;
• when you enter your personal information into forms on our websites; and
• when you provide information by email or in letters, documents or when you contact us via social media such as Facebook and Twitter.

There may be circumstances when we collect personal information from someone other than the individual concerned, for example, through a referral. We endeavour to contact and notify the individual of the circumstances of such collection where it is reasonable to do so. We may also collect personal information through publically available records such as company searches, and from credit reporting bodies as detailed below.

Our websites may use "cookies" to enhance or personalise our website services. These cookies may also be used to collect and store information about your usage of our website, for example, your IP address and details of your type of computer and web browser, and your approximate geographic location when you access our websites. All information these cookies collect is anonymous.

Furthermore, if you apply for credit, we may collect credit information. We may ask you for this information or we may obtain this credit information from credit reporting bodies such as Dun & Bradstreet Australia. This information may include:

• Default information
• Credit infringement information
• Personal solvency information (e.g. bankruptcy information)
• Court proceedings information (e.g. any default judgments entered against you)
• Repayment history information

We will not request access to credit information about you from a credit reporting body unless you authorise us in writing to do so.

Use and disclosure of personal information

Any personal information (other than credit information) we collect may be used and disclosed for the following purposes:

• To respond to your queries
• To maintain our relationship with you
• To provide our products and services to you
• To send you statements and invoices
• To collect payments from you
• To provide you with information about our products and services
• To request credit information from a credit reporting body

We use the credit information that we obtain from you or a credit reporting body and information we derive from such information strictly for the purpose of assessing your application for credit. If you do not authorise us to obtain credit information about you, we may be unable to assess your credit application and therefore your request for credit may be refused. We may disclose your personal information to credit reporting bodies where we are permitted to do so by law, for example, in circumstances where you fail to meet your payment obligations in relation to consumer credit. These credit reporting bodies may include any such information in reports provided to other credit providers to assist them to assess your credit worthiness.

We may disclose your personal information to the extent that we are required to do so by law, including in connection with any legal proceedings or anticipated legal proceedings, or in order to comply with any legal obligation, or to establish, exercise or defend our legal rights.

We may sell, transfer, or otherwise disclose our database of personal information to an actual or potential successor entity, purchaser, or investor in connection with a corporate merger, consolidation, sale of our assets or substantially all our assets, share sale, investment transaction or other corporate rearrangement.

Cross-border disclosures of personal information

Your personal information may be disclosed to international distributors of our products. It is not practicable to specify all the countries in which our distributors may be located.

The Privacy Act 1988 (Cth) ("the Act") and corresponding Australian Privacy Principles ("APPs") require relevant Australian entities to ensure that, before disclosing personal information overseas, reasonable steps are taken to ensure that overseas recipients do not breach the Act or the APPs (APP 8.1). It is not always possible to ensure that overseas recipients will comply. We do not take any responsibility for the actions of overseas third party recipients of personal information. By agreeing to this Policy you are agreeing that your personal information may be disclosed overseas and that APP 8.1 will not apply to that disclosure.

Storage and security of personal information

We will conduct regular checks of personal information to ensure that such information is stored in a secure manner. Paper files are stored within our premises. Electronic information is stored within our computer system to which internal access is password protected and also protected from outside interference or interception by firewall and other security measures.

Access and correction of personal information

We take reasonable steps to ensure that the personal information we collect, use and disclose in accordance with this Policy is accurate, complete and up-to-date.

If we hold your personal information you are entitled to access the information which is subsequently handled by us or request correction of such information. There are exceptional circumstances where access to or correction of your personal information may be refused by us such as where access would be unlawful. We will advise you of such circumstances if they arise. If you would like access or request correction of your personal information, please write to our Managing Director via the details below.

Individuals requesting access to or correction of their personal information must provide proof of identity. We will only consider your request once your identity has been verified.

Contact us – questions or complaints

If you have any questions or complaints about this Policy or our treatment of your personal information, please write to:

Managing Director

Mass Electronics Pty Ltd

PO Box 292

Sunnybank QLD 4109

Individuals must set out the details of their complaint and what resolution is requested. The Managing Director will investigate complaints and a written reply will be forwarded as soon as possible. If you are still not satisfied, you can contact the Australian Privacy Commissioner (see www.oaic.gov.au/about-us/contact-us-page or call 1300 363 992).

Changes to this Policy

This Policy will be reviewed from time to time to take account of new laws and changes to our operations. Any information we hold about you will be governed by our most current Policy. We recommend that you periodically review this Policy for any changes.