What is Personal Information? Personal information refers to any information that identifies you or from which your identity can be reasonably ascertained. This may include your name, signature, addresses, email, phone number, date of birth, credit or bank information, and location data.

Information We Collect. We collect various types of personal information to provide and improve our services. The specific data collected depends on how you interact with our website. This may include: • Contact Information: Your name, email address, phone number, and physical address when you provide them through forms or direct submissions. • Technical Data: Your IP address, device information, browser type, operating system, and browsing activity on our website. • Usage Data: Information about how you use our website, such as pages visited, time spent on pages, and links clicked. • Payment Information: If you make purchases on our website, we may collect credit card numbers or other payment details. These are handled securely, often by third-party payment processors. • Cookies and Tracking Technologies: We use cookies and similar technologies to collect information about your web browsing behavior. These help us tailor our website to your needs, remember your preferences, and for analytics and marketing purposes. Most cookies and trackers will collect personal information and must therefore be disclosed. However, many cookies and trackers are hidden and require deep-scanning technology to uncover.

How We Collect Information We collect personal information through various methods, including: • Direct Submissions: When you fill out forms (e.g., contact forms, registration forms, checkout forms), subscribe to newsletters, or otherwise directly provide information to us. • Automated Technologies: Through cookies as you navigate our website. • Third-Party Sources: From third-party service providers, analytics partners, or advertising networks that integrate with our website.

Purposes for Collecting and Using Your Information We collect and use your personal information for the following purposes: • To Provide and Improve Services: To operate, maintain, and provide the features and functionality of our website and services, and to understand and analyse how you use our services to improve them. • For Personalisation and User Experience: To tailor content, recommend products or services, and personalise your experience on our website. • Marketing and Communication: To send you newsletters, promotional materials, and other communications that may be of interest to you, in accordance with your preferences and applicable laws. We will obtain your consent for direct marketing unless otherwise permitted by law. • Legal Obligations and Compliance: To comply with our legal obligations under Australian law (including the Privacy Act and APPs) and other international regulations like GDPR and CCPA. Under Australian Privacy Principle 3, personal information is collected only if it is reasonably necessary for or directly related to our website's functions and activities. This is clearly stated in our privacy policy.

Who We Share Your Information With We may disclose your personal information to third parties in the following circumstances: • Service Providers: We engage third-party companies and individuals to facilitate our services (e.g., website hosting, analytics, payment processing, email marketing). These third parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. We conduct due diligence and establish detailed contracts outlining responsibilities and security measures to ensure they meet our data protection standards. • Legal Authorities: If required by law, we may disclose your information to comply with a subpoena, court order, or other legal process or governmental request. • Business Transfers: In connection with a merger, acquisition, or sale of assets, your personal information may be transferred as a business asset. If we collect personal information for one purpose, we are not allowed to use or disclose it for any other purposes unless we obtain your consent. We do not generally sell or rent your email address or other personal information to third parties for their direct marketing purposes. If we were to engage in such practices, we would clearly notify you and provide opt-out options.

Data Security and Retention It is our responsibility as the website owner to protect the personal information we collect from misuse, interference, loss, unauthorized access, modification, or disclosure. We implement appropriate technical and organizational measures to safeguard your data, including encryption, access controls, and compliance with security standards. We also ensure that the personal information we collect is accurate, up-to-date, and complete. We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. We adhere to the principle of data minimization, collecting only the personal data that is absolutely necessary for our legitimate purposes. When personal information is no longer needed for a permitted purpose, we take reasonable steps to destroy or de-identify it.

Your Privacy Rights You have certain rights regarding your personal information, which we are committed to upholding: • Right to be Informed: We must inform you about the data being collected, how it will be used, how long it will be kept, and whether it will be shared with third parties. We will notify you at or before the time of collection, or as soon as possible after. • Access to Personal Information: You have the right to request a copy of the information we hold about you and information about how it is being processed. We will respond to your request within a reasonable period and provide access free of charge. • Correction of Personal Information: You have the right to request corrections to any inaccurate, incomplete, or outdated personal information we hold about you. We will ensure your information is up to date, complete, relevant, and not misleading, and if necessary, notify third parties to whom we disclosed the information. • Erasure (Right to be Forgotten): For EU residents, you have the right to request the erasure of your personal data under certain circumstances (e.g., no longer necessary for original purpose, withdrawal of consent). • Withdrawal of Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. To exercise any of these rights, please contact us using the details provided in our contact section.

Contact Us If you have any questions or concerns about this Privacy Policy, our data handling practices, or if you wish to exercise your privacy rights, please contact us at: Email: contact@georgeebymathew.com. We will respond to your request within a reasonable timeframe.