Aeris Environmental Privacy Policy

AerisTech Pty Ltd (AerisTech) (ABN 28 091 227 388) is an Australian company and references to “Aeris”, “we”, “us” and “our” in this Privacy Policy refer to AerisTech Pty Ltd.

Aeris is bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (Privacy Act). The APPs are designed to protect the confidentiality of information and the privacy of individuals by regulating the way personal information is collected, used, disclosed and managed. Personal information is, generally speaking, information or an opinion relating to an identified, or reasonably identifiable, individual.

This policy explains the types of personal information that we may collect and hold, how that information is used and with whom the information is shared. It also sets out how you can contact us if you have any queries or concerns about this information.

Why do we collect personal information? We collect personal information about our registered online customers to understand and meet their needs, to conduct our activities and meet legal obligations.

What personal information do we collect? The types of personal information we may collect include contact information (such as your name, address, email address and telephone number), employment information including your position, user role and security level as it pertains to our website access and any feedback that you provide to us about our products and services, our website, or other matters.

Personal information may be collected by way of forms filled out by individuals (including via online forms), emails, telephone conversations, online user-generated content and face-to-face meetings.

Cookies and website analytics: Our website uses cookies and similar technologies to remember your preferences, maintain your login session and collect statistical information about how our website is used (such as your IP address, browser type and pages visited). You can set your browser to refuse cookies, although some parts of our website may not function fully if you do. Analytics information is collected and used in aggregated form and is not used to identify you personally.

How might Aeris use and disclose your personal information? Aeris may use and disclose your personal information for the primary purpose of collection, or for reasonably expected secondary purposes which are related to the primary purpose, or for purposes to which you have consented, and in other circumstances authorised by the Privacy Act.

Generally, Aeris may use and disclose your personal information for a range of purposes, including to:

• provide you with our products or services that you have requested;

• respond to your queries or feedback;

• provide you with purchasing or sales records, including duplication of invoices, statements and sales reports; and

• let you know about developments in our processes, products, services, activities and programs that might be useful to you. You can opt out of receiving marketing communications at any time by contacting us or by using the unsubscribe facility included in the communication.

Disclosure of personal information to other parties: Aeris may disclose your personal information to trusted third-party service providers who assist us to operate our business and website (for example, IT, cloud hosting, payment and delivery providers). These providers are required to keep your information secure and to use it only to provide services to us. Otherwise, we will not disclose your personal information to anyone outside our company or group of companies, except as set out in this policy or as required or permitted by law.

We may disclose your personal information if it is required or authorised by law, where disclosure is necessary to prevent a threat to life, health or safety, or where we are otherwise permitted by the Privacy Act.

We do not sell or license your personal information to third parties.

Disclosure of personal information overseas: Aeris stores personal information on cloud servers located in Australia and subject to Australian jurisdiction. We do not currently disclose personal information to recipients located outside Australia. If this changes, we will update this Privacy Policy to identify the countries in which those recipients are located, as required by the APPs.

Security and management of personal information: Aeris will take reasonable steps to protect the personal information we hold from misuse and loss and from unauthorised access, modification or disclosure. The ways we do this include:

• limiting physical access to our premises, our Website, and our electronic data;

• limiting access to the information we collect about you (for instance, only those of our personnel who need your information to carry out our business activities are allowed access)

• requiring any third party providers to have acceptable security measures to keep personal information secure; and

• putting in place physical, electronic, and procedural safeguards in line with industry standards.

If we no longer require your personal information and are not legally required to retain it, Aeris will take reasonable steps to destroy or permanently de-identify the personal information.

Notifiable data breaches: In the unlikely event of a data breach involving your personal information that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under the Privacy Act.

Accessing the information we hold about you: Under the APPs, you may be able to obtain a copy of the personal information that we hold about you. The APPs provide some exceptions to your rights in this regard. To make a request to access this information, please contact us in writing. We will require you to verify your identity and specify what information you require. We will respond to your request within a reasonable period (generally within 30 days). We will not charge you for making the request, although we may charge a reasonable fee for providing access. If we refuse access, we will give you written reasons and information about how you can complain about the refusal.

Updating your personal information: We endeavour to ensure that the personal information we hold about you is accurate, complete and up-to-date. Please contact Aeris at the contact address set out below if you believe that the information we hold about you needs updating.

Updates to this Policy: This Privacy Policy will be reviewed from time to time to take account of new laws and technology, changes to our operations and practices and the changing business environment. When we update this policy, we will publish the revised version on our website. This Privacy Policy was last updated in June 2026.

Contact us

Any complaints or correspondence in relation to this Privacy Policy should be sent to our Compliance Officer:

AerisTech Pty Ltd

5/26-34 Dunning Avenue, Rosebery NSW 2018

Attention: Compliance Officer

Email: info@aeristech.com

We will acknowledge your complaint as soon as practicable and aim to provide a substantive response within 30 days. If you are not satisfied with our response, you can refer your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.