Privacy Policy

Baby Village Holdings Pty Ltd (ACN 651 491 959) and each of its subsidiaries including Baby Village Operations Pty Ltd (ACN 651 492 152) and Baby Village Pty Ltd ACN 138 417 660 (together us, we, Baby Village and the Baby Village Group) are committed to managing personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth) (Privacy Act) and in accordance with other applicable privacy laws (see below for further information about the Baby Village Group).

We understand the importance of being open and transparent with you in the way in which we collect, hold, store, use and share your personal information. We take protecting your privacy very seriously.

We strongly encourage you read this document, so that you understand and are comfortable with how we handle your personal information. If you have any questions about this document, or about Baby Village Group’s handling of your personal information, please contact us using the relevant contact details set out in section 17.

Baby Village is one of the most experienced baby stores in Australia. Just as the name suggests, Baby Village is all about people, most importantly our customers - baby, mum, dad, grandparent, family or friend.

We provide the following goods and services:

This Privacy Policy applies to all Australian Baby Village Group websites including babyvillage.com.au, subsidiaries, affiliates and businesses.

This document sets out our policies for managing your personal information and is referred to as our Privacy Policy.

In this Privacy Policy you and your refers to any individual about whom we collect personal information.

This Privacy Policy sets out how we collect, store, process, use and disclose personal information (including personal information we collect, and personal information submitted to us, whether offline or online).

For example, this can include:
• information we may collect when a customer creates an account with or makes an order via the website;
• information we may collect when individuals join the loyalty program or the VIP Program, or create a Gift Registry; and
• information we may collect when you interact with us - including when you visit our premises in person; when you visit our websites (such as babyvillage.com.au); or contact and communicate with us via our social media channels (such as via Facebook, • Instagram or YouTube), phone or online.

Other terms and conditions may apply to you such as:
• the privacy terms and conditions contained in our Baby Village Terms and Conditions (as applicable to you); and
• the collection notices and privacy statements which may be provided to you at the time your personal information is collected.

“Personal information” is defined in the Privacy Act, and means information or an opinion about an identified individual, or an individual who is reasonably identifiable:

• whether the information or opinion is true or not; and
• whether the information or opinion is recorded in a material form or not.

In this Privacy Policy, whenever we use the term “personal information”, we are referring to this legal definition.

Personal information does not include aggregated or de-identified data.

Normally we collect your personal information from you directly, however on occasion, we may also collect personal information about you from other people and organisations.

In summary, we may collect your personal information when you:
• create an account with us (for example, when you create a Baby Village account or become a Baby Village customer);
• join the VIP program or the loyalty program (or other membership or loyalty programs we may make available to you);
• make a purchase or complete purchase orders for our products or services (via phone, in person or electronically);
• communicate with us during competitions, special events and promotions;
• interact with us in person (such as when you visit our store), via phone or online (including through our website or our social media channels), such as when you contact us to make an enquiry or give us feedback; or
• apply for a position with us (including for work experience).

We may also:
• receive personal information from another member of the Baby Village Group; and
• collect personal information from third parties (such as through acquisition of third party mailing lists and from organisations with whom we have an affiliation) to improve the personalisation of our offerings to you.

Summary of personal information we collect and how we collect this information

In some cases you may provide us with personal information which relates to another person (for example, an emergency contact, or a job referee). If you do so, you agree that you have received permission from these individuals for us to collect, use, and share, their personal information in accordance with this Privacy Policy. You should also let them know about our Privacy Policy (including the information in this Privacy Policy).

Most of the time, you will have the option of not providing your name, or using a fake name, when you deal with us (where it is lawful and practicable). This includes for example, when you make a general enquiry, or when you purchase products from our retail store.

In some circumstances however, we may need your real name as it may not be practicable for us to deal with you anonymously or pseudonymously on an ongoing basis. For example, this includes when arranging for delivery of products purchased online, or managing your loyalty program account. This means that if we do not collect your personal information, we may not be able to provide you with the products and/or services you have asked for.

We collect personal information that is necessary to provide you with our products and to carry out our business.

We may use your personal information for purposes which are incidental to the sale and promotion of our goods, or for other purposes which are within your reasonable expectation or permitted by law.

The purpose for which we usually collect, store, and use your personal information depends on how you interact with us (for example, whether you are part of our VIP loyalty program), but may include the following purposes:

We may share your information with third parties:
• for the reasons for which we collect, store and use that information (see above in section 8);
• for other purposes explained at the time we collect your personal information; or
• where we are otherwise allowed or required to do so under law.

Some of the third parties we may share your information with include the following:

We generally collect your personal information in Australia. However, it is likely that we will share your personal information with overseas recipients located in the United States of America. These recipients include our service providers who may handle, process or store your personal information on our behalf.

For example, we may share your personal information with service providers who assist us with storing our data on secure data storage servers, or with improving our products and services (by analysing sales information and trends, and conducting customer satisfaction enquiries).

We only ever share your personal information outside of Australia where we are permitted to do so under the Privacy Act. Generally this means we will take reasonable steps to ensure your personal information is treated securely and in accordance with applicable privacy laws.

There are other circumstances where we may disclose your personal information to an overseas recipient. For example, where you have provided your consent or we are otherwise permitted to do so under other relevant laws.

When you provide your personal information to a Baby Village Group member, we may use that personal information to send you direct marketing communications to keep you informed about products and services offered by the Baby Village Group and carefully selected partners which we think might be of interest to you based on your interactions with us.

For example, when you create an account with us, or join the VIP loyalty program, we may send you direct marketing communications and information about our products and services (including those provided by other members of the Baby Village Group) that we consider may be of interest to you, or as otherwise allowed under applicable privacy laws.

We may communicate with you (and send these electronic messages and tailored advertising) through various channels, such as via regular mail, email, SMS, telephone, push notifications or social media (including through targeted advertisements on certain websites and social media channels).

We will only send these communications in accordance with applicable privacy and marketing laws (such as the Privacy Act (including Australian Privacy Principle 7) and the Spam Act 2003 (Cth)), and only where you have not opted out from receiving such communications from the relevant Baby Village Group brand.

If you have indicated a preference for a method of communication, we will endeavour to use that method wherever practical to do so.

How can you opt out?

You are always in control of the direct marketing communications which you receive and can opt-out at any time. Generally you can opt-out by following the relevant opt-out or unsubscribe instructions in the relevant communication (such as email or SMS message).

You can also contact us using the detail set out in section 17 to tell us you would like to stop receiving direct marketing communications from us.

For cookies which use your personal information for direct marketing (such as targeted advertising) you can only opt-out by adjusting your device setting and online privacy settings (for advertising on certain websites and social media channels).

Important points regarding opting out

Importantly regardless of whether you opt out from receiving any or all direct marketing communications, we will still communicate with you if we are required by law to provide you with information, or in relation to the services or products we are providing you with (for example, in relation to delivery information for products, sending you an invoice in relation to a transaction).

Third party links and sites

When you use our websites or receive communications from us, links to websites which belong to other third parties may be included (and are provided for your convenience). You should make your own enquiries as to the privacy policies of these parties. We are not responsible for information on, or the privacy practices of, any third party websites.

In addition, when you make online payments using our websites, we do not collect your credit card or banking details. This is because online payments are handled by third parties (Shopify Payments, Forter, Afterpay, Zip Co and Paypal) – please use these links to see details of their privacy and security policies before making online payments.

Website use and cookies

You may visit our websites without identifying yourself. If you identify yourself (for example, by creating an online account or making an enquiry), any personal information you provide to us will be managed in accordance with this Privacy Policy.

Our websites also use cookies (and we share personal information we collect between members of the Baby Village Group). A 'cookie' is a small file stored on your computer's browser, which assists in managing customised settings of the website and delivering content. We collect certain information such as your device type, browser type, “click-through” information, IP address, pages you have accessed on our websites and on third-party websites. Depending on the circumstances, this may or may not be personal information.

At a high level, cookies can be used for a variety of reasons, such as to personalise your browsing experience (for example, by remembering your preferences and recognising you as a repeat visitor to our websites), and to track statistics about the usage of our website. This allows us to better understand our users and improve the layout and functionality of our websites.

If you do not wish to receive any cookies (other than those that are strictly necessary) you can use the settings in your browser to control how your browser deals with cookies. However, in doing so, you may be unable to access certain pages or content on our websites.

Please see our separate Cookies Policy for further information about what cookies we use and information we collect online and through digital services.

We are committed to protecting your personal information, and ensuring that we securely store any personal information we collect (and in accordance with applicable privacy laws). We may hold your personal information in hard copy (paper) or electronic form.

We take all reasonable steps to ensure that any personal information we collect, use or disclose is accurate, complete, up-to-date and stored in a secure environment protected from misuse, interference and loss, and from unauthorised access, modification or disclosure.

Security and storage of personal information

How long do we keep your personal information?

We will only keep your personal information we store for as long as is necessary for the purposes set out in this Privacy Policy or as required to comply with any applicable legal obligations.

When we no longer require your personal information (and in accordance with any applicable laws), we will take steps to delete, destroy or de-identify that information.

You are entitled to request access to any of your personal information that we have. To make such a request, please contact us using the relevant contact details set out below in section 17.

We will take reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete and up-to-date. You can help us to do this by letting us know if you notice errors or discrepancies in information we hold about you and informing us of any change in your personal details (for example, if your email address changes or if you move and change address).

If you consider any personal information we have about you is inaccurate, out-of-date, incomplete, irrelevant or misleading, you are also entitled to request correction of the information (again, please contact us). After receiving a request from you, we will take reasonable steps to correct your information.

We may decline your request to access or correct your information in certain circumstances in accordance with the applicable privacy laws. If we do refuse your request, we will provide you with a reason for our decision. In addition, in the case we refuse your request for correction, we will include a statement about your request with the personal information we store.

If you have any questions or concerns about this Privacy Policy or how we have handled your personal information, you may contact us at any time using the relevant contact details set out below in section 17.

Please also contact us if you have a complaint about privacy. If you make a complaint about privacy, the following will occur:

If you are not satisfied with our response to a complaint, or you consider that we may have breached the Privacy Act (including the Australian Privacy Principles), you are entitled to make a complaint to the Office of the Australian Information Commissioner (the Australian privacy regulator).

The Office of the Australian Information Commissioner can be contacted by telephone on 1300 363 992, or you can fill out thisform to make a complaint about our handling of your personal information. Full contact details for the Office of the Australian Information Commissioner can be found online atwww.oaic.gov.au.

We may make changes to this Privacy Policy, with or without notice to you. However, where we make a material change to the Privacy Policy, we will provide notice to you (including by updating our websites, and, where appropriate, notifying you directly). We recommend you visit this Privacy Policy regularly to keep you up to date with any changes we make.

You can contact us using the details below: