Privacy Policy

Who we are

This policy is published by SUMR CO PTY LTD (ACN 695 985 196 / ABN 19 695 985 196), a proprietary company registered in Queensland under the Corporations Act 2001, of 16 Lady Guinevere Cct, Murrumba Downs QLD 4503, Australia ("SUMR", "we", "us").

It explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) (the "Privacy Act") and the Australian Privacy Principles (APPs).

Personal information we collect

We collect personal information that is reasonably necessary for our functions and activities, including:

• Contact details you provide — name, email and company — when you contact us, register interest or request investor materials.
• Account and usage information when you install or use the SUMR app and CLI.
• Technical information such as IP address, device and browser data (see our Cookie Policy).

How and why we collect and use it (APP 3 & APP 5)

We collect personal information directly from you wherever practicable, and notify you of the matters required by APP 5 at or before the time of collection.

We use it to provide and improve our products, respond to enquiries, send service and (where permitted) marketing communications, and meet legal obligations.

Disclosure and overseas recipients (APP 6 & APP 8)

We disclose personal information to service providers who help us operate (see Subprocessors). Some of these recipients are located overseas, including in the United States and other regions where our infrastructure providers operate.

Before disclosing personal information overseas, we take reasonable steps as required by APP 8 to ensure the recipient handles it consistently with the APPs.

Direct marketing and the Spam Act

Where we send marketing communications, we do so consistently with APP 7 and the Spam Act 2003 (Cth): every message identifies SUMR and offers a functional unsubscribe. You can opt out at any time by contacting us.

Security and data breaches

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access (APP 11). See our Security page.

If an eligible data breach occurs, we will respond in line with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act, including notifying affected individuals and the OAIC where required.

Access, correction and complaints (APP 12 & APP 13)

You may request access to, or correction of, the personal information we hold about you by contacting us. We will respond within a reasonable period.

If you are not satisfied with how we handle a privacy matter, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact

Privacy enquiries: SUMR CO PTY LTD, 16 Lady Guinevere Cct, Murrumba Downs QLD 4503, Australia — au@sumr.co.