Privacy Policy

In this Privacy Policy, “us”, “we” or “our” refers to Lavo Life (operating under the umbrella of
LAVO Hydrogen Storage Technology Pty Ltd ACN: 638 731 192) and our related bodies corporate. We’re committed to
respecting your privacy. This policy sets out how we collect, use, hold and disclose your personal information in
connection with Lavo Life (https://lavolife.com.au).

By providing personal information to us, you consent to our collection, use, holding and disclosure of your personal
information in accordance with this Privacy Policy and any other arrangements that apply between us.

We may change this Privacy Policy from time to time by publishing changes on our website. We encourage you to check
our site periodically so you’re aware of our current practices. This policy should be read together with any specific
privacy or collection statement we provide to you.

“Personal information” includes information or an opinion about an individual that is reasonably identifiable.
Examples include your name, age, gender, postcode, contact details, financial information or details about your
visits to our website or your interactions with us.

---

1. What personal information do we collect?

We may collect the following types of personal information:

• name;
• mailing or street address;
• email address;
• telephone number and other contact details;
• credit card information;
• device ID, device type, geo-location information, computer and connection information, statistics on page views,
  traffic to and from our site, ad data, IP address, and standard web log information;
• details of the products and services we offer or that you have enquired about, including any
  additional information necessary to deliver those products and services and respond to your enquiries;
• any additional information relating to you that you provide directly through our website or indirectly
  through your use of our website or online presence (including from other sites or accounts from which you permit
  us to collect information);
• information you provide to us through customer surveys; or
• any other personal information that may be required to facilitate your dealings with us.

---

2. How do we collect personal information?

We may collect these types of personal information either directly from you or from third parties. This
information may be collected when you:

• register an account or a user for our web-based platform and services;
• register on our website;
• communicate with us by correspondence, phone, email, chats or otherwise; or
• interact with our websites (including through the use of cookies), services, content, and advertising.

In addition, when you apply for a job or position with us, we may collect certain details about you
(e.g., name, contact details, work history, relevant records checks) from any recruitment consultant,
previous employers, or others who can help us decide whether to offer you employment or engage you under
a contract. As our employee, we may also collect certain information connected with your employment
relationship with us.

Certain privacy laws, such as the Privacy Act 1988 (Cth) in Australia, have exemptions for certain
actions involving employee records and related bodies corporate. Where appropriate, we make use of
these exemptions.

We aim to collect information directly from you. However, sometimes we may collect it from third parties
such as your employer or contracting organisations, our service providers, or from publicly available records.

---

3. Why do we collect, hold, use and disclose personal information?

We may collect, hold, use and disclose your personal information for our business operations and activities,
which include the following:

Why we collect, hold, use and disclose personal information	Lawful basis (for GDPR purposes)
To enable you to access and use our services, and to access and use our website	For our legitimate interests in providing our services as requested.
To operate, protect, improve and optimise our services, business and users’ experiences (e.g., analytics, research, marketing)	For our legitimate interests in operating our business efficiently and effectively.
To send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you	Your consent (if given). Performance of a contract. Management of our relationship with you.
To send marketing and promotional messages and other info that may interest you, including info from business partners	Your consent (if given).
To administer rewards, surveys, contests or other promotional activities or events sponsored or managed by us or our business partners	Your consent (if given).
To comply with our legal obligations, resolve disputes with users, and enforce agreements with third parties	Compliance with legal obligations. Legitimate interests in enforcing our rights.
To consider your employment application and manage your employment relationship with us	Performance of a contract with you. Compliance with legal obligations. Legitimate interests in running our business effectively.

Where permitted by relevant privacy and data protection legislation, we may also use and disclose your personal
information for related secondary purposes that would be reasonably expected in the circumstances.

We collect personal information so we can offer our services to you and contact you about them. If you don’t
provide this information, we might not be able to fully provide our services.

When you apply for a job or position with us, we collect your personal information so we can assess your
suitability and comply with our legal requirements. If you don’t provide it, you may not be able to
work with us.

---

4. Do we use your personal information for direct marketing?

Yes, we may send direct marketing communications and information about our products and services.
This might be via emails, in line with Australian laws (including the Spam Act 2003 (Cth) and
the Privacy Act 1988 (Cth)). If you’d rather not receive these communications, simply opt out by
using the function in those emails.

---

5. To whom do we disclose your personal information?

We may disclose personal information for the purposes outlined in this policy to:

• our employees and related bodies corporate (including LAVO Hydrogen Storage Technology Pty Ltd);
• third-party suppliers and service providers (e.g., website operators and businesses who support us in
  providing our services to you);
• professional advisers, dealers and agents;
• payment systems operators (e.g., merchants who process card payments);
• our existing or potential agents, business partners and partners;
• anyone who may acquire our assets or businesses (or part of them);
• specific third parties authorised by you; and/or
• other persons, including government agencies, regulatory bodies and law enforcement agencies,
  where required or permitted by law.

---

6. Disclosure of personal information outside Australia

We may disclose your personal information outside Australia to our employees and related bodies corporate;
HubSpot or another CRM provider; BigCommerce, Stripe or other e-commerce and financial services platforms;
and Microsoft or Google data centres. These entities may be located in the European Union, New Zealand,
the United Kingdom, and the United States. By providing your personal information to us, you consent to the
disclosure of your information overseas and acknowledge that we’re not required to ensure that overseas
recipients handle it in accordance with the Australian Privacy Principles (APP).

---

7. Storage of personal information

We’ll store your personal information for as long as needed for the purposes it was collected,
or for any secondary purpose allowed under the APP. After that, we may still retain it to satisfy
any legal or compliance obligations or for risk management. We’ll take reasonable steps to delete
or de-identify your personal information when it’s no longer required.

---

8. Using our website and cookies

We may collect personal information about you when you use and access our website. Although we generally
don’t use browsing data to identify you, we might record certain details like the pages visited,
the time and date of your visit, and your IP address.

We may also use cookies or similar tracking technologies to help us analyse usage and remember
your preferences. Cookies are small files that store info on your device, allowing the entity that
put the cookie there to recognise you across different sites and sessions. You can disable cookies
in your browser, but some site features may not function as intended if you do.

If a cookie is linked to your account, we’ll treat any data it contains as personal information
in line with this Privacy Policy.

---

9. Security

Whether held electronically or in hard copy, we aim to protect your personal information against misuse,
interference, loss and unauthorised access, modification or disclosure. We use a range of physical,
administrative and technical measures to do so. For instance, payment and credit card information is stored
in compliance with Payment Card Industry Data Security standards.

However, no method is completely secure, especially when transmitting data online.

---

10. Links

Our website may include links to other websites for convenience. These links might not be current or maintained.
Unless stated otherwise, we’re not responsible for the privacy practices or content of those sites. Their privacy
policies may differ from ours, so we recommend reading them before using those sites.

---

11. Accessing or correcting your personal information

You can ask for access to the personal information we hold about you by contacting us (details below).
Sometimes, where permitted by law, we might not be able to provide you with full access, in which case
we’ll tell you why. We may need to verify your identity before granting access.

If you think any information we hold about you is inaccurate, please contact us and we’ll take reasonable
steps to correct it.

---

12. Making a complaint

If you think we’ve breached the Privacy Act or want to complain about how we’ve handled your personal
information, please contact us (details below). Include your name, email address and/or telephone number,
and a clear description of your complaint. We’ll respond within a reasonable timeframe. If you’re not satisfied
with our response, you can seek advice from an independent advisor or contact the Office of the Australian
Information Commissioner (OAIC) at www.oaic.gov.au.

---

13. Additional matters for individuals in the European Union (EU)

In certain circumstances, we may collect, hold, use and disclose personal information of individuals in the
EU in a way that means the General Data Protection Regulation (GDPR) applies. The following applies in those
situations, in addition to everything else in this policy.

13.1 Overseas recipients
We may hold and disclose your personal information outside the EU, including in Australia, as explained above.
We may also disclose your personal information to third parties as described in Section 5 of this Privacy Policy.
Where needed, we rely on your consent for these overseas transfers.

13.2 Additional data rights for EU residents
Under the GDPR, individuals (data subjects) have rights to:

• access their personal data;
• have it deleted or corrected if it’s inaccurate;
• object to or restrict its processing;
• withdraw consent to processing at any time;
• receive it in a portable format; and
• not be subject to a decision based solely on automated processing.

How we handle these rights depends on whether we’re acting as the controller or processor. If you want to exercise
these rights, please contact us.

You also have the right to lodge a complaint with the supervisory authority in the EU member state of your usual
residence or workplace.

---

14. Contact Us

For more information about our Privacy Policy or practices, to access or correct your personal information,
or to make a complaint, please get in touch:

Email: hello@lavo.com.au
Address: Level 9/120 Sussex St, Sydney NSW 2000, Australia