Viktoria & Woods Pty Ltd (ACN 108 554 983) and its related bodies corporate (referred to as "Viktoria & Woods", "we", "us", or "our") are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and manage your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What is Personal Information?

Personal information is any information or opinion about an identified individual, or an individual who is reasonably identifiable, as defined in the Privacy Act.

Types of Personal Information We Collect

The personal information we collect and hold depends on how you interact with us, for example, if you join our VIP Customer Loyalty Program. We may collect:

• Your name and contact details (address, phone number, email)
• Your date of birth
• Your purchase history, including product types, specifications, sizes, colours, and other attributes of products and services you've purchased, ordered, or enquired about
• Your company name (if applicable)
• Information about your shopping preferences and selections
• Technical data such as the domain you access the internet from, the date and time you access our Website, the internet address of the website from which you linked to our Website, your IP address, browser and device type, internet service provider, mobile phone carrier, and platform type
• Information from cookies or similar technologies that uniquely identify your browser or account (such as pages accessed, items in your shopping cart)
• If using a mobile device, identification numbers, device type and manufacturer, and (if enabled) geographical location data (including GPS). Note: An IP address can sometimes approximate a device's location.
• Other information you make publicly available online (e.g., on social media platforms)
• Other information you voluntarily provide to us from time to time

When and How We Collect Your Personal Information

Direct Collection from You

We collect personal information directly from you when you interact with us in-store or online, including when you:

• Purchase products or services
• Participate in competitions or promotions
• Apply for or access your VIP Customer Loyalty Program membership
• Request information about us or our products/services
• Use our Website
• Request a refund, return, or make a claim
• Lay-by products or place products on hold
• Provide feedback, respond to surveys, or change email preferences
• Register as a member
• Apply for or become an employee of Viktoria & Woods
• Otherwise provide personal information to us via telephone, email, post, or in person

Collection by Other Lawful Means (e.g., Cookies & Analytics)

We also collect information about your interactions with our Website, advertisements, and social media platforms through lawful and fair means, primarily using cookies and similar technologies. This occurs when you:

• Click on a link from our Website
• Visit a website, app, or social media platform displaying our advertisements

Cookies: We use first and third-party cookies to personalize your Browse and online shopping experience, identify your device, track pages viewed, and remember shopping cart items. You can configure your browser to disable cookies, but this may affect Website functionality.

Google Analytics: We use Google Analytics cookies to track Website usage, compile statistical reports, and analyze traffic and engagement data. You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout/

Google Ads & Third-Party Advertising: We use third parties, including Google Analytics Advertising Features, for advertising. Google and other third parties (e.g., other websites, apps, social media platforms) collect data via advertising cookies and identifiers for relevant display ads based on your site visits. To opt out of Google Ads Personalization, visit: www.google.com/settings/ads More on Google advertising cookies: www.google.com/policies/technologies/types/

Automatically Collected Personal Information

When you access our Website, we automatically record information from your device and software, including your IP address, browser/device type, internet service provider, mobile carrier, platform type, referring/exit pages, date/time stamp, and cookies uniquely identifying your browser or account. For mobile devices, we may also collect device identification numbers, mobile carrier, device type/manufacturer, and (if enabled) geographical location data (including GPS).

Third-Party Payment Processor

Viktoria & Woods uses third-party payment processors (gateways) for all online payments. All personal information, including financial details like credit card numbers, is collected and used directly by these processors. Their use of your information is governed by their own terms and conditions and privacy policies. We do not store or retain any sensitive financial/billing information (credit card numbers, bank account details).

Unsolicited Personal Information

If we receive personal information that we have not requested, we will comply with our obligations under the Privacy Act. Unless legally required to keep it, we may de-identify and/or destroy this information.

Why We Collect Your Personal Information

We collect personal information to provide you with the best shopping experience, allow us to:

• Conduct our business operations
• Meet regulatory requirements
• Market and sell our products and services, including notifying you of events and offers
• Improve our products and marketing strategies
• Register and manage your customer account, including VIP Customer Loyalty Program membership
• Administer, facilitate, and process your transactions and activities on our Website or in retail stores, including contests or social events
• Communicate with you regarding our services, competition results, special offers (including VIP Program benefits), announcements, updates, terms, security alerts, and support messages
• Analyze, monitor, develop, and improve our services and products
• Ensure security, protecting our Website and property from abuse, fraud, unauthorized access, or illegal activities, and safeguarding our rights, safety, and property, and that of our users
• Send marketing communications, including promotional/advertising offers, contests, rewards, upcoming events, and news about our products and services
• Comply with relevant laws and regulations
• Perform other functions as described at the time of collection or with your consent

Direct Marketing

We may use your personal information to send you direct marketing materials if you would reasonably expect us to, or if you consent. This includes communications related to the VIP Customer Loyalty Program.

We may contact you via phone, email, social media, SMS, or regular mail, prioritising your preferred method where practical.

If we obtain your personal information from a third party, we will seek your consent before sending direct marketing. Direct marketing may include promotional material about us or our products/services.

You can opt out of receiving direct marketing by contacting us via methods specified in the marketing materials or by emailing customercare@viktoriaandwoods.com.au.

Mobile Terms of Service (SMS/Text Messaging)

The Viktoria & Woods mobile message service ("the Service") is operated by Viktoria & Woods. Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time, and your continued use constitutes acceptance of changes.

By consenting to Viktoria & Woods’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Viktoria & Woods through your wireless provider to the mobile number you provided, even if registered on any Do Not Call list. Messages may be sent using an automatic telephone dialing system or other technology. Service-related messages include updates, alerts, and information (e.g., order updates, account alerts). Promotional messages include promotions, specials, and other marketing offers (e.g., cart reminders).

You understand you do not have to sign up for this program to make purchases; your consent is not a condition of any purchase. Participation is voluntary.

We do not charge for the Service, but you are responsible for charges from your wireless provider. Message frequency varies. Check your mobile plan for details. You are solely responsible for all SMS/text message charges.

You may opt-out of the Service at any time. Text STOP to VikWoods or click the unsubscribe link (where available) in any text message to cancel. You’ll receive a one-time opt-out confirmation. No further messages will be sent unless initiated by you. To cancel other Viktoria & Woods mobile programs, opt out separately per their terms.

For Service support or assistance, email customercare@viktoriaandwoods.com.au.

We may change any short code or telephone number for the Service at any time and will notify you of these changes. Messages sent to changed numbers may not be received, and we are not responsible for honoring requests in such messages.

Wireless carriers are not liable for delayed or undelivered messages. You agree to provide a valid mobile number. If you get a new number, you must sign up with the new number.

To the extent permitted by applicable law, we are not liable for failed, delayed, or misdirected delivery of information sent via the Service, errors in such information, and/or any action you take or do not take in reliance on the information or Service.

Disclosure of Personal Information

We may disclose your personal information to:

• Our shareholders, officers, employees, and other businesses within our group of companies.
• Service providers assisting our business operations and recruitment activities (including third-party service providers based overseas, e.g., for data hosting, customer support, marketing platforms. While we strive to work with reputable providers, we cannot guarantee their specific locations and it is not always practicable to specify them in this policy. We take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the APPs).
• Government agencies.
• Parties involved in the purchase or sale of any of our businesses.
• Other third parties involved in processing orders, providing goods/services on our behalf, or otherwise connected with our relationship with you.
• As otherwise required or permitted by law.

We do not sell your personal information to third parties for marketing purposes. Unless specified, we will not disclose your personal information to any other organization unless required by law, permitted by the Privacy Act, or with your consent.

Disclosure to Other Third Parties (Specific Examples)

We may share your personal information with third parties if it is reasonably related to providing our services or your use of our Website. This includes:

• Consultants, contractors, credit agencies, debt collection agencies, and other service providers (e.g., for identifying/disseminating advertisements, enforcing Terms and Conditions, fraud detection/prevention, payment processing, analytics).
• Business partners offering goods or services jointly with us (e.g., contests, promotions, VIP Customer Loyalty Program benefits).
• Where necessary to identify, contact, or bring legal action against anyone damaging our rights/property, our users, or others.
• With your consent in a separate agreement.
• In connection with any company transaction (e.g., merger, sale of assets/shares, reorganization, financing, change of control, acquisition) or in the event of bankruptcy, dissolution, divestiture, or similar proceedings.

We also reserve the right to share your personal information with other third parties where, in our sole discretion, it is required to:

• Investigate and defend against third-party claims or allegations.
• Protect the rights, property, or safety of Viktoria & Woods, its users, or the public as required or permitted by law.
• Detect, prevent, or otherwise address criminal (including fraud or stalking), security, or technical issues.

Data Security & Retention

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorized access, modification, or disclosure. For online transactions, our Website uses industry-standard 128-bit SSL (secure sockets layer) encryption for sensitive information.

We will keep your personal information only as long as required for our business purposes and as otherwise required by Australian law. When we no longer need your personal information for a permitted purpose, we will take reasonable steps to destroy or de-identify it.

Notifiable Data Breaches Scheme

In the event of an eligible data breach that is likely to result in serious harm to individuals, we will comply with our obligations under the Notifiable Data Breaches (NDB) scheme, which includes notifying affected individuals and the Office of the Australian Information Commissioner (OAIC).

Third-Party Websites and Social Media

Our Website may contain links to and from websites owned or operated by other parties. We have no control over, and are not liable for, the privacy practices or content of these third-party websites. We make no representation about their privacy practices. You are responsible for checking their privacy policies.

We operate pages on social media platforms (e.g., Facebook, Instagram, Pinterest). By interacting with our social media pages, you agree to the terms and privacy policy of those platforms. These platforms may collect your information, and their privacy practices are not controlled by us.

Social Media Platforms allow public access to your public social media profile (e.g., username, age range, country/language, friend list), which may be accessible by us if you interact with our pages. We may access statistics (e.g., views, navigation patterns, likes, comments, shares, user interactions) for marketing and promotion.

Amendments to This Privacy Policy

We reserve the right to amend this Privacy Policy from time to time as we deem fit. While we will endeavor to notify you as soon as reasonably possible of any changes (e.g., via email for account holders or a prominent notice on our Website), it is your responsibility to keep up to date with any changes or amendments by checking this page prior to using our Website.

Accessing, Updating, and Correcting Your Personal Information

We take reasonable steps to ensure that the personal information we hold about you is accurate, up-to-date, and complete.

Upon your written request, we will provide you with a copy of your personal information, unless providing access would unreasonably impact the privacy of others or is not otherwise permitted under the APPs or law.

If you wish to have your personal information destroyed or de-identified, please contact us, and we will take reasonable steps to do so, unless we are legally required to keep it (e.g., for auditing or internal risk management reasons).

You may request to review, change, or delete personal information by contacting our Privacy Officer at customercare@viktoriaandwoods.com.au.

Anonymity and Pseudonymity

Wherever it is lawful and practical, you have the option of using a pseudonym or not identifying yourself when dealing with us. However, doing so may affect our ability to provide our products and services to you. If you apply for or become an employee, you must provide true, accurate, and not misleading or deceptive personal information.

Privacy Enquiries and Complaints

If you have a concern or complaint related to our handling of your personal information, any breaches of the APPs, or any other queries regarding this Privacy Policy, please contact us:

Email: customercare@viktoriaandwoods.com.au Telephone: +61 3 9421 6781 Mail: Customer Care Viktoria & Woods Pty Ltd 20-24 Hall St, Hawthorn East, VIC, 3123

We will endeavor to respond to all enquiries and complaints within 30 days and deal with the matter expeditiously and consistently with our legal obligations. If unresolved, complaints may be referred to an external complaints resolution entity and, if necessary, taken to the Office of the Australian Information Commissioner (OAIC).

OAIC Contact Details: Email: enquiries@oaic.gov.au Telephone: 1300 363 992 Mail: Office of the Australian Information Commissioner GPO Box 5218, Sydney NSW 2001 Online: http://www.oaic.gov.au/privacy/making-a-privacy-complaint

Last Updated: June 18, 2025