This document sets out Everhard's policy on the management of personal information. In this policy, "we", "us" and "our" refer to Everhard, and "you" and "your" refer to individuals from whom we might collect personal information. Definitions of terms in the CommonwealthPrivacy Act (such as "personal information") also apply in this policy. This policy may be updated by us from time to time.

We take steps to comply with the National Privacy Principles ("NPP's") of the Privacy Act. Our privacy governs our collection, storage, use and disclosure of personal information. We outline our policy in each of those areas below.

Collection
We generally collect the following kinds of personal information, for the following purposes, in the course of our business.

• Customer names and contact details, so that we can contact our customers;
• Supplier names and contact details, so that we can contact our suppliers;
• Employee names and personal details for payroll records;

Where possible, we collect that information from the individual concerned. At the time we collect information, we try to advise the individual of the relevant purpose, and obtain the individual's consent.

Sometimes, we collect information about individuals from other, such as credit or bank references from others.

Whether we collect personal information from an individual or from elsewhere, and whether or not we obtain written consent, we always deal with that information in accordance with this policy.

Personal Information and Our Web Site
Logs/Cookies. In addition to information entered into our web site, the site automatically collects two types of information. First, we may from time to time collect information relating to use of our web site, such as the pages are requested and accessed and which browser software is being used. This information enables us to identify the areas of the site, which are popular and tailor the site accordingly.

Storage
We take steps to make sure that personal information is stored securely. Those steps include storing paper records in a physically secure place, and using appropriate access controls in relation to our information systems.

Secure sites. When personal information is sent to us using our web site, we use encryption technologies to prevent that information from being read or altered by another person while it is in transit.

Use
We use information outlined above for the purpose set out above. We also analyse information from time to time, in order to improve our business and our products and services. The analysis is performed on aggregated information, not information relating to specific individuals.

Disclosure
We may disclose personal information in the following ways:

• We disclose personal information when we are legally required to do so;
• We share some types of personal information within our corporate group (that is, to related companies/branches/sites) as a consequence of the use of the information for the above purposes;
• We disclose personal information to others when they carry out tasks for us which are necessary to achieve the above purposes. For example, we disclose personal information to the organisation, which sends our bulk mail to individuals.