Edition Sept ("Edition Sept", "we", "us" or "our") operates the online store at editionsept.com (the "Store"), a women's fashion retailer. This policy explains how we collect, hold, use, disclose and protect your personal information when you visit the Store, create an account, place an order, contact us, or otherwise interact with us.

We handle personal information in accordance with the Privacy Act 1988 (Cth) (the "Privacy Act") and the Australian Privacy Principles (the "APPs"). This policy is the open and transparent statement of our information handling practices required under APP 1.

The business responsible for your personal information is Fashionape, trading as Edition Sept, registered in the Netherlands under Dutch Chamber of Commerce number 90123883, with its registered address at Hazelaarweg 27, 7556DN Hengelo, the Netherlands (the "Operator"). By using the Store you acknowledge that you have read and understood this policy.

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. The categories of personal information we collect include:

• Identity and contact details, such as your name, billing and delivery addresses, email address and phone number.
• Account information, such as your login credentials, saved addresses, wishlist items and order history, where you create an account.
• Order and transaction information, such as the products you purchase, order value, returns and exchanges, and communications about your orders.
• Payment information. Card payments are processed by our payment providers. We do not store full card numbers on our systems. We may receive limited details such as the card type, the last digits of the card and the outcome of the transaction.
• Communications, such as the content of messages you send us by email, contact form, live chat or social media, and our replies.
• Marketing preferences, such as your consent to receive emails and the products or categories you have shown interest in.
• Technical and usage information, such as your IP address, device and browser type, operating system, the pages you view, the links you click, referring pages and the dates and times of your visits, collected through cookies and similar technologies.
• Information you choose to provide, such as reviews, survey responses, competition entries or sizing and style preferences.

We generally do not collect sensitive information (such as health, racial or ethnic origin, or religious beliefs). If we ever need to collect sensitive information, we will only do so with your consent and where it is reasonably necessary for our functions or activities, unless an exception under the Privacy Act applies.

We collect personal information in the following ways:

• Directly from you, when you place an order, create an account, subscribe to our emails, complete a form, leave a review, or contact us.
• Automatically, through cookies and similar technologies when you browse the Store, as described in section 7.
• From third parties who help us run the Store, such as our ecommerce platform, payment providers, delivery partners, marketing and analytics providers, and social media and advertising platforms.

Where it is reasonable and practicable, we collect personal information directly from you. If we receive unsolicited personal information that we could not have collected under the APPs, and it is not contained in a Commonwealth record, we will destroy or de-identify it as soon as practicable, in line with APP 4.

We collect, hold, use and disclose your personal information for the following purposes:

• To process and fulfil your orders, including taking payment, arranging delivery, and handling returns, exchanges and refunds.
• To create and manage your account and provide customer support.
• To communicate with you about your orders, enquiries and our services.
• To send you marketing communications where you have consented or where otherwise permitted by law, and to personalise the offers and content you see.
• To operate, maintain, secure and improve the Store, including analytics, fraud prevention and troubleshooting.
• To understand customer preferences and improve our product range and shopping experience.
• To comply with our legal obligations, resolve disputes and enforce our terms.

We will only use or disclose your personal information for a purpose for which it was collected (the primary purpose), for a related secondary purpose you would reasonably expect, or where you have consented or another exception under APP 6 applies.

With your consent, or where otherwise permitted under the Privacy Act and the Spam Act 2003 (Cth), we may send you marketing communications about products, offers and news by email.

Every marketing email we send includes an unsubscribe option. You can opt out at any time by using that option or by contacting us using the details in section 19. We will action your request promptly. You may continue to receive transactional and service messages, such as order confirmations and delivery updates, as these are not marketing communications.

If you ask us to, we will let you know the source from which we collected information used for direct marketing, unless it is impracticable or unreasonable to do so.

Where it is lawful and practicable, you may deal with us anonymously or using a pseudonym, for example when making a general enquiry. However, we cannot fulfil and deliver an order, take payment or manage an account without certain personal information.

We use cookies and similar technologies to operate the Store, remember your cart and preferences, measure how the Store is used, and support marketing. These technologies may collect technical and usage information described in section 2.

We use:

• Strictly necessary cookies that are required for the Store to function, including for the cart and checkout.
• Performance and analytics cookies that help us understand how visitors use the Store.
• Functional cookies that remember your choices.
• Advertising and targeting cookies that help us show relevant ads and measure their performance, including through platforms such as Meta and TikTok, and pixels they provide.

You can manage cookies through your browser settings and, where offered, through any cookie controls on the Store. Blocking some cookies may affect how the Store works. Where your browser sends a Do Not Track signal, please note there is no agreed industry standard for responding to it.

We disclose personal information to third parties who provide services that help us run the Store, and only so they can perform those services for us. These recipients include:

• Our ecommerce and hosting platform, which operates the Store and processes orders.
• Payment providers and gateways that process your payments.
• Delivery and logistics partners that ship your orders.
• Email, communications and marketing providers that send our messages and manage subscriptions.
• Analytics providers that measure Store performance.
• Advertising and social media platforms that help us deliver and measure advertising.
• Professional advisers, such as accountants and lawyers, where reasonably required.
• Government agencies, regulators or law enforcement, where required or authorised by law.

We may also disclose personal information if our business is sold or restructured, in which case information may be transferred to the new owner subject to this policy. We do not sell your personal information.

Some of the service providers described in section 8 are located outside Australia, or store information outside Australia, including in the United States and the European Union. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles it consistently with the APPs, as required under APP 8.

By providing your personal information and using the Store, you acknowledge that it may be disclosed to and stored by recipients located overseas.

We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include access controls, encryption of data in transit, use of reputable service providers, and limiting access to staff who need it.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

We comply with the Notifiable Data Breaches scheme under the Privacy Act. If we become aware of a data breach that is likely to result in serious harm to affected individuals, we will assess it and, where required, notify the affected individuals and the Office of the Australian Information Commissioner (the "OAIC") as soon as practicable.

We keep personal information only for as long as we need it for the purposes set out in this policy, or for as long as we are required to keep it by law, including tax, consumer and record keeping obligations. When we no longer need personal information, we take reasonable steps to destroy it or de-identify it.

We take reasonable steps to make sure the personal information we collect, use and disclose is accurate, up to date, complete and relevant. Please keep your account details current and let us know if any of your information changes.

You may request access to the personal information we hold about you, and you may ask us to correct it if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading, in line with APP 12 and APP 13.

To make a request, contact us using the details in section 19. We may need to verify your identity before acting. We will respond within a reasonable period. In most cases access is free, although we may charge a reasonable cost for giving access in certain circumstances. If we refuse access or correction, we will tell you why in writing and explain how you can complain.

We do not adopt a government related identifier, such as a tax file number or driver licence number, as our own identifier for you, and we do not use or disclose such identifiers except where permitted under APP 9.

The Store may contain links to third-party websites, plugins and services that we do not control. This policy does not apply to those third parties. We encourage you to read their privacy policies before providing personal information to them.

The Store is intended for adults and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

We may update this policy from time to time to reflect changes in our practices or the law. The current version will always be available on the Store, and the date at the top shows when it was last updated. Significant changes will be made clear where appropriate.

If you have a question about this policy, want to access or correct your information, or wish to make a privacy complaint, please contact us:

• Email: legal@editionsept.com
• Postal address: Hazelaarweg 27, 7556DN Hengelo

If you make a complaint, we will acknowledge it and respond within a reasonable period, usually within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner:

• Website: oaic.gov.au
• Phone: 1300 363 992

Edition Sept ("Edition Sept", "we", "us" or "our") operates the online store at editionsept.com (the "Store"), a women's fashion retailer. This policy explains how we collect, hold, use, disclose and protect your personal information when you visit the Store, create an account, place an order, contact us, or otherwise interact with us.

We handle personal information in accordance with the Privacy Act 2020 and the Information Privacy Principles (the "IPPs"). The business responsible for your personal information is Fashionape, trading as Edition Sept, registered in the Netherlands under Dutch Chamber of Commerce number 90123883, with its registered address at Hazelaarweg 27, 7556DN Hengelo, the Netherlands. By using the Store you acknowledge that you have read and understood this policy.

Personal information is information about an identifiable individual. The categories of personal information we collect include:

• Identity and contact details, such as your name, billing and delivery addresses, email address and phone number.
• Account information, such as your login credentials, saved addresses, wishlist items and order history, where you create an account.
• Order and transaction information, such as the products you purchase, order value, returns and exchanges, and communications about your orders.
• Payment information. Card payments are processed by our payment providers. We do not store full card numbers on our systems. We may receive limited details such as the card type, the last digits of the card and the outcome of the transaction.
• Communications, such as the content of messages you send us by email, contact form, live chat or social media, and our replies.
• Marketing preferences, such as your consent to receive emails and the products or categories you have shown interest in.
• Technical and usage information, such as your IP address, device and browser type, operating system, the pages you view, the links you click, referring pages and the dates and times of your visits, collected through cookies and similar technologies.
• Information you choose to provide, such as reviews, survey responses, competition entries or sizing and style preferences.

We collect personal information only for lawful purposes connected with our functions and activities as an online fashion retailer, and only where the information is necessary for those purposes. Those purposes are:

• To process and fulfil your orders, including taking payment, arranging delivery, and handling returns, exchanges and refunds.
• To create and manage your account and provide customer support.
• To communicate with you about your orders, enquiries and our services.
• To send you marketing communications where you have consented or where otherwise permitted by law, and to personalise the offers and content you see.
• To operate, maintain, secure and improve the Store, including analytics, fraud prevention and troubleshooting.
• To understand customer preferences and improve our product range and shopping experience.
• To comply with our legal obligations, resolve disputes and enforce our terms.

Where practicable, we collect personal information directly from you, for example when you place an order, create an account, subscribe to our emails, complete a form, leave a review, or contact us.

We also collect personal information automatically through cookies and similar technologies when you browse the Store, as described in section 8, and from third parties who help us run the Store, such as our ecommerce platform, payment providers, delivery partners, marketing and analytics providers, and social media and advertising platforms.

When we collect personal information directly from you, we take reasonable steps to make sure you are aware of why we are collecting it, who will receive it, that providing it is voluntary, and your rights to access and correct it. We collect personal information by lawful and fair means, and not in a way that is unreasonably intrusive.

We use personal information only for the purposes for which it was collected, as set out in section 3, for a directly related purpose, or where you have authorised another use or another exception under the Privacy Act applies.

With your consent, or where otherwise permitted under the Privacy Act 2020 and the Unsolicited Electronic Messages Act 2007, we may send you marketing communications about products, offers and news by email.

Every marketing email includes a clear unsubscribe option and our contact details. You can opt out at any time by using that option or by contacting us using the details in section 18. We will action your request promptly. You may continue to receive transactional and service messages, such as order confirmations and delivery updates, as these are not marketing communications.

We disclose personal information to third parties who provide services that help us run the Store, and only so they can perform those services for us. These recipients include:

• Our ecommerce and hosting platform, which operates the Store and processes orders.
• Payment providers and gateways that process your payments.
• Delivery and logistics partners that ship your orders.
• Email, communications and marketing providers that send our messages and manage subscriptions.
• Analytics providers that measure Store performance.
• Advertising and social media platforms that help us deliver and measure advertising.
• Professional advisers, such as accountants and lawyers, where reasonably required.
• Government agencies, regulators or other authorities, where required or authorised by law.

We may also disclose personal information if our business is sold or restructured, in which case information may be transferred to the new owner subject to this policy. We do not sell your personal information.

We use cookies and similar technologies to operate the Store, remember your cart and preferences, measure how the Store is used, and support marketing. These technologies may collect technical and usage information described in section 2.

We use strictly necessary cookies required for the Store and checkout to function, performance and analytics cookies that help us understand how the Store is used, functional cookies that remember your choices, and advertising and targeting cookies that help us show relevant ads and measure their performance, including through platforms such as Meta and TikTok and the pixels they provide.

You can manage cookies through your browser settings and, where offered, through any cookie controls on the Store. Blocking some cookies may affect how the Store works.

Some of the service providers described in section 7 are located outside New Zealand, or store information outside New Zealand, including in Australia, the United States and the European Union.

Before disclosing personal information to a recipient outside New Zealand, we take reasonable steps to ensure that the information will be protected by comparable safeguards to those under the Privacy Act 2020, for example because the recipient is subject to comparable privacy laws or agrees to comparable protections, or we obtain your authorisation. By providing your personal information and using the Store, you acknowledge that it may be disclosed to and stored by recipients located overseas.

We take reasonable steps to protect personal information from loss, and from misuse, unauthorised access, modification or disclosure. These steps include access controls, encryption of data in transit, use of reputable service providers, and limiting access to staff who need it. We also take reasonable steps to ensure information is not kept longer than necessary, and is destroyed or de-identified securely.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

We comply with the privacy breach notification requirements of the Privacy Act 2020. If we have a privacy breach that has caused, or is likely to cause, serious harm to affected individuals, we will notify the Office of the Privacy Commissioner and the affected individuals as soon as practicable, unless an exception applies.

We keep personal information only for as long as we need it for the purposes set out in this policy, or for as long as we are required to keep it by law, including tax, consumer and record keeping obligations. When we no longer need personal information, we take reasonable steps to destroy it or de-identify it.

Before we use or disclose personal information, we take reasonable steps to check that it is accurate, up to date, complete, relevant and not misleading. Please keep your account details current and let us know if any of your information changes.

You have the right to ask for access to the personal information we hold about you, and to ask us to correct it if you believe it is wrong.

To make a request, contact us using the details in section 18. We may need to verify your identity before acting. We will respond as soon as reasonably practicable, and no later than 20 working days after we receive your request. Access is usually free, although we may charge a reasonable cost in limited circumstances permitted by law. If we decline a request, we will tell you why and explain how you can complain. If we cannot agree to a correction, you may ask us to attach a statement of the correction you sought, and we will take reasonable steps to do so.

We will only assign a unique identifier to you where it is necessary for our functions, and we will not require you to disclose a unique identifier assigned by another organisation except in the limited circumstances permitted by the Privacy Act 2020.

The Store may contain links to third-party websites, plugins and services that we do not control. This policy does not apply to those third parties. We encourage you to read their privacy policies before providing personal information to them.

The Store is intended for adults and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

If you have a question about this policy, want to access or correct your information, or wish to make a privacy complaint, please contact us:

• Email: legal@editionsept.com
• Postal address: Hazelaarweg 27, 7556DN Hengelo

If you make a complaint, we will acknowledge it and respond within a reasonable period. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner:

• Website: privacy.org.nz
• Phone: 0800 803 909

We may update this policy from time to time to reflect changes in our practices or the law. The current version will always be available on the Store, and the date at the top shows when it was last updated. Significant changes will be made clear where appropriate.