Data Privacy Policy BLANCO Australia

I. Name and contact details of the organisation

BLANCO Australia Pty Limited

C/- Schweizer Kobras Level 5

23-25 O’Connell Street

Sydney NSW 2000

Australia

Phone: 02 9356 4642

E-mail: customerservice.au@blanco.com

II. Contact details of the data protection team

If you have any questions about privacy and data protection, you can contact our data protection team at the e-mail address dataprotection.au@blanco.com via the Contact page on our website, or the following postal address:

BLANCO Australia Pty Limited

-Data Protection Team-

23-25 O’Connell Street

NSW 2000 Sydney

Australia

III. Purpose and legal basis of data processing

1. Data collection

1.1 Types of personal information we collect

The types of personal information we collect about you will depend on the purpose for which the personal information is collected. This can include:

• in the case of customers procuring our products and/or services – your name, billing or shipping address, email address, telephone number(s), payment information (including credit card information or alternative payment method account information), and your order details;
• if you have requested to receive news about exclusive offers, promotions, or events from us– your name, mailing or street address, email address, and telephone number(s);
• if you have contacted us to make a complaint, provide feedback or submit a query – your name, residential/business address, email address, and telephone number(s), and any information you choose to share with us about your complaint, such as relevant images or attachments (see: “Contact form requests” below). Where you contact us via social media (e.g. Instagram, Facebook etc.), we may also collect personal information about you that is publicly available from your account on that social media platform;
• technical information and general analytics, such as web browser type and browsing preferences, Internet service provider, referring/exit pages, date/time stamps, IP address, time zone and geolocation data (if applicable), some of which is collected automatically, arising from your use of our website, as well as information about your usage of our website when browsing (see: "Server Log Files” and “Cookies” below for further information);
• in the case of prospective employees or contractors – information contained in your application or résumé, recorded during any interview, or obtained through any pre-employment checks, and government-issued identifiers such as tax file numbers; and
• in the case of our suppliers and distributors – your name, mailing or street address, email address, and telephone number(s).

Generally, we will not collect sensitive information about you. However, in certain circumstances, we may need to collect limited sensitive information about you. For instance, if you apply to work with us, we may collect sensitive information about any medical conditions or disabilities that we will need to be aware of to ensure you can work with us safely.

We do not collect personal information of individuals under the age of 18 (a minor) and you should refrain from providing any such information to us. If you do provide us with personal information of a minor we will remove this from our servers and systems.

1.2 Security measures during collection via our website

For security reasons and to protect the transmission of confidential content, we use a range of technologies, such as SSL or TLS encryption, on our website to protect personal information we collect via our website. This means that inquiries can be transmitted securely via the contact form or orders via the site. You can recognize SSL or TLS encryption by the addition of "https://" in the address bar of the Internet browser and by a closed lock symbol next to it.

SSL or TLS encryption helps protect your data from being read by third parties.

1.3 How we collect that personal information

We collect your personal information directly from you, including when you:

• access or use our website;
• purchase our products or services;
• sign up to receive news and exclusive offers, promotions, or events;
• enter promotions or request information or material from us;
• submit inquiries, complaints, or feedback to us, or otherwise communicate with us by email, by telephone, in person, via a website or otherwise; and/or
• apply to work with us or are engaged by us as a contractor.

Where it is reasonable and practicable to do so, we will only collect personal information about you from you directly and not from third parties.

In limited circumstances, we may collect personal information about you from:

• publicly available sources – such as your social media accounts, where you contact us via social media;
• from third parties – such as referees during the recruitment process if you apply for a job with us;
• our service providers – such as providers of some of the cookies of web technologies we use (see “Cookies” below); and/or
• through organisations supporting our promotional and marketing activities.

While we will always maintain robust privacy practices, we are not responsible for the privacy practices of third parties. You should review their relevant privacy policy to satisfy yourself as to how they protect and handle your personal information.

1.4 Server Log Files

If you use our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we generally only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website in these circumstances, we may collect the following data to the extent we require it in order to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

We may process this data on the basis of our legitimate interest in providing our website, and improving its stability and functionality. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are reasonable indications of illegal use.

1.5 Contact form requests

We may collect additional data from you if you use the contact form on our website to submit a query or complaint to us, or provide us with feedback. This may include:

• the category of that request (i.e. query, complaint or feedback);
• the information you share in your request; and
• any further information included in attachments you provide in connection with this request.

We may process this data on the basis of our legitimate interest in engaging with you, responding to your request, managing our business, and improving our products and services. We will not be able to respond to your request without this information, and will not use data collected from you in this way for other purposes, other than where permitted by law (such as to investigate illegal use).

2. Cookies

We may use cookies in order to support your experience when visiting our website, including to ensure our website functions correctly. Cookies are small text files that are stored on your device. Some of the cookies we use are deleted after you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognised the next time you visit our website (so-called persistent cookies). If cookies are enabled in your browser settings, we may use them to collect and process certain user information about you, such as your browser, location, and IP address.

Our website uses essential cookies to maintain the functionality of our website, and optional functional and marketing cookies, which usually come from third parties:

2.1. Essential cookies

These cookies are essential to enable you to move around our website and use its features. For example, they remember whether you agree to the use of cookies, your choices regarding the kinds of cookie settings we can associate with you, to help us understand how you use our website, and maintain security. These cookies are usually session-specific and expire after your visit to the website (session). We may require some cookies to be stored beyond that so as to ensure your experience is personalised and secure (e.g. using cookies to remember your cookie preferences). Disabling this category of cookies may substantially limit the functionality of the website. The legal basis for the use of essential cookies and the processing of your data by these cookies is our legitimate interest in maintaining the function of our website, ensuring it is available for your use, and that we can personalise your experience in accordance with your preferences.

2.2. Functional cookies

We use functional cookies to improve and simplify the use and performance on our website. Our website may not function correctly without these cookies.

The legal basis for the use of functional cookies and the processing of your data by the providers of these cookies is your prior consent. You can withdraw your consent at any time in the "Privacy Settings", which you can access by clicking on the link at the bottom of the website.

2.3. Marketing cookies

Marketing cookies are used to ensure our advertising and marketing activities are better personalised and tailored to you and your interests. For example, they may be used to minimise repetitive ads, ensure they are more useful for you, and to understand your preferences regarding our content, products and advertising. We will not be able to do this, or to personalise your experience, without these cookies.

These cookies are often provided by third party service providers, including organisations that provide marketing services we use to support our website and business. You should familiarise yourself with these organisations (as described at section 2.4 of this data privacy policy), and their privacy practices.

The legal basis for the use of marketing cookies and the processing of your data by the providers of these cookies, is your prior consent. You can withdraw your consent at any time in the "Privacy Settings", which you can access by clicking on the link at the bottom of the website.

2.4. List of analytical, functional and marketing cookies

You can access the list of cookies we use and the providers who use the cookies to obtain personal information from you in the Cookie Platform, which you can access by clicking on the "Privacy Settings" link at the bottom of the website. There you can find more information about the individual providers and cookies we rely on for our website.

If, instead, you would like to receive more information from us about these cookies, please contact us using the contact details described in section I.

2.5. How can I declare or withdraw my consent to cookies?

If you are visiting our website for the first time, you will see information on data protection on your landing page, seeking your consent for optional cookies. By clicking on the individual categories (essential, functional and marketing cookies) and then confirming by clicking on "Accept", you agree to the setting of these cookies. You can change these settings at any time in the cookie settings, which you can access by clicking on the "Privacy Settings" link at the bottom of the website.

3. Use of your personal information

3.1 How we use your personal information

We will generally use or disclose your personal information in managing our business and providing our products and services. Without limiting the above, this can include using your personal information to:

• provide our products and services to our customers, or to receive goods or services from third parties;
• enable the proper operation and functionality of our products and services;
• verify your identity (for example, if you request access to the personal information we hold about you);
• consider you for a job with us (whether as an employee or contractor) or other relationships with us;
• communicate with you, and to address any feedback, queries or complaints that we or you may have regarding our relationship and our products and/or services;
• prevent, detect and investigate suspicious, fraudulent, criminal or other activity that may cause you, us or others harm, including in relation to our products and services;
• comply with our legal obligations, such as notifying you of matters that we may be required to notify you of by law;
• identify opportunities to improve our products and services and to improve our service to you;
• gain insights about you so that we can serve you better, understand your preferences and interests, personalise your experience and/or enhance products and services you are offered and receive;
• for direct marketing purposes (see "Direct Marketing Communications" below); and/or
• contact you regarding any of the above, including via electronic messaging such as SMS and email, by mail, by phone or in any other lawful manner.

We may also use or disclose your personal information for other purposes to which you have consented, or where we are otherwise permitted to do so by law.

3.2 Changes to our use of your personal information

Processing of your personal information for purposes other than those described will only take place if this is permitted by law, or if you have consented to the additional use of your personal information. We will endeavour to inform you of these other purposes, and to provide you with other relevant information, before further processing takes place.

3.3 Choosing not to disclose your personal information

You do not have to identify yourself or provide any personal information if you contact us. You can also notify us that you wish to deal with us using a pseudonym.

However, if we cannot collect personal information about you or if you use a pseudonym, we may not be able to provide you with the information or assistance you require. For example, we will not be able to send you information you have requested if you have not provided us with a valid email address or telephone number.

3.4 Direct Marketing Communications

We will only send you direct marketing communications (either through mail, SMS or email), including any news and exclusive offers, promotions, or events, where you have consented for us to do so.

You may opt-out of receiving direct marketing communications at any time by contacting us or by using opt-out facilities provided in the direct marketing communications.

3.5 Storage of personal information

We store your personal information in paper-based files and/or other electronic record keeping methods in secure databases. Personal information may be collected in paper-based documents and converted to electronic form for use or storage (with the original paper-based documents either archived or securely destroyed). We do not combine or link personal information we hold about you with other personal information about you from third party sources.

We implement reasonable measures to protect and safeguard your personal information from misuse, loss, theft and unauthorised access, modification or disclosure, including the security measures set out above when collecting your personal information.

However, particularly for electronic data stores and due to the fact that the Internet is inherently insecure, we cannot guarantee the security of transmission of personal information disclosed to us online. Accordingly, you transmit your personal information to us online at your own risk and are encouraged to exercise care in sending personal information via the internet. Please notify us immediately if you know or reasonably suspect that your personal information has been subject to any data breach, breach of security or other unauthorised activity.

IV. Recipients or categories of recipients of the personal information

We may disclose your personal information to third parties in connection with the purposes described above – including:

• other companies of the BLANCO Group and the BLANC & FISCHER Group, to which we belong;
• our professional advisers;
• potential acquirers of our business or assets, and their advisors;
• our employees, contractors and third party service providers (including those to whom you have authorised us to disclose your information (e.g. referees or account nominees)); and
• any other person as required or permitted by law.

These may include companies in third countries outside Australia, as set out below.

If we disclose your personal information to third parties we will use reasonable commercial efforts to ensure that such third parties only use your personal information as reasonably required for the purpose for which we shared it with them, and only in a manner consistent with applicable laws – for example (where commercially practical) by including suitable privacy and confidentiality clauses in our agreement with a third party service provider to which we disclose your personal information.

V. Transfer to third countries

We store and process your personal information on servers located within the EU or Australia. We may need to disclose your personal information to recipients in other jurisdictions that do not have data protection laws as comprehensive as Australia’s and the EU’s, including the United States. While we will take commercially reasonable steps to enter into appropriate data processing (or similar) agreements (or to ensure those recipients are subject to binding corporate rules or EU standard contractual clauses)to ensure that recipients undertake to protect your data, by sharing your data with us you acknowledge that, to the extent permitted by law, we will not be liable where those recipients breach applicable privacy laws in Australia or the EU.

VI. Storage period in accordance with statutory retention obligations

To the extent necessary, we process and store the personal information referred to in this data privacy policy only for as long as they are necessary to achieve the purposes set out above, or as otherwise required to comply with our legal obligations. We will then take steps to ensure that your personal information is deleted or anonymized.

VII. Right to information, correction, deletion, restriction, data portability and objection

If you are an EU data subject, you have the right to information, correction, deletion of your data, restriction of processing, a right to data portability and a right to object at any time. Please contact the responsible body using the contact details given above.

If you are in Australia, you may contact us at any time via the contact details set out at the top of this Data Privacy Policy to request:

• access to any personal information we hold about you. We will provide access to that personal information in accordance with the Privacy Act, subject to any exemptions that may apply. We may charge an administration fee in limited circumstances, but we will let you know in advance if that is the case.
• that we correct any incorrect, incomplete or inaccurate personal information that we hold about you. Where we agree that the information needs to be corrected, we will update it. If we do not agree, you can request that we make a record of your correction request with the relevant information.
• that we notify any third parties that we provided incorrect information to about any correction made per the above. We will endeavour to assist where we can – if we cannot, then we will let you know.

VIII. Complaints

In addition, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal information is not lawful. The relevant regulatory authority in Australia is the Office of the Australian Information Commissioner, GPO Box 5288, Sydney NSW 2001, Australia, Tel.: +61 2 6123 5154, https://www.oaic.gov.au/, enquiries@oaic.gov.au.

IX. Requirement for the provision of personal information

In principle, only the data required for this purpose will be processed in order to fulfil the above-mentioned purposes.

X. Changes to this Data Privacy Policy

We may need to update this data privacy policy from time to time. The current version of this data privacy policy is available on the BLANCO website under the following link. You should check back regularly to ensure you review the most current version.

As of: March 2026