PRIVACY POLICY

Overview

This Privacy Policy explains how Macnaught Pty Ltd, trading through STM Australia, collects, holds, uses and discloses personal information in connection with the website, online orders, customer service and marketing.

This policy is intended to support compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), where those laws apply.

Collection of Information

We collect personal information reasonably required to operate the website and provide products and services. Information may be collected when you place an order, create or use an account, contact customer service, subscribe to marketing, submit a review or otherwise interact with us.

Types of Information

• Name and contact details, including email address and phone number.

• Billing and delivery address information.

• Order, transaction, returns, warranty and customer-service information.

• Payment-related information required to process transactions. Payment card details may be handled directly by third-party payment providers rather than stored by STM Australia, depending on the payment method.

• Information provided through forms, reviews, enquiries and communications.

• Technical and usage information such as IP address, device/browser information, website activity and cookie identifiers, where collected.

How We Collect Information

We may collect information directly from you, automatically through website technologies such as cookies and analytics tools, and from service providers involved in payment, delivery, fraud prevention, website operation, customer support and marketing.

Purposes for Collection, Use and Disclosure

We may collect, hold, use and disclose personal information to:

• process and fulfil orders and payments;

• arrange delivery and provide tracking information;

• provide customer service, returns, refunds and warranty support;

• communicate about orders, products, services and account activity;

• send direct marketing where permitted and where required consent has been obtained;

• operate, secure, maintain and improve the website;

• detect and prevent fraud, abuse and security incidents;

• meet legal, regulatory and accounting obligations; and

• conduct legitimate business activities consistent with applicable law.

Marketing and Electronic Communications

Where required by law, STM Australia will obtain consent before sending commercial electronic messages. Commercial emails and SMS will identify the sender and include a functional unsubscribe mechanism. Unsubscribe requests will be processed within the period required by law.

Customers may opt out of marketing communications at any time. Opting out of marketing does not prevent us from sending essential transactional or service communications, such as order confirmations, delivery updates, security notices or information necessary to administer a purchase.

Cookies and Analytics

The website may use cookies, pixels, tags and similar technologies for essential website functions, preferences, analytics, security and marketing. Where required, we will provide appropriate notice and obtain consent for non-essential technologies.

Third-party analytics, advertising and marketing providers may receive information generated through these technologies in accordance with their services and applicable privacy requirements.

Disclosure to Third Parties

We may disclose personal information to service providers that help us operate the business, including payment processors, ecommerce and website providers, IT and cloud providers, freight and logistics providers, customer service providers, marketing and analytics providers, professional advisers, insurers, regulators and law enforcement agencies where required or authorised by law.

Overseas Disclosure

Some service providers may store or process personal information outside Australia. Where applicable, we will take reasonable steps to comply with the Privacy Act and APP requirements concerning overseas disclosure. The countries in which relevant recipients are located should be identified in the live Privacy Policy once the actual vendors and data flows used by the website have been confirmed.

Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. No internet transmission or electronic storage system can be guaranteed to be completely secure.

Retention

We retain personal information only for as long as reasonably required for the purposes for which it was collected, including order, accounting, legal, warranty and dispute-resolution requirements, after which it will be securely destroyed or de-identified where appropriate.

Access and Correction

You may request access to personal information we hold about you and request correction where information is inaccurate, out-of-date, incomplete, irrelevant or misleading, subject to applicable legal exceptions.

Privacy Complaints

If you believe we have mishandled your personal information, contact us first so we can investigate and respond. If you are not satisfied with our response, you may have the right to complain to the Office of the Australian Information Commissioner (OAIC).

Privacy Contact

Privacy enquiries and requests should be directed to STM Australia / Macnaught Pty Ltd using the contact details published on the website. The final published policy should include a monitored privacy email address and postal address.

Future Privacy Law Changes

This policy may be updated as privacy laws, regulatory guidance and the website's data practices change. In particular, the website owner should review the Privacy Policy before 10 December 2026 if it uses automated decision-making involving personal information that may significantly affect individuals, because additional APP 1 privacy-policy requirements commence on that date.