This Privacy Notice explains the data practices of PROH2O Australia Pty Ltd ABN: 668019172 (referred to as "we," "us," or "our") concerning the collection, use, and disclosure of your personal information when you engage with our website proh2o.co (referred to as "the Site") and its services (collectively referred to as "the Services") or communicate with us. For the purpose of this Privacy Notice, "you" or "your" pertains to the user of the Services, whether you are a customer, visitor, or another individual whose data is collected under this Privacy Notice.

We may periodically update this Privacy Notice to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any revisions will be posted on the Site, and the "Last updated" date will be amended accordingly. We will also comply with any applicable legal requirements.

To deliver the Services, we gather and have gathered personal information about you from various sources, as outlined below. The nature of information collection and utilization depends on your interactions with us.

The information you directly provide through our Services may encompass:

• Basic contact information like your name, address, phone number, and email.
• Order information, including billing and shipping details, payment confirmations, email addresses, and phone numbers.
• Account details such as usernames, passwords, and security questions.
• Shopping-related data, such as viewed items, items in your cart, or items added to your wishlist.
• Customer support information, including communication content you share when contacting us through the Services.

Certain features of the Services may require you to provide specific information about yourself. You have the option not to provide this information, but doing so may limit your use or access to these features.

We automatically collect certain information about your interaction with the Services (referred to as "Usage Data"). To do so, we employ technologies like cookies, pixels, and similar methods ("Cookies"). Usage Data may consist of details about how you access and use our Site and your account, including device information, browser information, network connection details, IP addresses, and other information related to your interaction with the Services.

We may obtain information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

• Companies supporting our Site and Services, such as Shopify.
• Payment processors who gather payment information (e.g., bank account, credit card details) to process your payments and fulfill your orders.
• Third parties may collect information through online tracking technologies like pixels, web beacons, software developer kits, third-party libraries, and cookies when you visit our Site, open or click on our emails, or interact with our Services or advertisements.

Any data acquired from third parties will be handled in accordance with this Privacy Notice. We are not responsible for the accuracy of information provided by third parties or for their policies and practices. For more details, please refer to the "Third Party Websites and Links" section below.

We employ your personal information for various purposes, including but not limited to:

• Providing Products and Services: We use your personal information to provide you with the Services, including processing payments, fulfilling orders, sending notifications related to your account or transactions, managing your account, arranging shipping, facilitating returns and exchanges, and enabling you to post reviews.
• Marketing and Advertising: Your personal information is utilized for marketing and promotional purposes, such as sending marketing communications via email, text, or postal mail, and displaying advertisements for products or services. This may involve personalizing the Services and advertising on our Site and other websites.
• Security and Fraud Prevention: We use your personal information to detect, investigate, or take action against potential fraudulent, illegal, or malicious activity. If you create an account, it's your responsibility to safeguard your credentials. We strongly advise against sharing your username, password, or access details. If you suspect your account has been compromised, please contact us immediately.
• Communication with You: Your personal information is used for providing customer support and enhancing our Services. This is necessary to be responsive to you, offer effective services, and maintain our business relationship.

Similar to many websites, we use Cookies on our Site. Please refer to our Cookie Policy for specific information about the Cookies we use for powering our store through Shopify. We employ Cookies to enhance our Site and Services, remember your preferences, perform analytics, and gain insights into user interaction. We may also allow third parties and service providers to use Cookies on our Site to tailor services, products, and advertising on our Site and other websites.

Most browsers accept Cookies by default, but you can configure your browser settings to remove or reject Cookies. Keep in mind that blocking Cookies may impact your user experience and may affect the functionality of certain Services and features. Additionally, blocking Cookies may not entirely prevent information sharing with third parties, such as our advertising partners.

Under specific circumstances, we may disclose your personal information to third parties for legitimate purposes as outlined in this Privacy Notice. These circumstances may include:

• Sharing with vendors or third parties providing services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).
• Sharing with business and marketing partners, including Shopify, to deliver services and promote to you.
• Disclosing information at your explicit direction, request, or consent, such as for shipping products or through your use of social media widgets or login integrations.
• Sharing within our corporate group or affiliates for legitimate business purposes.
• Disclosing in connection with a business transaction, such as a merger or bankruptcy, to comply with legal obligations, enforce terms of service, and protect or defend the Services, our rights, and the rights of users or others.

In the past 12 months, we have disclosed the following categories of personal information and sensitive personal information (indicated by *) about users for the purposes described in "How We Collect and Use Your Personal Information" and "How We Disclose Personal Information":

Our Services may enable you to submit product reviews and other user-generated content. Should you choose to provide user-generated content in any public section of the Services, please be aware that this content will become public and accessible to all users.

We do not have control over who gains access to the information you choose to share with others, and we cannot guarantee the privacy or security of this information. We hold no responsibility for the privacy or security of publicly available information or for the accuracy, use, or misuse of information disclosed or received from third parties.

Our Site may contain links to websites or other online platforms operated by third parties. If you decide to follow links to sites that are not affiliated with or controlled by us, we recommend reviewing their privacy and security policies, as well as any additional terms and conditions. We do not assure or assume responsibility for the privacy or security of such external sites, including the accuracy, completeness, or reliability of information found on these sites. Information you share on public or semi-public spaces, including third-party social networking platforms, may also be visible to other users of the Services and/or users of those third-party platforms without restrictions on its use by us or by third parties. Our inclusion of these links does not, by itself, indicate endorsement of the content on these platforms or their owners or operators, except as disclosed on the Services.

Our Services are not intended for use by children, and we do not knowingly collect personal information from children. If you are a parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details provided below to request the deletion of such information.

As of the Effective Date of this Privacy Notice, we do not possess actual knowledge that we "share" or "sell" (as defined in applicable law) personal information of individuals under 16 years of age.

Please be aware that no security measures are entirely foolproof, and we cannot guarantee absolute security. Additionally, any information you send to us may not be secure during transit. We advise against using insecure channels to communicate sensitive or confidential information to us.

The duration for which we retain your personal information depends on various factors, including our need to maintain your account, provide the Services, fulfill legal obligations, resolve disputes, or enforce other relevant contracts and policies.

Depending on your location, you may have some or all of the rights listed below concerning your personal information. However, these rights are not absolute, may apply only in certain circumstances, and we may decline your request as allowed by law.

• Right to Access/Know: You may have the right to request access to the personal information we hold about you, including details about how we use and share your information.
• Right to Delete: You may have the right to request the deletion of personal information we maintain about you.
• Right to Correct: You may have the right to request corrections to inaccurate personal information we hold about you.
• Right of Portability: You may have the right to receive a copy of your personal information and request its transfer to a third party under certain conditions.
• Right to Opt-Out of Sale or Sharing or Targeted Advertising: You may have the right to instruct us not to "sell" or "share" your personal information or opt out of the processing of your personal information for "targeted advertising" purposes as defined by applicable privacy laws. If you visit our Site with the Global Privacy Control opt-out preference signal enabled, we will automatically interpret this as a request to opt out of "sale" or "sharing" of information for the device and browser used to visit the Site.
• Restriction of Processing: You may have the right to request that we stop or restrict our processing of personal information.
• Withdrawal of Consent: In cases where we rely on your consent to process your personal information, you may have the right to withdraw this consent.
• Appeal: You may have the right to appeal our decision if we decline to process your request. You can do so by directly responding to our denial.
• Managing Communication Preferences: We may send promotional emails, and you can opt out of receiving these at any time using the unsubscribe option in our emails. Even if you opt out, we may still send non-promotional emails, such as those related to your account or orders.

You can exercise any of these rights where indicated on our Site or by contacting us using the provided contact details. We will not discriminate against you for exercising any of these rights. To process your request, we may need to collect information to verify your identity, such as your email address or account details. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf. Before accepting such a request from an agent, we will require that the agent provide proof that you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required by applicable law.

We utilize Shopify's advertising services, including Shopify Audiences, to personalize the advertisements you encounter on third-party websites. To limit Shopify merchants who use these ad services from using your personal information for such purposes, please visit Shopify's Privacy Control.

If you have complaints regarding how we handle your personal information, please contact us using the provided contact details. If you are dissatisfied with our response, depending on your location, you may have the right to appeal our decision by contacting us or filing a complaint with your local data protection authority.

Please note that we may transfer, store, and process your personal information outside of your country of residence, including in the United States. Your personal information may also be processed by staff and third-party service providers and partners in these countries.

If we transfer your personal information from Europe, we will rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses, or equivalent contracts issued by the relevant competent authority of the UK, unless the data transfer is to a country with an adequate level of protection.

If you have any questions about our privacy practices or this Privacy Notice, or if you would like to exercise any of the rights available to you, please contact us at:

PROH2O Australia Address: 49B/2 Slough Ave, Silverwater NSW 2128 Email: hello@proh2o.co