Privacy Policy.

Flow 3PL PTY LTD (ABN 68 687 770 369) is an Australian third-party logistics provider based in Melbourne, Victoria. We operate the website at flow3pl.com.au and provide warehousing, pick & pack, eCommerce fulfilment, returns, and nationwide shipping services to Australian businesses ("our Services"). This Privacy Policy explains how we collect, use, hold, disclose and protect personal information. It applies to anyone who interacts with us — visitors to our website, customers, business contacts, suppliers, and end-consumers whose details are provided to us for order fulfilment.

We only collect personal information that is reasonably necessary for our Services and to comply with Australian law. This may include: **Business and contact information:** name, business name, ABN, email address, phone number, billing address, delivery address, and account login details. **Order and fulfilment information:** product details, order numbers, customer shipping addresses, tracking data, and delivery confirmations. **Website usage information:** IP address, browser type, device information, pages visited, and cookies (see "Cookies & analytics" below). **Payment information:** we do not store full payment card details. Payments are processed by secure third-party payment providers.

We use personal information to: • Provide, manage and improve our fulfilment, warehousing, and shipping services. • Communicate with you about orders, deliveries, account management, and support. • Process invoices, payments, and credit checks where required. • Maintain records required by law, including tax, consumer, and transport regulations. • Send occasional service updates, newsletters, or promotional communications where you have consented or where the law allows. • Ensure the security, reliability, and performance of our website and systems. We do not sell personal information. We do not use personal information for automated decision-making that produces legal or similarly significant effects.

We only disclose personal information to third parties when necessary to deliver our Services or meet legal obligations: **Carriers and delivery partners:** Australia Post, StarTrack, Aramex, TNT, and other Australian freight providers receive delivery addresses and contact details to perform shipping. **Technology and platform partners:** Shopify, WooCommerce, NetSuite, Unleashed, and other integrated platforms may sync order, inventory, and customer data to enable fulfilment. **Service providers:** IT, cloud hosting, accounting, legal, and insurance providers who help us operate securely and professionally. These providers are contractually bound to use information only for the purpose we engage them. **Legal authorities:** where required by law, court order, or to protect our legal rights, safety, or property. Where information is shared outside Australia, we take reasonable steps to ensure overseas recipients handle it in accordance with Australian privacy standards.

We store personal information in secure, access-controlled environments using reputable Australian and international cloud providers. We protect your information with: • Role-based access controls and staff training on confidentiality. • Encryption in transit (TLS/SSL) and at rest where appropriate. • Regular system monitoring, backups, and vulnerability management. • Physical security measures at our Melbourne warehouse and offices. Despite these measures, no method of transmission or storage is completely secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

Our website uses cookies and similar technologies to improve performance, understand how visitors use the site, and support marketing. You can control cookies through your browser settings. We may use analytics tools such as Google Analytics or similar providers to collect anonymous usage data. This information does not identify you personally unless you have separately provided your details through a form or login.

Under the Australian Privacy Act 1988, you have the right to: • Access the personal information we hold about you. • Request correction of inaccurate, incomplete, or outdated information. • Request deletion of your personal information in certain circumstances. • Opt out of marketing communications at any time by clicking "unsubscribe" or contacting us. We will respond to access and correction requests within a reasonable timeframe, usually within 30 days. We may need to verify your identity before releasing information.

If you have questions about this Privacy Policy, want to access or correct your information, or wish to make a complaint, please contact: **Privacy Officer** Flow 3PL PTY LTD Email: contact@flow3pl.com.au Location: Melbourne, Victoria, Australia