WEBSITE PRIVACY POLICY

Last updated: September 2026

1. About This Privacy Policy

Tonomed Australia NZ (“Tonomed”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal information that we collect and hold.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you:

• visit or use our website;

• purchase products from us;

• create or submit an order;

• contact us;

• subscribe to marketing communications;

• request customer or technical support; or

• otherwise interact with Tonomed Australia NZ.

Where the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles (“APPs”) apply to us, we handle personal information in accordance with those requirements.

Additional privacy or data-protection rights may apply to individuals located outside Australia.

2. What Is Personal Information?

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Depending on how you interact with us, the personal information we collect may include:

• your name;

• billing and delivery address;

• email address;

• telephone number;

• country and location information;

• order and transaction details;

• products purchased;

• billing and payment information;

• delivery and tracking information;

• communications with us;

• customer-service enquiries;

• warranty, return and refund information;

• website usage information;

• IP address;

• device and browser information;

• marketing preferences; and

• other information you voluntarily provide to us.

3. Payment Information

Payments may be processed by third-party payment providers.

When you make a payment, payment information such as your card details may be provided directly to the relevant payment provider rather than being stored directly by Tonomed.

We may receive and retain information about the transaction, such as:

• payment status;

• transaction amount;

• payment method;

• transaction identifier;

• billing information; and

• information required to process refunds or investigate payment issues.

The payment provider’s handling of your information will also be governed by its own privacy policy and applicable law.

4. Health and Sensitive Information

Some products sold by Tonomed are medical devices.

We generally do not require customers to provide detailed medical or health information simply to purchase a product.

However, you may voluntarily provide health-related or other sensitive information when making an enquiry, requesting technical or customer support, making a warranty claim or otherwise communicating with us.

Where we collect sensitive information, including health information, we will only collect, use or disclose it where reasonably necessary and where permitted by applicable law.

Please do not provide medical information that is not reasonably necessary for us to respond to your enquiry or request.

Tonomed does not provide individual medical diagnosis or treatment through its website.

5. How We Collect Personal Information

We generally collect personal information directly from you.

This may occur when you:

• place an order;

• complete a form on our Website;

• make a payment;

• create an account;

• contact us by email, telephone or another communication method;

• request support;

• submit a return, refund or warranty request;

• subscribe to our mailing list;

• participate in a promotion or survey; or

• otherwise communicate with us.

We may also receive personal information from third parties where reasonably necessary, including:

• payment processors;

• shipping and courier companies;

• ecommerce platforms;

• fraud-prevention providers;

• distributors or service providers; and

• other organisations involved in processing or fulfilling your order.

We may automatically collect certain technical information when you use our Website through cookies and similar technologies.

6. Why We Collect and Use Personal Information

We may collect, hold, use and disclose personal information for purposes including:

• processing and fulfilling orders;

• processing payments;

• confirming transactions;

• delivering products;

• communicating with you about your order;

• providing customer and technical support;

• processing returns, refunds and warranty claims;

• responding to enquiries;

• verifying transactions;

• preventing fraud and unauthorised activity;

• maintaining and improving our Website;

• analysing Website performance and customer behaviour;

• improving our products and services;

• maintaining business and financial records;

• complying with taxation, regulatory and legal requirements;

• protecting our legal rights;

• resolving disputes;

• managing product safety issues, recalls or regulatory obligations;

• communicating important information about products you have purchased; and

• conducting marketing where permitted by law.

We will not use personal information for an unrelated purpose unless permitted or required by law.

7. Providing Your Personal Information

You may choose not to provide certain personal information.

However, in some circumstances we will be unable to provide a product or service without the information.

For example, we generally require your name, delivery address and appropriate contact and payment information to process and deliver an online order.

Where it is lawful and practicable, you may interact with us anonymously or using a pseudonym. However, this will generally not be practicable when purchasing products that need to be paid for and delivered to you.

8. Marketing Communications

Where permitted by law, we may use your contact information to communicate with you about Tonomed products, offers, information or services that may be relevant to you.

You may opt out of marketing communications at any time by:

• using the unsubscribe function contained in the relevant communication; or

• contacting us at hello@tonomed.com.au.

We will process opt-out requests within a reasonable period.

Even if you unsubscribe from marketing communications, we may still send you non-marketing communications that are necessary to administer your orders, provide support, communicate product-safety information or fulfil our legal obligations.

9. Cookies and Website Technologies

Our Website may use cookies and similar technologies.

Cookies are small data files stored on your device or browser that can assist a Website to function and provide information about how it is used.

We may use cookies and similar technologies for purposes including:

• operating our Website;

• maintaining shopping-cart functionality;

• remembering preferences;

• maintaining Website security;

• understanding Website traffic;

• measuring Website performance;

• improving user experience;

• analytics; and

• advertising and marketing where permitted by law.

Some cookies may be provided by third-party service providers.

You may be able to control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Website.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar tracking technologies.

10. Disclosure of Personal Information

We may disclose personal information where reasonably necessary to operate our business or provide products and services.

Recipients may include:

• payment processors;

• banks and financial institutions;

• ecommerce and Website service providers;

• hosting and cloud-storage providers;

• shipping, postal and courier companies;

• fulfilment and logistics providers;

• IT and cybersecurity providers;

• email and communications providers;

• analytics providers;

• marketing service providers;

• professional advisers, including accountants, lawyers and insurers;

• manufacturers, suppliers or distributors where reasonably necessary to address a product, warranty or safety issue;

• government, regulatory or law-enforcement authorities where required or authorised by law; and

• a purchaser, investor or adviser in connection with a proposed or actual sale, merger, restructure or transfer of all or part of our business, subject to appropriate confidentiality and legal requirements.

We do not sell personal information to third parties for their independent marketing purposes.

11. International and Overseas Disclosure

Tonomed Australia NZ sells products internationally and uses technology, payment, ecommerce, cloud, logistics and other service providers that may operate in multiple countries.

As a result, personal information may be disclosed to or processed by recipients outside Australia.

Depending on the services used and the destination of your order, these recipients may be located in countries including:

• New Zealand;

• the United States;

• the United Kingdom;

• Singapore;

• countries within the European Economic Area; and

• the country in which your order is being delivered.

Other countries may also be involved where our technology or service providers use international infrastructure.

Where Australian privacy law applies to an overseas disclosure, we will take reasonable steps required by law in relation to the protection of personal information disclosed overseas.

12. International Customers

If you are located outside Australia, privacy and data-protection laws in your country may provide additional rights.

Depending on your location, these may include rights relating to:

• access to personal information;

• correction;

• deletion;

• restriction of processing;

• objection to certain processing;

• withdrawal of consent;

• data portability; and

• complaints to a relevant privacy or data-protection authority.

Where applicable law provides you with these rights, Tonomed will respond to valid requests in accordance with that law.

13. Security of Personal Information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

These measures may include appropriate administrative, technical and physical safeguards.

Personal information may be stored electronically by us or by third-party service providers.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Accordingly, while we take reasonable precautions, we cannot guarantee absolute security.

14. Data Breaches

If we become aware of a data breach involving personal information, we will investigate the incident and take appropriate steps to contain and respond to it.

Where we are required by applicable law to notify affected individuals or a privacy or regulatory authority of a data breach, we will do so.

15. Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected or as required by law.

Relevant considerations may include:

• completing transactions;

• providing customer support;

• warranty requirements;

• product-safety and regulatory requirements;

• taxation and accounting requirements;

• fraud prevention;

• dispute resolution; and

• legal limitation periods.

When personal information is no longer reasonably required and we are not legally required to retain it, we will take reasonable steps to destroy or de-identify it.

16. Access to Your Personal Information

You may request access to personal information that we hold about you.

Please send your request to hello@tonomed.com.au.

We may need to verify your identity before providing access.

We will respond to requests within a reasonable period and will provide access in the manner required by applicable law.

There may be circumstances where we are permitted or required by law to refuse access to some information. If this occurs, we will provide an explanation where required by law.

17. Correction of Personal Information

We take reasonable steps to ensure that personal information we use or disclose is accurate, up to date, complete and relevant.

If you believe personal information we hold about you is inaccurate, incomplete or out of date, please contact:

hello@tonomed.com.au

We will take reasonable steps to correct information where required.

18. Third-Party Websites

Our Website may contain links to third-party websites or services.

Tonomed is not responsible for the privacy practices of third-party websites that we do not control.

We recommend reviewing the privacy policy of any external website before providing personal information.

19. Children

Our products and Website are not primarily directed at children.

We do not knowingly seek to collect personal information directly from children where parental or guardian consent is required by applicable law.

If you believe that a child has provided personal information to us in circumstances where consent was required, please contact us.

20. Privacy Complaints

If you have a concern or complaint about the way Tonomed has handled your personal information, please contact:

Tonomed Australia NZ

Email: hello@tonomed.com.au

Please provide sufficient information for us to understand and investigate your concern.

We will acknowledge and investigate privacy complaints and aim to respond within a reasonable period.

If you are not satisfied with our response and the Australian Privacy Act applies, you may be entitled to make a complaint to the Office of the Australian Information Commissioner.

Individuals located outside Australia may also have the right to complain to the relevant privacy or data-protection regulator in their jurisdiction.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, technology, service providers or legal obligations.

The current version will be published on our Website.

The date shown at the beginning of this Policy indicates when it was last updated.

We recommend reviewing this Policy periodically.

22. Contact Us

If you have questions about this Privacy Policy, wish to access or correct your personal information, or wish to make a privacy complaint, please contact:

Tonomed Australia NZ

Email: hello@tonomed.com.au