Effective Date: 05/01/2025

Your Privacy and Ngaarlu (Otis Carey Enterprises Pty Ltd ABN 19 656 801 786) ⎯ collectively and individually referred to as “Ngaarlu,” “we,” “our,” or “us.”

Introduction

Who we are and how you can contact us

We are Ngaarlu (Otis Carey Enterprises Pty Ltd ABN 19 656 801 786) and we are based in New South Wales, Australia. We are committed to protecting your privacy and respect and uphold your rights when you use this Site. This Privacy Policy applies to the products and/or services we provide on our Site https://ngaarlu.com (“Site”) and our social media channels and explains how we collect, hold, use and disclose data and comply with the requirements of the Privacy Act 1988 (Cth) and constitutes part of our Website Terms & Conditions. This Privacy Policy does not cover information that you submit on other websites, even if we communicate with you on those sites. For example, if you post something on Instagram, Facebook, Pinterest, Twitter, or YouTube, that information is governed by the privacy policies on those websites, and is not governed by this Privacy Policy. You can contact us for privacy-related questions by emailing us at hello@ngaarlu.com.

We will only use your personal information in compliance with Australian Privacy Laws (Privacy Act 1988 (Cth)), Australian Privacy Principles and, to the extent applicable, with the EU General Data Protection Regulation (GDPR) and any replacement legislation or regulation or guidelines and standards governing the use, storage or transmission of personal data.

Our Role in your Privacy

If you are a customer, subscriber or just a visitor on our Site, this Privacy Policy will apply to you.

Our Responsibilities

As we are the providers of the products and services on this Site, we determine how and why your data is processed. We do not sell or rent your details to any third parties. We are committed to protecting your privacy and we want you to know exactly what information is collected and how we use it.

Your Responsibilities

Please read this Privacy Policy and the Website Terms & Conditions.

If you provide us with any data relating to a third party, you confirm that you have the right to authorise us to process that data on your behalf in accordance with this Privacy Policy.

When and How we collect Data

From the moment you visit our Site, we are collecting data. Sometimes you might provide this data by completing a form or setting up an account, otherwise we might collect the data automatically. We may also collect data when:

• You purchase a gift card for redemption on our Site
• You purchase an online product or service
• You interact with us on social media
• You complete any sign-up forms, landing pages or send us a direct message via social media or email
• You participate in events, promotions and giveaways or any request for additional
  data such as customer surveys
• You accept our cookies and other tracking technologies on any device you use to
  interact with us
• You voluntarily submit your data to us for any reason
• Types of Data we may collect (including automatically)
• Contact details (name, address, email)
• Financial Information (bank details when you are making a purchase)
• Your business name (sometimes)
• Basic information about your business and its history (sometimes)
• Data about the products or services you purchase.
• Data that identifies you (your IP address, login, browser type, time zone, browser plug-ins, geolocation, what operating system and version) – we do not link this with any personal Data.
• Data on how you use our Site (URL clicks, product and service views, how long you are on our pages and other actions)
  
  

How and why we use your Data and disclosure

Under data laws, we are only allowed to use your data for specific reasons and where we have the legal basis to do so. We will use your data for the purposes it was collected and related purposes including:

• To run our Site
• Provide you with products, information and services
• Customer support
• Track your purchase history
• Detect and prevent fraud
• Improve our Site
• Make your experience on our Site more efficient and enjoyable
• Market research (we may contact you for feedback about our products and services)
• Provide you with information about events, other products, services or opportunities that may be of interest
• Marketing (with your consent)
• Monitor your compliance with our Website

Terms and Conditions

We may disclose your data for the purposes it was collected and also:

• As required by law:
• With your consent
• Within our business
• Send you marketing material (with your consent)
• Process your participation in any promotions or giveaways
• Share with third parties to enable us to provide our products and/or services
  
  

Google Analytics and Facebook

Google

We use Google Analytics functions. You can find out how your data is collected here and there are instructions here on how to opt out of Google Analytics data tracking. Our use of Google Analytics may include, but is not limited to, display advertising and re-marketing. You may see our adverts across the internet; this is due to the use of tracking technologies (cookies) to optimise and serve our adverts based on past visits to our Site. When you log onto our Site, we, with the help of Google Analytics, use your browsing behaviour to connect this with other data that you previously provided to us in accordance with this privacy policy.

Facebook

We use Facebook Insights to track your interaction with our Facebook page, which allows us to track usage and improve performance. We also use Facebook Analytics to better measure, track and understand customer experience to improve our products and services. You can check out Facebook’s privacy policy here, and you can control ad preferences here.

What are your choices?

Don’t provide us with personal data

You can choose not to provide us with any personal data. However, if you do this, we will not be able to provide you with any products or services, although you can continue to browse our Site.

Turning off cookies

Our Site uses cookies and similar technologies to provide certain functionality. You can turn off cookies by activating the setting in your browser that allows you to do this. You can also delete cookies through your browser settings. If you do decide to turn off cookies, certain services may not work as effectively.


Don’t want marketing?

We will always let you know before we collect any data from you for marketing purposes. You can opt out by:

• Completing the contact form on our website, or
• Unsubscribing within any marketing email you receive.
  

What are your rights?

• You can exercise your rights at any time by contacting us via hello@ngaarlu.com or through our contact page at www.ngaarlu.com
• Access information we hold about you – We’ll provide this within 30 days unless
  doing so would affect others’ confidentiality or intellectual property rights.
• Correct inaccurate information – You can ask us to fix any errors.
• Object to profiling or automated decisions – We may tailor emails or
  recommendations, but only for relevance to you.
• Right to be forgotten – You can request deletion of your data, except where we must retain it for legal reasons.

Make a complaint

Contact us at hello@ngaarlu.com. If you’re unsatisfied, you can contact the Office of the Australian Information Commissioner (OAIC).

How secure is the data collected

We take security seriously and maintain appropriate physical, electronic and procedural safeguards to help protect your data. This includes:

• Password access to accounts
• Secure third-party data storage providers
• Limited staff access to personal information
• Payment providers that are PCI DSS
• compliant
• We do not store your payment details
  

Where do we store data

We use service providers based in Australia. If we transfer data outside of Australia, we ensure the recipient has equivalent data-protection measures.

How long we store data

We retain your data as long as necessary for the purposes collected. For purchases, we retain information for invoicing and tax purposes. Once no longer needed, we permanently delete or anonymise it.

Third parties who process your data

We may share data with:

• Our service providers (e.g., payment processors like Stripe, PayPal, Shopify, Xero)
• Professional advisors
• Analytics and social media (Facebook, Instagram, Google)
• Platforms like Mailchimp, Zoom, or Active Campaign for newsletters and communications
• Law enforcement or regulators as required by law
  

Payment Security

All credit card transactions are handled by secure third-party gateways. Your card details are encrypted and never viewed by us. All providers we use are PCI DSS compliant.

Age of consent

By using this site, you confirm that you are at least the age of majority in your state or
territory of residence. We do not knowingly collect data from minors.

Cookies and how to block them

Cookies are small data files that help improve functionality, performance and marketing. You can disable them through your browser. Learn more at www.allaboutcookies.org.

Web Beacons

We may use web beacons in emails to track engagement (opens, clicks, IPs). You can opt out by unsubscribing at any time.

Governing law

This Privacy Policy and your use of this Site are governed by the laws of Australia.

Mobile

Mobile Terms of Service Ngaarlu
Last updated: November 16, 2025

The Ngaarlu mobile-message service (“Service”) is operated by Ngaarlu (“we” or “us”). By using the Service, you agree to these terms (“Mobile Terms”). We may modify or cancel the Service at any time.

By consenting to Ngaarlu’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of Ngaarlu through your wireless provider to the mobile number you provided, even if it’s on a Do Not Call list. Messages may include order updates or marketing offers (e.g., cart reminders). You understand that you don’t have to sign up to make purchases. Message and data rates may apply. You may opt out at any time by texting STOP to Ngaarlu or clicking “unsubscribe” in any text message. For help, text HELP to Ngaarlu or email hello@ngaarlu.com. We may change our short codes or numbers and will notify you of changes.

We are not liable for delayed or undelivered messages. You agree to provide a valid number and update it if changed. We respect your privacy. See our Privacy Policy for full details on how we handle your data.