PRIVACY & CREDIT INFORMATION POLICY

OVERVIEW

Corval Group and its related entities (including by Conga Foods (www.congafoods.com.au), dc Specialty Coffee Roasters (www.dccoffee.com.au), Pakval Warehouse Solutions (www.pakval.com.au) and MaxFoods (www.maxfoods.com.au), all of which are registered trademarks and brands, created and owned by their respective entities, operate and own the above listed websites (together, Websites or any of the above singular URL addresses, Website).

At Corval Group we hold our users privacy and security in the highest regard and we are committed to the protection of their personally identifiable information. This Privacy Policy (Policy), which has been developed in accordance with the Privacy Principles in Australia’s Privacy Act 1988 (Cth) and New Zealand’s Privacy Act 2020, (Privacy Act), appliesto all Corval Group entities and owned trademarks. This Policy detailsthe guidelines we use in relation to collecting, using,storing, protecting and disclosing Personal Information and Credit related information (Credit Information) about you as our customers, visitors to our websites, users of our social media and other digital services and members of the public. Corval Group does not sell your personally identifiable information.

Access to the Website and/or transacting with us is conditional on your approval of this Policy and you acknowledge and agree that your use of the Website & continued customer relationship with us implies your consent to the terms of this Policy. We may amend this policy from time to time and your continued use of the Website and/or making purchases following any such amendment will be confirmation of your acceptance of the amendments.

TYPES OF PERSONAL INFORMATION COLLECTED

We will only collect Personal Information that is necessary for one or more of our functions or where we have obtained your consent to use your Personal Information in a particular way. In engaging in business with a Corval Group entity and/or in using this Website, Corval Group may collect the following types of personally identifiable information (Personal Information):

  • Name and Contact details (e.g. email address, telephone number(s), residential and delivery addresses);
  • Household details (e.g., the age/number of people living at a household);
  • Records of your communications and interactions with us;
  • Details regarding participation in promotions and our other events and programs operated from time to time;
  • Details and history of enquiries, purchases, preferences and interests relating to transactions, products and services
    with our digital and/or operational services, including the payment details/history (such as the payment cards you have
    instructed us to use for transactions);

Where you provide us with Personal Information aboutsomeone else you must have their consent to provide their Personal Information to us based on this Policy.

HOW PERSONAL INFORMATION IS COLLECTED

When Corval Group collects Personal Information, we do so by making a record of it when, for example, you:

  • place an order, make an enquiry, conduct a transaction;
  • communicate or contact us;
  • register for, or participate in a promotion, competition, or survey;
  • use the Website or our related social media pages as a result of your direct provision of such Information (including
    where you may post a rating or review or other user generated content on one of our Websites or social media pages);
    or the use of Cookies (see Cookies)

Personal Information may be collected in a variety of ways including via phone, electronically (such as through use of this Website, related social media services, direct email), post or via direct discussions with Corval Group employees or representatives.

Corval Group may also collect Personal Information about you from its related entities or owned brands, from our distributors and other service providers, or from third parties including from public sources.

Cookies

Some of the Personal Information collected by Corval Group will track your use of this Website, through the use of Cookies. Such Personal Information is collected by Corval Group to enhance your use of the Website and to assist us in service provision. This information is used to optimise our website and in no way does this unique identifier contain information that personally identifies you.

A Cookie is sent from our server and automatically placed on your computer without notification. Personal preferences or information may be stored in the Cookie, which is then sent back to the server on completion of the session. Cookies may be turned off within your browser (by altering the Settings of the browser to refuse Cookies), however, this may make some sites or portions of the sites unusable and may result in you being no longer able to enjoy the full operational capabilities of the Website. These cookies allow us to recognise when you return to certain sites and allow us to register user preferences and behaviour on our website.

HOW PERSONAL INFORMATION IS HELD

We may hold Personal Information in hard copy form or electronically by storing in our computer systems, both at our own premises and with the assistance of our service providers. We implement a range of measures, including people, process, and technology controls, to protect the security of your Personal Information and eliminate risks of unauthorised access to, and loss, misuse or wrongful alternation of, Personal Information. Examples of these measures include

  • Corval Group officers, employees, agents and third party contractors are bound by internal security and confidential information policies and are required to keep Personal Information secure at all times;
  • Corval Group uses its reasonable endeavours to make the Website as secure as possible against unauthorised access.
  • Corval Group hasin place processesthat concern the destroying or de‐identifying Personal Information that is no longer needed for any lawful purpose.

Despite its reasonable endeavours, Corval Group is unable to ensure or warrant the security of any Personal Information transmitted to Corval Group and all Personal Information disclosed by you to Corval Group is at your own risk

PURPOSES FOR HANDLING PERSONAL INFORMATION

We may collect or use your Personal Information in order to inform you of, provide, administer, improve, and personalise our products and services; understand your interests, suitability and behaviours in relation to our products, services and offers; and to carry out our operational business functions. This can include to:

  • Respond to your feedback, queries, or concerns;
  • Register and service your account, including keeping your information up‐to‐date, and verifying your identity and respond to your requests for products and services, including delivery, processing payments and refunds;
  • Communicate with you about our products, services, and promotions (including direct marketing), in relation to this Website and/or any of our related companies and brands;
  • Help us improve our products and services, operational processes to enhance your customer experience
  • Work with our service providers;
  • Interact with Regulators, relevant government entities, and as otherwise required or permitted by law.

We may also collect or use your Personal Information for additional purposes as outlined at the point of collection (for example, in the terms and conditions of a brand promotion or for an event registration);

SHARING OF PERSONAL INFORMATION

Corval Group and its related entities work with a number of suppliers and third parties, including but not limited to its product suppliers; technology services including technical support, hosting and analysing data; banking corporations; media and market research agencies; administrative services and business advisory services.

You acknowledge and agree that Corval Group may need to disclose your Personal Information to its related entities and to sponsors, business partners, distributors, suppliers and associates, such as those aforementioned. Such businesses may be located both in and outside Australia and whilst it is not reasonably practicable to list all of the countries to which your Personal Information may be disclosed from time to time, it is likely that such countries may include European Union and South‐East Asian countries and the United States. If you would like further information on particular countries, please contact us as set out below.

When we disclose your information overseas, we take stepsto ensure that the recipient and or service providers are obliged to protect the privacy and security of your Personal Information in accordance with the standards that apply in Australia including that they only use Personal Information for the purpose for which it is disclosed.

CREDIT RELATED INFORMATION

Further to the Personal Information already referred to within this Policy, Corval Group may also collect, handle, use and
disclose Credit Information for purposes such as, but not limited to the following,:

  • to verify identity;
  • to provide product or services;
  • to obtain credit information from credit reporting bodies;
  • to assess credit worthiness (including collecting payment history in relation to any credit provided by Corval Group);
  • to assess application for credit (or assess an application to be a guarantor in relation to such credit);
  • to take appropriate action in the event of a default on the terms of the credit account, or where there is a fraud or serious credit infringement;
  • to comply with Corval Group’s obligations under arrangements with credit reporting bodies;
  • to manage Corval Group’s business;
  • where Corval Group is required or authorised by the law

We may disclose such Credit Information to third parties which provide goods or services to Corval Group, including but not limited to data storage facilities, information technology service provides, Corval Group’s professional advisers and government and related authorities. Corval Group may also disclose Credit Information to other credit providers to allow them to determine financial arrangements with you and the Corval Group; potential guarantors to allow them to consider whether to offer to act as a guarantor in relation to a credit or to offer property assecurity for credit; guarantors, to exercise Corval Group’s rights against guarantors; anyone to whom our business or assets (or any part of them) are, or may (in good faith) be, transferred.

Individuals may request that a credit reporting body does not use or disclose credit related information about them, without their consent during a ban period, that is, a 21 day period following the request where the individual believes on reasonable grounds that they have been or are likely to be a victim of fraud.

DISCLAIMER

Corval Group will not disclose your Personal Information to any third party (other than its related entities or associates) without your consent in writing, unless otherwise required by law, or unless such disclosure is reasonably necessary in the opinion of Corval Group to protect itsrights or property or to avoid injury to any person. However, in the event of a business transition (such as a merger, acquisition or sale of all or a portion of our business or assets), any collected Personal Information will likely be among the assets transferred.

The Website may contain links to other sites operated by business partners, suppliers, associates or other third parties. You acknowledge that such sites are not operated or controlled by Corval Group. Advertisements on the Website and links to or from other sites do not constitute sponsorship, approval, endorsement of the content, policies (including Privacy Policies), Corval Group Pty Ltd Privacy Policy Page 4 Last Modified: 10 August 2023 practices or services offered on those advertisements or sites. We encourage you to be aware when you leave a Corval Group website, and to read the privacy statements of each and every website that collects personally identifiable information. This Policy applies solely to information collected by Corval Group.

PROCEDURES FOR ACCESS, CORRECTION AND FEEDBACK

When making an access, correction or feedback request, please provide as much detail as you can about the particular information you seek, in order to help us retrieve it. We will endeavour to provide a written response to you as soon as possible but in any event no later than 30 days.

If you subsequently decide that you do not wish to receive information from a Corval Group entity you may let us know by contacting us as set out below.

PROCEDURES FOR ACCESS, CORRECTION AND FEEDBACK

If you are concerned that Corval Group has not complied with your rights, or have any complaints or concerns about this Policy please contact us asset out below.

P.O. Box 342, Reservoir 3073 VIC
Phone: + 61 3 9487 9500 or Email: info@congafoods.com.au

Once your complaint or query has been lodged, we will endeavour to respond within 30 days. If you are not satisfied with our response, please let us know and we will investigate further.

You may also decide to make a complaint with the relevant privacy regulator, Office of the Australian Information Commissioner,
(www.oaic.gov.au).