StrataPro Pty Ltd | ABN 16 690 038 870 | Effective date: 27 April 2026 | Version 1.0

StrataPro Pty Ltd (ABN 16 690 038 870) (“StrataPro”, “we”, “us”, “our”) respects your privacy and is committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Policy describes how we collect, hold, use, disclose and protect personal information when you visit strata-pro.com, register your interest, book a call with us, subscribe to our communications, or engage us as a client.

This Policy also explains how we handle the business and engagement information that clients share with us in the course of providing our consulting services.

The personal information we collect generally includes:

• Identity and contact information — name, position, organisation, email address, phone number, postal address.
• Engagement information — details of your enquiry, the services you are interested in, and information you choose to share with us in correspondence or meetings.
• Client and billing information — ABN, billing details, payment information, and records relating to services provided.
• Information shared during an engagement — business records and data shared with us in the course of an engagement, which may include personal information about your staff, contractors, owners, committee members or tenants.
• Technical information — IP address, browser type, device information, pages viewed, and time spent on our website.
• Marketing preferences — subscription status and interaction with our emails (for example, opens and clicks).

We do not deliberately collect sensitive information (as defined in the Privacy Act). If you provide it, we will only use it for the purpose for which it was provided and will protect it accordingly.

We collect personal information:

• Directly from you, when you complete a form on our website, book a call, email or call us, attend an event we run, or engage us as a client.
• Automatically, when you visit our website, via cookies and analytics.
• From third parties, such as referrers, publicly available sources (for example, LinkedIn) or your own service providers, where this is relevant to delivering our services and where you would reasonably expect us to do so.

We use personal information to:

• Respond to enquiries and provide proposals.
• Schedule and deliver booked appointments.
• Provide the consulting services you have engaged us to perform.
• Administer our client relationships, billing and accounts.
• Send you direct marketing communications, where you have given us consent (see section 7).
• Improve our website and services.
• Comply with our legal and professional obligations.

We may disclose personal information to:

• Our personnel and contractors involved in delivering services to you.
• Third-party service providers who help us run our business, including Microsoft (Microsoft 365 — including Bookings, Forms, OneDrive and Outlook), our website host (GoDaddy), our email marketing tool, payment processors, and accounting and bookkeeping platforms we use to deliver client work.
• Government, regulators or law enforcement, where required or authorised by law.
• A purchaser or successor entity, in connection with a sale, merger or restructure of our business.

We do not sell or rent personal information to any third party.

Some of our service providers store and process personal information outside Australia. In particular:

• Microsoft 365 data may be stored in Microsoft data centres in Australia and other locations.
• GoDaddy infrastructure is operated from the United States and other locations.

We take reasonable steps to ensure that overseas recipients handle personal information in a manner consistent with the Australian Privacy Principles.

We comply with the Spam Act 2003 (Cth). We will only send you commercial electronic messages with your consent (express or reasonably inferred). Every marketing email we send identifies us as the sender and includes a clear unsubscribe link. You can opt out at any time by:

• Clicking the unsubscribe link in any marketing email; or
• Emailing privacy@strata-pro.com.

We will action opt-out requests within five business days.

Our website uses cookies and similar technologies to remember your preferences, measure traffic and improve performance. You can configure your browser to block or notify you about cookies; blocking cookies may affect website functionality. We may use analytics tools (such as the analytics built into our website platform) to understand how visitors use the site. These tools generally collect information in aggregate form.

We hold personal information primarily within Microsoft 365 (with Australian data residency where available) and within our website provider’s environment. We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure — including access controls, multi-factor authentication, encryption in transit, and regular system updates.

When personal information is no longer needed for the purpose for which it was collected (and we are not required to retain it by law), we will take reasonable steps to destroy or de-identify it.

You can request access to, or correction of, the personal information we hold about you by contacting us using the details in section 13. We will respond within a reasonable time (generally within 30 days). There is no fee for making a request, although a reasonable cost-recovery fee may apply for fulfilling a complex access request.

In addition to personal information, we handle business information shared with us by clients in the course of providing our services. We treat this information as confidential in accordance with our engagement letter, including by:

• Using it solely for the purpose of providing the services.
• Restricting access to personnel who need it to deliver the services.
• Storing it within secure cloud environments (primarily Microsoft 365).
• Not disclosing it to third parties without your consent, except where required by law.
• Returning or destroying it on termination of the engagement, in accordance with our engagement letter.

Where we are given access to your strata management software environment (for example, Urbanise Strata), we will use that access only for the agreed services, will not share credentials, and will cease using and delete credentials on termination of the engagement.

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us in the first instance using the details in section 13. We will acknowledge your complaint within seven days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Web: www.oaic.gov.au
• Phone: 1300 363 992

For privacy enquiries, requests or complaints, please contact:

     Privacy Officer 

     StrataPro Pty Ltd

    Email: privacy@strata-pro.com

    Web: strata-pro.com

We may update this Policy from time to time. The current version will always be available on our website. Where changes are material, we will take reasonable steps to notify you.

Effective date: 27 April 2026 | Version 1.0