WEBSITE PRIVACY POLICY

This Privacy Policy applies to all personal information collected by LUMERAVERSE PTY LTD (we, us or our) via the website located at mimizo.com and all its subdomains (such as app.mimizo.com) (collectively, the Website).

1. What information do we collect?

   The kind of Personal Information that we collect from you will depend on how you use the website. The Personal Information which we collect and hold about you may include:

   1. email address;

   2. login credentials;

   3. payment details;

   4. address;

   5. phone number;

   6. gender;

   7. IP address;

   8. device type and operating system;

   9. page views;

   10. referral URLs;

   11. device identifiers/advertising identifiers;

   12. carrier information;

   13. user identification information.

2. Types of information

   The Privacy Act 1998 (Cth) (Privacy Act) defines types of information, including Personal Information and Sensitive Information.

   1. Personal Information means information or an opinion about an identified individual or an individual who is reasonably identifiable:

      1. whether the information or opinion is true or not; and

      2. whether the information or opinion is recorded in a material form or not.

      If the information does not disclose your identity or enable your identity to be ascertained, it will in most cases not be classified as “Personal Information” and will not be subject to this privacy policy.

   2. Sensitive Information is defined in the Privacy Act as including information or opinion about such things as an individual's racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information. Sensitive Information will be used by us only:

      1. for the primary purpose for which it was obtained;

      2. for a secondary purpose that is directly related to the primary purpose; and

      3. with your consent or where required or authorised by law.

3. How we collect your Personal Information

   1. We may collect Personal Information from you whenever you input such information into the Website, related app or provide it to us in any other way.

   2. Our servers automatically collect log file data when you access our Website. This includes user identification information, IP address, device and software characteristics (such as type and operating system), page views, referral URLs, device identifiers or other unique identifiers such as advertising identifiers, and carrier information.

   3. We collect and use various types of cookies on our Website to enhance your browsing experience. By using our Website, you consent to our use of cookies as described below.

      1. The types of cookies include:

         1. Essential cookies: Required for basic website functionality and security;

         2. Analytics cookies: Help us understand how visitors use our Website;

         3. Preference cookies: Remember your settings and personalisation choices;

         4. Marketing cookies: Used to deliver relevant advertisements.

      2. If you wish to disable cookies, you can do so through your browser settings. Please note that disabling certain cookies may affect the functionality of our Website.

      3. Third parties may set their own cookies on our website, subject to their own privacy policies. By using our Website, you acknowledge and agree that third parties may collect and use cookies and personal information according to their respective privacy policies. As a customer, you are subject to the privacy policies of these third parties and must agree to their terms. You should review the privacy policies of these third parties for more information about how they handle your data. These third parties include:

         1. Payment processors (e.g., Stripe);

         2. Analytics providers (e.g. Google Analytics);

         3. Advertising partners;

         4. Embedded content providers (e.g., Google Maps, YouTube);

         5. Other service providers necessary for our website functionality.

      4. Most cookies we use expire within 24 months of your last visit.

   4. We generally don’t collect Sensitive Information, but when we do, we will comply with the preceding paragraph.

   5. Where reasonable and practicable we collect your Personal Information from you only. However, sometimes we may be given information from a third-party, in cases like this, we will take steps to make you aware of the information that was provided by a third-party.

4. Purpose of collection

   1. We collect Personal Information to provide you with the best service experience possible on the Website and keep in touch with you about developments in our business.

   2. We customarily only disclose Personal Information to our service providers who assist us in operating the Website. Your Personal Information may also be exposed from time to time to maintenance and support personnel acting in the normal course of their duties.

   3. By using our Website, you consent to the receipt of direct marketing material. We will only use your Personal Information for this purpose if we have collected such information direct from you, and if it is material of a type which you would reasonably expect to receive from use. We do not use sensitive Personal Information in direct marketing activity. Our direct marketing material will include a simple means by which you can request not to receive further communications of this nature, such as an unsubscribe button link.

   4. You can manage your marketing preferences by using the unsubscribe links provided in our marketing emails or by submitting a request through our website's feedback section. We will process opt-out requests within 14 business days and maintain records of your preferences. Each marketing communication will include clear instructions on how to opt out. If you choose to opt-out, we will retain minimal Personal Information necessary to ensure compliance with your request.

5. Security, access and correction

   1. We store your Personal Information with reputable third-party database providers and implement strict access controls. We maintain appropriate technical and organisational measures to protect against unauthorised access, misuse, modification or disclosure. When we no longer require your Personal Information for the purpose for which we obtained it, we will take reasonable steps to destroy or permanently de-identify it, except where we are required by law to retain records (such as tax-related information which must be retained for 7 years).

   2. The Australian Privacy Principles:

      1. permit you to obtain access to the Personal Information we hold about you in certain circumstances (Australian Privacy Principle 12); and

      2. allow you to correct inaccurate Personal Information subject to certain exceptions (Australian Privacy Principle 13).

   3. Where you would like to obtain such access, please contact us in writing on the contact details set out at the bottom of this privacy policy.

6. Complaint procedure

   If you have a complaint concerning the manner in which we maintain the privacy of your Personal Information, please contact us as on the contact details set out at the bottom of this policy. All complaints will be considered by our privacy team and we may seek further information from you to clarify your concerns. If we agree that your complaint is well founded, we will, in consultation with you, take appropriate steps to rectify the problem. If you remain dissatisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner.

7. Documentation and response timeline

   We will acknowledge receipt of your complaint within 5 business days and provide you with a reference number. Our privacy team will investigate your complaint and maintain detailed records of all communications and findings. We aim to resolve all privacy complaints within 30 business days. If additional time is required, we will notify you in writing. All complaint documentation will be retained for 12 months following resolution. If the matter requires escalation, our Privacy Officer will personally review your case within 30 business days of the escalation request.

8. Overseas transfer

   Your Personal Information is primarily stored on servers hosted by Google Cloud in the United States. Additionally, your information may be transferred to and stored in other countries where our third-party service providers (including payment processors, analytics providers, and other technology partners) maintain their servers. By using our Website, you consent to your Personal Information being transferred to and stored in these locations. These third-party service providers are carefully selected and contractually bound to maintain strict security controls. While we take all reasonable steps to protect your data, please note that if your Personal Information is mishandled in these jurisdictions, you may not have recourse under Australian law.

9. GDPR

   In some circumstances, the European Union General Data Protection Regulation (GDPR) provides additional protection to individuals located in Europe. The fact that you may be located in Europe does not, however, on its own entitle you to protection under the GDPR. Our website does not specifically target customers located in the European Union and we do not monitor the behaviour of individuals in the European Union, and accordingly the GDPR does not apply.

10. How to contact us about privacy

    If you have any queries, or if you seek access to your Personal Information, or if you have a complaint about our privacy practices, you can contact us through: admin@mimizo.com.