Introduction 

Cbus Property 447 Collins Street Pty Ltd ACN 166 821 530, ISPT Pty Ltd ACN 064 041 283, Cbus Property Pty Ltd ACN 115 826 741, Owners Corporation No. 1 Plan No. PS 742784W ABN 65 457  602 770 and their appointed agents and managers (collectively, Collins Arch, we, us or our)  respects the privacy of individuals. This privacy policy (Privacy Policy) sets out our personal  information management and responsible privacy practices. 

Collins Arch is committed to ensuring the confidentiality and security of individuals’ personal  information. We recognise that your privacy is very important to you and that you have a right to  request access and correct your personal information. We know that providing personal information  is an act of trust and we take that seriously. 

Where applicable privacy laws provide for exceptions or exemptions, we may rely on those  exceptions or exemptions in our information handling practices. Our website www.collinsarch.com.au (Website) has been designed to provide tenant services and facilities online in relation to Collins  Arch. As well as applying to our interactions with you, this Privacy Policy applies to any users of our  Website or other websites we own or operate, our platforms and any application (including the Collins  Arch App and any mobile or tablet application hosted by third parties for us) or device functionality  which refers to this Privacy Policy. By using any Website, platforms or applications, you agree to our  Privacy Policy. We outline our approach to privacy and the handling of personal information below. 

Application of privacy laws 

We are bound by the Australian Privacy Principles as set out under the Privacy Act 1988 (Cth) (Privacy Act). 

1. What is personal information?  

In this Privacy Policy, ‘personal information’ has the meaning set out in the Privacy Act. In general  terms, personal information is information (whether fact or opinion) about an individual who is  identified or reasonably identifiable from that information or other information combined with that  information. 

Some types of personal information are classified as ‘sensitive information’ and/or ‘health  information’, which are subject to additional protection under the Privacy Act. Sensitive information  may include information about your racial origin and health status, and health information may  include information about a health-related service you have had or will receive, including test results  and appointment details. 

2. Types of personal information we collect 

The types of personal information we collect about you depends on the purpose for which the  information is collected.  

Typically, including where you register as a tenant on our Website, the types of personal information  we collect can include (but are not limited to) your contact details (such as your name, address, email  address and mobile number) as well as any other information you provide to us.  

If we enter into contracts with you or if you request or receive goods or services from us or have any  other commercial dealings with us, we may also collect your signature, date of birth, credit card or  bank details and billing information. 

If you attend a premises we operate or manage (including Collins Arch), we may:

• collect certain contact details that you provide to us (which may be via digital check-in Apps),  including the date and time of attendance, including so that we can comply with applicable  laws (such as public health directives); and 
• record your image and/or voice through the use of Closed-Circuit Television (CCTV) systems  footage of you via our CCTV devices, for the purposes of managing security of the premises  and health and safety of occupants and the public generally. 

When you access our Website: 

• we may collect technical information and general analytics, such as web browser type and  browsing preferences, Internet service provider, referring/exit pages, date/time stamps, IP  address, time zone and geolocation data (if applicable), some of which is collected  automatically, arising from your use of our website and/or platforms, as well as information  about your usage of our website and/or platforms when browsing (see “How do we collect your personal information” below). 

When you access the Collins Arch App: 

• we may collect location data including the precise or approximate location information from  customer’s mobile devices when the Collins Arch App is running in the foreground (App open  and on-screen) or background (App open but not on-screen) and transaction information  relating to the use of the Collins Arch app, including route details (such as date and time,  start and finish locations, distance travelled); 
• we may collect usage data on how you interact with the Collins Arch App, including access  dates and times, App features or pages viewed, browser type, App crashes and other system  activity; and 
• we may collect device data on how you interact with the Collins Arch App, including hardware  models, device IP address or other unique device identifiers, operating systems and  versions, software, advertising identifiers, device motion data and mobile network data. 

Please also refer to any Privacy Statement or Privacy Policy contained or provided within the Collins  Arch App. 

Some additional scenarios in which we collect personal information include: 

• if you have requested to receive news about exclusive offers, promotions, or events from,  Collins Arch – your name, mailing or street address, email address, and telephone  number(s); 
• if you have contacted Collins Arch to make a complaint, provide feedback, submit an enquiry,  request a call-back – your name, mailing or street address, email address, and telephone  number(s);  
• in the case of employees or contractors – information collected as part of their application  and during the course of their employment, either from them or in some cases from third  parties such as recruitment agencies, referees, government bodies (e.g. police checks, if  required) and academic and professional bodies (e.g. to validate details and currency of  qualifications). Such information may include contact details, qualifications, resume, current  and former employment details, pay rate and salary, bank details, feedback from  supervisors, training records and logs of your usage of our equipment (e.g. phones,  computers and vehicles); and 
• in the case of our suppliers and distributors – your name, mailing or street address, email  address, and telephone number(s).

We only collect sensitive information about you with your consent, or otherwise in accordance with  the Privacy Act. The main types of sensitive information we may collect include: 

• details of injuries (i.e. health information) that may occur on our premises or arising through  the use of our goods or service; and 
• details of disabilities or allergies (i.e. health information) you notify us of so we can  accommodate any special requirements when you attend our premises. 

If you do provide sensitive information to us for any reason (for example, if you provide us with  information about a disability you have), you consent to us collecting that information and to us using  and disclosing that information for the purpose for which you disclosed it to us and as permitted by  the Privacy Act and other relevant laws. 

In addition to the types of personal information identified above, we may collect personal information  as otherwise permitted or required by law. 

3. How we collect your personal information 

Where it is reasonably practical to do so, we will collect your personal information directly from you.  We may collect the personal information you directly give us through some of the following means: 

• when you access or use our Website or the Collins Arch App; 
• when you make an enquiry or order in relation to goods or services, including through our  Website; 
• when you enter into contracts with us for our goods or services; 
• in administering and performing any contracts in relation to our goods and services; 
• when you complete and submit forms to us, such as through the login authorisation form  which allows us to determine the level of access you have on the Website and other online  forms (such as application or feedback forms); 
• when you submit service requests which allows us to process your query or order; 
• when you enter surveys, competitions, promotions or request information or material from  us; 
• from correspondence (whether in writing or electronically) or when you contact us via  telephone, fax, email; 
• when you subscribe to our newsletter or alerts for our events; 
• when you apply to work with us or are engaged as a contractor; 
• if you attend any of our premises (including Collins Arch); 
• when administering any of our services; and 
• as otherwise required to manage our business. 

However, in limited circumstances we may collect personal information from publicly available  sources and third parties, such as building management, concierge, suppliers, our clients and  business partners. 

Whilst we will always maintain robust privacy practices, we are not responsible for the privacy  practices of third parties, so you should review their relevant privacy policy to satisfy yourself as to  how they protect and handle your personal information. 

We also use the following technologies to collect technical information and general analytics: 

• cookies, which are data files that are placed on your device and often include an anonymous  unique identifier. For more information about cookies, and how to disable cookies, visit  http://www.allaboutcookies.org; 
• log files, which track actions occurring on our website; and 
• web beacons, tags, and pixels, which are electronic files used to record information about  how you browse our website. 

You may disable your web browser from accepting cookies and other tracking technologies used to  collect technical information and general analytics when browsing our website. If you do so, you can  still access our website, but it may impact your user experience. 

In addition to Collins Arch cookies, certain third parties may deliver cookies to your device for a  variety of reasons. For example, we sometimes use various web analytics tools that help us to  understand how visitors engage with our website. Any third party links or advertising on our website  may also use cookies; you may receive these cookies by clicking on the link to the third party site or  advertising. We do not control the collection or use of information by these third parties, and these  third party cookies are not subject to this Privacy Policy. You should contact these companies directly  if you have any questions about their collection and/or use of information. When linking to any other  site, you should always check the relevant website’s privacy policy before providing any personal  information. 

You may also opt out of targeted advertising by using the links below: 

• Facebook; 
• Google; and 
• Bing. 

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s  opt-out portal. 

Can you choose not to disclose your personal information? 

You do not have to identify yourself or provide any personal information if you contact us. You can  also notify us that you wish to deal with us using a pseudonym.  

However, if we cannot collect personal information about you or if you use a pseudonym, we may  not be able to provide you with the information or assistance you require. For example, we may not  be able to provide you with requested goods or services and/or certain functionality of our Website. 

4. Purposes for handling personal information 

We use personal information for the purposes of managing our business and Collins Arch and  providing services to you. The purposes for which we use and disclose your personal information will  depend on the circumstances in which we collect it.  

We may use or disclose your personal information: 

• for the purposes for which we collected it (and related purposes which would be reasonably  expected by you);
• for other purposes to which you have consented; and 
• as otherwise authorised or required by law. 

Some of the specific purposes for which we collect, hold, use and disclose personal information  include (without limitation): 

• to provide you with our goods and services including concierge services and facilitating  bookings; 
• enable the proper operation and functionality of our goods and services; • to receive goods or services from you; 
• to consider you for a job (whether as an employee or contractor) or other relationships with  us; 
• to provide you with tax invoices for our goods and services; 
• to operate, monitor, develop and improve our websites, mobile applications and our goods  and services; 
• to prevent, detect and investigate suspicious, fraudulent, criminal or other activity that may  cause you, us or others harm, including in relation to our goods and services; 
• to confirm your identity; 
• to optimise and customise the user experience (including content and advertising) for users  of the Websites, mobile applications and services; 
• to facilitate communications via our websites, Apps and our social media platforms, including  communications with us or with other users of those platforms via direct messaging; 
• where you have provided us with access to your geographical location via our websites or  any of our mobile applications, we may send you push notifications and other electronic  communications (including SMS) for purposes including to provide you with services you  have requested; 
• to facilitate your entry and participation in a competition or trade promotion; 
• to protect the security and integrity of the Website and our other websites, mobile  applications and services; 
• to develop and improve the Website and our other websites, and our goods and services; 
• to contact you directly or through our service providers and marketing research agencies) to  obtain your feedback and to find out your level of satisfaction with our goods and services and for direct marketing purposes (see “Direct marketing” below); 
• to comply with our legal and regulatory obligations; 
• to protect the security, health and safety of our premises, facilities, personnel and visitors; • to address any issues or complaints that we or you have regarding our relationship; and 
• to contact you regarding the above, including via electronic messaging such as SMS and  email, by mail, by phone or in any other lawful manner.

We store information that we collect through online forms, session IDs, log files and building  management records to create a profile of our users which is then used to determine security level,  tailored content and preferences. This is to facilitate the services offered to you through the Website  and to allow us to manage and administer those services easily. Your information may be disclosed  and shared to third parties for the purpose of providing the requested services. 

Technical information and general analytics are used for the purpose of gauging visitor traffic, trends  and delivering personalised content to you while you are using our website, and to improve our  website and our products and services. 

5. Disclosure of personal information 

We may disclose your personal information to third parties in connection with the purposes described  in the above section 4 of this Privacy Policy. This may include disclosing your personal information  to the following types of third parties: 

• our employees, suppliers, contractors and organisations that provide us with technical and  support services or who manage some of our business functions such as building  management/concierge; 
• vendors and other tenants on our premises who you may seek to engage via our websites  or apps, including for the provision of goods or services from such vendors and tenants; 
• our related entities (who may use and disclose the information in the same manner we can); • our accountants, insurers, lawyers, auditors and other professional advisers; • organisations authorised by us to conduct promotional, research or marketing activities; 
• any third parties to whom you have directed or permitted us to disclose your personal  information (e.g. referees); and 
• in the event that we or our assets may be acquired or considered for acquisition by a third  party, that third party and its advisors. 

We may also disclose your personal information in accordance with any consent you give or where  disclosure is authorised, compelled or permitted by law. If we disclose your personal information to  third parties we will use reasonable commercial efforts to ensure that such third parties only use your  personal information as reasonably required for the purpose of disclosure and in a manner consistent  with applicable laws, for example (where commercially practical) by including suitable privacy and  confidentiality clauses in our agreement with a third party service provider to which we disclose your  personal information. If you post information to certain public parts of our Website or to our social  media pages or other websites, you acknowledge that such information may be available to be  viewed by the public. You should use discretion in deciding what information you upload to such  sites. 

6. Protection and storage of personal information 

We take protection of our users’ information seriously and we take every reasonable step to ensure  that any personal details submitted are protected both online and off-line. We hold personal  information as either secure physical records, electronically on our intranet system, in cloud storage,  and in some cases, records on third party servers.  

However, particularly for electronic data stores and due to the fact that the Internet is inherently  insecure, we cannot guarantee the security of transmission of personal information disclosed to us  online. Accordingly, you transmit your personal information to us online at your own risk and are  encouraged to exercise care in sending personal information via the internet. Please notify us  immediately if you know or reasonably suspect that your personal information has been subject to  any data breach, breach of security or other unauthorised activity.

7. Overseas transfers of personal information 

We generally store personal information in servers located in Australia.  

From time to time, your personal information may be transferred overseas or stored overseas for a  variety of reasons, such as where we engage an overseas recipient to provide services to us, such  as cloud-based storage solutions. Please note that the use of overseas service providers to store  personal information will not always involve a disclosure of personal information to that overseas  provider. If your personal information is sent to a recipient in a country with data protection laws  which are at least substantially similar to the Privacy Act and the Australian Privacy Principles, and  where there are mechanisms available to you to enforce protection of your personal information  under that overseas law, we will not be liable for a breach of the Privacy Act and the Australian  Privacy Principles if your personal information is mishandled in that jurisdiction. Where your personal  information is transferred to recipients located in countries with data protection laws that are not as  comprehensive as Australia’s, you consent to us transferring your personal information to such  countries, in the knowledge that if your personal information is mishandled in that jurisdiction, we  disclaim responsibility and you will not have a remedy under the Privacy Act. 

8. Direct marketing 

Like most businesses, marketing is important to our continued success. We therefore like to stay in  touch with customers and let them know about new offers and opportunities. We may send you  communications (through mail, SMS, email or through our Apps and platforms) including information  about products, events, offers, services and promotions either provided by us from us, or by third  parties which may be of interest to you, where: 

• you have consented to us doing so; or 
• it is otherwise permitted by law. 

You may opt out at any time if you no longer wish to receive direct marketing messages from us.  You can make this request by contacting our Privacy Officer or by using opt-out facilities provided in  the direct marketing communication. Advertising content that appears on our Website is provided to  us by third party advertisers and this Privacy Policy covers the use of information by Collins Arch 

only and does not cover the use of information by any third parties. 

9. Accessing and correcting your personal information 

You may contact our Privacy Officer at enquiries@collinsarch.com.au (see section 11) to request  access to the personal information that we hold about you and/or to make corrections to that  information, at any time. We will provide access to that information in accordance with the Privacy  Act, subject to any exemptions that may apply. On the rare occasions when we refuse access (which  we will only do in accordance with applicable laws), we will provide you with a written notice stating  our reasons for refusing access. We may seek to recover from you reasonable costs incurred for  providing you with access to the personal information we hold about you. 

We are not obliged to correct any of your personal information if we do not agree that it requires  correction and may refuse to do so. If we refuse a correction request, we will provide you with a  written notice stating our reasons for refusing. 

10. Resolving personal information concerns 

We will respond to all requests for access to or correction of personal information within a reasonable  time. If you have any questions, concerns or complaints about this Privacy Policy or how we handle  your personal information, including if you believe we have breached the APPs, please contact our  Privacy Officer (see section 11). 

When contacting us please provide as much detail as possible in relation to your question, concern  or complaint.

We take all complaints seriously and will respond to your complaint in accordance with any applicable  timeframes imposed by law and otherwise within a reasonable period. We request that you cooperate  with us during this process and provide us with any relevant information that we may need. 

If you have raised a complaint with us and you are dissatisfied with the handling of your complaint, or have further concerns about the way we handle your personal information, under the Privacy Act, you may contact the Office of the Australian Information Commissioner: 

Office of the Australian Information Commissioner 

Address: GPO Box 5218, Sydney NSW 2001 

Telephone: 1300 363 992 

Online: www.oaic.gov.au 

Email: enquiries@oaic.gov.au 

11. Contact details of Privacy Officer 

If you have any further information with respect to this Privacy Policy please contact: Privacy Officer 

Collins Arch 

Address: Collins Arch Melbourne, Victoria 3000 

Telephone: 03 8651 2111 

Online: www.collinsarch.com.au 

Email: enquiries@collinsarch.com.au 

12. Links 

Our Website may contain links to third party websites. We make no representation or warranties,  and are not responsible for, the privacy practices or policies of such third party websites. Third party  websites are responsible for informing you about their own privacy practises and procedures. We  recommend that users read the privacy statements on each website visited that collects personal  information. 

13. Changes 

We may change or update this Privacy Policy from time to time to keep up-to-date with legal  requirements and the way we operate our business. An up-to-date version of this Privacy Policy is  available at any time on this page. You are responsible for reviewing this Privacy Policy periodically  and informing yourself of any changes. We suggest that you check back regularly. If we make  significant changes to our Privacy Policy, we will seek to inform you by notice on our website or by  email. 

Last updated: August 2025

Ownership and Website  

This website is a precinct website and is maintained by Cbus Property 447 Collins Street Pty Ltd ACN 166 821 530, ISPT Pty Ltd ACN 064 041 283, Cbus Property Pty Ltd ACN 115 826 741, Owners  Corporation No. 1 Plan No. PS 742784W ABN 65 457 602 770 and their appointed agents and  managers (collectively Collins Arch, we, us or our). In these Terms and Conditions any reference  to Collins Arch is taken to include a reference to the related companies, directors, employees, agents,  consultants and representatives of Collins Arch. 

Each time you visit and use this website you agree to the following terms and conditions which are current as at the time of your visit: 

Accuracy of Information  

Collins Arch seeks to include information and material that is accurate on its website, but cannot  guarantee and makes no representation or warranty as to the truth, accuracy, completeness or  relevance of any information and material placed on the website. We recommend that you rely on  your own enquiries in relation to information or material on this website. Before acting or relying upon  information or material (including third party material) on this website, you should seek independent  advice as appropriate. If you have reason to believe that any information or material on our website 

is incorrect or misleading, please contact us using the details below in the Copyright section. 

This website may contain hyperlinks to websites operated by parties other than Collins Arch. Collins  Arch does not control such websites, and is not responsible for their contents. The inclusion of  hyperlinks to such websites does not imply any endorsement by Collins Arch of the information or  material available on such websites or any association with their operators. Your use of such  websites, including information, material, products and services contained on them, and the services  and business to which they are linked is solely at your own risk. 

To the extent permitted by law, Collins Arch disclaims all liability and responsibility, including for  negligence, for any direct or indirect loss or damage suffered by any person arising out of any use of  this website or any information or material available from it or for any omission or defect in the  information or material contained on the website or for any further information given by Collins Arch 

in connection with anything listed on the website. 

Website Operation  

All information on this website is subject to change without notice. Collins Arch may additionally make  improvements or changes in the information, services, products, and other materials displayed on  this website, or terminate this website, at any time without notice. 

As a condition of your use of this website or any services on this website, you warrant to Collins Arch that you will not use this website for any purpose that is unlawful or prohibited by these Terms and  Conditions.  

Collins Arch does not guarantee that this website or any third party websites linked to this website  will be free from viruses, or that access to this website or any third party website will be uninterrupted.  Collins Arch does not warrant the security of passwords for this website beyond the security  measures in place on the webserver.  

Copyright  

Copyright in all of the contents of the Site (including information, text, graphics, logos, icons, sound  recordings and software) is owned by or licensed by Collins Arch.

Except where necessary to view the material on this website on your browser, or as permitted under  the Copyright Act (Cth) 1968 or other applicable laws, you may not in any form or by any means,  without our written permission: adapt, reproduce, store, distribute, print, display, modify, perform,  publish or create derivative works from any part of the site or any information or thing available from  the site; or commercialise any information, products or services available or obtained from the site.  

Collins Arch may withhold any consent or approval or give consent or approval conditionally or  unconditionally. You must comply with any conditions Collins Arch imposes on its consent or  approval. 

If you believe that your work has been copied and posted on our website in a way that constitutes  copyright infringement or have reason to believe that any information or material on our website is  incorrect or misleading, please contact us immediately, via email, using  enquiries@collinsarch.com.au.  

Last updated: August 2025