Your Privacy, Protected

TUS & TR Pty Ltd trading as Dexon Division (ACN 680 909 102) (Dexon, we, us or our) is committed to protecting your privacy, in accordance with applicable Australian privacy laws. This Privacy Policy is designed to give you a greater understanding of how we collect, use, disclose and otherwise handle personal information.

This Privacy Policy applies to all individuals who interact with us (you/your), including everyone who visits or uses our websites, anyone who uses any of our products and services, investors,
individuals who apply for a position with us and our staff, anyone who creates an account with us, contacts us or subscribes to our communications . This Privacy Policy applies to our collection,
use and other handling of your personal information.

2.1. General
The type and amount of personal information that we may collect about you depends on the type of dealings you have with us. For example, depending on the context we may collect:

• your name;
• billing and delivery address;
• bank or credit card account details;
• your driver’s licence number;
• your email address;
• your telephone number;
• order, transaction and purchase history;
• your account login credentials;
• communications between you and us;
• IP address, device identifiers, browser type and usage data;
• your marketing preferences; and
• your vehicle, equipment or product-related information, including details used to identify compatibility or preferences.

2.2. Staff and job applicants
If you are working with us or applying for a position with us, we may collect human resources information including

• emergency contacts;
• education certificates and qualifications (eg first aid diploma, bachelor degrees);
• current and former employment details (eg pay rate and salary, leave entitlement);
• bank account details;
• feedback from supervisors and referee reports work, vocational suitability and criminal record checks;
• training records;
• logs of your usage of our equipment, IT and work resources (e.g. phones, computers and vehicle); and
• biometric data for reporting and timekeeping purposes.

2.3. Investors
We may collect information relating to your application or shareholding, e.g. the number of shares you hold or seek, any power of attorney you grant, your shareholder reference number or holder identification number and your tax file number if you choose to provide it.

2.4. Finance applicants
If you enquire about, apply for or obtain finance through us, we may collect additional information about you, and may exchange that information with the financiers that we work with. That information may include:

• salary, assets and personal finance information;
• preferences in relation to loan options, features and amount; and
• credit scores and indicative finance quotes.

We and the financiers we work with may also provide you with further information about the collection and handling of personal information by those financiers, including in relation to credit checks.

2.5. Collection of information through our websites
When you visit our websites, we collect certain information, including as described below.
Site visit information
For example, we record your server IP address, the date and time of your visit, the pages you visited, any documents you downloaded, the previous site you visited and the type of device, browser and operating system you used.
We use and disclose this information in anonymous, aggregated form, for purposes including statistical analysis and to assist us to improve the functionality and usability of our websites.
Cookies
A cookie is a small string of information that a website transfers to your browser for identification purposes.
We use cookies to hold session information. This information may be used to personalise your current visit to the website, for example to allow the website to remember who you are by keeping server variables linked to your session.

Most internet browsers are set to accept cookies. If you prefer not to receive them, you can adjust your internet browser to reject cookies, or to notify you when they are being used. Rejecting cookies can, however, limit the functionality of our websites.

2.6. What if you don’t provide us with your personal information?
We may allow you to use a pseudonym when dealing with us if it is lawful and not impracticable to do so. A pseudonym is a name or other descriptor that is different to your actual name. For example, you can generally access our websites and make general phone queries without having to identify yourself.

In some cases, however, if you don't provide us with your personal information when requested, we may not be able to provide you with the product or service that you are seeking.

3.1. Methods of collection
We collect personal information in a number of ways, including:

• when you buy any of our products and services from us;
• when you create, access or update an account;
• when you subscribe to email or SMS or other communications;
• over email, telephone, forms, live chat, messaging tools or social media;Page 4 of 10
• through interactions with customer communication platforms or from records of interactions and activity relating to us;
• participation in promotions, surveys or competitions;
• through our websites, including cookies, pixels and analytics technologies; or
• through use of any of our mobile applications (App).

We may also collect personal information about you from third parties, including:

• distributors, authorised dealer network members and service providers (see under heading ‘who we may share your personal information with’ below);
• marketing organisations including through the use of industry databases;
• recruitment agencies and referees;
• credit providers (in connection with finance and related enquiries and applications); and
• publicly available sources such as the internet and telephone directories.

3.2. Collection notices
Where we collect personal information about you, we may provide you with additional details about that collection (such as the purpose for which we are collecting the information and the type of third parties to which it is usually disclosed), generally in a collection notice.

Collection notices provide more specific information than this Privacy Policy. The terms of this Privacy Policy are subject to any specific provisions contained in collection notices and in the terms and conditions of particular offers, products and services. We encourage you to read those provisions carefully.

4.1. Use of any App
We may collect personal information through your use of any of our Apps in addition to personal information collected under section 3 above. When you use any of our Apps, we may collect information including:

• device identifiers and technical information relating to your mobile device, such as device type, operating system and App version;
• usage and diagnostic data relating to your interaction with the App/s;
• Bluetooth connectivity data where required to enable communication between the App/s and compatible Dexon products;Page 5 of 10
• information relating to firmware or software updates delivered or managed through the App/s;
• notification preferences and interactions where you elect to enable push notifications; and
• limited product, equipment or system-related data where the App/s is connected to a compatible interface or device, for the purpose of enabling App features selected by the
you.

4.2. App Permissions
The App/s may require access to certain device permissions (including Bluetooth and notifications) to operate as intended. You may manage or disable these permissions through your device settings. Disabling permissions may limit or prevent certain App functionality.

We may use App-related information for purposes including:

• enabling App functionality and connectivity with our products;
• delivering firmware or software updates;
• providing notifications and service-related communications where enabled;
• enabling product-based or system-based triggers and integrations selected by the user;
• improving App performance, reliability and user experience; and
• diagnosing technical issues and maintaining system security.

5.1. General
The main purposes for which we collect, hold, use and disclose personal information are set out below:

• processing and fulfilling orders;
• obtaining and/or delivering products and services;
• managing customer accounts;
• supporting you in making an application for finance or insurance for your vehicle
• answering queries;
• communicating with you regarding orders, deliveries, returns or other matters;
• performing research and statistical analysis, including but not limited to for market research,
customer satisfaction and service improvement purposes;Page 6 of 10
• improving our website, products and customer experience;
• operating our website;
• complying with legal, regulatory and taxation obligations;
• protecting the health, safety and security of our offices, staff, customers and the property
held on our premises;
• recruiting staff and/or contractors;
• in relation to investors, assessing applications, managing your investment and providing
investor services;
• handling complaints and disputes; and
• detecting, investigating and preventing fraud; and monitoring any unlawful or inappropriate
activity in connection with our websites and resources.

We may also collect, hold, use and isclose personal information for other purposes explained at the time of collection, to which you have consented or which are required or authorised by or under law

5.2. Direct marketing
We may use or disclose your personal information to let you know about us and our products and services (including promotions, special offers and events), either where we have your express or implied consent, or where we are otherwise permitted by law to do so. We may contact you for these purposes in a variety of ways, including by mail, email, SMS, telephone, or online advertising.
Opting out
Where you have consented to receiving marketing communications from us, your consent will remain current until you advise us otherwise. However, you can opt out at any time, by:

• contacting us using the contact details set out in section 12 below;
• advising us if you receive a marketing call that you no longer wish to receive these calls;
• using the unsubscribe facility that we include in our electronic messages (such as emails, SMS and MMS messages).

6.1. Within Optimus Group Australia Pty Ltd and its subsidiaries (Optimus Group) (the ultimate
holding company of TUS & TR Pty Ltd (trading as Dexon Division))
We share personal information with our related bodies corporate for the purposes described in section 5.1 above. For example, information about your order from us of our products and services or use of any App history may be stored in our record management system and accessed by other entities in the Optimus Group to help when they provide you with a service, finance your vehicle or you access an App or website of theirs in the future.

6.2. Disclosure to third parties
We may share personal information with third parties where appropriate for the purposes set out in section 5, including:

• Shopify and related e-commerce service providers;
• financial institutions for payment processing;
• courier and logistics providers;
• IT, hosting, analytics and software service providers;
• marketing, advertising and communications platforms (including Klaviyo);
• customer communication and messaging platforms (including Podium);
• government, regularity and law enforcement authorities;
• an individual’s agent or authorised representative;
• your employer;
• referees whose details are provided to us by job applicants;
• external business advisers (such as consultants, recruitment advisors, accountants,
auditors and lawyers); or
• the agent(s) of any of these entities referred to above.

We may disclose personal information to third parties located overseas including the following recipients:
• Shopify;
• external advisers;
• marketing or communication platform providers;
• service providers (including payment processing service providers and information
technology service providers).
The countries where overseas recipients may be located will vary from time to time. Some overseas recipients may not be subject to Australian privacy law or substantially similar law or binding scheme.

8.1. General
We take reasonable steps to:
• make sure that the personal information that we collect, use and disclose is accurate, up to date and complete and (in the case of use and disclosure) relevant; and
• protect the personal information that we hold from misuse, interference and loss and from unauthorised access, modification or disclosure.
You can help us keep your information up to date, by letting us know about any changes to your details, such as your address, email address or phone number.
8.2. Security
The steps we take to secure the personal information we hold include website protection measures (such as firewalls and anti-virus software), security restrictions on access to our
computer systems (such as login and password protection), controlled access to our corporate premises and physical records, policies on document storage and security, personnel security
(including restricting access to personal information on our systems to staff who need that access to carry out their duties), staff training and workplace policies.

We have policies to destroy files that are no longer needed after a certain period of time, subject to any record-keeping requirements imposed by law.
Online credit card payment security
We may from time to time process payments using EFTPOS and online technologies operated by us or by using the Shopify e-commerce platform, including Shopify POS for in-store transactions.
All credit card transactions processed by us using those technologies use industry standard security measures to protect payment details.
Website security
While we endeavour to protect the personal information and privacy of users of our websites, we cannot guarantee the security of any information that you disclose online and you disclose that information at your own risk. If you are concerned about sending your information over the
internet, you can contact us by telephone or post (details under section 12 below).
Third party websites
Links to third party websites that are not operated or controlled by us are rovided for your convenience, including links for payments made via third party payment providers integrated with Shopify by PayPal, Shop Pay (via Stripe), Afterpay and Zip Pay. We are not responsible for the privacy or security practices of those websites, which are not covered by this Privacy Policy.Page 9 of 10
Third party websites should have their own privacy and security policies, which we encourage you to read before supplying any personal information to them.

9.1. General
Please contact our Privacy Officer (details under section 12 below) if you would like to access or correct the personal information that we hold about you. We may require you to verify your
identity before processing any access or correction requests, to make sure that the personal information we hold is properly protected.
9.2. Access
We will generally provide you with access to your personal information, subject to some exceptions permitted by law. We will also generally provide access in the manner that you have
requested (e.g. by providing photocopies), provided it is reasonable and practicable for us to do so. We may, however, charge a fee to cover our reasonable costs of locating the information and providing it to you.
9.3. Correction
If you ask us to correct personal information that we hold about you, or if we are satisfied that the personal information we hold is inaccurate, out of date, incomplete, irrelevant or misleading, we will take reasonable steps to correct that information to ensure that, having regard to the purpose for which it is held, the information is accurate, up-to-date, complete, relevant and not misleading.
We are not obliged to correct any personal information if we do not agree that it requires correction. If we refuse such a request, we will provide a written notice stating our reasons for refusal.

Our website and products and services are not directed at individuals under the age of 18.
We do not knowingly collect personal information from individuals under 18. If we become aware that personal information has been collected from an individual under 18, it will take reasonable steps to delete that information as soon as practicable.

If you have a complaint about how we have collected or handled your personal information, please contact us (details under section 12 below).
We will endeavour in the first instance to deal with your complaint and take any steps necessary to resolve the matter within a week. If we are not able to do so, we will ask you to submit your
complaint in writing. In most cases, we expect to investigate written complaints and provide a response within 30 days of receipt. If the matter is more complex and our investigation may take longer, we will contact you and tell you when we expect to provide our response.
If you are not satisfied with our esponse, you can refer your complaint to the Office of the Australian Information Commissioner (see Privacy complaints | OAIC for further information).

Please contact our Privacy Officer via email at cosec@optaus.com.au if you have any queries about the personal information that we hold about you or the way we handle that personal information.

We may amend this Privacy Policy from time to time. The current version will be posted on our Website at www.dexon.com.au or a copy may be obtained by contacting our Privacy Officer (details above).
This Privacy Policy was last updated on 25 February 2026.