Privacy Policy & Collection Notice

Slashbill (a business name operated by Strivon Group Pty Ltd, ABN [to be registered]) ("Slashbill", "we", "us" or "our") is committed to managing personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth) ("Privacy Act").

We understand the importance of being open and transparent with you in the way in which we collect, store, use and share your personal information. We take protecting your privacy very seriously.

We strongly encourage you to read this document, so that you understand and are comfortable with how we handle your personal information. If you have any questions about this document, or about Slashbill's handling of your personal information, please contact our Privacy Officer using the contact details set out in section 16.

Slashbill is a business name registered under and operated by Strivon Group Pty Ltd, and is used as a brand name for our electricity comparison and switching services.

Slashbill provides services to individuals in Australia, including:

• Comparison services which compare different electricity retailers and plans;
• Connection services to help you switch to a new electricity provider; and
• Bill analysis and savings calculation services.

In this Privacy Policy, "you" and "your" refers to any individual about whom we collect personal information.

This document sets out our policies for managing your personal information and is referred to as our Privacy Policy.

This Privacy Policy sets out:

• what is considered personal information;
• what personal information we collect and store;
• how we collect, store, use or share personal information;
• the purposes for which we collect personal information;
• what happens if we are not able to collect personal information;
• how to seek access to and correct your personal information;
• whether we share personal information outside Australia;
• how to make a complaint about the handling of your personal information; and
• how to contact us.

This Privacy Policy applies to all personal information collected by us, or submitted to us, whether offline or online, including personal information collected or submitted through:

• our website at slashbill.com (Website);
• our official social media pages which we control;
• during conversations between you and our representatives;
• through email and other messages that we send to you; and
• through our waitlist and service application forms.

When used in this Privacy Policy, the term "personal information" refers to personal information as defined in the Privacy Act.

In general terms, it is any information that can be used to personally identify you. This may include (but is not limited to) your name, age, gender, postcode and contact details (including phone numbers and email addresses). If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered personal information.

The types of personal information that we collect and store about you will depend on the circumstances in which the information is being collected.

We generally collect personal information directly from you. We may collect and update your personal information over the phone, by email, over the internet, or in person.

We may collect the following types of personal information:

• full name;
• mailing or street address;
• email address;
• telephone number;
• state of residence;
• copies of or details regarding your electricity bills (including bill images or PDFs you upload);
• your current electricity provider name;
• your monthly or quarterly electricity costs;
• your electricity usage details and patterns;
• your electricity meter number, National Meter Identifier (NMI), or similar identifiers;
• details of the products and services you have enquired about or purchased from us;
• online and digital services information (including behavioural information), such as your IP address and details about your device;
• information you provide through customer surveys or feedback; and
• any information that is required by law.

Bill Upload and AI Processing: When you upload a photo or PDF of your electricity bill, our AI-powered system processes the image to extract relevant information such as your provider name, usage amounts, charges, and billing period. We only extract information necessary to provide our comparison and switching services. The uploaded bill image is stored securely and treated as confidential personal information.

We collect your personal information directly from you unless it is unreasonable or impractical to do so. We may also collect personal information from third parties including energy retailers, comparison partners, and data suppliers where you have consented to such disclosure.

We will provide individuals with the opportunity of remaining anonymous or using a pseudonym in their dealings with us where it is lawful and practicable (for example, when making a general enquiry).

Generally it is not practicable for us to deal with individuals anonymously or pseudonymously on an ongoing basis, particularly when providing our comparison and switching services.

If you do not provide us with the personal information described in this Privacy Policy, some or all of the following may happen:

• we may not be able to provide you with our comparison or switching services, either to the same standard, or at all;
• we may not be able to analyze your electricity bill or calculate potential savings;
• we may not be able to facilitate a switch to a new electricity provider on your behalf;
• we may not be able to provide you with information about products and services that you may want, including information about special offers or discounts; or
• we may be unable to tailor the content of our Website to your preferences and your experience may not be as enjoyable or useful.

We collect personal information reasonably necessary to carry out our business, to assess and manage our customers' needs, and to provide our services.

The purposes for which we collect, store and use your personal information include:

• to provide our comparison and switching services to you;
• to process and analyze your electricity bill using AI technology;
• to compare electricity plans from multiple retailers based on your actual usage;
• to calculate potential savings and present plan options to you;
• to gather or seek to gather your National Meter Identifier (NMI) and associated data for the purposes of switching your electricity provider;
• to facilitate and manage the switching process with your chosen new electricity provider;
• to communicate with you, including by email, SMS or telephone;
• to verify your identity and manage any enquiries or complaints;
• to personalize and customise your experience on our Website;
• to provide you with information about our services, including new features and updates;
• to conduct business processing functions (including financial management and reporting);
• for administrative, marketing, planning, product development, quality control and research purposes;
• to improve our understanding of customer interests and improve our services;
• to analyze interactions with our online services to enhance user experience;
• to maintain and improve customer service through quality monitoring;
• to manage relationships with energy retailers and other business partners;
• to respond to enquiries and investigate complaints;
• to meet regulatory and legal obligations under the Privacy Act; and
• as otherwise required or permitted by law.

We may also use personal information to create de-identified data (which is no longer personal information). We may share this de-identified data with business partners for analytics and improvement purposes.

Your personal information will not be shared, sold, rented or disclosed other than as described in this Privacy Policy.

We may share your information with third parties:

• for the reasons described in section 7;
• as specifically authorised by you; or
• where we are otherwise allowed or required to do so under law.

Third parties we may share your personal information with include:

We primarily collect and store personal information in Australia. However, we may share personal information with overseas service providers for some purposes listed above. We only share your personal information outside Australia where we are permitted to do so under the Privacy Act.

We take reasonable steps to ensure your personal information is treated securely and in accordance with the Privacy Act when shared with overseas recipients.

We may share your personal information to entities located in:

• United States (for cloud hosting and AI processing services);
• Singapore (for data hosting services); and
• other jurisdictions where our service providers operate, with appropriate safeguards in place.

There may be other circumstances where we share your personal information overseas, such as where you have provided your consent or we are otherwise permitted to do so under the Privacy Act.

We may use or disclose your personal information to send you direct marketing communications about products and services that we consider may be of interest to you, in accordance with the Privacy Act and the Spam Act 2003 (Cth).

These communications may be sent via email, SMS, telephone, or through social media channels (including targeted advertisements).

How to Opt-Out

You can opt-out of receiving marketing communications at any time by:

• clicking the "unsubscribe" link in any marketing email we send you;
• replying "STOP" to any marketing SMS;
• contacting our Privacy Officer using the details in section 16.

We will process your opt-out request promptly. Please note that even if you opt-out of marketing communications, we may still send you service-related messages regarding your use of our services.

We do not provide your personal information to other organizations for direct marketing purposes unless expressly authorized by you.

When you access our Website, we may collect certain information through the use of cookies and other tracking technologies. A cookie is a small file containing a unique ID number that is stored on your device.

We collect information such as:

• your device type and browser type;
• IP address;
• pages you have accessed on our Website;
• click-through information; and
• time spent on different pages.

This enables us to recognize your device, improve your experience, and understand how our Website is being used. We use this information to improve our services, analyze trends, and personalize content.

If you do not wish to receive cookies, you can set your browser to reject them. However, some features of our Website may not function properly without cookies.

Third Party Links

Our Website may contain links to third-party websites (such as energy retailer websites). We are not responsible for the privacy practices of these third-party websites. We recommend you review their privacy policies before providing any personal information.

We store personal information in secure electronic databases, including trusted third-party cloud storage providers based in Australia and overseas.

We take all reasonable steps to protect the personal information we store from misuse, interference, loss, and from unauthorized access, modification and disclosure. Our security measures include:

• secure socket layer (SSL) encryption for data transmission;
• encrypted storage of bill images and sensitive data;
• firewalls and intrusion detection systems;
• secure user authentication and access controls;
• regular security audits and updates;
• staff training on privacy and data security; and
• restricted access to personal information on a need-to-know basis.

Bill Image Storage: Uploaded electricity bill images and PDFs are stored in encrypted cloud storage with restricted access. Only authorized personnel and AI processing systems can access these files, and access is logged and monitored.

If you suspect any misuse or loss of, or unauthorized access to, your personal information, please contact us immediately using the details in section 16.

We only keep personal information for as long as is necessary for the purposes set out in this Privacy Policy or as required by law.

The retention periods we apply take into account:

• legal and regulatory requirements;
• limitation periods for legal action;
• our ability to defend legal claims;
• good practice; and
• operational requirements of our business.

Generally, we retain your information for the duration of your relationship with us and for a reasonable period afterward to comply with legal obligations and resolve any disputes.

We take steps to destroy or de-identify information that we no longer require. For example, uploaded bill images may be deleted after the comparison and switching process is complete, unless you request us to retain them or we are required to do so by law.

You may request access to any personal information we hold about you at any time by contacting our Privacy Officer using the details in section 16.

Where we hold information you are entitled to access, we will try to provide you with suitable means of accessing it (for example, by emailing it to you). We will not charge for simply making a request or for making corrections to your personal information.

We will verify your identity before providing access to your personal information. We may decline your request in certain circumstances permitted under the Privacy Act, such as where granting access would interfere with another person's privacy. If we decline your request, we will provide written reasons.

If you believe personal information we hold about you is incorrect, incomplete or inaccurate, you may request us to correct it. We will consider your request and make corrections where appropriate. If we disagree that correction is required, we will add a note to your record stating that you disagree with the information.

We request that you keep your information current so we can continue to provide you with the best possible service.

You may contact us at any time if you have questions or concerns about this Privacy Policy or about how your personal information has been handled.

You may make a privacy complaint to our Privacy Officer using the contact details in section 16.

We have a formal procedure for investigating and dealing with privacy complaints:

• We will first consider whether there are simple or immediate steps to resolve your complaint;
• We will generally respond to your complaint within 7 days;
• If your complaint requires detailed investigation, we will acknowledge receipt within 7 days and complete our investigation promptly;
• We may ask you to provide further information;
• We will investigate by gathering facts, reviewing documents, and speaking with relevant individuals; and
• In most cases, we will respond to complaints within 30 days. If the matter is complex, we will keep you informed of our progress.

If you are not satisfied with our response, you may make a complaint to the Office of the Australian Information Commissioner (OAIC):

Privacy Officer – Slashbill

(Operated by Strivon Group Pty Ltd)

We may change this Privacy Policy from time to time to reflect new laws, technologies, or changes to our operations. When we make material changes, we will provide notice by updating our Website and, where appropriate, notifying you directly via email.

We recommend you visit this Privacy Policy regularly to stay informed of any updates. The "Last updated" date at the top of this page indicates when this Privacy Policy was last revised.

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.