FM8 Pty Ltd

Privacy Policy

Document No. FPP-001  |  Version 2  |  Effective 31 July 2026  |  ABN 19 680 841 712

1. Who we are
2. The information we collect
3. How we collect information
4. Why we collect, hold, use, and disclose personal information
5. Credit reporting
6. Who we disclose personal information to
7. Overseas disclosure
8. Direct marketing
9. Our website, cookies, and analytics
10. Security, retention, and destruction
11. Data breaches
12. Access and correction
13. Anonymity, pseudonymity, and government identifiers
14. Complaints
15. How to contact us
16. Changes to this policy

This Privacy Policy explains how FM8 Pty Ltd (ABN 19 680 841 712) ("FM8", "we", "us", "our") collects, holds, uses, discloses, secures, and destroys personal information, and how we handle credit-related information. It applies to our website at www.fm8.global, to our dealings with customers, authorised distributors, suppliers, and contractors, and to applications for commercial credit.

FM8 is bound by the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) in Schedule 1 to that Act, Part IIIA of that Act, and the Privacy (Credit Reporting) Code 2024.

1. Who we are

FM8 Pty Ltd is an Australian proprietary company that designs and supplies conveyor belt cleaning blades, tensioning systems, and related mining consumables. Our registered business address is 23 Romaine Court, Glenella QLD 4740. We supply direct and through a network of authorised distributors, and we extend 30-day commercial credit accounts to approved distributors.

2. The information we collect

2.1 Personal information

The personal information we collect depends on our relationship with you. It may include:

• your name, job title, and the entity you represent;
• business and personal contact details, including postal address, email address, and telephone numbers;
• residential address and date of birth, where you are a director, partner, trustee, proprietor, or guarantor of an applicant for commercial credit;
• identity document details, including driver licence or passport number and the State or country of issue;
• financial and credit-related information, including trade references, payment history with FM8, and information contained in credit reports;
• records of your dealings with us, including orders, quotations, invoices, warranty and product claims, site visit records, and correspondence;
• employment application information, where you apply for a role with FM8; and
• technical and usage information collected when you visit our website, as described in section 9.

2.2 Sensitive information

We do not ordinarily collect sensitive information as defined in the Privacy Act. Where a site induction, safety requirement, or workers compensation matter requires us to collect health information, we collect it only with your consent or where the collection is required or authorised by law, and we use it only for the purpose for which it was collected.

2.3 Credit-related information

Where an entity applies for a commercial credit account with FM8, we collect credit-related information about that entity and, with their express written consent, about the individuals associated with it. This is described in section 5.

2.4 Unsolicited information

If we receive personal information we did not ask for, we determine within a reasonable period whether we could have collected it under the APPs. If we could not, and the information is not contained in a Commonwealth record, we destroy or de-identify it as soon as practicable, provided it is lawful and reasonable to do so.

3. How we collect information

We collect personal information directly from you wherever it is reasonable and practicable to do so — for example when you complete a credit application, request a quotation, place an order, subscribe to updates, complete a web form, attend a site visit, or correspond with us.

We also collect personal information from third parties, including:

• credit reporting bodies;
• trade references you nominate;
• banks and other credit providers;
• the Australian Securities and Investments Commission, the Australian Business Register, and other public registers;
• the Personal Property Securities Register;
• the Australian Government Document Verification Service, for identity verification;
• the entity that employs you or that you represent; and
• publicly available sources, including company websites and professional networking platforms.

Where we collect your personal information from a third party, we take reasonable steps to notify you of that collection, unless notification would be unreasonable in the circumstances or you would reasonably expect the collection.

4. Why we collect, hold, use, and disclose personal information

We collect, hold, use, and disclose personal information for the following purposes:

• to supply products and services, and to process and fulfil orders;
• to assess applications for commercial credit and to establish, administer, and review credit accounts;
• to verify the identity of individuals associated with an applicant for credit;
• to prepare quotations, invoices, order confirmations, and delivery documentation;
• to provide technical support, product recommendations, warranty assessment, and after-sales service;
• to register and maintain security interests on the Personal Property Securities Register;
• to collect amounts owing to us and to enforce our contractual and legal rights, including under any guarantee;
• to manage our relationships with distributors, suppliers, and contractors;
• to send you commercial and technical communications, subject to section 8;
• to improve our products, website, and services, and to conduct internal analysis and reporting;
• to assess applications for employment with FM8; and
• to comply with our obligations under Australian law and to respond to lawful requests from regulators, courts, and law enforcement.

We will not use or disclose your personal information for a purpose other than the purpose for which it was collected, or a directly related purpose you would reasonably expect, unless you consent or the use or disclosure is required or authorised by law.

5. Credit reporting

5.1 FM8 as a credit provider

FM8 supplies goods on deferred payment terms and is a credit provider for the purposes of Part IIIA of the Privacy Act 1988 (Cth). FM8 provides commercial credit only. We do not provide consumer credit, and we do not provide credit for personal, domestic, or household purposes.

5.2 Credit reporting bodies we deal with

We may obtain credit reports from, and in some circumstances disclose credit information to, the following credit reporting bodies:

Each credit reporting body has its own policy setting out how it manages credit-related information, including how you may access and correct that information and how to make a complaint. You may obtain a copy of that policy from the body directly.

5.3 Consent

Where we seek a credit report about an individual — for example a director, partner, trustee, proprietor, or guarantor of an entity applying for commercial credit — we do so only with that individual's express written consent, given in accordance with section 21M of the Privacy Act 1988 (Cth). That consent is collected in Section 3 of our Commercial Credit Account Application, or in the Guarantee and Indemnity.

An entity cannot give this consent on behalf of an individual. You may withdraw your consent at any time by written notice to our Privacy Officer. Withdrawal does not affect anything already done in reliance on the consent, and may result in FM8 declining or withdrawing credit.

5.4 What we may disclose

We may disclose to a credit reporting body information about commercial credit we have provided or applied for, including identification particulars, the type and amount of credit, and information about overdue payments, to the extent permitted by Part IIIA and the Privacy (Credit Reporting) Code 2024. Before disclosing information about an overdue payment, we will give the notices required by law.

5.5 Your rights in relation to credit reporting bodies

You have the following rights, which you exercise by contacting the relevant credit reporting body directly:

• you may request that a credit reporting body does not use your credit reporting information for the purpose of pre-screening direct marketing offers;
• if you believe you have been, or are likely to be, a victim of fraud, you may request that a credit reporting body does not use or disclose your credit reporting information during a ban period; and
• you may obtain a copy of the credit reporting information a credit reporting body holds about you, free of charge once in each twelve month period and in the other circumstances set out in the Privacy Act.

5.6 Correcting credit-related information

If you believe credit-related information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, contact our Privacy Officer. We will correct the information, or consult with the relevant credit reporting body or credit provider, and notify you of the outcome within 30 days of your request unless you agree to a longer period. Correction is free of charge.

5.7 Complaints about credit reporting

If you wish to complain about how we have handled your credit-related information, contact our Privacy Officer using the details in section 15. We will acknowledge your complaint, investigate it, and give you a written decision within 30 days unless you agree to a longer period. If you are not satisfied with our decision, you may complain to the Office of the Australian Information Commissioner or, in relation to credit reporting, to an external dispute resolution scheme of which we are a member at the relevant time.

6. Who we disclose personal information to

We may disclose your personal information to:

• credit reporting bodies and other credit providers, as described in section 5;
• the trade references you nominate in a credit application;
• our related entities and our authorised distributors, where necessary to supply products or provide support;
• our manufacturing partners, freight forwarders, customs brokers, and delivery carriers, where necessary to fulfil an order;
• our legal, accounting, insurance, taxation, and other professional advisers;
• debt collection agencies and mercantile agents engaged by us;
• our information technology, data hosting, email, customer relationship management, accounting, and analytics service providers;
• a purchaser or prospective purchaser of all or part of our business, subject to appropriate confidentiality protections; and
• regulatory authorities, courts, tribunals, and law enforcement agencies, where required or authorised by law.

We require our service providers to protect personal information in a manner consistent with this policy and the Australian Privacy Principles, and to use it only for the purpose for which we disclosed it.

7. Overseas disclosure

We use cloud-based business systems and information technology service providers that may store or process personal information outside Australia. The countries in which those recipients are likely to be located are the United States of America, member states of the European Union, the United Kingdom, and Singapore. We also disclose limited business contact and order information to our manufacturing partners in the People's Republic of China for the purpose of fulfilling orders.

Before disclosing personal information overseas we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles in relation to that information, including by requiring contractual commitments to that effect.

8. Direct marketing

We may use your business contact details to send you technical bulletins, product updates, and commercial communications relevant to your role. Every such communication includes a simple means of opting out.

You may ask us at any time not to send you marketing communications, and not to disclose your personal information to any other organisation for the purpose of direct marketing. We will give effect to that request within a reasonable period and at no cost. We do not sell personal information.

9. Our website, cookies, and analytics

When you visit www.fm8.global we may collect your IP address, device and browser type, operating system, referring page, the pages you view, and the dates and times of your visits. We collect this information using cookies and similar technologies, including Google Analytics 4 and Google Tag Manager.

We use this information to operate and secure the website, to understand how it is used, and to improve its content and performance. Most of this information is aggregated and does not identify you. You can control or delete cookies through your browser settings, though some parts of the website may not function properly if cookies are disabled.

Our website may contain links to third party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

10. Security, retention, and destruction

We take reasonable steps to protect personal information from misuse, interference, and loss, and from unauthorised access, modification, or disclosure. Those steps include access controls and role-based permissions, multi-factor authentication on business systems, encryption of data in transit, secure cloud storage with reputable providers, physical security at our premises, confidentiality obligations on our personnel, and periodic review of our systems and processes.

We retain personal information only for as long as it is needed for the purposes set out in this policy, or for as long as we are required to retain it by law. Records relating to credit accounts, taxation, and corporate governance are generally retained for seven years. When personal information is no longer required and we are not required by law to retain it, we destroy it or de-identify it.

No method of transmission or storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee its absolute security.

11. Data breaches

We maintain a data breach response plan. If we suspect a data breach has occurred, we will contain and assess it promptly. Where a breach is likely to result in serious harm to any individual whose personal information is involved, and we are unable to prevent that harm through remedial action, we will notify the affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth).

12. Access and correction

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. Contact our Privacy Officer using the details in section 15.

We will respond to a request for access within 30 days. We do not charge for making a request. We may charge a reasonable fee for the reasonable costs of giving access, and we will tell you about any fee before we incur it. We may refuse access or correction in the limited circumstances permitted by the Privacy Act. If we refuse, we will give you written reasons and tell you how to complain. If we refuse to correct information, you may ask us to associate a statement with it noting that you consider it inaccurate, and we will take reasonable steps to do so.

13. Anonymity, pseudonymity, and government identifiers

You may deal with us anonymously or under a pseudonym where it is lawful and practicable to do so — for example when making a general product enquiry. It is not practicable for a credit application, an order on account, or a warranty claim, because we need to identify you to provide those services.

We do not adopt a government related identifier — such as a tax file number, Medicare number, or driver licence number — as our own identifier for an individual. Where we collect identity document details, we use them only to verify identity and for the other purposes set out in this policy, and only where permitted by law.

14. Complaints

If you believe we have breached the Australian Privacy Principles, Part IIIA of the Privacy Act, or the Privacy (Credit Reporting) Code 2024, please contact our Privacy Officer using the details in section 15. Set out the details of your complaint and how you would like it resolved.

We will acknowledge your complaint within 5 business days, investigate it, and give you a written response within 30 days. If your complaint is complex and we need more time, we will tell you why and agree a longer period with you.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner:

• Online: www.oaic.gov.au/privacy/privacy-complaints
• Telephone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

15. How to contact us

16. Changes to this policy

We review this policy periodically and may update it to reflect changes to our practices or to the law. The current version is always available at www.fm8.global/privacy. Material changes will be notified on our website. This policy was last updated on 31 July 2026.