SABBIA Privacy Policy

1. Introduction

At SABBIA, we value the trust you place in us and are committed to respecting and protecting your privacy.

This Privacy Policy explains how Coastal Co Pty Ltd trading as SABBIA ("SABBIA", "we", "us" or "our") collects, holds, uses, discloses and protects your personal information when you interact with our business.

This includes when you:

• Visit our website at www.sabbiaco.com;
• Purchase our skincare, beauty products or accessories;
• Create or access a customer account;
• Subscribe to recurring product deliveries;
• Complete a skincare consultation or submit information about your skin;
• Subscribe to our email or SMS communications;
• Participate in promotions, competitions or surveys;
• Submit customer reviews, testimonials or photographs;
• Contact our customer service team; or
• Otherwise engage with SABBIA through our website, advertising, social media or other business channels.

We aim to manage personal information transparently and in accordance with applicable privacy and consumer protection laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), where applicable, and the Spam Act 2003 (Cth).

Where other privacy laws apply to our activities, including laws relating to customers outside Australia, we will comply with those applicable requirements.

This Privacy Policy should be read alongside our Terms of Service, Shipping Policy, Returns Policy and any additional privacy notices provided when we collect particular information.

2. Who We Are

SABBIA is an Australian skincare and beauty business operated by:

Legal entity: Coastal Co Pty Ltd
Trading name: SABBIA
Website: www.sabbiaco.com
Email: info@sabbiaco.com
Business address: 7/10 Hayter Street, Currumbin Waters QLD 4223, Australia

For privacy-related enquiries, access requests, corrections or complaints, please contact us using the details above.

3. Personal Information We Collect

We collect personal information that is reasonably necessary for our business activities, to provide our products and services, to communicate with customers and to operate and improve our website.

Depending on how you interact with SABBIA, the information we collect may include the following.

3.1 Personal and Contact Information

• Full name;
• Email address;
• Telephone number;
• Billing and delivery addresses;
• Country or region of residence;
• Customer account information;
• Communication preferences; and
• Information you voluntarily provide when contacting us.

3.2 Order, Payment and Transaction Information

When you place an order, we may collect or receive:

• Products purchased;
• Order dates, values and transaction history;
• Billing and delivery details;
• Payment status and transaction references;
• Payment method details, such as payment type and masked card information;
• Shipping and tracking information;
• Refunds, returns and exchanges;
• Subscription purchase history; and
• Customer service enquiries relating to purchases.

Payments are processed through Shopify and applicable third-party payment providers.

Payment providers may collect and process payment credentials and other financial information required to authorise and complete transactions.

SABBIA does not require access to your complete payment card number for ordinary customer service or order fulfilment activities.

[VERIFY: Confirm whether any full payment card details are stored or accessible outside Shopify or your authorised payment providers.]

3.3 Customer Accounts and Subscriptions

If you create an account or subscribe to recurring deliveries through our subscription management platform, SKIO, we may collect:

• Account identifiers and contact details;
• Login and account activity information;
• Subscription products and delivery frequency;
• Billing schedules and transaction history;
• Subscription preferences;
• Paused, skipped, cancelled or modified orders; and
• Communications about subscription management.

We use this information to manage your account, process recurring orders, administer subscription benefits and provide customer support.

3.4 Skincare Consultations and Skin-Related Information

When you request a skincare consultation, product recommendation or personalised skincare assistance, we may collect information you voluntarily provide about your skin and personal circumstances.

This may include:

• Skin type and skin concerns;
• Skin sensitivity and reactions;
• Acne, pigmentation, dryness, redness or other skin conditions;
• Photographs of your skin;
• Current skincare routines and product usage;
• Previous skincare treatments;
• Allergies or known ingredient sensitivities;
• Information about pregnancy, breastfeeding or hormonal changes where relevant and voluntarily disclosed; and
• Other information you choose to share to assist us in providing recommendations.

Some of this information may constitute sensitive information, including health information, under Australian privacy law.

We seek to collect sensitive information only where reasonably necessary for the consultation or service requested and with the consent required by applicable law.

We use this information primarily to understand your concerns, respond to your enquiry, provide skincare education, recommend suitable products and assist with follow-up customer support.

We do not require you to provide medical information that is unrelated to your skincare enquiry.

3.5 Website, Device and Browsing Information

When you visit our website, certain information may be collected automatically through cookies, pixels, analytics tools, server logs and similar technologies.

This may include:

• Internet Protocol (IP) address;
• Browser type and version;
• Device type and operating system;
• Approximate geographic location derived from technical information;
• Website pages and products viewed;
• Search and navigation activity;
• Referring websites and advertising sources;
• Dates and times of visits;
• Shopping cart and checkout interactions;
• Session information;
• Cookie identifiers; and
• Interactions with our website and marketing communications.

We use this information to operate our website, understand customer behaviour, improve functionality, measure advertising performance and protect against fraudulent or unauthorised activity.

3.6 Marketing and Communication Information

Where you interact with our marketing communications, we may collect:

• Email and SMS subscription preferences;
• Records of consent where applicable;
• Email delivery, opening and click information;
• SMS delivery and interaction information;
• Products viewed or added to your cart;
• Purchase and browsing history;
• Responses to campaigns, promotions or surveys; and
• Preferences inferred from your interactions with our business.

This information may be used to personalise communications and improve the relevance of our marketing, subject to applicable laws and your choices.

3.7 Reviews, Testimonials and Customer Content

If you submit a review, testimonial, before-and-after photograph, video or other content, we may collect:

• Your name or chosen display name;
• Review text and product ratings;
• Photographs and videos;
• Information about your experience using SABBIA products;
• Skin concerns and results you voluntarily describe; and
• Communications relating to permission to publish your content.

We distinguish between information provided privately for customer support or skincare consultations and content that you have expressly authorised us to publish.

4. How We Collect Personal Information

We may collect personal information:

Directly from you, including when you place an order, complete a consultation, create an account, subscribe to marketing, submit a review or contact us.

Automatically, when you browse our website, interact with advertising, open marketing communications or use our online services.

Through third-party service providers, including Shopify, SKIO, payment processors, analytics services, marketing platforms and delivery providers.

Through social media or advertising platforms, when you engage with our content, advertising, competitions or business accounts, subject to the information those platforms make available and applicable privacy settings.

Through other lawful sources, where relevant to our business activities and permitted by applicable law.

Where practicable and lawful, you may make general enquiries without identifying yourself or by using a pseudonym. However, we generally require accurate identifying and contact information to process purchases, arrange deliveries and provide account-specific support.

5. How We Use Your Personal Information

We may collect, hold, use and disclose personal information for the following purposes.

5.1 Processing and Delivering Orders

To:

• Accept, verify and process purchases;
• Process payments;
• Arrange packaging, shipping and delivery;
• Send order confirmations and tracking updates;
• Manage refunds, returns and exchanges;
• Resolve delivery issues; and
• Maintain appropriate transaction records.

5.2 Managing Customer Accounts and Subscriptions

To:

• Create and maintain customer accounts;
• Administer recurring deliveries and subscription benefits through SKIO;
• Process subscription payments;
• Manage changes to subscription preferences;
• Send necessary account and subscription notices; and
• Assist customers with account enquiries.

5.3 Providing Skincare Consultations and Customer Support

To:

• Review information voluntarily submitted about your skin;
• Respond to skincare concerns and product enquiries;
• Provide personalised skincare education and product recommendations;
• Assist with ingredient suitability enquiries;
• Respond to reported product reactions or complaints; and
• Maintain relevant records of customer service interactions.

We will not use sensitive health information for unrelated advertising or marketing purposes without an appropriate lawful basis and any consent required by law.

5.4 Improving Our Products and Services

To:

• Understand customer needs and preferences;
• Analyse product feedback;
• Identify opportunities to improve formulations, packaging and services;
• Improve website usability;
• Review customer satisfaction;
• Conduct internal business reporting; and
• Develop new products and customer experiences.

Where reasonably practicable, we may use aggregated or de-identified information for analysis and business improvement.

5.5 Marketing and Advertising

Subject to applicable laws and your marketing preferences, we may use personal information to:

• Send product announcements, educational content and promotions;
• Provide relevant skincare information;
• Send abandoned cart or checkout reminders;
• Recommend products based on purchase or browsing history;
• Measure marketing effectiveness;
• Create advertising audiences;
• Display relevant advertisements on third-party platforms; and
• Improve customer communication.

5.6 Security, Fraud Prevention and Legal Compliance

We may use personal information to:

• Identify and prevent fraudulent transactions;
• Detect suspicious activity;
• Protect our website, customers and business;
• Investigate suspected misuse;
• Maintain records required by law;
• Respond to lawful requests from authorities;
• Resolve disputes; and
• Establish, exercise or defend legal rights.

6. Skincare Consultations and Sensitive Information

We recognise that skincare consultations may involve information that is personal or sensitive.

We aim to treat information about your skin, health circumstances and photographs with appropriate care and confidentiality.

When you submit information through a consultation or directly to our team:

1. We use the information to assess your enquiry and provide the service requested.
2. We limit access to team members and authorised service providers who reasonably require it for their duties.
3. We do not publicly disclose your consultation photographs or sensitive details merely because you have submitted them to us.
4. We seek separate permission before using identifiable consultation photographs or personal skincare stories in public marketing.
5. We take reasonable steps to protect the information from unauthorised access, use or disclosure.

Providing consent to a skincare consultation does not automatically constitute consent for your photographs or personal health information to be used in advertising.

You may contact us to withdraw consent for optional uses of sensitive information, subject to applicable legal requirements and limitations.

If information is necessary to provide a requested service, declining or withdrawing consent may affect our ability to provide that service.

7. Customer Reviews, Testimonials and Before-and-After Photographs

We appreciate customers who choose to share their experiences with SABBIA.

Before publishing identifiable before-and-after photographs, personal skincare stories or other content submitted privately, we seek permission for the intended use.

Where relevant, we may request permission to use customer content on:

• Our website and product pages;
• Social media accounts;
• Email and SMS campaigns;
• Digital advertisements;
• Educational or promotional materials; and
• Other agreed marketing channels.

We aim to explain how content will be used when requesting permission.

Where photographs or testimonials contain sensitive information, we will obtain any consent required by applicable law.

We will not treat participation in a skincare consultation or submission of private customer support photographs as automatic authorisation for public marketing use.

If you wish to withdraw permission for future use of your content, please contact info@sabbiaco.com.

We will assess and action withdrawal requests in accordance with applicable law and any relevant agreement. Removal from previously distributed printed materials, third-party reposts or other materials outside our control may not always be possible.

Any incentives offered in exchange for reviews or customer content will be administered in accordance with applicable consumer protection and advertising requirements.

8. Cookies, Analytics and Tracking Technologies

Our website uses cookies and similar technologies to support website functionality, understand customer behaviour and improve marketing performance.

Cookies are small data files that may be stored on your device when you visit a website.

We may use the following categories of technologies.

8.1 Essential Cookies

These support core website functions, including:

• Shopping cart functionality;
• Checkout processes;
• Account sessions;
• Website security;
• Fraud prevention; and
• Remembering essential website preferences.

Certain essential technologies may be necessary for the website to function properly.

8.2 Analytics Cookies

We use Google Analytics and may use analytics features available through Shopify and other authorised service providers.

These technologies help us understand:

• Website traffic;
• Page views;
• Customer navigation;
• Product interest;
• Website performance; and
• Conversion activity.

8.3 Advertising and Marketing Technologies

We use advertising and measurement services associated with platforms including:

• Meta, including Facebook and Instagram;
• Google Ads; and
• TikTok Ads.

Depending on our technical configuration and your privacy choices, these services may use cookies, pixels, tags, identifiers or similar technologies to measure conversions, understand advertising performance and support personalised advertising.

8.4 Marketing Automation

We use Klaviyo to support customer communications and marketing activities.

Klaviyo may process information relating to website interactions, purchase history, communication preferences and engagement with marketing messages.

8.5 Managing Cookies and Tracking

You can manage or restrict certain cookies through your browser settings.

Where we provide a website cookie preference or privacy choices tool, you may also use that tool to manage applicable optional tracking technologies.

Some third-party platforms provide additional advertising privacy controls through their own settings.

Disabling certain cookies may affect website functionality or personalisation.

Where applicable law requires consent before using particular tracking technologies, we will seek that consent.

[VERIFY: Confirm the website's actual cookie consent system, whether optional advertising tags are blocked before required consent, and whether server-side tracking is used.]

9. Email, SMS and Direct Marketing

We may send marketing communications containing skincare education, product information, promotions, offers and other SABBIA news where permitted by law.

Our marketing activities may include:

• Email newsletters;
• SMS promotions;
• Product launches;
• Personalised product recommendations;
• Promotional offers;
• Abandoned checkout reminders;
• Customer education; and
• Re-engagement communications.

We comply with applicable direct marketing and electronic communications laws, including Australian spam legislation.

Where required, we obtain consent before sending commercial electronic messages. Consent may be express or, where legally permitted, inferred from an existing relationship and the surrounding circumstances.

Marketing messages will identify SABBIA as the sender and include a way to unsubscribe where required.

How to Unsubscribe

You may:

• Select the unsubscribe link in a marketing email;
• Follow the opt-out instructions in a marketing SMS;
• Update available marketing preferences; or
• Contact info@sabbiaco.com.

We will process unsubscribe requests within the timeframe required by applicable law.

Unsubscribing from promotional communications will not necessarily prevent us from sending essential transactional or service messages relating to your purchases, account, subscription, delivery or customer support enquiries.

We do not require you to subscribe to promotional marketing as a condition of purchasing our products unless a specific optional offer clearly and lawfully requires it.

10. Behavioural Advertising and Personalisation

We may use information about your interactions with SABBIA to provide more relevant advertising and measure the effectiveness of our campaigns.

This may involve:

• Website browsing activity;
• Products viewed or purchased;
• Advertising interactions;
• Cookie and device identifiers;
• Customer audience matching using contact information where permitted; and
• Conversion and campaign measurement.

We may work with Meta, Google Ads, TikTok Ads and other authorised advertising service providers.

Where permitted by applicable law, information may be shared with these platforms to support advertising audiences, conversion tracking, remarketing and campaign analysis.

Certain advertising platforms may independently process information in accordance with their own privacy policies.

You can review advertising preferences through the relevant platform:

• Meta: https://www.facebook.com/privacy/policy/
• Google: https://policies.google.com/privacy
• TikTok: https://www.tiktok.com/legal/page/row/privacy-policy/en

We will respect applicable legal requirements relating to advertising consent, privacy choices and objections to direct marketing.

We do not intentionally use private skincare consultation photographs or sensitive health information to create targeted advertising audiences without an appropriate lawful basis and any required consent.

11. Disclosure of Personal Information to Third Parties

We may disclose personal information to trusted third parties where reasonably necessary to operate our business, provide services, fulfil orders or comply with legal obligations.

These may include the following categories.

11.1 E-commerce and Website Providers

Shopify provides the e-commerce infrastructure used to operate our online store, customer accounts, checkout and order management systems.

Shopify's privacy information is available at:

https://www.shopify.com/legal/privacy

11.2 Payment Providers

Payment processors and financial service providers may process information required to complete purchases, manage refunds and prevent fraud.

11.3 Subscription Service Provider – SKIO

SABBIA uses SKIO, a third-party subscription management platform integrated with Shopify, to administer recurring product subscriptions.

SKIO may collect, access and process personal information necessary to provide subscription services, including:

• Customer names and contact information;
• Subscription products and purchase history;
• Recurring billing schedules and payment status;
• Shipping and delivery preferences;
• Subscription modifications, pauses, skips and cancellations; and
• Customer account and subscription activity.

We share relevant information with SKIO to manage recurring orders, process subscription transactions through our authorised payment providers, administer subscription benefits and provide customer support.

SKIO may process and store personal information using its own infrastructure and authorised service providers, subject to applicable privacy and data protection requirements.

For further information about SKIO's privacy practices, please refer to its privacy policy.

[VERIFY BEFORE PUBLICATION: Confirm SKIO's current privacy policy URL, data storage locations, international data transfers and applicable retention arrangements.]

11.4 Marketing and Analytics Providers

These include:

• Klaviyo;
• Google Analytics;
• Google Ads;
• Meta; and
• TikTok Ads.

These services may process relevant customer, device, transaction and marketing information depending on their functions and our configuration.

11.5 Warehousing, Shipping and Logistics Providers

We may provide relevant information to fulfilment and delivery providers, including your name, delivery address, contact information and order details.

11.6 Customer Support and Professional Service Providers

We may share relevant information with authorised providers assisting with:

• Customer support;
• Website maintenance;
• Information technology;
• Accounting and bookkeeping;
• Legal services;
• Security and fraud prevention; and
• Other legitimate business operations.

11.7 Legal and Regulatory Authorities

We may disclose personal information where required or authorised by law, including in response to lawful regulatory requests, court orders or legal proceedings.

11.8 Business Transactions

If SABBIA undergoes a merger, acquisition, restructuring, sale of assets or similar transaction, relevant personal information may be disclosed where lawful and reasonably necessary for that transaction.

We take reasonable steps appropriate to the circumstances to ensure personal information is handled securely and for authorised purposes.

We do not authorise third-party service providers to use sensitive skincare consultation information for unrelated purposes merely because they provide services to our business.

[VERIFY: Confirm all material service providers and whether any platforms independently use customer information for their own purposes.]

12. International Customers and Overseas Data Disclosure

SABBIA is based in Australia and sells products to customers internationally.

Some of our service providers, technology platforms and business partners operate or process information outside Australia.

As a result, personal information may be stored, accessed, processed or disclosed in overseas jurisdictions.

This may occur in connection with:

• Website hosting and e-commerce services;
• Payment processing;
• Marketing and analytics;
• Customer support;
• Subscription management through SKIO;
• Data storage;
• Security services; and
• International order fulfilment.

Where Australian privacy law applies, we take reasonable steps required by law in connection with disclosures of personal information to overseas recipients.

Where other applicable privacy laws require additional safeguards for international transfers, we will implement appropriate arrangements.

[VERIFY BEFORE PUBLICATION: Identify the countries in which overseas recipients are likely to be located, where practicable. Confirm actual data locations and cross-border disclosure arrangements with Shopify, Klaviyo, SKIO and other relevant service providers. This section must not remain generic if specific countries can practicably be identified.]

13. Data Storage and Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Depending on the information and systems involved, protective measures may include:

• Access controls and user permissions;
• Authentication safeguards;
• Encryption and secure transmission technologies;
• Reputable third-party hosting and payment infrastructure;
• Restricted access to customer records;
• Staff confidentiality requirements;
• Security monitoring and system maintenance; and
• Processes for identifying and responding to suspected data security incidents.

No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

We encourage customers to protect their account credentials and notify us if they suspect unauthorised account activity.

[VERIFY: Confirm which listed security measures are actually implemented, particularly staff access restrictions, multifactor authentication and consultation photograph storage.]

14. Data Retention

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining appropriate business records, complying with legal obligations and resolving disputes.

Different categories of information may be retained for different periods.

For example:

• Order and transaction records: Retained for applicable accounting, taxation, consumer law and business recordkeeping purposes.
• Customer account information: Retained while required to operate the account and for applicable lawful purposes.
• Subscription information: Retained as necessary to administer subscriptions through SKIO, maintain transaction records and meet legal obligations.
• Marketing information: Retained while relevant to lawful marketing activities and subject to consent, opt-out and retention requirements.
• Skincare consultation information: Retained only for as long as reasonably necessary for consultation, follow-up, customer service and applicable legal purposes.
• Customer photographs and testimonials: Retained in accordance with the purpose for which they were collected, relevant permissions and applicable legal obligations.

When personal information is no longer required and retention is not required by law or another applicable exception, we take reasonable steps to destroy it securely or de-identify it.

Where information is held by third-party service providers, deletion may also be subject to their technical processes and applicable legal retention requirements.

[VERIFY: Establish documented retention periods for consultation forms, skin photographs, customer service records and marketing information.]

15. Accessing, Correcting and Deleting Personal Information

You may contact us to request access to personal information we hold about you or to request that inaccurate, incomplete, outdated or misleading information be corrected.

You may also request deletion of your personal information or withdrawal of consent for certain uses, subject to applicable law.

To make a request, contact:

Email: info@sabbiaco.com
Subject: Privacy Request – SABBIA

Please describe your request and provide sufficient information for us to identify the relevant records.

We may need to verify your identity before providing access to personal information or making changes.

We will respond within the timeframes required by applicable law and explain any lawful reason for refusing or limiting a request.

We do not charge a fee simply to make an access or correction request. Any permitted charge for providing access will be reasonable and communicated where applicable.

Certain information may need to be retained despite a deletion request, including information required for legal compliance, transaction records, dispute resolution or other lawful purposes.

16. Privacy Rights of International Customers

Depending on your location and the laws applicable to our processing of your information, you may have additional privacy rights.

These may include rights to:

• Access personal information;
• Request correction of inaccurate information;
• Request erasure in applicable circumstances;
• Restrict or object to certain processing;
• Withdraw consent where processing relies on consent;
• Request data portability where available;
• Object to certain direct marketing activities; and
• Lodge a complaint with an appropriate privacy regulator.

For customers in the European Economic Area or United Kingdom, applicable data protection laws may require us to identify a lawful basis for processing personal data.

Depending on the activity, a lawful basis may include:

• Performance of a contract, such as processing and delivering an order;
• Compliance with a legal obligation;
• Legitimate interests, where permitted and appropriately balanced against individual rights; or
• Consent, including where required for certain marketing, tracking or sensitive information processing.

Additional rights and requirements may apply to customers in other jurisdictions.

We will assess requests according to the laws applicable to the particular individual and processing activity.

[VERIFY: Determine whether SABBIA's international sales and marketing activities trigger specific obligations under the EU GDPR, UK GDPR, California privacy law or other overseas privacy regimes. Additional notices, contact arrangements or representatives may be required.]

17. Automated Processing and Decision-Making

We may use automated technologies through Shopify, SKIO and other service providers to assist with:

• Fraud and transaction risk screening;
• Website security;
• Product recommendations;
• Marketing segmentation;
• Customer communication workflows;
• Subscription administration; and
• Website and advertising analytics.

These technologies may use information such as transaction history, device identifiers, account activity and customer interactions.

We do not intend to rely solely on automated processing to make significant decisions about customers without providing any protections required by applicable law.

Where automated decisions are made, or substantially informed by automated systems, in circumstances that may significantly affect an individual's rights or interests, we will provide any additional transparency, review mechanisms or rights required by applicable law.

[VERIFY: Audit Shopify fraud screening, SKIO, customer profiling and any AI-assisted consultation tools to determine whether additional specific automated-decision disclosures are required.]

18. Children and Minors

Our website and products are primarily intended for adults.

We do not knowingly seek to collect personal information directly from children for independent marketing purposes.

Where a parent or legal guardian contacts us about skincare products for a minor, we may collect information reasonably necessary to respond to that enquiry, subject to applicable law and appropriate consent requirements.

We do not knowingly use sensitive information about children for targeted advertising without any consent or other authorisation required by law.

If you believe a child has provided personal information to us without appropriate permission, please contact info@sabbiaco.com so we can review the matter.

[VERIFY: Confirm whether SABBIA wishes to restrict account creation, purchases or skincare consultations to customers aged 18 and over, or adopt a different age policy.]

19. Third-Party Websites and Social Media

Our website may contain links to third-party websites, social media platforms and services that we do not operate.

These third parties may have their own privacy policies, terms and information-handling practices.

We encourage you to review the privacy policies of third-party services before providing personal information.

Our Privacy Policy does not govern the independent practices of third-party websites or services.

20. Data Breaches and Security Incidents

We take privacy and information security incidents seriously.

If we become aware of a suspected data breach, we will take appropriate steps to investigate, contain the incident, assess potential risks and implement corrective action.

Where a breach meets applicable legal notification requirements, including the Australian Notifiable Data Breaches scheme where applicable, we will notify affected individuals and relevant authorities as required.

We may also take steps to help affected customers protect their information.

If you suspect that your personal information has been compromised in connection with SABBIA, please contact info@sabbiaco.com.

21. Privacy Complaints

If you have a concern about how SABBIA has collected, used, disclosed or managed your personal information, please contact us.

Email: info@sabbiaco.com
Subject: Privacy Complaint – SABBIA

Please provide a description of your concern and any relevant information that may assist our investigation.

We will acknowledge and investigate complaints and aim to respond within 30 days, or advise you if additional time is reasonably required.

If you are dissatisfied with our response, you may be entitled to complain to the Office of the Australian Information Commissioner (OAIC) or another applicable privacy regulator.

Office of the Australian Information Commissioner
Website: https://www.oaic.gov.au
Telephone: 1300 363 992 (within Australia)

International customers may also have the right to contact the relevant supervisory authority in their jurisdiction.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

• Our business operations;
• Products and services;
• Technology platforms;
• Privacy and data protection laws;
• Information-handling practices; or
• Security and operational requirements.

When we update this policy, we will publish the revised version on our website and update the effective or last-updated date.

Where required by law, we will provide additional notice or seek consent before implementing material changes to the handling of personal information.

We encourage customers to review this policy periodically.

23. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights or would like to make a complaint, please contact:

SABBIA
Coastal Co Pty Ltd
7/10 Hayter Street
Currumbin Waters QLD 4223
Australia

Email: info@sabbiaco.com
Website: www.sabbiaco.com

We are committed to handling privacy enquiries respectfully and taking reasonable steps to protect the personal information entrusted to us.