ESSELTE AUSTRALIA PTY LTD

PRIVACY POLICY

The protection of your personal information is important to ESSELTE AUSTRALIA PTY LTD (“ESSELTE”).

In December 2000, the Federal Parliament amended the Privacy Act 1988. Those amendments introduced 10 National Privacy Principles (NPPs) which apply to private sector organisations. The amended Act requires private sector organisations to respect an individual’s privacy by applying these principles in the collection, use, security and disclosure of personal and sensitive information. ESSELTE is subject to the amended Privacy Act. This Privacy Policy does not apply to acts or practices of ESSELTE that are directly related to employee records of current or former employees of ESSELTE.

WHAT PERSONAL INFORMATION DOES ESSELTE COLLECT?

The personal information that ESSELTE is most likely to hold is your name and contact details. This may include information regarding your employer, your job title and other contact information. ESSELTE may also hold other kinds of personal information that you provide as a result of completing a customer survey.

HOW DOES ESSELTE COLLECT PERSONAL INFORMATION?

ESSELTE collects personal information in various ways, including: - from you directly, when you provide information over the phone or on documentation such as an order form or complete a customer survey. - from other customers who request us to provide goods or services to you, when they provide information over the phone or on documentation such as an order form. - from distributors, when they send information in regarding their customers. - from your employer, if you are employed by one of our suppliers or contractors and they provide us with your contact details.

HOW IS YOUR PERSONAL INFORMATION USED BY ESSELTE?

ESSELTE uses your personal information to provide and market our services and to enhance and develop our relationships with clients and potential clients. In general, if ESSELTE requires your personal information for the provision of our services, we will collect personal information from you and we will inform you why we need the personal information and how we intend to use it. Where we use personal information to keep clients and potential clients informed about our services, we will remove you from our mailing lists if you request us to do so.

WHO DOES ESSELTE DISCLOSE PERSONAL INFORMATION TO?

ESSELTE does not sell, rent, trade or otherwise supply to third parties personal information. We may share personal information about you to a third party in the following situations: • To provide you with the products and services you have requested; • With other members of the Esselte group; • Where we outsource any functions relevant to the provision of services to you; • With your consent.

HOW WILL DOES ESSELTE KEEP YOUR PERSONAL INFORMATION SECURE?

ESSELTE takes reasonable steps to protect the personal information it holds from misuse and loss and from unauthorised access, modification or disclosure. Your personal information may be stored either in hard copy documents or as electronic data in ESSELTE’s software or systems. ESSELTE maintains physical security over our paper and electronic data stores and premises, such as locks and security systems. We also maintain computer and network security; for example we use firewalls (security measures for the Internet) and other security systems such as user identifiers and passwords to control access to our computer system. ESSELTE takes reasonable steps to destroy or permanently de-identify personal information if it is no longer needed.

HOW TO ACCESS, CORRECT & UPDATE YOUR PERSONAL INFORMATION

As a general rule, you may access personal information that ESSELTE has collected about you by contacting the Privacy Officer at ESSELTE. ESSELTE may charge a fee for providing access to personal information. If you request access to your personal information you will be advised of the likely cost in advance. In keeping with our commitment to protect the privacy of personal information, we will not disclose personal information to you without proof of identity. If you are able to establish that personal information we hold about you is not accurate, complete and up-to-date, we will take reasonable steps to correct it so that it is accurate, complete and up-to-date.

TRANSBORDER DATA FLOWS

ESSELTE will not transfer your personal information to recipients in a foreign country except:

• with your consent; or

• in compliance with the NPPs.

HOW TO CONTACT ESSELTE

If you have any questions about this Privacy Policy or require more information please contact:

Privacy Officer

Esselte Australia Pty Ltd

Locked Bag 2243 North Ryde NSW 1670

WHAT TO DO IF YOU HAVE A PRIVACY COMPLAINT

If you believe your privacy may have been breached please forward your complaint in writing to the above address. The Privacy Officer will investigate and try to resolve the complaint internally through mediation with you. If you are not happy with the resolution of your complaint by the Privacy Officer you may then complain to the Privacy Commissioner about the act or practice you consider to interfere with your privacy. The Commissioner has the power to investigate the alleged breach by examining witnesses, obtaining documents and directing individuals to attend compulsory conferences. The Privacy Commissioner's determinations in such cases are enforceable.