Privacy Policy

STEP4 Privacy Policy – 2026 V 2.0 1

Policy

STEP4 is committed to protecting your privacy and giving you a safe online experience. This Privacy Policy applies to all of the products, services and websites offered by STEP4. Sometimes, we may post product specific privacy notices or materials to explain our services and products in more detail. If you have any questions about this Privacy Policy, please feel free to contact us through our website. STEP4 is committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Advertising Cookie and Opt-Out

When you are accessing the internet through a web browser, we may use cookies from Facebook, Google (and other advertisers) to improve your online experience, including the display of more relevant ads. Anyone may opt-out of the Google cookie at any time by going to your Google Ad Settings. You
may also opt-out of the Facebook cookie at any time by going to your Facebook Ad Settings.

Information We Collect and How We Use It

We may collect the following types of information:

• Information you provide – When you sign up with or make a purchase from STEP4 we ask you for personal information. We may combine the information you submit with information from other STEP4 services or third parties in order to provide you with a better experience and to improve the quality of our services. This will not occur without your consent unless necessary for site security. This data is retained for as long as you have an active account with STEP4.
• Website enquiries and contact forms – When you submit an enquiry through our website, we may collect personal information including your name, email address, telephone number and any information you provide in your message. We use this information to respond to your enquiry, provide information about our services, and maintain records of communications.
• Cookies – When you visit STEP4 we may send one or more cookies to your device. We use cookies to improve the quality of our service, including for storing user preferences, improving search results and advertisement selection, and tracking user trends, such as how people search. STEP4 also uses cookies in its advertising services to help advertisers and publishers serve and manage advertisements across the web and on STEP4 services.
• Log information – When you access the services of STEP4 via browser, application, or other clients, our servers automatically record certain information. These server logs may include information such as your web request, your interaction with a service, Internet Protocol address, browser type, browser language, the date and time of your request and one or more cookies that may uniquely identify your browser or your
  account. These logs are retained for a period of 30 days and are used for anti-fraud and website security purposes. After this time, these logs are
  automatically deleted.
• Traffic information – When you access the services of STEP4 via browser, application, or other, clients we record certain information using our traffic analysis tool, Google Analytics. This information is stored in an anonymised manner but does include data such as your web request, your interaction with a service, Internet Protocol address, browser type, browser language, the date and time of your request and one or more cookies that may uniquely identify your browser or your account. These
  logs are retained for a period of 3 months and are used for content and marketing planning purposes so that we can improve our content and services. After this time, these logs are automatically deleted.
• User communications – When you send an email or other communications to STEP4 we may retain those communications in order to process your inquiries, respond to your requests and improve our services. When you send and receive SMS messages to or from one of our services that provides SMS functionality, we may collect and maintain
  information associated with those messages, such as the phone number, the wireless carrier associated with the phone number, the content of the message, and the date and time of the transaction. We may use your email address to communicate with you about our services or products but never to send you communications that are not related to your purchases or that you have not opted into.
• Affiliated STEP4 services on other sites – We may offer some of our services on or through other websites. Personal information that you provide to those sites may be sent to STEP4 in order to deliver the service. We process such information under this Privacy Policy.
• Third Party Applications – STEP4 may make available third-party applications, such as plugins, modules, or extensions, through its services. The information collected by STEP4 when you enable a third-party application is processed under this Privacy Policy. Information collected by the third-party application provider is governed by their privacy policies.
• Location data – STEP4 offers location-enabled services. If you use those services, STEP4 may receive information about your actual location (such as GPS signals sent by a mobile device) or information that can be used to approximate a location (such as a cell ID). This data is not recorded without your permission and is not held for any longer than the period required to deliver the specific service.
• Other sites – This Privacy Policy applies to STEP4 ‘s services only. We do not exercise control over the sites displayed as search results, sites that include STEP4s applications, products or services, or links from within our various services. These other sites may place their own cookies or other files on your computer, collect data or solicit personal information from you.

In addition to the above, we may use the information we collect to:

• Provide, maintain, protect, and improve our services (including advertising services) and develop new services; and
• Protect the rights or property of STEP4 or our users.

If we use this information in a manner different than the purpose for which it was collected, then we will ask for your consent prior to such use.

Choices

You can use your account on the STEP4 website to review and control the information stored in your STEP4 account. Most browsers are initially set up to accept cookies, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some of the Arrow Group/STE Products features and services may not function properly if your cookies
are disabled.

Information Sharing

STEP4 only shares personal information with other companies or individuals outside of STEP4 in the following limited circumstances:

• We have your consent. We require opt-in consent for the sharing of any sensitive personal information.
• If we provide such information to our subsidiaries, affiliated companies or other trusted businesses or persons for the purpose of processing personal information on our behalf.

We require that these parties agree to process such information based on our instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures.

• We have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary to (a) satisfy any applicable law, regulation, legal process or enforceable governmental request, (b) enforce applicable Terms of Service, including investigation of potential violations thereof, (c) detect, prevent, or otherwise address fraud, security or technical issues, or (d) protect against harm to the rights,
  property or safety of STEP4 its users or the public as required or permitted by law.

If STEP4 becomes involved in a merger, acquisition, or any form of sale of some or all of its assets, we will ensure the confidentiality of any personal information involved in such transactions and provide notice before personal information is transferred and becomes subject to a different privacy policy.

Overseas Disclosure of Personal Information

Some of our third-party service providers may store or process personal information outside Australia. Where this occurs, we take reasonable steps to ensure those providers handle personal information in a manner consistent with Australian privacy requirements and maintain appropriate security safeguards.

Information Security

We take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure, or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, including appropriate encryption and physical security measures to guard against unauthorized access to systems where we store personal data.

We restrict access to personal information to STEP4 employees, contractors and agents who need to know that information in order to process it on our behalf. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution if they fail to meet these obligations.

Data Breach Response

STEP4 maintains procedures for identifying, investigating and responding to suspected data breaches. Where a data breach is likely to result in serious harm, we will take appropriate action in accordance with applicable privacy laws, including notification requirements under the Notifiable Data Breaches scheme where required.

Accessing and Updating Personal Information. When you use STEP4 services, we make good faith efforts to provide you with access to your personal information and either to correct this data if it is inaccurate or to delete such data at your request if it is not otherwise required to be retained by law or for legitimate business purposes.

We ask individual users to identify themselves and the information requested to be accessed, corrected or removed before processing such requests, and we may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup tapes), or for which access is not otherwise required.  In any case, where we provide information access and correction, we perform this service free of charge, except if doing so would require a disproportionate effort. Because of the way we maintain certain services, after you delete your information, residual copies may take a period of time before they are deleted from our active servers and may also remain in our backup systems for a period of time.

Privacy Complaints

If you believe we have breached your privacy rights or the Australian Privacy Principles, you may submit a complaint in writing using the contact details provided below. We will investigate your complaint and respond within a reasonable timeframe. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
Enforcement STEP4 regularly reviews its compliance with this Privacy Policy. When we receive formal written complaints, it is STEP4’s policy to contact the complaining user regarding his or her concerns.

We will cooperate with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that cannot be resolved between STEP4 and an individual.

Changes to This Privacy Policy

Please note that this Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).

Contact Us

If you have any questions regarding this Privacy Policy, wish to access or correct your personal information, or wish to make a privacy complaint, please contact:

Email: sales@step4.com.au
Phone: 1300 720 353
Address: 23 Awaba St, Lisarow NSW, 2250

__________________
Dan Kennard
Director Date: 31/03/2026