Phoenix Property Investors (Australia) Limited (ABN 99 620 283 614) (Phoenix, we, us or our) has implemented this Privacy Policy to provide information about what kinds of Personal Information we may collect or hold, how we collect, hold, use and disclose that Personal Information, choices you have regarding our use of that Personal Information, and your ability to access or correct that Personal Information. If you wish to make any inquiries regarding this Privacy Policy, you should contact us in any of the ways specified in paragraph 15.

From time to time, Phoenix may be related to other companies and entities (related entities). This Privacy Policy applies to the use of your Personal Information by us and by those related entities. Those related entities may also have their own privacy policies which set out additional detail or differences in their privacy practices. To the extent that those privacy policies are inconsistent with this Privacy Policy, those privacy policies will prevail over this Privacy Policy in relation to the actions of those related entities. A reference in this Privacy Policy to Phoenix, we, us or our is also a reference to those related entities.

"Personal Information" is information or an opinion, whether true or not, and whether recorded in a material form or not, about an identified individual or an individual who is reasonably identifiable.

The types of Personal Information we may collect about an individual will depend upon the nature of our interaction with them. Personal Information that we collect may include (but is not limited to) the following:

name

age and/or date of birth

contact details including telephone numbers (landline and/or mobile)

address (including postal address)

email address

gender

identification information such as driving licence details, including driving licence number

payment details, such as your credit card or bank account details

Australian Business Number (ABN)

occupation and employment details including employment status and any previous work experience; and

information from or in connection with your resume or job application if you apply for a position with us.

We collect and record Personal Information about individuals such as:

our customers/clients, potential customers/clients and their representatives

our investors and shareholders

our suppliers and potential suppliers and their representatives, directors, partners, proprietors and shareholders

contractors and subcontractors and potential contractors and subcontractors and their representatives in relation to providing goods and services to us, and

any other person who comes into contact with us.

We collect your Personal Information to allow us to conduct our business functions, to provide, market and sell our products and services and for the specified purposes set out in paragraph 6. In some circumstances the collection of Personal Information may be required by law.

We may collect your Personal Information in the course of providing you with our services, or:

when you engage or use our services

when you provide us, or you offer or apply to supply us, with goods or services

when you provide information to us in any way (including by completing a form, disclosing information over the phone or via email, or providing us a business card)

when you request information about us or our services

when you provide feedback to us

when you visit or fill in a form on our Website (see paragraph 5)

when you visit premises from which we operate

when you submit a job application to us

(i)when you (or your employer) provide that information to us in the course of conducting or administering our relationship with you, or when you are carrying out activities in connection with our business operations;

when you otherwise contact us by telephone, fax, email, social media, post or in person, or

where we are otherwise required or authorised by law to do so.

Generally, when providing our services, dealing with our personnel, or obtaining goods and services from our service providers, suppliers or contractors, we collect Personal Information directly from the relevant individual where reasonable and practicable.

We may also collect Personal Information about you from third parties and other sources such as:

your nominated representatives (eg spouse, accountant, power of attorney, brokers and other professional advisors)

publicly available sources of information, or

related entities, companies and businesses of Phoenix.

credit reporting bodies who provide information about consumer credit worthiness (see paragraph 3.2),

If the Personal Information we collect includes sensitive information, including health information and biometric information, we will ask for your consent to collect sensitive information, unless the law allows us to collect it without your consent.

Where we engage with you multiple times over a short period in relation to the same matter, we may not provide you with a separate notice about privacy each time we engage with you.

In most cases, If you choose not to provide your Personal Information to us for the purposes set out in this Privacy Policy, or if we do not or are unable to collect the Personal Information we require, we may not be able to provide you with requested information, services, or to effectively conduct our relationship with you.

Personal Information may be collected by us and by our third party service providers who assist us in operating our website at www.ppinvestors.com/en/, including its subdomains and any other website we operate from time to time (collectively the Website).

We may use various technological methods from time to time to track the visiting patterns of individuals accessing our Website including but not limited to the methods set out in this paragraph 5.

Our Website may use 'cookies' from time to time. Cookies are small text files that are transferred to a user's computer hard drive by a website for the purpose of storing information about a user's identity, browser type or website visiting patterns. Cookies may be used on our Website to monitor web traffic, for example the time of visit, pages visited and some system information about the type of computer being used. We use this information to enhance the content and services offered on our Website.

Cookies are sometimes also used to collect information about what pages you visit and the type of software you are using. If you access our Website or click-through to our Website from a link in an email we send you, a cookie may be downloaded onto your computer's hard drive.

You can configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is sent. Each browser is different, so check the "Help" menu of your browser to learn how to change your cookie preferences.

If you disable the use of cookies on your web browser or remove or reject specific cookies from our Website or linked sites then you may not be able to gain access to all of the content and facilities in those websites.

Some of the content on our Website may include applications made available by third parties, such as social media buttons or links that allow you to share content or links to our Website through the relevant third party platforms. These third party applications themselves may facilitate collection of information by those third parties, through your interaction with the applications and sometimes even if you do not interact directly with them. We are not responsible for the technical operation of these applications or the collection and use practices of the relevant third parties. Please visit the relevant third party websites to understand their privacy practices and options they may make available to you in relation to their collection of your Personal Information.

We use the Personal Information we collect about you for our business functions and activities, in order to operate our business efficiently, and to market our products and services for the benefit of our customers/clients.

We may collect, hold and use your personal information:

to identify and communicate with you

to enable us to provide you with requested information or services

to otherwise assist customers/clients by providing them with information and support

to collect and process payments

to help us to manage and enhance services we provide to you

to help us to manage and enhance goods and services we procure from our suppliers and subcontractors

to personalise and customise your experiences on our Website

to manage and administer any account you may hold with us

to carry out debt recovery functions

to protect you and us from fraud

to help us manage our business operations

for business support purposes including maintenance, backup and audit

to respond to any queries or complaints you may have

to investigate, review, mitigate risks associated with, and inform you of, a data or other security breach involving your personal information, or

to comply with our statutory and legal obligations.

We may aggregate personal information for reporting, statistical and analysis purposes, and for business, product and service improvement purposes. This allows us to better inform ourselves and anticipate our customers' preferences and requirements, and to monitor and improve the effectiveness of our business, products and services. We may also de-identify information for inclusion in such aggregated databases or reports.

We reserve the right at all times to monitor, review, retain, and/or disclose any information as necessary to satisfy any applicable law, but we have no obligation to monitor the use of the Website or to retain the content of any user session.

You consent to us using your Personal Information in the above ways and as set out in this Privacy Policy.

We may otherwise collect, use or disclose your Personal Information where the collection, use or disclosure is:

in accordance with this Privacy Policy or any agreement you enter into with us, or

required or authorised by law, including without limitation the Australian Privacy Principles under the Privacy Act 1988 (Cth).

We may disclose, or provide access to, your Personal Information to third parties in connection with the purposes described in paragraph 6. Depending on the circumstances and the nature of your engagement with us, we may disclose your Personal Information to our related entities, to third parties that provide products and services to us or through us, or to other third parties.

We may also disclose your Personal Information to:

any of Phoenix's internal divisions, business units or departments

your nominated representatives

other organisations or individuals who assist us in providing services to you

professional service providers and advisors who perform functions on our behalf, such as lawyers

representatives, agents or contractors who are appointed by us in the ordinary operation of our business to assist us in providing our services or administering our business (such as for data storage or processing, printing, mailing, marketing, planning and service development)

credit reporting bodies and debt collecting agencies (see paragraph 3.2)

financial planners

banks, lenders, valuers, insurers, brokers, auditors, business consultants and IT service providers, and

Government, regulatory authorities and other organisations as required or authorised by law.

We may also disclose your Personal Information to our Website host or software application providers in certain limited circumstances, for example when our Website experiences a technical problem or to ensure that it operates in an effective and secure manner.

As we continue to develop our business, we may buy, merge or partner with other companies or organisations, and in so doing, acquire customer Personal Information. In such transactions, Personal Information may be among the transferred assets. Similarly, in the event that a portion or substantially all of our business or assets are sold or transferred to a third party, we may also disclose certain information including your Personal Information to a purchaser or potential purchaser in connection with the sale or potential sale of us, our business or any of our assets, including in insolvency.

Some of your Personal Information may be disclosed, transferred, stored, processed or used overseas by us, or by third party service providers. This may happen if:

our offices or related entities are overseas

we outsource certain activities overseas

transactions, information, services or products have an overseas connection, or

our computer systems including IT servers are located overseas.

You consent to the collection, use, storage, and processing of your Personal Information outside of Australia as set out in this Privacy Policy.

In particular, your Personal Information may be disclosed to third parties in Hong Kong, Japan, Korea, China, Cayman Islands, British Virgin Islands (BVI) and Luxemburg, and such other countries in which those parties or their, or our, computer systems may be located from time to time, where it may be used for the purposes described in this Privacy Policy. In these circumstances, you consent to the collection, use, storage and processing of your Personal Information in those countries, without us being responsible under the Privacy Act 1988 (Cth) (Privacy Act) for such use (or for any breach). Where such parties are located overseas, you may have rights to enforce such parties' compliance with applicable data protection laws, but you might not have recourse against those parties under the Privacy Act in relation to how those parties treat your personal information.

Other uses and disclosures

We may collect, use and disclose your Personal Information for other purposes not listed in this Privacy Policy. If we do so, we will make it known to you at the time we collect or use your Personal Information.

Marketing

You consent to us using your Personal Information for sending you information, including promotional material, about us or our services, as well as the products and services of our related entities and third parties, now and in the future. You also consent to us sending you such information by means of email, SMS and MMS messages.

If you do not want to receive marketing information from us, you can unsubscribe in any of the following ways:

clicking on the 'Unsubscribe' or subscription preferences link in a direct marketing email that you have received from us, or

contacting us using the contact details specified in paragraph 15.

We aim to keep your Personal Information secure. Any Personal Information that is collected via our Website or which is held on our computer systems is protected by safeguards including physical, technical (firewalls, SSL encryption etc) and procedural methods.

If we find that we no longer require or have no further need for your Personal Information we may de-identify it or remove it from our systems and destroy all record of it.

You are generally entitled to access Personal Information that we hold about you. If you request access to your Personal Information, in ordinary circumstances we will give you full access to your Personal Information. Depending on the nature of the request, Phoenix may charge for providing access to this information, however such charge will not be excessive. However, there may be some legal or administrative reasons to deny access. If we refuse your request to access your Personal Information, we will provide you with reasons for the refusal where we are required by law to give those reasons.

We take all reasonable steps to ensure that any Personal Information we collect and use is accurate, complete and up-to-date. To assist us in this, you need to provide true, accurate, current and complete information about yourself as requested, and properly update the information provided to us to keep it true, accurate, current and complete.

Please contact us in any of the ways specified in paragraph 15 if you believe that the Personal Information is inaccurate, incomplete or out of date, and we will use all reasonable efforts to correct the information.

It would assist us to ensure we properly understand your request, and allow us to respond more promptly, if requests are made in writing and include as much detail as possible.

If you feel that we have not respected your privacy or that we have conducted ourselves inconsistently with this Privacy Policy, please contact us in any of the ways specified in paragraph 15 and advise us as soon as possible. We will investigate your queries and privacy complaints within a reasonable period of time depending on the complexity of the complaint.

It would assist us to respond to your complaint promptly if it is made in writing. Please detail information relevant to your complaint.

We will notify you of the outcome of our investigation.

We may, from time to time, review and update this Privacy Policy, including to take into account new laws, regulations, practices and technology. All Personal Information held by us will be governed by our most recent Privacy Policy, posted on our Website at: www.ppinvestors.com/en/privacy where the Privacy Policy will be located. Any changes to this Privacy Policy may be advised to you by updating this page on our Website. We will aim to provide reasonable advance notice of such changes though this may not always be possible depending on the circumstances. We encourage you to check this page from time to time for any changes.

If you:

have a query or concern about this Privacy Policy or our Personal Information handling processes

wish to make a complaint in relation to a breach of your privacy

would like to access your Personal Information held by us

would like to update or correct your Personal Information held by us, or

would like to opt out of direct marketing,

please contact Trent Winduss in any of the following ways:

twinduss@ppinvestors.com

Level 22, 25 Bligh Street, Sydney, NSW, 2000, Australia