Privacy Policy

Pillar Research Pty Ltd ("we", "us", "our") is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) set out in Schedule 1 of that Act. This Privacy Policy explains how we collect, hold, use, and disclose personal information when you visit our website, register for our newsletter, or place an order. By using this website you agree to the collection and use of information in accordance with this policy.

We collect personal information that you provide directly, including: • Identity information — first name, last name, date of birth confirmation • Contact information — email address, phone number, billing address, shipping address • Order information — products purchased, order history, payment method (we do not store card numbers) • Marketing preferences — newsletter subscription status, compound interest, communication preferences • Research declaration — your confirmation that purchases are for in vitro research use only We also collect information automatically when you use the website: • Technical data — IP address, browser type and version, device type, operating system, referrer URL • Usage data — pages visited, time on page, click patterns, search queries within the site • Cookies and similar technologies — see section 6

We use personal information for the following purposes: • To process orders, arrange dispatch, and communicate about your purchase • To send batch-specific Certificates of Analysis and order documentation • To respond to enquiries received through our contact channels • To send marketing communications where you have subscribed (you can unsubscribe at any time) • To improve our products, content, and customer experience based on aggregated usage data • To comply with our record-keeping obligations under the Therapeutic Goods Act 1989 (Cth) and our internal compliance framework • To detect, prevent, and respond to fraud, security incidents, or breaches of our terms

We disclose personal information only as necessary to operate the business and comply with the law. Recipients may include: • Payment processors and financial institutions for transaction settlement • Logistics carriers (such as Australia Post or StarTrack) for order dispatch • Email service providers for transactional and marketing communications • Analytics providers (such as Google Analytics) in de-identified or pseudonymous form where possible • Professional advisors including legal counsel, accountants, and auditors bound by confidentiality • Regulatory authorities including the Therapeutic Goods Administration where required by law We do not sell personal information to third parties.

Some of the third parties we use may store or process personal information outside Australia. This includes service providers located in the United States, the European Union, and the United Kingdom. Where information is transferred overseas we take reasonable steps to ensure the recipient handles the information in accordance with the APPs. By providing your information you consent to its disclosure to overseas recipients on this basis.

We use cookies and similar technologies to operate the website, analyse usage, and remember your preferences. Cookies fall into the following categories: • Strictly necessary cookies — required for the website to function (cart contents, session state) • Analytics cookies — help us understand how the site is used • Marketing cookies — used by third-party services such as Mailchimp to serve relevant communications You can disable cookies in your browser settings. If you disable strictly necessary cookies, parts of the website (including checkout) may not function correctly.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Measures include encryption in transit (HTTPS/TLS), restricted internal access, and secure third-party processors for payment data. No internet transmission or electronic storage is completely secure. We cannot guarantee absolute security.

We retain personal information for the period necessary to fulfil the purposes for which it was collected, including: • Transaction and dispatch records — minimum 7 years to meet our record-keeping obligations • Research use declarations and compliance confirmations — minimum 7 years • Marketing subscription data — until you unsubscribe, plus a reasonable retention period for suppression list compliance • Analytics and technical data — generally up to 26 months in aggregated form After the relevant retention period we securely destroy or de-identify the information.

You have the right to: • Request access to the personal information we hold about you • Request correction of inaccurate or incomplete information • Withdraw consent for marketing communications at any time • Lodge a complaint about how we have handled your personal information To exercise these rights, contact us at the email address published on our Contact page. We will respond within 30 days. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au.

This website is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor we will delete that information promptly.

We may update this policy from time to time. The current version is published at https://pillarresearch.com.au/privacy with the "Last updated" date below. Continued use of the website following any update constitutes acceptance of the revised policy.

For privacy enquiries, requests, or complaints, contact us at the email address published on our Contact page. We acknowledge all privacy correspondence within 2 business days.