Privacy Policy

1. Introduction

One Haven Pty Ltd ("One Haven", "we", "us", or"our") is committed to protecting the privacy of individuals who visit our website at onehaven.com.au and who interact with our services.

This Privacy Policy explains how we collect, use, store, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and the 13 AustralianPrivacy Principles (APPs). It applies specifically to information collected through our website via cookies and our newsletter sign-up form.

This policy is limited in scope to our website’s use of cookies and the collection of information through our newsletter subscription form. It does not cover information collected through other channels such as phonecalls, in-person meetings, or third-party platforms.

2. Who We Are

One Haven is an Australian investment property specialist based in Melbourne, Victoria. We help investors navigate the complexities of the Australian property market, providing tailored advice on investment strategy, property sourcing, and portfolio growth.

For the purposes of this Privacy Policy, One Haven is the entity responsible forthe collection and handling of your personal information.

3. What Personal Information We Collect

Through our website, we collect the following categories of personal information:

3.1 Newsletter Sign-Up Form

When you subscribe to our newsletter, we collect:

• Your name (first name and/or last name)
• Your email address

This information is provided voluntarily when you complete the newsletter subscription form on our website.

3.2 Cookies and Website Analytics

When you visit our website, we automatically collect certain technical information through cookies and similar technologies, including:

• Your IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring website or source
• General geographic location (city/region level, not precise)

4. How We Use Cookies

Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

‍

We do not use advertising or retargeting cookies on this website.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies may affect the functionality of our website.

For information on managing cookies in your browser:

• Chrome: Settings > Privacy and Security > Cookies
• Safari: Preferences > Privacy
• Firefox: Settings > Privacy & Security > Cookies
• Edge: Settings > Cookiesand Site Permissions

5. Why We Collect Your Personal Information

Inaccordance with APP 6, we collect your personal information for the following purposes:

• To send you our newsletter and marketing communications about property investment insights, market updates, and One Haven services
• To analyse website traffic and usage patterns to improve user experience
• To maintain the securityand functionality of our website
• To comply with our legal obligations under Australian law

We will not use your personal information for any purpose other than those outlined above, unless we obtain your consent or are otherwise permitted bylaw.

6. Legal Basis for Collection

Under the Australian Privacy Principles, we collect personal information only where:

(a)  It is reasonably necessaryfor our functions or activities (APP 3.2)

(b)  You have provided consent (e.g. by voluntarily subscribing to our newsletter)

(c)  Collection occurs by lawfuland fair means, directly from you (APP 3.5)

7. How We Store and Protect Your Information

Wetake reasonable steps to protect the personal information we hold from misuse, interference, loss, unauthorised access, modification, and disclosure, in accordance with APP 11.

Your information is stored securely using:

• Encrypted connections(SSL/TLS) on our website
• Secure, access-controlledemail marketing platforms for newsletter data
• Restricted access topersonal information on a need-to-know basis

We retain your newsletter subscription data for as long as you remain subscribed. Upon unsubscribing, your information will be de-identified or deleted within a reasonable timeframe, unless retention is required by law.

Cookie data is retained for the durations specified in the table in Section 4 above.

8. Disclosure of Personal Information

We may disclose your personal information to the following categories of third parties, but only to the extent necessary:

• Email marketing service providers (for newsletter delivery)
• Website analytics providers (e.g. Google Analytics)
• IT and website hosting service providers

We require all third-party service providers to handle your personal information in accordance with the APPs and this Privacy Policy.

Overseas Disclosure

Some of our third-party service providers may store data on servers located outsideof Australia. Where this occurs, we take reasonable steps to ensure that the overseas recipients handle your information in compliance with the APPs, inaccordance with APP 8.

Countries where data may be stored include the United States (e.g. Google Analytics, email marketing platforms). We will update this policy if additional countries become relevant.

9. Your Rights

Under the Privacy Act 1988 and the APPs, you have the following rights:

Access (APP 12)

You may request access to the personal information we hold about you. We will respond to your request within 30 days.

Correction (APP 13)

You may request that we correct any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

Unsubscribe

You may unsubscribe from our newsletter at any time by clicking the "unsubscribe" link at the bottom of any newsletter email, or by contacting us directly.

Anonymity and Pseudonymity (APP 2)

You have the option of not identifying yourself, or using a pseudonym, when dealing with us in relation to a particular matter, unless it is impracticable for us to deal with you on that basis or we are required by law to identify you.

10. Complaints

If you believe that we have breached the APPs or mishandled your personal information, you may lodge a complaint with us by contacting our Privacy Officer (see Section 12).

We will:

• Acknowledge your complaintwithin 5 business days
• Investigate and respond toyour complaint within 30 days
• Work with you to resolvethe issue in a fair and timely manner

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au

11. Notifiable Data Breaches

In accordance with Part IIIC of the Privacy Act 1988, if we experience a data breach that is likely to result in serious harm to affected individuals, we will:

• Notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable
• Notify affected individuals as soon as practicable, including a description of the breach and recommended steps

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or would like to make a complaint, please contact us:

OneHaven Pty Ltd

Privacy Officer

Email: info@onehaven.com.au

Phone: (03)9099 0598

Address: Level 2/29 Izett St, Prahran VIC 3181

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in ourpractices, technology, or legal obligations. Any changes will be posted on thispage with an updated effective date. We encourage you to review this policy periodically.

Where changes are significant, we will take reasonable steps to notify you, such as via a notice on our website or an email to newsletter subscribers.

Governing Legislation

This Privacy Policy has been prepared in accordance with:

• Privacy Act 1988 (Cth)
• Australian PrivacyPrinciples (APPs) 1–13
• Privacy and OtherLegislation Amendment Act 2024
• Privacy Regulations 2025(Cth)
• Notifiable Data Breachesscheme (Part IIIC, Privacy Act 1988)

Disclaimer: This Privacy Policy has been prepared as a generalguide and does not constitute legal advice. One Haven recommends seekingindependent legal advice to ensure full compliance with all applicable privacyobligations.