Privacy Policy

Goodlot is operated by Authentified Operations Pty Ltd (ACN 676 115 272 / ABN 88 676 115 272), registered with ASIC as Goodlot Auctions (“Goodlot”, “we” or “us”). Goodlot is part of the Authentified group of companies. We are a charity auctions business that partners with Australian charities, brands and talent to run end-to-end fundraising auctions on eBay. At Goodlot, we understand the importance of privacy and its security to you. We take privacy very seriously and are committed to dealing with Personal Information in accordance with the requirements of the Privacy Act 1988 (Cth), the Notifiable Data Breaches Scheme, the Australian Privacy Principles and any other applicable privacy legislation.

From time to time we will review our Privacy Policy to keep pace with changes in our service. Please take a moment to read this Privacy Policy so you understand how we collect, store, use and disclose Personal Information. By providing your Personal Information to Goodlot, you agree and consent that we may collect, use and disclose your Personal Information in accordance with this Privacy Policy.

DEFINITIONS
• “Data” or “Content” means any Personal Information that is collected and stored.
• “Personal Information” has the meaning given to that term in the Privacy Act.
• “Privacy Act” means the Privacy Act 1988 (Cth).
• “Service/s” means our Website and the associated goods and services we make available, including the operation of charity auctions on third-party marketplaces such as eBay.
• “Website” means goodlot.co and any other websites we operate from time to time.
• “You” or “Your” means any user of the Website or Services, including charity partners, brand and talent partners, bidders, donors of items, newsletter subscribers and visitors.

APPLICATION
This Privacy Policy applies to all Personal Information obtained by Goodlot, including, but not limited to information submitted by users of our Website and Services, by participants in auctions we run, and by individuals or organisations who otherwise interact with us.

COLLECTION AND STORAGE OF PERSONAL INFORMATION AND DATA
We store your data securely and use industry-standard measures to protect it from unauthorised access, use and disclosure. We limit access to your data to authorised personnel who need it to operate our Services. However, no method of transmission over the internet or method of
electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

By accessing the Website or using the Services, you consent to the collection, use, disclosure,
storage and processing of your information in accordance with this Privacy Policy.
We may collect:
• Personal Information – such as an individual’s name, role and location, allowing us to
identify who the individual is.
• Contact Information – such as email address, telephone number, business address and other information that allows us to contact the individual or their organisation.
• Partner and Auction Information – information provided by charity, brand and talent partners in connection with auctions we run, including organisation details, items donated or consigned, valuations, supporting documentation, and points of contact.
• Bidder Information – information about bidders and winners of auctions we run, including information received from eBay or directly from bidders for the purposes of bidder prequalification (for higher-value or sensitive lots), fulfilment of items won, and communication regarding the auction or its outcome.
• Financial Information – limited financial information necessary to receive, hold or disburse auction proceeds (for example, charity bank account details for the purpose of disbursing donations). Goodlot does not generally collect or store payment card details from bidders, as payments are processed by eBay.
• Content Information – the content of electronic correspondence with us (email, contact-
form submissions, messages and similar).
• Statistical Information – behavioural and statistical information about individuals, organisations and Website use in connection with the Services.

We may collect Personal Information in circumstances including:
• From you directly when you provide information to us through the Website, by email, in meetings or in calls;
• When you submit a contact-form enquiry, request to partner with us, or apply to bidder
prequalification for an auction;
• When you subscribe to our newsletter or other email communications;
• When you interact with us on social media, visit our Website or send an enquiry through the Website;
• When we receive information about bidders, winners or auction participants from eBay or other marketplaces on which we run auctions;

• When we receive information from a charity, brand or talent partner about a
representative of, or person nominated by, that organisation; and
• When we meet with an individual or organisation wishing to do business with us (and an individual from that organisation provides Personal Information about themselves).

USE OF PERSONAL INFORMATION
We use Personal Information about you for the purpose it was provided or collected, including in
the following ways:
• To plan, set up, run, promote, settle and report on charity auctions, including coordination with charity partners, donors, bidders, winners and marketplaces;
• To conduct bidder prequalification and verification where required for the integrity of an
auction;
• To coordinate fulfilment of items won at auction, including communicating with winners and arranging shipping;
• To respond to enquiries received from you, including enquiries about partnering with us, donating an item, or supporting a cause;
• To verify your identity or the identity of a participant in an auction we run;
• To facilitate, manage and administer any relationship you may hold or seek to hold with
us;
• To communicate with you and provide you with information about our Services, upcoming auctions, and related opportunities where you have requested or consented to receive this from us or where this is otherwise permitted under applicable law;
• To promote and market our Services to you;
• To help us manage our business operations and the operations of the Authentified group;
• To conduct research for the purposes of improving existing Services or creating new Services, including by de-identifying information or undertaking data analytics;
• To collect, receive and disburse auction proceeds;
• To notify you about changes to our Services;
• To receive and address feedback or complaints from you;
• To protect our legal interests and fulfil our regulatory obligations (if and to the extent
necessary); and
• In other circumstances, with your prior consent.

All those with whom we interact have the option to opt out of receiving marketing communications from us. If you do not wish to continue to receive electronic marketing communications from us, you can opt out by clicking the “unsubscribe” link in any email we send
you. We may use Personal Information for the purpose of marketing only where such use complies with privacy legislation in effect in the relevant state or territory. We may, subject to legislative requirements, send occasional emails or messages to you in relation to our current or future
Services. Any such communication will contain an unsubscribe link enabling you to opt out.
We take steps to regularly destroy data (being Personal Information and sensitive information) that does not need to be archived, and to de-identify stored data where identification of a person is not reasonably required or necessary.

The data we de-identify and aggregate may be used to:
• Help Goodlot and the Authentified group understand our position within the market;
• Support the marketing of our Services to third parties, including online advertising; and
• Generate statistical outcomes that can be used for general Goodlot or Authentified group announcements.

We reserve the right to monitor, review, retain and/or disclose any information as necessary to satisfy any applicable law, but we have no obligation to monitor your use of the Website or to retain the content of any user session. You consent to us using your Personal Information in the above ways and as set out in this Privacy Policy.

DISCLOSURE OF PERSONAL INFORMATION
We will not sell your Personal Information to anyone. We share your Personal Information outside our organisation for limited purposes, such as:
• To help us run our business and provide the Services, including to other companies in
the Authentified group;
• To marketing businesses engaged by us to disseminate materials to which recipients have consented; and
• In a de-identified manner pursuant to this Privacy Policy.
We may also disclose your Personal Information to third parties outside our organisation, including:

• To eBay, where information is necessary to set up, run, settle or report on an auction, or where eBay’s policies or applicable law require such disclosure;
• To the charity partner benefiting from a particular auction, for the purposes of acknowledging a donor or winner, issuing a tax receipt where applicable, or reporting on the outcome of the auction;
• To financial institutions, payment processors and other intermediaries involved in the receipt or disbursement of auction proceeds;
• To fulfilment, logistics, photography, identity-verification or other service providers engaged by us in the ordinary operation of our business;
• To representatives, agents or contractors appointed by us in the ordinary operation of our business to assist us in providing our Services or administering our business (such as for data storage or processing, data analytics, printing, mailing, marketing, and product or service development);
• To our Website host or software application providers in certain limited circumstances, for example when our Website experiences a technical problem or to ensure that it operates in an effective and secure manner;
• To debt-collection agencies in the event monies are owed to us;
• Where we have your express permission to do so, or it can reasonably be inferred from the circumstances that you consent to the disclosure;
• If Goodlot, Authentified Operations Pty Ltd, or substantially all of the assets of the Authentified group were acquired by, or merged with, a third party, in which case Personal Information that we hold may be one of the transferred assets (subject to the same constraints on use and disclosure as under this Policy); and
• If we are under a duty or have a legal right to disclose or share Personal Information in order to comply with any legal obligation, or to enforce or apply our terms and conditions or to protect our rights, property, or the safety of our personnel and users. This includes
exchanging information with other companies and organisations for the purposes of fraud protection and risk reduction.
We limit the information we provide to third parties to the information they need to help us provide or facilitate the provision of our Services and associated purposes. We deal with third parties who are required to meet the privacy standards required by law in handling your
Personal Information, and use your Personal Information only for the purposes that we give it to them.
We may use your Personal Information in de-identified form (de-identification being a process by which a collection of data or information is altered to remove or obscure personal identifiers and Personal Information) to assist us in running our business. We may also provide, including by way of sale, de-identified information in aggregated form to third parties. This de-identified
and aggregated information may be used to:
• Provide users with further information regarding the uses and benefits of the Services;
• Enhance our business productivity, including by creating insights and trends from de- identified information and/or aggregated data;
• Assist us to better understand and provide us with insights and trends on how users engage with our Services;
• Improve the Services; and
• Enable third parties to promote relevant goods and services to you, and others like you. When your Personal Information is included in de-identified, aggregated data, it is not possible to identify you from that data.

OVERSEAS DISCLOSURES
Generally, we do not send or disclose your Personal Information to overseas recipients.
However, there may be certain circumstances in which some of your Personal Information may be disclosed, transferred, stored, processed or used overseas by us, or by third-party service
providers.

For example, this may happen if:
• We outsource certain activities overseas;
• Auction items, winners, partners, transactions, information or Services have an overseas connection (including where eBay’s systems, or those of related entities, are located outside Australia); or
• Our computer systems, including IT servers, are located overseas.

In particular, your Personal Information may be disclosed to third parties outside Australia, in which those parties or their (or our) computer systems may be located from time to time, where it may be used for the purposes described in this Privacy Policy. You consent to the collection, use, storage, and processing of your Personal Information outside of Australia as set out in this Privacy Policy.

SECURITY OF PERSONAL INFORMATION
We take all reasonable steps to protect Personal Information, including through internal and external security, restricting access to Personal Information to those who have a need to know,
maintaining technological products to prevent unauthorised computer access and regularly reviewing our technology to maintain security. We choose technology partners based on their
security and privacy policies and practices. In the case of a breach of security safeguards, such as the loss of, unauthorised access to, or unauthorised disclosure of Personal Information under Goodlot’s control, we will notify you and the appropriate federal authorities in Australia pursuant to our obligations under the Privacy Act, as well as notifying any other organisation that may reduce the risk or mitigate the harm from the breach.

QUESTIONS AND CONCERNS AND ACCESS TO, OR CORRECTION OR UPDATING OF, YOUR PERSONAL INFORMATION
We take all reasonable steps to ensure that any Personal Information we collect and use is accurate, complete and up to date. To assist us in this, you need to provide true, accurate,
current and complete information about yourself as requested, and properly update the information provided to us to keep it true, accurate, current and complete.
Generally, you can access and correct some of your Personal Information by contacting us, or by updating any account or profile you have established with us. A request for access can also
be made by contacting our Privacy Officer.

You have a right to access the Personal Information we hold about you. To obtain a copy of the Personal Information we hold about you, to update it, or to make a complaint about our handling of it, please write to us at:

The Privacy Officer
Goodlot (Authentified Operations Pty Ltd)
Level 5, 111 Cecil Street
South Melbourne VIC 3205
or by email to: privacy@goodlot.co

Please provide sufficient detail about the information in question to help us locate it. We will then use commercially reasonable efforts to promptly determine if there is a problem and take
the necessary corrective action within a reasonable time. If a fee is charged for such access we will advise you of the cost in advance.
In the event that you decide that you no longer want us to hold your Personal Information, you may notify us in writing of your desire for us to delete your Personal Information on record.

STATISTICAL INFORMATION
We may collect statistical (non-personal) information about your use of the Website to improve the features and overall experience for our users. The information we may collect includes
statistical information such as pages accessed on the Website, search terms, links that are clicked on, Website visit times, browsers and operating systems, IP address, and cookies.
Our Website may contain links to other websites, including eBay listings operated by Goodlot.
Please be aware that we are not responsible for the privacy practices of such other sites. When you visit other websites from our Website, we advise you to read their privacy policies.
Goodlot also uses interfaces with social-media sites such as Instagram, LinkedIn and others. If you choose to “like” or “share” information from this Website through these services, you should review the privacy policy of that service. If you are a member of a social-media site, the interfaces may allow the social-media site to connect your visits to this site with other Personal Information.

RETENTION OF DATA
Unless stated otherwise, Goodlot will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal
Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

AMENDMENTS TO THIS PRIVACY POLICY
Goodlot reserves the right to amend or replace this Privacy Policy at any time, with or without notice to users, by posting an updated version on the Website, which shall become effective
immediately upon posting. In the event that an updated Privacy Policy constitutes a material change to this Privacy Policy, Goodlot will make reasonable efforts to announce such change
on the Website. Your continued use of the Services and/or Website following any amendment shall constitute your acceptance of any updated Privacy Policy. If you do not agree to any
updated Privacy Policy, you must discontinue use of the Services.

Last updated: June 2026.