Privacy Policy

1. Our Commitment to Your Privacy

RYSA co. ("we", "us", "our") is committed to protecting the privacy of everyone who visits our website at rysaco.com.au, purchases from our store, or engages with our client community platform. This Privacy Policy explains how we collect, use, store, and disclose your personal information, and how you can exercise your rights in relation to it.

We operate in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) contained in that Act.

2. Information We Collect

We collect personal information that is reasonably necessary for the operation of our business. This includes:

Information you provide directly: - Name, email address, phone number, and delivery address when placing an order or creating an account - Payment information (processed securely by Stripe — we do not store card details) - Health and lifestyle information you share when registering for our nutrition advisory service (including weight, dietary preferences, exercise habits, and health goals) - Daily check-in data you log through the client portal (weight, HRV, sleep, observations) - Communications you send to us via email or contact forms

Information collected automatically: - Browsing data, IP address, browser type, and pages visited via cookies and similar technologies - Device information when you access our site or portal - Purchase history and interactions with our store

3. How We Use Your Information

We use your personal information to:

• Process and fulfil orders, including communicating with you about your purchase
• Operate and personalise your client portal experience, including your meal plan, macro targets, and progress tracking
• Provide nutrition advisory services tailored to your goals and check-in data
• Send transactional communications (order confirmations, shipping updates)
• Send marketing communications, where you have consented to receive them
• Improve our website, products, and services
• Comply with our legal obligations

We will not use your health or lifestyle data for any purpose other than delivering and improving your nutrition advisory experience.

4. Sharing Your Information

We do not sell your personal information. We may share it with trusted third parties only where necessary to operate our business:

All third parties are required to handle your information in accordance with applicable privacy laws. We do not authorise them to use your information for their own marketing purposes.

We may also disclose your information where required by law, court order, or regulatory authority.

5. Cookies

Our website uses cookies to improve your browsing experience and help us understand how visitors use our site. Cookies are small text files stored on your device.

We use cookies for: - Essential site functionality (shopping cart, session management) - Analytics (Google Analytics — anonymised where possible) - Marketing tracking (Meta Pixel, where applicable)

You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of our website.

6. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access. Measures include:

• SSL/TLS encryption across rysaco.com.au
• Stripe's PCI-DSS compliant payment infrastructure
• Google's secure cloud infrastructure for client portal data
• Access controls limiting who can view client data

No method of transmission over the internet is completely secure. While we take all reasonable precautions, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records are typically retained for seven years for tax and legal compliance purposes. You may request deletion of your account and associated data at any time (see Section 8).

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate, out of date, or incomplete
• Request deletion of your personal information (subject to legal obligations)
• Opt out of marketing communications at any time via the unsubscribe link in any email or by contacting us directly

To exercise any of these rights, contact us at: james@rysaco.com.au

We will respond to all privacy requests within 30 days.

9. Links to Third-Party Sites

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available at rysaco.com.au/pages/privacy-policy. We will notify you of material changes via email where we hold your contact details.

11. Contact Us

If you have any questions, concerns, or complaints about your privacy or how we handle your information, please contact us:

RYSA co. ABN: 32 869 639 399 Email: james@rysaco.com.au Website: rysaco.com.au

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

This policy is a draft. Review all content carefully before publishing. Confirm third-party service list is current and accurate.