PRIVACY POLICY

Version: 1.0

Effective Date: 1 June 2025

Governing Law: New South Wales, Australia

Wonder Group International Pty Ltd ABN 33 618 065 197 ("Wonder Group", "WW", "we", "our" or "us") operates the Wedded Wonderland marketplace Platform. We are committed to protecting your privacy and handling your personal information openly and responsibly, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy describes how we collect, hold, use and disclose personal information in connection with your use of the Platform. It forms part of, and should be read together with, the Platform Terms of Use, the Vendor Terms & Conditions, the Customer Booking Terms and the Marketplace Payment Services Agreement.

1. What Is Personal Information

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether recorded in a material form or not, consistent with the Privacy Act 1988 (Cth).

2. Who Is Responsible for Your Personal Information

Wonder Group International Pty Ltd is the entity responsible for personal information handled through the Platform.

Payment Services are provided through the Platform in accordance with the Marketplace Payment Services Agreement. Payment processing is performed by third-party Payment Processors appointed by Wonder Group (for example, our card processor). When you make or receive payments, relevant payment information is handled by those Payment Processors under their own terms and privacy policies, in addition to this Privacy Policy.

3. Personal Information We Collect

3.1 Information Needed to Use the Platform

We collect personal information when you use the Platform. Without it, we may not be able to provide all services requested. This includes:

3.1.1 Contact, Account and Profile Information

Such as your first name, last name, phone number, postal address, email address and profile photo, some of which depend on the features you use.

3.1.2 Identity Information

Where appropriate, and in accordance with applicable law, we may ask you for an image of your government-issued identification, business registration details, or other verification information, and may verify it against your submitted details.

3.1.3 Payment Transaction Information

Such as payment card information, bank account information (for Vendor Payouts), the payment instrument used, transaction date, time and amount, billing details and other related transaction details, handled together with our Payment Processors.

3.1.4 Vendor Business, Insurance and Licence Information

If you are a Vendor, we may collect information about your business, together with the business, commercial or professional insurance, licences, permits, authorisations or certifications you are required to hold to offer a Listing.

3.2 Personal Information You Choose to Give Us

3.2.1 Additional Profile Information

Such as preferred language(s), personal or business description, and any additional profile information you provide.

3.2.2 Information About Others

Such as contact or event information relating to a co-planner, participant, guest or other person relevant to a Booking. By providing personal information about others, you confirm you have their permission to do so for the purposes described in this Privacy Policy.

3.2.3 Cultural, Dietary and Accessibility Preferences

Such as cultural, religious, dietary or accessibility requirements you choose to share to help match and deliver Vendor Services. You choose whether to provide this information; some of it may be sensitive information, which we collect and use only with your consent and as reasonably necessary to facilitate your Booking.

3.2.4 Communications Information

Such as messages and enquiries sent on or through the Platform, including time, date and participants. Contact details within messages may be automatically detected and masked (see section 4.5).

3.2.5 User-Generated Content

Such as photos, reviews, ratings and other content you choose to provide.

3.2.6 Support Information

Such as the content of your customer support enquiries and our responses.

3.3 Personal Information Automatically Collected

When you use the Platform, we may automatically collect:

3.3.1 Usage Information

Such as searches, Listings viewed, Booking Requests, Bookings, pages viewed and other actions on the Platform.

3.3.2 Device Information

Such as device identifiers, hardware and software information, and general location derived from your IP address.

3.3.3 Cookies and Similar Technologies

As described in our Cookie Policy (where published).

3.4 Personal Information We Collect from Third Parties

We may collect personal information from other sources, including:

• Payment Processors and financial institutions, in relation to payments, settlements and chargebacks;
• identity, business-registration and verification providers;
• other Users who refer you or include you in a Booking; and
• publicly available sources, such as a Vendor's business website or public listings.

4. How We Use Personal Information

4.1 Provide the Platform

To enable you to access the Platform, make and receive payments, submit and respond to Booking Requests, communicate with other Users, and receive support, updates, security alerts and account notifications.

4.2 Develop and Improve the Platform

To perform analytics, debug, conduct research, and develop and improve our products, services and AI Services. Where we use personal information to develop and improve AI Services, we take reasonable steps to de-identify or otherwise safeguard it, consistent with the Platform Terms and applicable law.

4.3 Personalise the Platform

To provide a more relevant experience, including recommendations and matching of Vendors to a Customer's brief, based on interactions, search and Booking history and profile information.

4.4 Promote Trust, Safety and Quality

To verify identity and information, detect, prevent and address fraud, security risks and prohibited conduct, conduct compliance and risk assessments, resolve disputes, enforce our agreements and policies, and comply with our legal obligations.

4.5 Analyse Communications for Safety and Integrity

We may review, scan or analyse communications on or through the Platform for safety, support, fraud-prevention and integrity purposes. For example, as part of our fraud-prevention and non-circumvention efforts, we detect and mask contact information and references to off-Platform channels. We use automated methods where reasonably possible and will not sell reviews or analyses of these communications.

4.6 Marketing

To send you promotional and marketing messages and information about the Platform and Marketplace Services, where permitted by law. You may opt out of marketing communications at any time using the unsubscribe facility or by contacting us; this does not affect operational or transactional communications.

4.7 Provide Payment Services

To process payments, verify identity, detect and prevent money laundering, fraud and security incidents, conduct risk assessments, comply with legal and compliance obligations (including anti-money-laundering and sanctions requirements), and enforce the Marketplace Payment Services Agreement.

5. Who We Disclose Personal Information To

We may disclose your personal information to:

5.1 Other Users

To facilitate Bookings and communications between Customers and Vendors. For example, when a Booking proceeds, relevant details are shared between the Customer and the participating Vendor(s) so the Vendor Services can be delivered.

5.2 Vendors' and Customers' Own Service Providers

Vendors and Customers may use their own service providers to help deliver or manage a Booking. Those providers are outside Wonder Group's control and are subject to their own terms and applicable law.

5.3 Our Service Providers

We disclose personal information to service providers who help us operate the Platform and Payment Services, including payment processing, identity verification, cloud hosting, fraud prevention, analytics, communications and customer support. These providers are permitted to use personal information only to perform services for us and are bound by appropriate confidentiality and security obligations.

5.4 Legal, Regulatory and Safety Disclosures

As described in section 6.

5.5 Business Transfers

If Wonder Group is involved in a merger, acquisition, reorganisation, sale of assets or similar transaction, personal information may be transferred as part of that transaction, subject to this Privacy Policy and applicable law.

5.6 Overseas Recipients

Some of our service providers (including cloud hosting and Payment Processors) may store or process personal information outside Australia. Where we disclose personal information to overseas recipients, we take reasonable steps to ensure it is handled consistently with the APPs.

6. Why We Disclose Your Personal Information

6.1 With Your Consent or at Your Direction

Where you consent or direct us to disclose your personal information.

6.2 To Build Your Public Profile and Listings

Certain information is displayed publicly on the Platform, such as Vendor Listings, profile information, and reviews and ratings.

6.3 To Comply with Law, Respond to Legal Requests, Prevent Harm and Protect Rights

We may disclose personal information to courts, law enforcement, regulators, tax authorities or other authorised parties where reasonably necessary to comply with our legal obligations, respond to a valid legal request, enforce our agreements and policies, investigate suspected unlawful activity, or protect the safety, rights or property of Wonder Group, our Users or the public. Where appropriate and legally permitted, we will notify affected Users of such requests.

7. Third-Party Services and Integrations

The Platform may link to or integrate with third-party services, including payment processors, mapping services and communication tools. Wonder Group does not control those third parties, and your use of their services is subject to their own terms and privacy policies.

8. Your Rights

Consistent with the Privacy Act 1988 (Cth) and the APPs:

8.1 Access and Correction

You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. You can update some information directly in your Account settings.

8.2 Marketing Opt-Out

You may opt out of receiving marketing communications at any time.

8.3 Making a Request or Complaint

To exercise your rights, or to make a privacy complaint, contact us using the details in section 11. We will respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

9. Retention

We retain personal information for as long as needed for the purposes for which it was collected and further processed, and as permitted or required by applicable law. Criteria include the length of our ongoing relationship with you, our legal, tax, reporting and auditing obligations (such as anti-money-laundering record-keeping), and whether retention is advisable to protect our legal position or the safety of individuals. Information you have shared publicly, such as reviews, may remain visible after your Account is closed. Residual copies may persist in backups for a limited period.

10. Security

We implement reasonable administrative, technical and physical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No system is perfectly secure, and you also share responsibility for protecting your Account credentials and devices. Where we use personal information to develop and improve AI, we apply additional safeguards such as de-identification, encryption and access controls.

11. Contact Information

For questions, requests or complaints about this Privacy Policy or our handling of personal information:

Wonder Group International Pty Ltd

ABN 33 618 065 197

5 George Street, North Strathfield NSW 2137, Australia

Email: info@thisiswondergroup.com

For payment-related privacy matters, please also refer to the Marketplace Payment Services Agreement.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in accordance with applicable law. If we make material changes, we will post the revised Privacy Policy, update the Effective Date above and, where required, provide notice by email or through the Platform before the changes take effect. Your continued use of the Platform after the changes take effect constitutes acceptance of the revised Privacy Policy, except where applicable law requires additional consent.

13. Definitions

Capitalised terms not defined in this Privacy Policy have the meanings given in the Platform Terms of Use, the Marketplace Payment Services Agreement, the Vendor Terms & Conditions and the Customer Booking Terms.

SCHEDULE 1 – VENDOR PRIVACY OBLIGATIONS

As a Vendor, you will receive and use Customers' personal information to manage Bookings and deliver your Vendor Services. You are responsible for complying with the Privacy Act 1988 (Cth) and any other applicable privacy laws when you handle that information.

You must:

• only use Customer personal information as reasonably necessary to manage the Booking, communicate about the Booking, comply with applicable law, or where authorised by the Customer;
• not sell Customer personal information, disclose it without authority, or use it for unrelated marketing;
• not retain Customer personal information longer than reasonably necessary; and
• not encourage or require a Customer to transact, communicate or pay off-Platform except as permitted under the Vendor Terms & Conditions and the Marketplace Payment Services Agreement. These obligations supplement Schedule 1 (Vendor Compliance Framework) of the Vendor Terms & Conditions.