Our Policy Statement

This Privacy Policy (“Policy”) describes how Mogul Stud Pty Ltd (000 331 840) and Jundu Pty Ltd (ACN 639 508 285), our partnerships, companies and trusts (“Mogul Stud/Jundu”, “we”, “our” or “us”) collect, store, use, disclose and manage your information.

Context

Mogul Stud/Jundu is a property business. Our key business activities include:

1. Property development; and
2. Investment in and leasing of business parks and shopping centres.

By providing personal information to us, you consent to our collection, use, storage, disclosure and management of your information in accordance with the Privacy Act 1988 (Cth) (“Privacy Act”) and this Policy.

Collection of Personal Information

The types of personal information Mogul Stud/Jundu collects about you depends on the nature of your touch points with Mogul Stud/Jundu. In this Policy, “personal information” has the meaning given to it in the Privacy Act.

We may collect the following personal information:

1. Information to verify your identity including, but not limited to, your name, address, email address and telephone number.
2. Financial information including bank accounts and credit card details.
3. Your image and/or voice and other personal information (such as your car licence plate) collected via CCTV surveillance systems installed in our business parks, shopping centres and sales offices.
4. Your device ID, device type, geo-location information, IP address, browsing information and any personal information that you may provide to us directly or indirectly via our websites and in our business parks, shopping centres and sales offices.
5. Any other personal information that may be required.

We will generally collect personal information:

1. Directly from you.
2. Indirectly from you, whether by phone, email, face-to-face meeting, online or social media interaction.
3. When you use our website(s).
4. Through your participation in our competitions or promotions.
5. When you visit our residential estates, business parks, shopping centres, sales offices or car parks through our CCTV systems.

We may also collect your personal information from third parties such as credit reporting bodies, law enforcement and government entities.

Sensitive Information

In some cases we may also collect “sensitive information”.

CCTV footage may contain sensitive information, and as such its use and release is governed by the Privacy Act.

What Happens if Mogul Stud/Jundu Cannot Collect Personal Information?

You are not required to provide personal information to us. However, we may not be able to provide our offerings to you.

Why Do We Collect, Store, Use and Disclose Personal Information?

We may collect, hold, use and disclose your personal information for the following purposes:

1. To provide and market offerings.
2. To communicate with customers.
3. To do business with customers.
4. To comply with our legal obligations.
5. To investigate issues which occur at our assets.
6. For security purposes.

We will not use or disclose your personal information for any purpose other than the purpose for which it was collected (or a related purpose) unless you have consented to that purpose or we are permitted to do so by law.

To Whom Does Mogul Stud/Jundu Disclose Personal Information?

We may disclose your personal information (including, in some circumstances, your sensitive information) for the purposes for which it was collected or related purposes to:

1. Affiliate retailers in our shopping centres.
2. Affiliate retailers in our business parks.
3. Social media channels.
4. Authorities and where required by law.
5. Partnerships, related parties and trusts of Mogul Stud/Jundu.
6. Other service providers who assist us in providing our offerings to you.

CCTV at Business Parks, Shopping Centres, Sales Offices, etc.

We use CCTV surveillance systems to monitor and record activities at Mogul Stud/Jundu shopping centres, business parks, sales offices and throughout our estates. The main purpose is to maintain a safe and secure environment for our customers.

This means we may use your personal information gathered from CCTV for security and risk assessment, loss prevention, incident investigation purposes and other purposes set out in this Policy, or as permitted by law.

We also use the data collected from our CCTV surveillance systems to monitor patterns of vehicle and foot traffic.

Direct Marketing

We may send you direct marketing communications and information about:

• Offerings and competitions that we consider may be of interest to you; and
• Third-party offerings.

These communications may be sent in various forms, in accordance with the Privacy Act and the Spam Act 2003 (Cth). By providing us with your contact details, you consent to Mogul Stud/Jundu and/or third-party service providers we engage sending you the direct marketing messages described above.

Opt-out

You may opt out of any or all direct marketing communications at any time by contacting the sender using the details set out in the communication (for example, an unsubscribe link).

Do We Disclose Personal Information Outside Australia?

We may disclose your personal information to the following overseas recipients:

1. Service providers who assist us in providing services or perform functions on our behalf, such as hosting and data storage providers.
2. Where we are required or authorised by law to do so.

We will take reasonable steps to ensure that any overseas recipient does not use the personal information for their own purpose and complies with the Privacy Act and this Policy.

Cookies

We handle personal information collected by cookies in the same way that we handle all other personal information as described in this Policy.

Security

We may hold your personal information in either electronic or hard copy form. The confidentiality and security of your information is very important to us, and we take reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure.

It is not possible to guarantee the security of your personal information. You should also be aware that email communications are not usually encrypted and should not be considered secure.

Where required by applicable law, we will notify you, and the Office of the Australian Information Commissioner and/or other relevant regulatory authorities, of data breaches affecting your personal information.

Third Party Links

Our website(s) may contain links to websites owned and operated by other organisations. When you click on one of these links, you are moving to another website. Unless stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites.

Access, Correction and Deletion of Personal Information

If you wish to seek access to, correct or delete your personal information that we hold about you, please contact us.

In the case of requesting access to CCTV footage, we may be unable to release CCTV footage if there is an investigation or legal action pending.

Access / Complaints

If you have any questions, or if you wish to make a complaint about our practices, please contact us:

Email: arybak@mcdonald.com.au
Post:
Privacy Officer
Mogul Stud/Jundu
Level 6, 131 Macquarie Street
Sydney NSW 2000

If you consider that we have been unable to satisfactorily resolve your concerns about our handling of your personal information, you can contact the Office of the Australian Information Commissioner:

Email: enquiries@oaic.gov.au

Visit the OAIC website.

Changes

We may update this Policy from time to time. The current version is available on our website at Carmel View – Box Hill or Carmel Village Shopping Centre.

Effective: 1 July 2026