1. Who this policy covers

This policy applies to visitors and users of our website located in Australia and overseas who interact with us online (for example, by submitting a contact form, subscribing to updates, or browsing pages that use cookies).

If you are an employee of an organisation, separate workplace privacy obligations may apply to employee records under Australian law. This website policy is focused on our public website interactions.

2. What is “personal information”?

In Australia, personal information generally means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Examples we may collect include your name, email address, phone number, organisation (if you provide it), and messages you send us. We may also collect technical information that can be linked to you in some circumstances (such as IP address and device/browser details) through cookies and similar technologies.

We do not intend to collect sensitive information (such as health information). Please do not submit sensitive information through our website unless we specifically request it and explain why it is required.

2A. Australian Privacy Principles (APPs)

We are structured to handle personal information consistently with the 13 Australian Privacy Principles in Schedule 1 to the Privacy Act 1988 (Cth). The following summary explains, in plain language, how our practices relate to each principle. It is a guide only — the legal text and OAIC guidance prevail if there is any inconsistency.

• APP 1 — Open and transparent management: We maintain this Privacy Policy, a Cookie Policy, clear contact details, and (where relevant) on-page notices about collection.
• APP 2 — Anonymity and pseudonymity: Where lawful and practicable, you may browse without telling us who you are; we may be unable to answer some enquiries without contact details.
• APP 3 — Collection of solicited personal information: We collect personal information only by lawful and fair means and, where required, only with your consent or as otherwise permitted under the Privacy Act.
• APP 4 — Unsolicited personal information: If we receive personal information we did not solicit, we will destroy or de-identify it where we are not entitled to retain it.
• APP 5 — Notification of collection: We aim to ensure you are aware of who is collecting information, why, and other matters required by the APPs at or before collection (including through this policy and collection points such as forms).
• APP 6 — Use or disclosure: We use or disclose personal information for the primary purposes set out in this policy, for related secondary purposes you would reasonably expect, or as otherwise authorised by law.
• APP 7 — Direct marketing: Commercial electronic messages are handled as described under “Direct marketing (email)” and in line with the Spam Act 2003 (Cth) where applicable.
• APP 8 — Cross-border disclosure: If we disclose personal information to overseas recipients (for example, cloud or analytics providers), we take steps consistent with APP 8, which may include contractual safeguards, your consent, or reliance on other permitted bases.
• APP 9 — Government related identifiers: We do not use Commonwealth government identifiers (such as Medicare numbers) as our own identifier, and we do not intentionally collect them through this public website.
• APP 10 — Quality of personal information: We take reasonable steps to ensure personal information is accurate, up-to-date, and complete for the purpose of use.
• APP 11 — Security of personal information: We take reasonable steps to protect personal information as described under “Storage, security and retention”.
• APP 12 — Access: You may request access to personal information we hold about you, subject to exceptions in the Privacy Act.
• APP 13 — Correction: You may request correction of personal information that is inaccurate, out-of-date, incomplete, irrelevant, or misleading.

The Office of the Australian Information Commissioner publishes the official APP text and guidance: Australian Privacy Principles (OAIC).

We treat the APPs as our baseline for website data: openness (APP 1) through this policy and linked notices; fair collection (APPs 3–5) at forms, cookie controls, and AI features; limited use and disclosure (APP 6) for the purposes stated here; oversight of overseas disclosure (APP 8) where cloud or AI vendors process data outside Australia; and security, access and correction (APPs 11–13) as described below.

Important note about health-related content (Google Ads / AU expectations)

Our content focuses on general workplace habits (movement, breathing, focus, ergonomics) and is intended for education and self-help in everyday office contexts.

We do not promise specific health outcomes, and we do not provide diagnoses or treatment. If you have pain, injury, or a medical condition, seek advice from a qualified health professional.

3. How we collect personal information

We typically collect personal information:

• Directly from you, when you submit forms, email us, or otherwise contact us.
• Automatically, when you use our website (for example, via cookies, analytics tools, server logs, and similar technologies).
• From third parties only where permitted by law and where it is reasonable in the circumstances (for example, if you use an integrated service that shares limited technical data with us).

3A. Artificial intelligence (AI), synthetic media and automated systems (transparency — 2026 expectations)

In Australia and globally, expectations for algorithmic transparency have tightened: people should know when automated or AI systems shape what they see (including synthetic product or interior imagery) or what they read in a chat-style interface. The following applies to Tharlonnshyx.world and the Office Harmony content brand and is intended to meet APP 1 (open and transparent management) and APP 5 (notification of collection) in plain language.

AI-assisted or synthetic imagery (interiors, murals, panelling, and product-style shots)

We may use generative AI, editing automation, or compositing tools to produce or adapt visuals — for example hero images, lifestyle scenes, office interiors, wall murals, acoustic panels, feature walls, or other décor shown “in situ”. Those images may be wholly or partly synthetic. Unless we explicitly state that an image is an unedited photograph of a specific real property, person, or stocked product, you must treat it as marketing illustration only.

Not for purchase decisions alone: If you are choosing materials for a fit-out (murals, prints, finishes, furniture), rely on written specs, swatches, supplier documentation, contracts, and direct verification — not on website renders or AI-assisted room scenes.

AI chat, bots, or “consultation-style” assistants

If we offer a chat window, bot, automated Q&A, or similar feature described as helpful or “consultation-style”, we will label it clearly as AI-assisted / not human and identify the platform or vendor where practical. That interaction is not a regulated professional consultation (it is not medical, allied health, legal, financial, WHS, or personalised ergonomic assessment).

Models can hallucinate, reflect bias, or use out-of-date information. Do not rely on AI output for safety-critical, clinical, or compliance decisions.

Do not type sensitive personal information into an AI chat (including detailed health symptoms, diagnoses, government identifiers, or account numbers) unless we have given a specific collection notice for that feature explaining retention, overseas disclosure, and training use, and you choose to continue.

Text you send may be personal information under the Privacy Act. We and subprocessors will handle it under the APPs (notably APPs 5, 6, 8, 11, 12 and 13). When a feature launches, we will name major providers and retention practices here or in a supplementary page linked from the chat.

Automated decision-making

We do not intend to use personal information collected through this public website to make solely automated decisions that produce legal or similarly significant effects concerning you. If we introduce such processing, we will explain the logic, outcome, and human review options before it applies, consistent with APP expectations and OAIC guidance on automated decision-making.

4. Why we collect, use and disclose personal information

We collect, hold, use and disclose personal information for the primary purposes of operating our website and responding to enquiries, including to:

• provide information you request and communicate with you;
• send newsletters or updates where you have consented or where otherwise permitted under Australian law (including the Spam Act 2003 (Cth));
• maintain and improve website security, performance, and user experience;
• understand website usage in aggregated or de-identified form where possible;
• comply with legal obligations and assist law enforcement where required or authorised by law;
• operate, monitor, and improve AI-assisted or automated features only where described in this policy (including section 3A) and consistent with the APPs.

If we need to use or disclose your personal information for a purpose that is not reasonably expected, we will take steps required by the APPs (for example, seeking consent where appropriate).

5. Direct marketing (email)

Where we send commercial electronic messages to Australian recipients, we will comply with the Spam Act (including requirements for consent, identification, and a functional unsubscribe mechanism where applicable).

You may opt out of marketing communications at any time by using the unsubscribe instructions in the message or by contacting us.

6. Cookies and similar technologies

Our website may use cookies and similar technologies. For more detail, see our Cookie Policy.

Depending on your browser settings, some cookies may be placed on your device when you visit our site. Cookie-related information may constitute personal information under Australian privacy law where it can reasonably identify you.

6A. Online advertising, analytics and conversion measurement (if enabled)

If we use advertising or analytics products (for example, Google Ads, Google Analytics, or similar platforms), those products may use cookies, pixels, or other technologies to measure interactions with ads and website usage.

Where required by Australian privacy law, we will provide clear information about these technologies and obtain consent for any non-essential uses (such as optional marketing/analytics), consistent with our Cookie Policy.

Third-party platforms may process information in accordance with their own terms and privacy notices. Where personal information is disclosed to overseas recipients, we will handle this in line with the APPs.

Google Ads context: Advertising platforms may use data to measure conversions, cap frequency, or support audience features depending on your cookie choices and account settings. Google sets rules for advertisers and landing pages (for example, honest messaging, restricted categories, and user safety). See Google Ads policies and How Google uses information from sites that use its services. You can also use Google’s ad settings tools (for example, Ads Settings) to influence some personalised advertising on Google properties, separate from our website cookie banner.

Our public content is general workplace education, not personalised health services; we still aim to avoid collecting or inferring sensitive health data for ad targeting and to keep ad messaging aligned with this Privacy Policy and our Terms of Use (representations & ACL).

7. Disclosure of personal information

We may disclose personal information to:

• service providers who help us host, secure, analyse, or operate the website (for example, hosting providers or analytics providers), subject to confidentiality and security expectations;
• providers of AI, automation, or customer-messaging tools where we use those services and your information is processed as part of providing the feature (only as described in section 3A and any feature-specific notice);
• professional advisers where required (for example, insurers or lawyers);
• law enforcement, regulators, or courts where required or authorised by law.

Some service providers may be located outside Australia. If we disclose personal information to overseas recipients, we will take steps consistent with the APPs (for example, ensuring appropriate protections or obtaining your consent where required).

8. Storage, security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Security measures may include access controls, secure hosting environments, and monitoring, but no online service can be guaranteed as fully secure.

We retain personal information only for as long as needed for the purposes described in this policy, unless a longer retention period is required or permitted by Australian law.

9. Access, correction, and anonymity

Under the APPs, you may request access to personal information we hold about you and request corrections if you believe it is inaccurate, out-of-date, incomplete, irrelevant, or misleading.

We will respond to requests within a reasonable period. In some cases, we may refuse access or correction where permitted by law (for example, where a legal exception applies). If we refuse, we will generally explain why and outline your options.

Where lawful and practicable, you may interact with us without identifying yourself, but we may be unable to respond fully without certain details (for example, an email address to reply to an enquiry).

10. Notifiable Data Breaches (Australia)

If we become aware of unauthorised access, disclosure, or loss of personal information that is likely to result in serious harm to individuals, we will assess the incident under the Notifiable Data Breaches (NDB) scheme and comply with applicable notification obligations under the Privacy Act.

11. Complaints

If you have concerns about how we handle your personal information, please contact us first using the details below. We will acknowledge and respond within a reasonable timeframe.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC). The OAIC’s website is https://www.oaic.gov.au/.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised when changes are made. Continued use of the website after updates may indicate acceptance of the revised policy, subject to legal requirements.