Privacy Policy

GOODNESS GROUP GLOBAL PRIVACY POLICY

 

Last updated: July 2025

 

This Privacy Policy sets out how Goodness Group Global Pty Ltd (ACN 658 581 107), including its related entities such as Nexba Pty Ltd (ACN 146 712 496) (collectively, Goodness Group, we, our, or us), collects, holds, uses and discloses your personal information, and explains your rights and how you may exercise them.

 

We are committed to protecting your personal data in accordance with applicable privacy laws, including the Privacy Act 1988 (Cth) (Australia), the Australian Privacy Principles (APPs), and the General Data Protection Regulation (EU/UK GDPR).

 

Our head office is located at Suite 503 Roseby Street, Drummoyne NSW 2047. If you have any questions or concerns, contact us at crew@nexba.com.

 

SCOPE OF THIS POLICY

 

Please read this privacy policy ("Policy") carefully to understand our policies and practices regarding your Personal Data and how we will treat it. This Policy applies to individuals who interact with our services as consumers ("you"). This Policy explains how your Personal Data is collected, used, and disclosed by Us. It also tells you how you can access and update your Personal Data and make certain choices about how your Personal Data are used.

 

This Policy covers both our online and offline data collection activities, including Personal Data that We collect through our various channels such as websites, apps, third party social networks, Consumer Engagement Service, points of sale and events. Please note that We might aggregate personal data from different sources (website, offline event). As part of this, We combine Personal Data that were originally collected by related entities of the Goodness Group different or Goodness Group partners. Please see Section 9 for further information on how to object to this.

 

If you do not provide necessary Personal Data to us (We will indicate to you when this is the case, for example, by making this information clear in our forms), We may not be able to provide you with our goods and/or services. This Policy can change from time to time (see Section 11).

 

1. SOURCES OF PERSONAL DATA

 

We collect personal data from the following sources:

 

1. Directly from you (e.g., when you sign up, purchase, complete surveys);

2. Automatically through your use of our websites, apps and emails (e.g., cookies);

3. From third parties (e.g., payment processors, social media platforms);

4. Public sources or marketing partners.

 

1. PERSONAL DATA WE COLLECT

 

Types of personal data we may collect include:

 

1. Identity and contact information (e.g., name, address, email, phone);

2. Account details (e.g., login credentials);

3. Payment details (via our third-party payment processors);

4. Purchase history and delivery preferences;

5. Preferences and feedback from surveys or promotions;

6. Device, browser and usage data;

7. User-generated content (e.g., testimonials, competition entries);

8. Sensitive information (e.g., dietary information you voluntarily provide).

 

1. PERSONAL DATA OF CHILDREN

 

We do not knowingly solicit or collect personal data from children below the age of 18. If we discover that we have unintentionally collected personal data from a child below 18, we will remove that child’s personal data from our records promptly. However, Goodness Group may collect personal data about children below the age of 18 years of age from the parent or guardian directly, and with that person’s explicit consent.

 

We also do not knowingly solicit or collect personal data from children under the age of 18 for the specific purposes of marketing communications.

 

1. HOW WE USE YOUR PERSONAL DATA

 

What We use your Personal Data for

Our reasons

Our legitimate interests

Consumer service. We use your Personal Data for consumer service purposes, including responding to your enquiries. This typically requires the use of certain personal contact information and information regarding the reason for your inquiry (e.g. order status, technical issue, product question/complaint, general question).

1. Fulfilling contractual obligations

2. Legal obligations

3. Our legitimate interests

1. Improving and developing new products and services

2. Being more efficient

Contests, marketing and other promotions. With your consent (where required), We use your Personal Data to provide you with information about goods or services (e.g. marketing communications or campaigns or promotions). This can be done via means such as email, ads, SMS, phone calls and postal mailings to the extent permitted by applicable laws. Some of our campaigns and promotions are run on third party websites and/or social networks. This use of your Personal Data is voluntary, which means that you can oppose (or withdraw your consent in certain countries) to the processing of your Personal Data for these purposes.

1. With your consent (where required)

2. Fulfilling contractual obligations

3. Our legitimate interests

1. Working out which of our products and services may interest you and telling you about them

2. Defining types of consumers for new products or services

3. Administering competitions and promotions

Third party social networks. We use your Personal Data when you interact with third party social networking features, such as "Like" functions, to serve you with advertisements and engage with you on third party social networks. You can learn more about how these features work, the profile data that We obtain about you, and find out how to opt out by reviewing the privacy policies of the relevant third party social networks. We use your Personal Data to tailor and deliver communications to you, including via social media, based on your interests and your interactions with our products and services.

1. With your consent (where required)

2. Our legitimate interests

1. Working out which of our products and services may interest you and telling you about them

2. Defining types of consumers for new products or services

Personalisation (offline and online). With your consent (where required), We use your Personal Data (i) to analyse your preferences and habits, (ii) to anticipate your needs based on our analysis of your profile, (iii) to improve and personalise your experience on our Websites and apps; (iv) to ensure that content from our Websites/apps is optimised for you and for your computer or device; (v) to provide you with targeted advertising and content, and (vi) to allow you to participate in interactive features, when you choose to do so. For example, We remember your login ID/email address or screen name so that you can quickly login the next time you visit our site or so that you can easily retrieve the items you previously placed in your shopping cart. Based on this type of information, and with your consent (where required), We also show you specific Goodness Group content or promotions that are tailored to your interests. The use of your Personal Data is voluntary, which means that you can oppose the processing of your Personal Data for this purpose.

Order fulfilment We use your Personal Data to process and ship your orders, inform you about the status of your orders, correct addresses and conduct identity verification and other fraud detection activities. This involves the use of certain Personal Data and payment information.

1. Fulfilling contractual obligations

2. With your consent (where required)

3. Legal obligations

4. Our legitimate interests

1. Improving and developing new products and services

2. Being more efficient

3. Protect our systems, networks and staff

4. Compliance with legal obligations

Other general purposes (e.g. internal or market research, analytic, security). In accordance with applicable laws, We use your Personal Data for other general business purposes, such as maintaining your account, conducting internal or market research and measuring the effectiveness of advertising campaigns.

Legal reasons or merger/acquisition. In the event that Goodness Group or its assets are acquired by, or merged with, another company including through bankruptcy, we will share your Personal Data with any of our legal successors. We will also disclose your Personal Data to third parties (i) when required by applicable law; (ii) in response to legal proceedings; (iii) in response to a request from a competent law enforcement agency; (iv) to protect our rights, privacy, safety or property, or the public; or (v) to enforce the terms of any agreement or the terms of our Website.

1. Legal obligations

2. Our legitimate interests

1. Compliance with legal obligations

2. Protect our systems, networks and staff

 

We do not rely on legitimate interest where your rights override our purpose. You may object to any processing based on legitimate interest under Article 21 GDPR or APP 12, and we will assess your request promptly.

 

1. COOKIES AND SIMILAR TECHNOLOGIES

 

We use cookies and similar technologies to:

 

1. Operate our website and apps;

2. Understand user behaviour;

3. Personalise your experience;

4. Measure marketing effectiveness.

 

Consent is obtained via our cookie banner. You may manage cookies via your browser or our preference centre.

 

1. DISCLOSURE OF YOUR PERSONAL DATA

 

We may disclose your personal data to:

 

1. Internal teams within the Goodness Group for business administration, product development, or shared customer service functions;

2. Service providers acting as processors, such as logistics companies, couriers, fulfilment partners, cloud storage providers, payment gateways (e.g., Stripe), and CRM platforms (e.g., Klaviyo);

3. Marketing and analytics providers, including Meta (Facebook), Google, and similar partners, for targeted advertising, campaign optimisation, and performance measurement;

4. Our professional advisers including legal counsel, accountants, insurers, and auditors, who are bound by confidentiality obligations;

5. Regulatory, government and law enforcement authorities, where disclosure is required by law or is necessary to comply with legal obligations or respond to lawful requests;

6. A third party (and its professional advisers) in connection with any actual or proposed purchase, merger, acquisition, or restructure of all or part of our business, provided that such party is subject to confidentiality and data protection obligations.

 

All third-party recipients are required to maintain the confidentiality and security of your personal data and to use it only for the purpose for which we disclose it to them.

 

1. RETENTION OF PERSONAL DATA

 

We retain personal data for as long as is reasonably necessary for the purposes for which it was collected, including:

 

1. To fulfil your transactions and provide you with the services you have requested;

2. To comply with our legal and regulatory obligations (e.g., tax, product recall, consumer protection laws);

3. To resolve disputes, enforce our agreements, and protect our legal rights;

4. To maintain customer records and service history for business continuity and customer service.

 

Physical records containing personal data are securely stored onsite or at an authorised offsite facility and are either archived in accordance with our legal obligations or securely destroyed when no longer required.

 

When we no longer require your personal data for any lawful purpose, we will take reasonable steps to securely delete or anonymise the information. Where data is stored in backups, we ensure that retention policies are in place to minimise risk.

 

1. STORAGE AND/OR TRANSFER OF YOUR PERSONAL DATA

 

We store personal data using secure systems hosted in Australia and in countries outside Australia including (but not limited to) the United States, Singapore, Ireland and New Zealand.

 

Where we disclose or transfer your personal data outside of Australia or the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your privacy rights. These safeguards may include:

 

1. The use of countries recognised by the European Commission as providing an adequate level of protection (GDPR Art. 45);

2. The implementation of the European Commission’s Standard Contractual Clauses (GDPR Art. 46);

3. Your explicit and informed consent (GDPR Art. 49), where applicable.

Before any personal information is disclosed to overseas recipients, we take reasonable steps to ensure those recipients do not breach the APPs. Where required, we will obtain your informed consent.

 

Where We or our services rely on third-party SDKs, platform integrations, or cloud storage providers that transfer or store data overseas, we will disclose the countries involved in this Privacy Policy and ensure that those providers uphold equivalent data protection standards.

 

Goodness Group remains responsible for your personal data and requires any overseas data recipient to treat your personal information in a manner consistent with this Privacy Policy.

 

1. ACCESS TO YOUR PERSONAL DATA

 

You have the right to request:

 

1. access to your personal data;

2. correction of inaccurate or incomplete data;

3. a copy of your data in a portable format.

 

To make a request, email us at crew@nexba.com. We will respond within a reasonable time.

 

1. YOUR CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR PERSONAL DATA

 

We strive to give you control over your personal data. You may:

 

1. Opt out of marketing communications at any time via unsubscribe links, by adjusting your account settings or contacting us;

2. Manage cookies and similar technologies via your browser settings or our cookie management tool;

3. Withdraw your consent at any time (if processing is based on consent);

4. Object to processing based on legitimate interests (such as profiling for personalised marketing);

5. Adjust personalisation settings (e.g., push notifications, targeted advertising) via your app preferences or device settings;

6. Control access to location data through your mobile device;

7. Prevent the use of cookies and tracking technologies for advertising purposes via tools like https://www.youronlinechoices.com/au/your-ad-choices.

 

Even if you opt out of marketing, we may still send you essential administrative communications related to your account, purchases, or legal rights.

 

1. COMPLAINTS; DATA CONTROLLERS & CONTACTS

 

If you wish to ask any questions or make a complaint about how your personal information is being handed, please submit your complaint in writing, providing as much detail as possible. You can send your complaint via letter, email, or hand deliver it to The Privacy Officer. Contact details are as follows:

Goodness Group Global Pty Ltd

Suite 503 Roseby Street, Drummoyne NSW 2047

Email: crew@nexba.com

 

We will acknowledge and investigate any complaint about the way We manage Personal Data (including a complaint that We have breached your rights under applicable privacy laws).

 

You may also contact:

Office of the Australian Information Commissioner: www.oaic.gov.au

Your local EU or UK data protection authority

 

1. CHANGES TO THIS POLICY

 

If We change the way We handle your Personal Data, We will update this Policy. We reserve the right to make changes to our practices and this Policy at any time, please check back frequently to see any updates or changes to our Policy.

​