Privacy Policy.

This policy explains how Millibeam Pty Ltd collects and uses personal information through millibeam.com. It applies Australian privacy law and, for visitors in the EU, EEA, UK and Switzerland, the EU and UK GDPR.

1. Who we are and how to contact us

Millibeam Pty Ltd (ABN 15 646 980 529), Suite 145, 4 Cornwallis Street, Eveleigh NSW 2015, Australia ("MILLIBEAM", "we", "us") decides why and how your personal information is used. That makes us the "controller" under the EU GDPR and the UK GDPR, and an "APP entity" under the Australian Privacy Act 1988 (Cth).

• Privacy contact: info@millibeam.com, or by post at the address above. Marina Lyshova, VP Marketing, is our named contact for privacy matters.
• Scope: this policy covers millibeam.com and the forms, emails and events run from it. It does not cover our shop at shop.millibeam.com, which will have its own notice, or other websites we link to.

2. What information we collect

We collect only what we need to run the website and respond to people who contact us.

• What you give us: your name, company, work email, phone number if you provide one, and the details of your message or request (for example part numbers or a project description). This comes from our contact, datasheet, catalogue, newsletter and event forms, and from emails and calls.
• How you heard about us: the optional "How did you hear about us?" answer on our forms.
• Marketing preferences: whether you ticked the box to receive product updates.
• What your browser shares, only if you accept analytics cookies: the page you landed on, the site that referred you, campaign tags in the link (UTM values), pages viewed, approximate location, device and browser type, and your IP address. We store the first-visit details with your enquiry so we know which activity led to it.
• Company-level visitor data: if you accept analytics cookies, our visitor-identification service may match your IP address to a company, not to you personally.
• LinkedIn lead forms: details you submit in our LinkedIn ads, which LinkedIn passes to us.

We do not knowingly collect sensitive categories of data, and our website is not aimed at children. If you give us someone else's details, please make sure they know and are happy for you to do so.

3. Why we use it and our lawful bases

Under the EU and UK GDPR we need a legal basis for each use. Ours are:

Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time (see section 8). Under the Australian Privacy Act, we collect and use your information for these purposes because it is reasonably necessary for our business, and you consent to it by providing it. If you choose not to give us your details, we may not be able to respond to you.

4. Cookies and similar technologies

If you are in the EU, EEA, UK or Switzerland, we set only the cookies the site needs to work until you choose otherwise. A banner lets you accept all, reject non-essential cookies, or choose by category. Visitors elsewhere are told about cookies here and can change their choice at any time. You can reopen your choices at any time with the COOKIES link at the bottom of every page, and withdrawing consent removes our cookies.

Cookie names and lifetimes are set by the providers and may change over time.

You can also block cookies in your browser settings. Some features may not work if you do.

5. Who we share it with

We do not sell your personal information. We share it only with:

• Service providers acting on our instructions: Webflow (website hosting and forms), Cloudflare (website delivery and the service that passes form entries to our CRM), Attio (our customer database), Google (analytics), LinkedIn (advertising measurement and lead forms) and Leadfeeder (visitor identification).
• Our related companies and professional advisers where needed to run the business or get legal, financial or other advice.
• Authorities, where the law requires it or to protect safety and legal rights.
• A buyer or investor, if the business or its assets are sold or restructured, subject to the same protections.

We require each provider to protect your information and use it only for the services they provide to us. Social media platforms and other sites you use to talk to us are separate controllers, and we cannot control what other users do with information you post there.

6. International transfers

We are based in Australia, and our providers operate in Australia, the United States, the European Union and other countries. So your information may be transferred outside the EU, EEA and UK. Where it is, we rely on safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or on a provider's participation in the EU-US Data Privacy Framework where that applies. You can ask us for a copy of the safeguards in place using the contact details in section 1.

The European Commission has not issued an adequacy decision for Australia, so we rely on the safeguards above.

For Australian law, before disclosing information overseas we take reasonable steps to make sure the recipient handles it consistently with the Australian Privacy Principles.

7. How long we keep it

When we no longer need information, we delete it or remove anything that could identify you.

8. Your rights

Depending on where you live, you have these rights over your personal information:

• Access a copy of the information we hold about you.
• Correct anything that is wrong or incomplete.
• Delete your information, in some cases.
• Restrict how we use it, in some cases.
• Object to uses based on our legitimate interests, and to direct marketing at any time.
• Port information you gave us to you or another provider, where it applies.
• Withdraw consent at any time. This does not affect what we did before you withdrew. Use the COOKIES link for cookies, the unsubscribe link in any email, or contact us.

To use any of these rights, email info@millibeam.com. We may ask you to confirm who you are, and we aim to reply within one month (30 days under Australian law). Access is free unless a request is clearly excessive.

We do not make decisions about you using only automated processing that has legal or similarly significant effects.

Complaints. Please contact us first so we can put it right. You can also complain to your supervisory authority, such as the UK Information Commissioner's Office, the data protection authority in your EU country, or the Office of the Australian Information Commissioner (oaic.gov.au).

9. Security, changes and effective date

We use organisational and technical measures to protect personal information from misuse, loss, and unauthorised access, change or disclosure. Access is limited to people who need it. No internet service is completely secure, so we cannot guarantee absolute security. If a breach is likely to put your rights at risk, we will tell the people affected and the regulators where the law requires it.

We may update this policy from time to time. The current version is always on this page, and we will note material changes at the top. This policy takes effect on 5 November 2026.