Privacy Policy

1. Our Commitment to Privacy

OziCollect is committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use our platform.

2. Information We Collect

We collect personal information that is reasonably necessary to provide our services, including:

• Account information: name, email address, profile photo
• Payment information: bank account details (held by Stripe — we do not store card numbers)
• Transaction data: listings, orders, purchase history, shipping details
• Communications: messages sent through our platform, support enquiries
• Usage data: pages visited, device type, browser, IP address, session duration
• User-generated content: photos and descriptions you upload to listings or Showcase

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Process transactions and facilitate payments via Stripe
• Send order confirmations, shipping updates, and support responses
• Personalise your marketplace experience and recommendations
• Detect and prevent fraud, abuse, and prohibited activity
• Comply with legal obligations under Australian law
• Improve our platform through analytics and user feedback

4. Sharing Your Information

We do not sell your personal information. We may share it with:

• Stripe: to process payments and manage seller payouts
• AfterShip: to provide shipment tracking services
• Supabase: our database and infrastructure provider
• Vercel: our hosting provider
• Law enforcement: where required by Australian law or court order

All third-party providers are required to handle your data securely and in accordance with applicable privacy laws.

5. Cookies & Tracking

We use cookies and similar technologies to keep you logged in, remember your preferences, and analyse how our platform is used. You can disable cookies in your browser settings, but this may affect the functionality of OziCollect. We do not use cookies for third-party advertising purposes.

6. Data Storage & Security

Your data is stored on servers located in Australia (Sydney, AWS ap-southeast-2) via Supabase. We implement industry-standard security measures including encryption in transit (TLS), Row Level Security on our database, and access controls. While we take reasonable precautions, no system is completely secure and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 7 years to comply with Australian tax and financial record-keeping obligations. You may request deletion of your account and associated data by contacting us, subject to legal retention requirements.

8. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your data (subject to legal obligations)
• Opt out of marketing communications at any time
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any of these rights, contact us at support@ozicollect.com.au. We will respond within 30 days.

9. Children's Privacy

OziCollect is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately and we will take steps to delete it.

10. Cross-Border Data Transfers

Some of our third-party service providers (including Stripe and Vercel) may process data outside Australia. We take reasonable steps to ensure these providers maintain privacy standards consistent with the Australian Privacy Principles.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or an in-app notice. The date at the top of this page indicates when the policy was last revised.