Privacy Policy

Last Updated: January 13, 2026
Version: 2.0

Party 1 Name: Provider
Party 2 Name: Individual
Jurisdiction: Australia

1. Introduction

While providing the Services, Provider collects Personal Information about Individuals. This document describes how the Provider collects, stores, uses and discloses Personal Information.

2. Types of Information Collected

Provider may collect the following types of Personal Information about Individuals:

• names
• email addresses
• dates of birth
• computer device information
• location information
• IP addresses
• details of products or services that Provider has provided to Individual
• records of, or notes on communications between Provider and Individual
• whatever personal information is included in content Individuals post on the Service or the Provider’s website

3. How Information is Collected

Provider may collect Personal Information about Individuals using the following methods:

• from Provider’s website
• from Individual’s communications with Provider
• automated analysis of Individual’s use of Provider’s services
• through cookies and tracking technologies (see Section 14)

4. How Information is Held and Secured

Provider may hold Personal Information about Individuals digitally.

Provider ensures that Personal Information is protected from unauthorised access by:

• industry standard data security techniques (including encryption and secure servers)
• physical security surrounding hard copies of Personal Information

5. Data Retention and Deletion of Personal Information

5.1 Data Retention Periods

Provider retains Personal Information for the following periods:

• Account information: Retained while Individual maintains an active account and for 12 months after account closure
• Communication records: Retained for 3 years from last contact
• Payment records: Retained for 7 years to comply with Australian tax law
• Marketing data: Retained until Individual unsubscribes or requests deletion
• Service usage data: Retained for 2 years for analytics purposes
• Backup systems: Data may remain in backup systems for up to 90 days after deletion

Provider deletes Personal Information when it is no longer needed for the purposes outlined in this policy, except where Provider is required by law to retain certain information.

5.2 How to Request Deletion of Your Personal Information

Individuals may request deletion of their Personal Information at any time by:

• Emailing:
  privacy@oldview.com
  with the subject line “Data Deletion Request”
• Contacting: Provider’s privacy officer using the details in Section 9

When submitting a deletion request, please provide:

• your name and the email address associated with your account
• sufficient information to verify your identity
• specific details about what information you wish to delete (if applicable)

Upon receiving a valid deletion request, Provider will:

• confirm receipt of the request within 1 business day
• delete the Personal Information within 30 days, except where Provider is required by law to retain certain information
• send confirmation once the deletion is complete

Please note: Deletion of Personal Information may prevent Individual from accessing or using certain features of the Services. Some information may be retained in backup systems for up to 90 days or where required by law (such as payment records for tax purposes).

6. What Information is Used For

Provider may collect, use, hold and disclose Personal Information in order to:

• enable Individual to use Provider’s services
• perform analysis of the typical use of Provider’s services
• communicate with Individual
• send marketing and promotional messages to Individual (see Section 6.1)
• comply with the law
• process payments
• improve and develop the Services
• detect and prevent fraud or security issues
• enforce Provider’s terms of service

6.1 Marketing Communications and Opt-Out

Provider may send marketing and promotional communications to Individuals who have provided their contact information or who have consented to receive such communications.

If you no longer wish to receive marketing communications, you may opt-out by:

• clicking the “unsubscribe” link in any marketing email
• emailing privacy@oldview.com with “Unsubscribe” in the subject line
• adjusting your communication preferences in your account settings (if available)

Even after unsubscribing from marketing communications, you will still receive transactional emails necessary for the Services, such as:

• account notifications and security alerts
• password resets and verification emails
• service updates and changes to this privacy policy
• billing and payment confirmations

7. Disclosures of Information

Provider may disclose Personal Information to:

• Provider’s employees: For service delivery, customer support, and internal operations
• Third party service providers: Including cloud hosting providers (such as AWS or Microsoft Azure), email service providers, analytics providers, and customer relationship management systems
• Payment systems operators: Such as Stripe, PayPal, or other payment processors for processing payments
• Business partners: For joint services or features, only with Individual’s consent or as necessary to deliver requested services
• Meta platforms: If Individual uses Meta login credentials or shares content to Meta services
• Courts of law: When required by legal process or court order
• Regulatory bodies: When required to comply with legal obligations or regulatory requirements
• Professional advisors: Such as lawyers, accountants, and auditors
• Potential buyers: In the event of a sale, merger, or acquisition of Provider’s business (Individuals will be notified if this occurs)

Provider only shares Personal Information with third parties when necessary for the purposes outlined in this policy, and requires third parties to protect Personal Information in accordance with this policy and applicable law.

8. Disclosing Information Outside Australia

Provider may disclose personal information to organisations outside of Australia such as:

• cloud storage providers located in the United States
• email service providers located in various jurisdictions
• payment processors located in the United States and Europe
• analytics providers located in various jurisdictions

By using the Services, Individuals consent to the disclosure of their Personal Information to overseas recipients.

Provider will make a good faith effort to ensure that overseas recipients deal with Personal Information in a way that is consistent with the principles of the Privacy Act, but Individuals will not have the same rights in relation to overseas recipients who handle their information as they would with Australian recipients.

Where possible, Provider selects overseas service providers that have equivalent privacy protections to those required under Australian law.

9. Privacy Contact

Questions or complaints from Individuals relating to Provider’s use of Personal Information should be directed to Provider’s privacy officer. They are contactable at:

• Email: privacy@oldview.com
• Subject line: “Privacy Inquiry” or “Privacy Complaint”

When an Individual communicates a complaint to Provider, Provider will:

• acknowledge receipt within 1 business day
• investigate the complaint thoroughly
• respond with an outcome within 7 days if the nature of the complaint permits it, or provide an update on the investigation timeline if more time is needed

Provider’s privacy officer will make a reasonable effort to address complaints or questions of Individuals, and where the privacy officer is unable to do so, the privacy officer will attempt to explain why it is unable to do so.

If an Individual is unsatisfied with the outcome of the complaints process, Individual may complain to the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au.

10. Your Rights Regarding Personal Information

Under Australian privacy law, Individuals have the right to:

• Access: Request a copy of Personal Information held about them
• Correction: Request correction of inaccurate, outdated, incomplete, or misleading information
• Deletion: Request deletion of Personal Information (see Section 5.2)
• Restrict Processing: Request limitations on how their data is used in certain circumstances
• Object: Object to certain uses of their Personal Information, including marketing communications and automated decision-making
• Data Portability: Request their data in a structured, commonly used, and machine-readable format where technically feasible
• Withdraw Consent: Withdraw consent for data processing that was based on consent (note: this may affect your ability to use certain features)

10.1 How to Exercise Your Rights

To exercise any of these rights, contact Provider at privacy@oldview.com with:

• your name and the email address associated with your account
• specific details of your request
• proof of identity for security purposes (such as answering security questions or providing account verification details)

Provider will respond to requests within 30 days. If Provider requires more time, Provider will notify you and provide an estimated timeframe.

10.2 Fees

Provider does not charge a fee for processing requests to access or correct Personal Information. However, Provider may charge a reasonable fee if:

• the request is manifestly unfounded or excessive
• the request requires significant resources to fulfill
• the Individual requests additional copies of their information

Provider will notify you of any fees before processing your request.

11. Unknowingly Collected Information

Provider acknowledges that from time to time, Provider may come into possession of Personal Information without being aware of it, for example, from other Organisations using Provider’s service to store data.

Provider will make a good faith effort to deal with such Personal Information in accordance with this privacy policy and the principles in the Privacy Act.

If you believe Provider has collected your Personal Information without your knowledge, please contact Provider at privacy@oldview.com.

12. Disclosures During Use of the Services

During the use of the Services, Individuals may disclose Personal Information to Organisations using the Services. Provider will make a good faith effort to ensure that such disclosures are clear to Individuals, but how those Organisations handle Personal Information is beyond the control of Provider.

Individuals should review the privacy policies of any Organisations they interact with through the Services.

13. Changes to This Policy

Provider may change this Privacy Policy (including any terms or practices described herein) by notifying Individual in writing or by email with 7 days notice.

Changes will also be posted on Provider’s website with the date of the last update.

If Individual does not agree to the changes, Individual must:

• cease using the Services; and/or
• request deletion of their Personal Information in accordance with Section 5.2

Continued use of the Services after the notice period constitutes acceptance of the updated Privacy Policy.

14. Cookies and Tracking Technologies

Provider uses cookies and similar tracking technologies (such as web beacons and pixel tags) on its website and in the Services to:

• remember your login credentials and preferences
• analyze how users interact with the Services
• improve the functionality and performance of the Services
• provide personalized content and recommendations
• measure the effectiveness of marketing campaigns

14.1 Types of Cookies Used

• Essential cookies: Necessary for the Services to function properly
• Analytics cookies: Help Provider understand how users use the Services
• Functional cookies: Remember your preferences and settings
• Marketing cookies: Track your activity to provide relevant advertisements

14.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• view what cookies are stored
• delete cookies
• block cookies from specific websites
• block all cookies

Please note that disabling certain cookies may affect your ability to use some features of the Services.

For more information about managing cookies, visit your browser’s help section.

15. Children’s Privacy

The Services are not intended for individuals under the age of 13 (or the applicable age of digital consent in their jurisdiction, which is 16 in Australia under the Privacy Act).

Provider does not knowingly collect Personal Information from children without appropriate parental or guardian consent.

If Provider becomes aware that it has collected Personal Information from a child without proper consent, Provider will:

• delete that information promptly
• terminate any associated account
• notify the parent or guardian if contact information is available

If you believe Provider has collected information from a child inappropriately, please contact privacy@oldview.com immediately.

16. Security Incidents

In the event of a data breach or security incident that affects Personal Information, Provider will:

• take immediate steps to contain and investigate the incident
• assess the risk to affected Individuals
• notify affected Individuals and the OAIC as required by law when there is a likely risk of serious harm
• provide information about what happened and steps Individuals can take to protect themselves

17. Definitions

Agreement

Means the agreement arising between the parties in accordance with this document and the other documents referred to by this document.

Organisation, Organisations

Means an organisation using the Services.

Personal Information

Means any information that is categorised as “personal information” under privacy law, including information or an opinion about an identified individual, or an individual who is reasonably identifiable.

Privacy Act

Means The Privacy Act 1988 (Cth) and includes the Australian Privacy Principles.

Service, Services

Means the application called OldView and any related services provided by Provider.

Provider

Means [Your Company Name/Legal Entity Name].

Individual

Means a person who uses the Services or whose Personal Information is collected by Provider.

18. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or Provider’s privacy practices, please contact:

Privacy Officer
Email: privacy@oldview.com
Subject: Privacy Inquiry

Company: [Your Company Name]
Address: [Your Business Address]
ABN: [Your ABN if applicable]