What we collect
Personal information types we collect from operators and their guests, by category — contact, order, payment, technical.
Legal · Privacy Policy
Privacypolicy.
What we collect, why, where we keep it, and your rights over it. The full policy is with our Australian legal counsel ahead of general availability. Until it publishes, this page explains the operating posture we already follow under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Status
Under reviewDraftingunder counsel · APP-aligned posture in effect
Operating posture today
What we already do, before the policy publishes.
The published policy will document the posture we already operate under. We don't wait for the document to behave — we behave first, then document.
- Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles guide our handling of personal information.
- Per-tenant isolation at the database layer means one operator's data never touches another's by construction.
- Personal information is collected only where there is a clear operational reason — bookings, payments, identity, communications.
- Audit logs record who accessed what, when, and from where — exportable to the operator on request.
What the published policy will cover
The structure is drafted.
These are the sections the policy will contain when it goes live. Pilot operators see the data-processing addendum inside the bilateral contract today.
Why we collect it
Specific operational purposes — taking orders and bookings, processing payments, identifying customers across channels, sending transactional comms.
How long we keep it
Retention windows by data type. Dormancy purge after a fixed window of inactivity, in line with APP 11.2.
Where we keep it
Hosting region, sub-processors, and cross-border transfers. Australian region by default.
Sub-processors
Stripe, Supabase, Upstash, accredited integration providers — listed by name with their role.
Your rights
Access, correction, deletion, portability, and complaint — under the Australian Privacy Principles and the Privacy Act.
Children
We don't knowingly collect personal information from children under 15.
Contact
How to reach the privacy officer at Divergent Digital Studio and the timeline for responses.
Talk to the privacy officer
A real person reads every privacy request.
If you have a question about your personal information, want a copy, or want it deleted — email the privacy officer directly. We respond inside one business day.
Divergent Digital Studio Pty Ltd · Privacy Act 1988 (Cth) · APP-aligned