Privacy Policy

Last Updated: 7 July 2025

This Privacy Policy explains how personal information is collected, used, stored, disclosed, retained, and deleted by STRATAFY PTY LTD (ACN 619 849 517) (“Stratafy”, “we”, “us”, “our”) in connection with your access to and use of the Stratafy native mobile application, web platform, and white-labelled solutions (collectively, the “Services”).

We are committed to responsible privacy practices and compliance with the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) (“Privacy Act”).

By accessing or using the Stratafy Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, disclosure, and handling of personal information as described herein.

We may modify this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page. Continued use of the Services after changes are made constitutes acceptance of the updated policy.

1. What Is Personal Information?

“Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether recorded in a material form or not.

Examples include (but are not limited to):

Name
Address
Telephone number
Email address

Personal information does not include aggregated or de-identified information, which is information that cannot reasonably be used to identify an individual. We may collect, use, and disclose aggregate or de-identified information without restriction.

2. Types of Personal Information We Collect

We may collect the following categories of personal information:

Identity Data

First name, middle name, last name, maiden name, title, date of birth, and gender.

Contact Data

Billing address, delivery address, email address, and telephone numbers.

Financial Data

Bank account details and payment card information processed only through third-party payment processors. Stratafy does not store full payment card details.

Transaction Data

Details of payments to and from you and information about products and services purchased or provided.

Technical and Usage Data

Internet Protocol (IP) address, login data, device identifiers, browser type, operating system, session data, geolocation data, page views, analytics, and interactions with the Services, including via cookies and similar technologies.

Profile Data

Usernames, passwords, profile images, preferences, feedback, support requests, and content created, uploaded, sent, received, or shared through the Services.

Interaction Data

Information you provide when participating in surveys, promotions, events, or other interactive features.

Marketing and Communications Data

Preferences for receiving marketing communications and records of communications with us.

Professional Data

Employment or application-related information, including professional history and experience.

Sensitive Information

Sensitive information includes information about racial or ethnic origin, political opinions, religious beliefs, trade union membership, sexual orientation, criminal records, health information, or biometric data.

We do not actively request sensitive information. If collection of sensitive information is required, we will obtain your explicit consent, unless otherwise permitted or required by law, and will only use it for lawful and authorised purposes.

3. How We Use Personal Information

We use personal information for purposes including:

Providing and operating our Services
Processing transactions and payments
Responding to enquiries, support requests, and complaints
Monitoring, analysing, and improving our Services
Personalising user experiences
Sending service-related communications, confirmations, security alerts, and administrative messages
Conducting internal analytics and operational reporting
Fulfilling legal, regulatory, compliance, and contractual obligations
Any purpose disclosed at the time of collection
Any purpose with your consent
Any purpose authorised or required by law

We may receive confirmation when you open emails from https://stratafyconnect.com if your device supports such functionality, to help improve communication effectiveness.

4. Direct Marketing

We may use personal information to provide marketing communications, promotional offers, and market research via email, SMS, telephone, online advertising, or other lawful means.

We will only send direct marketing communications where:

You have consented; or
It is otherwise permitted by law

You may opt out of marketing communications at any time by following the unsubscribe instructions or contacting us at lifestyle@stratafyconnect.com. Opting out of marketing does not affect service-related communications.

5. Disclosure of Personal Information to Third Parties

We do not sell personal information.

We may disclose personal information:

To service providers and vendors who support our Services under confidentiality and security obligations
With your consent
To comply with legal obligations, court orders, subpoenas, or lawful requests
To enforce our policies and agreements
In connection with corporate transactions such as mergers, acquisitions, or asset sales
As otherwise authorised or required by law

We take reasonable steps to ensure third parties handle personal information in accordance with the Privacy Act and this Privacy Policy.

6. Overseas Disclosure

Personal information may be disclosed outside Australia only to Stratafy subsidiaries or trusted partners in an aggregated or limited manner for cross-business functionality.

Where overseas disclosure occurs, we take reasonable steps to ensure compliance with the Australian Privacy Principles unless an exception applies.

7. Google Gmail API & Client Email Integration

Where you authorise Stratafy to access Gmail data:

Access is limited to enabling email functionality (read, send, process messages)
Gmail data is not used for advertising
Gmail data is not sold or shared except as required to provide the service or comply with law
Human access is restricted and permitted only for security, compliance, or authorised support purposes
Any internal use is aggregated or anonymised where possible

8. Data Retention, Deletion & Your Rights (SOC 2)

Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including legal, accounting, audit, compliance, security, and dispute resolution requirements.

Right to Access and Deletion

You may request access to or deletion of personal information we hold about you. Deletion requests are subject to legal or operational retention obligations.

How to Submit a Request

Email lifestyle@stratafyconnect.com and include:

Full name
Account email
Description of request
Proof of identity if required

Request Handling

Requests are logged, reviewed, verified, and processed in accordance with our internal security and compliance procedures. We aim to respond within 30 days.

9. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorised access, disclosure, alteration, or destruction.

Security measures include:

Secure servers and encrypted data transmission (SSL/TLS)
Role-based access controls
Logging and monitoring of system access
Secure deletion and anonymisation practices

No method of transmission or storage is completely secure. To the extent permitted by law, we exclude liability for unauthorised access beyond our reasonable control.

10. Cookies & Analytics

We use cookies and similar technologies to enhance functionality, analyse usage, and improve user experience. You may control cookie preferences via your browser settings.

11. Links to Other Sites

Our Services may link to third-party websites. We are not responsible for the privacy practices of those sites. Please review their privacy policies separately.