1. About This Policy
OursYours Pty Ltd ABN [to be inserted] ("OursYours", "we", "us") is committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy describes how we collect, hold, use, and disclose personal information.
2. Information We Collect
We collect the following categories of personal information:
- Identity data: Name, alias, email address, phone number, date of birth
- Entity data: ABN, ACN, entity name, entity type, licence numbers
- Financial data: Ownership stakes, funding commitments, trust distributions (we do not store bank account or credit card details)
- Usage data: Login history, device information, IP addresses, session data
- Communications: Messages sent through the platform's encrypted messaging system
- Documents: Files uploaded to the platform for property transactions
3. How We Collect Information
We collect personal information directly from you when you create an account, complete onboarding, submit documents, send messages, or interact with properties on the platform. We may also receive information from third-party data sources including the NSW Strata Hub, Domain API, and NSW Fair Trading for licence verification purposes.
4. Purpose of Collection
We use your personal information to:
- Provide and operate the OursYours platform
- Verify your identity and professional credentials
- Facilitate property ownership transactions and settlements
- Coordinate professional services (solicitors, conveyancers, property managers)
- Send transactional notifications and security alerts
- Maintain a tamper-evident audit trail for regulatory compliance
- Comply with applicable laws, including anti-money laundering obligations
5. Disclosure
We may disclose your personal information to: assigned professionals (solicitors, property managers, accountants) involved in your transactions; settlement coordinators; other owners within your ownership cluster (limited to alias and ownership stake only); government agencies where required by law; and our infrastructure providers who process data on our behalf under strict contractual obligations.
We do not sell your personal information. We do not share your data for marketing purposes with third parties.
6. Data Security
We protect your information through: mandatory multi-factor authentication (TOTP and biometric); encrypted messaging (pgcrypto); row-level security on all database tables; chain-hashed audit trails; session management with idle timeouts; leaked password detection; and rate limiting on authentication endpoints.
7. Data Retention
We retain personal information for as long as your account is active or as needed to provide services. Trust ledger records and contractor invoices are retained for a minimum of 7 years as required for regulatory compliance. Audit records are retained for 7 years. You may request deletion of your account and personal data, subject to our legal retention obligations.
8. Access and Correction
You have the right to access and correct your personal information at any time through your account settings. You may also request a copy of all data we hold about you ("data export") or request account deletion through the Settings page. We will respond to access and correction requests within 30 days.
9. Complaints
If you believe we have breached the APPs, you may lodge a complaint by contacting us at privacy@oursyours.com.au. We will investigate and respond within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be notified via the platform. Continued use of OursYours after changes constitutes acceptance of the updated policy.