1. Introduction
Aecura ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Aecura platform, including our website, applications, and related services (collectively, the "Service").
We are an Australian business and comply with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs). We also respect the privacy rights of users in other jurisdictions.
By using the Service, you consent to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with this Policy, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
We collect information you voluntarily provide when using the Service, including:
- Account Information: When you register for an account, we collect your email address, username (for paid accounts), password, and any optional profile information you choose to provide.
- Collection Data: Information about items in your collection, including item names, descriptions, quantities, condition, acquisition details, images, and notes.
- Payment Information: When you subscribe to a paid plan, our payment processor (Paddle) collects payment details. We do not directly store your full credit card numbers or banking details.
- Communications: When you contact us for support or feedback, we collect your name, email address, and the content of your communications.
- User-Generated Content: Any content you create or share through the Service, including public exhibits and comments.
2.2 Information Collected Automatically
When you access the Service, we automatically collect certain information, including:
- Device Information: Device type, operating system, browser type, unique device identifiers, and mobile network information.
- Log Data: IP address, access times, pages viewed, referring URL, and actions taken on the Service.
- Usage Information: Features used, preferences set, and interactions with the Service.
- Cookies and Similar Technologies: We use cookies and similar tracking technologies to collect information about your browsing activities. See Section 7 for more details.
2.3 Information from Third Parties
We may receive information from third parties, including:
- Market Data Providers: We obtain pricing and market information from sources such as eBay to provide valuation features.
- Authentication Providers: If you choose to log in using a third-party service, we may receive basic profile information from that provider.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the Service: To operate, maintain, and improve the Service, including managing your account, processing subscriptions, and delivering features.
- Personalisation: To customise your experience and provide content and features relevant to your interests and collections.
- Communication: To send you service-related notices, respond to your enquiries, and provide customer support.
- Analytics: To understand how Users interact with the Service, identify trends, and improve functionality and user experience.
- Security: To detect, prevent, and address fraud, abuse, and security issues.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
- Marketing: With your consent, to send you promotional communications about Aecura. You can opt out at any time.
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
4.1 Service Providers
We engage trusted third-party service providers to perform functions on our behalf, including:
- Payment Processing: Paddle processes all payments and handles billing, invoicing, and tax compliance.
- Hosting and Infrastructure: Cloud service providers that host and support the Service.
- Analytics: Services that help us understand usage patterns and improve the Service.
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
4.2 Public Content
If you choose to make your collection or exhibits public, this information will be visible to other Users and potentially the general public. Your username may be displayed alongside public content.
4.3 Legal Requirements
We may disclose your information if required to do so by law, in response to valid legal process (such as a court order or subpoena), to protect our rights, privacy, safety, or property, or to enforce our Terms and Conditions.
4.4 Business Transfers
If Aecura is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
4.5 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
5. Data Retention
We retain your personal information for as long as necessary to provide the Service and fulfil the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.
- Account Data: Retained while your account is active and for a reasonable period thereafter to comply with legal obligations and resolve disputes.
- Collection Data: Retained while your account is active. Upon account deletion, your collection data will be permanently deleted within 30 days, except where retention is required by law.
- Log Data: Generally retained for up to 12 months for security and analytical purposes.
- Payment Records: Retained as required by tax and accounting laws, typically for seven (7) years.
You may request deletion of your personal information at any time, subject to our legal obligations. See Section 9 for details.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL
- Encryption of sensitive data at rest
- Regular security assessments and updates
- Access controls limiting employee access to personal information
- Secure password storage using industry-standard hashing
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Cookies and Tracking Technologies
7.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand how you use the site.
7.2 How We Use Cookies
We use the following types of cookies:
- Essential Cookies: Necessary for the Service to function properly, including authentication and security cookies.
- Functional Cookies: Remember your preferences and settings to enhance your experience.
- Analytics Cookies: Help us understand how Users interact with the Service so we can improve it.
7.3 Managing Cookies
Most web browsers allow you to control cookies through their settings. You can typically choose to block or delete cookies. However, disabling certain cookies may affect the functionality of the Service.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including Australia and other countries where our service providers operate. These countries may have different data protection laws than your jurisdiction.
When we transfer personal information internationally, we take appropriate safeguards to ensure your information remains protected in accordance with this Policy and applicable law.
9. Your Rights and Choices
9.1 Australian Privacy Rights
Under the Privacy Act 1988 and the Australian Privacy Principles, you have the right to:
- Access: Request access to the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete personal information.
- Complaint: Lodge a complaint if you believe we have breached your privacy.
9.2 Additional Rights
Depending on your jurisdiction, you may have additional rights, including the right to request deletion of your personal information, request restriction of processing, object to certain processing activities, data portability, and withdraw consent where processing is based on consent.
9.3 Exercising Your Rights
To exercise any of these rights, please contact us using the details in Section 13. We will respond to your request within a reasonable timeframe, generally within 30 days.
We may need to verify your identity before processing your request. In some cases, we may be unable to fulfil your request due to legal obligations or legitimate business needs, in which case we will explain the reasons.
9.4 Marketing Communications
You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails, updating your communication preferences in your account settings, or contacting us directly.
10. Children's Privacy
The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
11. Third-Party Links and Services
The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party sites or services you access through the Service.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated Policy on the Service with a new effective date and, where appropriate, notifying you by email.
Your continued use of the Service after any changes indicates your acceptance of the updated Policy.
13. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us at:
Complaints
If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Post: GPO Box 5218, Sydney NSW 2001
14. Definitions
- Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether recorded in a material form or not.
- Sensitive Information means personal information about racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record, health information, or biometric data.
- Service means the Aecura platform, including our website, applications, and all related services.
This Privacy Policy was last updated on 21 January 2026.