1. Introduction

PolicyBox Pty Ltd is committed to protecting your privacy and handling personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Notifiable Data Breaches (NDB) Scheme.

2. What Information We Collect

We may collect identity information (name, date of birth, contact details, organisationdetails), account and usage information (IP address, device data, login activity), compliance data uploaded by users (CDD documents, risk assessments), and payment information.

3. How We Collect Information

We collect information directly from you, through platform usage, via cookies and analytics tools, from third-party providers, and from publicly available sources where relevant.

4. Why We Collect Personal Information

To provide and operate our platform, verify identity, process payments, deliver compliance tools and AI outputs, improve services, meet legal obligations, and prevent fraud.

5. AI Processing and Automated Tools

Personal information entered into the platform may be processed by AI systems to generate compliance outputs. Users remain responsible for verifying outputs. We do not sell personal information to train third-party AI models.

6. Disclosure of Personal Information

We may disclose personal information to service providers, identity verification providers, professional advisers, regulators or law enforcement where required by law.

7. Overseas Disclosure

Some service providers may store data outside Australia. We take reasonable steps toensure overseas recipients comply with Australian privacy laws.

8. Data Security

We implement reasonable technical and organisational safeguards including encryption, access controls, MFA, and monitoring. No system is completely secure.

9. Data Retention

We retain personal information as required to provide services and meet legal obligations. Data will be securely deleted or de-identified when no longer required.

10. Cookies and Tracking

Our website may use cookies and analytics tools to improve performance and user experience. Users may control cookies through browser settings.

11. Direct Marketing

We may send marketing communications where consent exists or permitted by law. You may opt out at any time.

12. Access and Correction

You may request access to or correction of your personal information. We will respond within a reasonable time frame.

13. Notifiable Data

BreachesIf an eligible data breach occurs likely to result in serious harm, we will notify affected individuals and the OAIC as required.

14. Children's Privacy

Our services are not intended for individuals under 18 years of age.

15. Contact Details

Privacy Officer
‍
PolicyBox Pty Ltd
‍
Email: support@policybox.com.au
‍
You may also lodge a complaint with the Office of the Australian Information Commissioner(OAIC) at www.oaic.gov.au

16. Changes to this Policy

We may update this Privacy Policy from time to time. Updated versions will be published on our website.

‍