Privacy Policy

1. Scope

This policy explains how HA Assure Group Pty Ltd (ABN 64 701 384 787) handles personal information in connection with Rental DB. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. Two different roles

This distinction matters, so please read it carefully.

• Subscriber information. Where you sign up as a business, we collect and use your information for our own purposes — to provide and bill for the service. We decide what happens to it, and this policy governs it.
• Your clients' information. Where you enter information about your hirers, vehicle owners, or staff, you decide what is collected and why. We hold and process it on your instructions, as your service provider. Your own privacy policy governs it, and requests from those individuals should go to you.

3. What we collect about subscribers

Your name, business name, email address, phone number, and the records of your use of the platform. Payment card details are collected and held by Stripe, our payment processor — we never see or store a full card number.

4. Why we collect it

To create and operate your account, take payment, provide support, send service notices, keep the platform secure, meet our legal obligations, and improve the product.

5. Records we keep on purpose

When you accept our terms, we record the date and time, the version and content hash of the exact document shown to you, your IP address, and your browser's user agent. We keep this for as long as we may need to evidence the agreement. We do the same for agreements your clients sign through the platform, on your behalf.

6. Who we share it with

Only with the providers we need to run the service: Cloudflare (hosting and database), Stripe (our own subscription payments), and Zoho ZeptoMail (transactional email). We do not receive location or telematics data, and we do not process payments from your clients. We may also disclose information where the law requires it. We do not sell personal information, and we do not disclose it for direct marketing by others.

7. Where it is held

The platform runs on Cloudflare's global network, so information may be stored or processed outside Australia. We take reasonable steps to ensure overseas recipients handle it consistently with the Australian Privacy Principles.

8. Security

Access is restricted by account and by role. Passwords are stored only as salted, iterated hashes and cannot be recovered by us or by anyone else. Traffic is encrypted in transit. No system is perfectly secure, and we will notify you and the OAIC of an eligible data breach as the Notifiable Data Breaches scheme requires.

9. Retention

We keep subscriber information while your account is active and for seven years afterwards, to meet record-keeping obligations. You may export your data at any time.

10. Access, correction, and complaints

You may ask for the personal information we hold about you, and ask us to correct it. Write to info@ha-assure.com. If you are not satisfied with how we handle a privacy matter, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

11. Changes

We will publish any updated policy here with a new version and date.

12. Contact

HA Assure Group Pty Ltd (ABN 64 701 384 787) — info@ha-assure.com