Privacy Policy

1. Introduction

Tiny House Agency Pty Ltd ("we," "our," or "THA") operates an online marketplace for tiny homes in Australia. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and disclose information when you use our website at tinyhouseagency.com.au.

This Privacy Policy is designed to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using our website, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, and password when you create an account
• Listing Information: Property details, images, descriptions, and pricing when you submit a listing
• Payment Information: Processed securely through Stripe (we do not store credit card details)
• Contact Forms: Name, email, phone number, and message content when you contact us
• Newsletter Subscription: Email address when you subscribe to our newsletter
• Enquiries and Offers: Contact details and messages when you enquire about or make offers on listings

2.2 Information Collected Automatically

We use cookies and similar tracking technologies to collect information about your browsing activities:

• Analytics Data (via Google Analytics with IP anonymisation):
  • Pages visited and time spent on pages
  • Browser type and version
  • Device type and operating system
  • Referral source
  • General geographic location (country/city level)
  • Anonymised IP address
• Marketing Data (via Facebook Pixel):
  • Page interactions and events
  • Conversion tracking for advertising purposes
  • Device and browser information
• Technical Data:
  • Log files and server data
  • Error reports and performance data

3. How We Use Your Information

We use collected information to:

• Provide and maintain our marketplace services
• Process listing submissions and payments
• Send service notifications about your listings, enquiries, and offers
• Send marketing communications (with your consent)
• Improve our website and user experience
• Respond to customer service requests
• Comply with legal obligations
• Prevent fraud and enhance security

4. Legal Basis for Processing

We process your personal information based on:

• Consent: For marketing communications and analytics
• Contract: To provide our services when you submit listings or make enquiries
• Legitimate Interests: To improve our services and prevent fraud
• Legal Obligations: To comply with applicable laws including the Privacy Act 1988 (Cth)

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Including Supabase (database), Stripe (payments), MailerLite (email), Google Analytics, and Facebook
• Potential Buyers/Sellers: Contact information shared when you make or receive enquiries (with consent)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with any merger, sale, or acquisition

We do not sell your personal information to third parties.

6. Cross-Border Data Transfers

In providing our services, we may transfer your personal information to service providers located outside of Australia, including:

• United States (Stripe, Supabase, Google, Facebook, MailerLite)
• European Union (where some service providers have data centres)

We take reasonable steps to ensure that any overseas recipients handle your personal information in a way that is consistent with the Australian Privacy Principles. By providing your personal information to us, you consent to its disclosure to these overseas recipients as described in this policy.

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account information: Until account deletion
• Listing data: 2 years after listing expiration
• Marketing data: Until you unsubscribe
• Analytics data: 26 months (Google Analytics default)
• Financial records: 7 years as required by Australian tax law

8. Your Rights and Choices

8.1 Access and Control

Under the Australian Privacy Principles, you have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data (subject to legal requirements)
• Object to processing
• Withdraw consent
• Lodge a complaint about our handling of your personal information

To exercise these rights, contact us using the details in Section 13.

8.2 Cookie and Tracking Opt-Out Options

To opt-out of Google Analytics tracking:

• Install the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
• Or adjust your browser settings to block cookies

To opt-out of Facebook Pixel tracking:

• Visit Facebook's opt-out page: https://www.facebook.com/help/568137493302217
• Or use the Digital Advertising Alliance opt-out: http://www.aboutads.info/choices/

To manage cookies generally:

• Most browsers allow you to refuse cookies in settings
• Note: Disabling cookies may affect website functionality

8.3 Marketing Communications

• Unsubscribe from emails using the link in any marketing email
• Contact us to update your communication preferences

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, modification, disclosure, or destruction. Our security measures include:

• SSL encryption for all data transmission
• Secure password hashing using industry-standard algorithms
• Regular security audits and vulnerability assessments
• Strict access controls and authentication requirements
• Use of secure, reputable third-party service providers
• Regular staff training on data protection
• Incident response procedures for potential data breaches

While we take all reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure.

10. Children's Privacy

Our website and services are not intended for individuals under 15 years of age. We do not knowingly collect personal information from children under 15. If we become aware that we have collected personal information from a child under 15, we will take steps to delete that information as soon as practicable.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date.

12. Complaints and Disputes

If you have any concerns about our handling of your personal information or believe we have breached the Australian Privacy Principles, please contact us using the details below.

We will acknowledge your complaint within 5 business days and aim to provide a written response within 30 days. If more time is required, we will keep you informed of our progress.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Email: enquiries@oaic.gov.au

13. Contact Information

14. Cookie Notice

This website uses cookies to enhance your browsing experience and analyse site traffic. By continuing to use this website, you consent to our use of cookies as described in this Privacy Policy. You may opt-out of non-essential cookies using the methods described in Section 8.2 above.