Privacy Policy

To provide our service, we collect the information you give us: your name and email for account creation, profile details, content you upload, and messages you send to other users on the platform. When you make a purchase, payment details are handled securely by Stripe; we never see card numbers. We also collect basic technical information, such as IP address, device, and browser type, that we need to keep the platform secure and reliable.

We process personal information on the following bases:

• Contract — to run your account, process your payments, and deliver products you purchase.
• Consent — where required, for non-essential cookies or optional marketing communications.
• Legitimate interests — to operate, secure, and improve the platform, balanced against your privacy.
• Legal obligation — to meet tax, anti-fraud, accounting, and information-request requirements.

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies to you, these are our Article 6 lawful bases.

Your information is used to operate and improve supa.place. This includes processing payments, enabling communication between buyers and sellers, personalising your experience, and protecting the platform from fraud and abuse. We infer your approximate country from your IP address to display prices in your local currency by default; you can change your currency at any time from Dashboard → Settings. We do not sell your personal data to third parties, and we do not use your account data to train AI models.

The “Ask Supa” assistant on our Help page is an AI service powered by Google Gemini. The questions and conversation history you submit during a session are sent to Google to generate a response. We do not retain those conversations after your session ends, and they are not used to train Google's models under the service tier we use. Please do not share account credentials, payment details, or sensitive personal information with the assistant; for those, use the human contact form on the same page.

Some of the service providers listed above process data outside Australia, including in the United States and the European Union. When personal information is transferred internationally, we rely on the safeguards required by the Australian Privacy Act and, where applicable, the GDPR Standard Contractual Clauses or equivalent mechanisms approved by the relevant authorities.

We keep personal data only for as long as we need it. As a guide:

• Account information — while your account is active, plus up to 12 months after deletion to handle disputes and legal requests.
• Purchase, refund, and payout records — 7 years, to meet Australian tax and accounting record-keeping rules.
• Support correspondence — up to 24 months.
• Server and security logs — up to 12 months.
• “Ask Supa” chat content — not retained after the session ends.

After these periods, data is deleted or irreversibly de-identified.

You have the right to:

• access the personal information we hold about you;
• correct or update inaccurate information;
• delete your account and associated data, available in Dashboard → Settings → Account → Delete account, or by writing to team.supa.place@outlook.com;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent where you previously gave it; and
• lodge a complaint with the Office of the Australian Information Commissioner (OAIC), or a relevant supervisory authority outside Australia.

We will respond to verified requests within 30 days. Some statutory and tax records (see Data Retention) cannot be deleted before their retention period expires, but those records are not used for any purpose other than the legal one for which they are kept.

supa.place is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact team.supa.place@outlook.com and we will delete it.

We use cookies and similar technologies in two categories. Strictly necessary cookies are required to keep you signed in, remember preferences like your currency, and protect the site — for example, a short cookie named "gc" stores the country code we derive from your IP address so we can default prices to your local currency without re-detecting on every page. Analytics cookies (PostHog) are loaded only after you accept them on the consent banner shown on your first visit. You can change your choice at any time via the "Cookie preferences" link in the site footer, or control cookies directly through your browser settings. Disabling strictly necessary cookies may stop the site from working correctly.

For privacy-related questions, requests to exercise your rights, or to report a privacy concern, please contact team.supa.place@outlook.com. For all other support enquiries, use the contact form on our Help page.

We may update this policy from time to time. We will notify you of any significant changes, but we recommend reviewing it periodically. Your continued use of the platform after changes constitutes acceptance of the updated policy.