Privacy Policy

← ContentPublishedPublished 17 June 2026, 16:45

Title

Body (Markdown)

:::sp_privacy_hero
---
tag: LEGAL
title: Privacy Policy
subtitle: How StrataPort Pty Ltd collects, holds, uses, and discloses personal
  information in accordance with the Australian Privacy Act 1988 (Cth) and the
  Australian Privacy Principles.
effective_html: "Effective Date: 1 February 2026 &middot; Last Updated: February 2026"
---
:::

:::sp_privacy_body
---
body_html: >2
  
   
   <div class="legal-toc">
   <h4>Contents</h4>
   <ol>
   <li><a href="#s1">About This Policy</a></li>
   <li><a href="#s2">Who We Are</a></li>
   <li><a href="#s3">What Personal Information We Collect</a></li>
   <li><a href="#s4">How We Collect Personal Information</a></li>
   <li><a href="#s5">Why We Collect Personal Information</a></li>
   <li><a href="#s6">How We Use and Disclose Personal Information</a></li>
   <li><a href="#s7">Direct Marketing</a></li>
   <li><a href="#s8">Disclosure to Overseas Recipients</a></li>
   <li><a href="#s9">Data Security and Storage</a></li>
   <li><a href="#s10">Notifiable Data Breaches</a></li>
   <li><a href="#s11">Automated Decision-Making</a></li>
   <li><a href="#s12">Accessing and Correcting Your Information</a></li>
   <li><a href="#s13">Anonymity and Pseudonymity</a></li>
   <li><a href="#s14">Cookies and Website Analytics</a></li>
   <li><a href="#s15">Third-Party Links</a></li>
   <li><a href="#s16">Changes to This Policy</a></li>
   <li><a href="#s17">How to Make a Complaint</a></li>
   <li><a href="#s18">Contact Us</a></li>
   </ol>
   </div>

<h2 id="s1">1. About This Policy</h2>

<p>StrataPort Pty Ltd (ACN 609 840 879) (<strong>"StrataPort"</strong>, <strong>"we"</strong>, <strong>"us"</strong>, or <strong>"our"</strong>) is committed to protecting the privacy of personal information we collect, hold, use, and disclose. This Privacy Policy has been prepared in accordance with the <em>Privacy Act 1988</em> (Cth) (<strong>"Privacy Act"</strong>), including the thirteen Australian Privacy Principles (<strong>"APPs"</strong>), as amended by the <em>Privacy and Other Legislation Amendment Act 2024</em> (Cth).</p>

<p>This policy applies to all personal information collected by StrataPort through the StrataPort platform, our website (strataport.com.au), and any direct interactions with our team, including enquiry forms, phone calls, emails, and briefings.</p>

<p>By using our website, submitting an enquiry, or using the StrataPort platform, you acknowledge that you have read and understood this Privacy Policy.</p>

<h2 id="s2">2. Who We Are</h2>

<p>StrataPort Pty Ltd is an Australian-owned company that develops and operates the StrataPort strata management platform. Our services are provided to professional strata management firms (<strong>"Clients"</strong>) who use the platform to manage Owners Corporations on behalf of lot owners.</p>

<div class="legal-callout">
   <h4>Important Note for Lot Owners</h4>
   <p>StrataPort is a technology platform used by your Strata Manager. We do not have a direct contractual relationship with individual lot owners. Personal information relating to lot owners is collected and managed by your Strata Manager in their capacity as the manager of your Owners Corporation. For privacy enquiries relating to your lot, levies, or Owners Corporation, <strong>please contact your Strata Manager directly</strong>.</p>
   </div>

<h2 id="s3">3. What Personal Information We Collect</h2>

<p>The types of personal information we may collect depend on the nature of your interaction with us. This may include:</p>

<h3>Information collected from prospective and current Clients</h3>
   <ul>
   <li>Name, job title, and role within the organisation</li>
   <li>Business name, ABN, and ACN</li>
   <li>Business address, email address, and telephone number</li>
   <li>Portfolio size and operational information relevant to a platform evaluation</li>
   <li>Billing and payment information</li>
   </ul>

<h3>Information collected through the StrataPort platform</h3>
   <p>In the course of providing the StrataPort platform to our Clients, we may process personal information relating to lot owners, committee members, suppliers, and other third parties on behalf of our Clients. This information is collected and controlled by the Client (the Strata Manager) and may include:</p>
   <ul>
   <li>Lot owner names, addresses, email addresses, and phone numbers</li>
   <li>Lot entitlement and financial information (levies, arrears, payment history)</li>
   <li>Committee member names and contact details</li>
   <li>Supplier names, ABNs, contact details, and banking information</li>
   <li>Correspondence, meeting records, and document attachments</li>
   </ul>

<h3>Information collected through our website</h3>
   <ul>
   <li>Name, email address, phone number, and company name (via the contact form)</li>
   <li>Technical information such as IP address, browser type, and pages visited (via cookies and analytics, see Section 14)</li>
   </ul>

<p>We do not collect sensitive information (as defined under the Privacy Act) unless it is reasonably necessary for our functions and we have your consent, or as otherwise permitted by law.</p>

<h2 id="s4">4. How We Collect Personal Information</h2>

<p>We collect personal information by lawful and fair means. Where it is reasonable and practicable to do so, we collect personal information directly from the individual concerned. This includes information provided:</p>

<ul>
   <li>Through our website contact form or briefing request form</li>
   <li>Via phone, email, or in-person meetings</li>
   <li>Through the StrataPort platform (entered by our Clients or their staff)</li>
   <li>Through cookies and analytics tools when you visit our website</li>
   </ul>

<p>In some cases, we may receive personal information from third parties, including our Clients (Strata Managers), integration partners, or publicly available sources. If we receive unsolicited personal information that we could not have collected under APP 3, we will destroy or de-identify that information as soon as practicable, unless it is contained in a Commonwealth record.</p>

<h2 id="s5">5. Why We Collect Personal Information</h2>

<p>We only collect personal information that is reasonably necessary for one or more of our functions or activities, in accordance with APP 3. The primary purposes for which we collect personal information are:</p>

<ul>
   <li>To provide, operate, and improve the StrataPort platform</li>
   <li>To respond to enquiries, provide demonstrations, and manage Client relationships</li>
   <li>To process payments and manage billing</li>
   <li>To provide technical support and customer service</li>
   <li>To comply with our legal obligations, including under the Privacy Act, the Corporations Act, and applicable taxation laws</li>
   <li>To communicate with Clients about platform updates, maintenance, and service changes</li>
   <li>To conduct internal research and analysis to improve our products and services</li>
   </ul>

<h2 id="s6">6. How We Use and Disclose Personal Information</h2>

<p>We will only use or disclose personal information for the primary purpose for which it was collected, or for a secondary purpose that is directly related to the primary purpose and which the individual would reasonably expect, in accordance with APPs 5 and 6.</p>

<p>We may disclose personal information to the following categories of recipients:</p>

<ul>
   <li><strong>Service providers</strong>, Third-party providers who assist us in operating our platform, including cloud hosting providers, payment processors, email delivery services, SMS providers, and postal fulfilment services. These providers are contractually required to handle personal information in accordance with the APPs.</li>
   <li><strong>Integration partners</strong>, Where a Client has enabled a third-party integration (e.g., payment verification services, banking integrations), personal information may be shared as necessary to facilitate that integration.</li>
   <li><strong>Professional advisors</strong>, Our lawyers, accountants, and auditors as necessary for the operation of our business.</li>
   <li><strong>Government and regulatory authorities</strong>, Where we are required or authorised by law to disclose information, including to the Australian Taxation Office, ASIC, or the Office of the Australian Information Commissioner.</li>
   </ul>

<p>We will never sell personal information to third parties.</p>

<h2 id="s7">7. Direct Marketing</h2>

<p>We may use personal information collected from prospective Clients (such as name, email, and company details submitted via our website) to send direct marketing communications about our products and services, in accordance with APP 7.</p>

<p>We will only send direct marketing communications where the individual would reasonably expect to receive them based on the context of the collection (for example, a submitted enquiry form). Every marketing communication will include a simple and obvious mechanism to opt out of future communications. If you opt out, we will action your request as soon as practicable.</p>

<p>We do not use lot owner personal information held on behalf of our Clients for any direct marketing purpose.</p>

<h2 id="s8">8. Disclosure to Overseas Recipients</h2>

<p>StrataPort's primary infrastructure and data storage are located in Australia. However, in the course of providing our services, personal information may be disclosed to overseas recipients in limited circumstances, including:</p>

<ul>
   <li>Cloud infrastructure sub-processors with data centres located outside Australia</li>
   <li>Third-party service providers (e.g., email delivery, SMS gateway providers) who may process data in overseas jurisdictions</li>
   </ul>

<p>Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient does not breach the APPs in relation to the information, in accordance with APP 8. Where we cannot ensure this, we will seek the individual's informed consent or rely on another exception under the Privacy Act.</p>

<h2 id="s9">9. Data Security and Storage</h2>

<p>We take the security of personal information seriously and implement reasonable technical and organisational measures to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, in accordance with APP 11.</p>

<p>Our security measures include:</p>

<ul>
   <li>Encryption of data in transit and at rest</li>
   <li>Access controls and role-based permissions within the StrataPort platform</li>
   <li>Regular security assessments and monitoring</li>
   <li>Secure development practices and code review processes</li>
   <li>Audit logging of access and data changes</li>
   </ul>

<p>When personal information is no longer needed for any purpose for which it may be used or disclosed under the APPs, and we are not required by law to retain it, we will take reasonable steps to destroy or de-identify the information.</p>

<h2 id="s10">10. Notifiable Data Breaches</h2>

<p>StrataPort complies with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act. In the event of an eligible data breach, where there are reasonable grounds to believe that unauthorised access to, disclosure of, or loss of personal information is likely to result in serious harm to any individual, we will:</p>

<ul>
   <li>Take reasonable steps to contain the breach and assess the risk of serious harm</li>
   <li>Notify the Office of the Australian Information Commissioner (OAIC) as soon as practicable</li>
   <li>Notify affected individuals as soon as practicable, including a description of the breach, the types of information involved, and recommended steps the individual should take in response</li>
   <li>Notify our affected Clients (Strata Managers) to enable them to fulfil their own notification obligations</li>
   </ul>

<h2 id="s11">11. Automated Decision-Making</h2>

<p>The StrataPort platform uses deterministic, rules-based automation to process financial data, generate documents, and manage compliance workflows. These automated processes follow pre-defined logic (for example, generating a levy notice based on a lot's entitlement and the scheme's approved budget) and do not involve probabilistic or AI-based decision-making.</p>

<p>Where the StrataPort Plus module uses AI-powered features (such as AI-assisted correspondence drafting or document summarisation), these features assist the user and do not make autonomous decisions that could significantly affect the rights or interests of any individual. All AI-assisted outputs are presented to the user for review before any action is taken.</p>

<p>We will update this section to comply with the automated decision-making disclosure requirements under APPs 1.7, 1.8, and 1.9 (introduced by the <em>Privacy and Other Legislation Amendment Act 2024</em>) in advance of their commencement on 10 December 2026.</p>

<h2 id="s12">12. Accessing and Correcting Your Information</h2>

<p>Under APPs 12 and 13, you have the right to request access to the personal information we hold about you, and to request that we correct any information that is inaccurate, out of date, incomplete, irrelevant, or misleading.</p>

<p>To make an access or correction request, please contact us using the details in Section 18. We will respond to your request within a reasonable period (and in any event within 30 days). We will not charge you for making a request or for correcting your information. We may charge a reasonable fee for providing access to information if your request requires substantial effort to fulfil, and we will advise you of any fee before proceeding.</p>

<p>If we refuse a request for access or correction, we will provide you with written reasons for the refusal and information about how you may complain about the decision.</p>

<div class="legal-callout">
   <h4>Lot Owners, Access to Your Information</h4>
   <p>If you are a lot owner and wish to access or correct personal information held in the StrataPort platform about you, please contact your Strata Manager in the first instance. Your Strata Manager is the entity that controls your personal information within the platform and is responsible for responding to your access and correction requests.</p>
   </div>

<h2 id="s13">13. Anonymity and Pseudonymity</h2>

<p>In accordance with APP 2, you have the option of not identifying yourself, or of using a pseudonym, when dealing with us, unless it is impracticable for us to deal with you on that basis, or we are required or authorised by law to deal with identified individuals. For example, we cannot process a platform subscription or respond meaningfully to a technical support request without identifying information.</p>

<h2 id="s14">14. Cookies and Website Analytics</h2>

<p>Our website uses cookies and similar technologies to improve your browsing experience and to collect aggregated, non-identifying statistical data about website usage. This may include your IP address, browser type, operating system, referring URL, pages visited, and time spent on the site.</p>

<p>We may use third-party analytics tools (such as Google Analytics) that use cookies to collect and report on website traffic. You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain parts of our website.</p>

<p>We do not use cookies to identify you personally unless you have submitted information through our website (for example, via the contact form).</p>

<h2 id="s15">15. Third-Party Links</h2>

<p>Our website may contain links to third-party websites. We are not responsible for the privacy practices or the content of those websites. We encourage you to read the privacy policy of any website you visit.</p>

<h2 id="s16">16. Changes to This Policy</h2>

<p>We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.</p>

<h2 id="s17">17. How to Make a Complaint</h2>

<p>If you believe that we have breached the APPs or otherwise handled your personal information inappropriately, you are entitled to make a complaint. Please contact us using the details in Section 18. We will acknowledge your complaint within 5 business days and investigate the matter. We will provide you with a written response within 30 days.</p>

<p>If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):</p>

<div class="legal-callout">
   <h4>Office of the Australian Information Commissioner</h4>
   <p><strong>Website:</strong> <a href="https://www.oaic.gov.au" target="_blank" rel="noopener">www.oaic.gov.au</a></p>
   <p><strong>Phone:</strong> 1300 363 992</p>
   <p><strong>Post:</strong> GPO Box 5218, Sydney NSW 2001</p>
   </div>

<h2 id="s18">18. Contact Us</h2>

<p>If you have any questions about this Privacy Policy, wish to make an access or correction request, or wish to make a complaint, please contact us:</p>

<div class="legal-callout">
   <h4>StrataPort Pty Ltd, Privacy Officer</h4>
   <p><strong>Phone:</strong> (03) 9046 8563</p>
   <p><strong>Post:</strong> PO Box 874, Templestowe VIC 3106, Australia</p>
   <p><strong>ACN:</strong> 609 840 879</p>
   </div>
---
:::

:::sp_privacy_cta
---
tag: NEXT_STEPS
title: Questions About Privacy?
subtitle: If you have any questions about how we handle your personal
  information, please don't hesitate to get in touch
label: Contact Us
href: /strataport-contact.html
---
:::

Change note

v1View
Baseline snapshot for staged publishing (B1.5)
system · 02 July 2026, 05:15

Metadata

Version History