Privacy Policy

Hoardly operates an online marketplace for out-of-home advertising in Australia. Advertisers use it to find and book advertising space; media owners (our Partners) use it to list the space they have available.

In this policy, we, us and our mean Hoardly. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Questions about privacy? Email privacy@hoardly.com.au.

We only collect what we need to run the marketplace. Specifically:

We never store your card number. Card payments are handled by our payment processor; we only keep the outcome, the last four digits and a payment reference.

We do not seek sensitive information (as defined in the Privacy Act) and ask that you do not send it to us. Please do not upload identity documents, health information or photographs of identifiable individuals as advertising artwork or space imagery unless you have the right to do so.

We use personal information to:

• create and administer your account, and keep you signed in;
• process expressions of interest, bookings and campaign artwork;
• pass the details a media owner needs in order to consider and fulfil your booking;
• issue tax invoices, take payment and keep financial records;
• send service messages — booking updates, artwork decisions, payment reminders;
• respond to your enquiries and provide support;
• detect and prevent fraud, abuse and security incidents; and
• meet our legal and tax obligations.

We do not sell your personal information, and we do not share it with third-party advertising networks for their own marketing.

We disclose personal information to:

• The media owner of a space you book. When you submit an expression of interest they receive your name, email address, the brand or business you represent, your campaign dates and proposed rate, and any artwork you supply. They need this to decide on and run your booking.
• Our service providers, listed below, who process information on our behalf under contract.
• Professional advisers — accountants, auditors and lawyers — where needed.
• Regulators, courts or law enforcement, where we are required or permitted by law.
• A purchaser, if our business or assets are sold, on terms that protect your information.

Some of our service providers store or process information outside Australia. Under APP 8 we take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles. The providers we use, and where they are likely to handle your information, are:

By using Hoardly you consent to this disclosure. If you would prefer your information not be disclosed overseas, we may be unable to provide the service.

We take reasonable steps to protect personal information from misuse, loss and unauthorised access. Passwords are stored as one-way hashes and never in readable form; the site is served over HTTPS; sessions use signed, HTTP-only cookies; and access to production data is limited to people who need it.

No online service can promise perfect security. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

We keep personal information only as long as we need it. Booking, invoice and payment records are kept for at least seven years to meet Australian tax and record-keeping requirements. Account details are kept while your account is open.

When you close your account we delete or de-identify your personal information, except where we must keep it for the legal, tax or dispute-resolution reasons above.

Most of your details can be viewed and updated any time under Settings in your account. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing privacy@hoardly.com.au.

We will respond within a reasonable period — normally 30 days. There is no charge to make a request. If we refuse access or correction we will tell you why in writing.

We send two kinds of email. Service messages — booking confirmations, artwork decisions, invoices — are part of the service and cannot be switched off while your account is open. Marketing messages are optional: every one carries an unsubscribe link, and unsubscribing takes effect promptly, as required by the Spam Act 2003 (Cth).

If you asked to be told when a particular space becomes available, you can unsubscribe using the link in that alert.

We keep cookie use to a minimum:

• Session cookie — a signed, HTTP-only cookie that keeps you logged in. Strictly necessary; the site will not work without it.
• Live chat — our chat provider sets a cookie so a conversation continues across pages.

We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but you will not be able to sign in.

If you think we have mishandled your personal information, please tell us first at privacy@hoardly.com.au. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

We may update this policy as the service changes. The date at the top shows when it was last revised. If a change materially affects how we handle your personal information, we will tell you by email or with a notice on the site before it takes effect.