Privacy Policy

Hunting Properties Australia (we, us, our) operates the marketplace at huntingpropertiesaustralia.com.au from Queensland, Australia. This policy explains what personal information we collect, why we collect it, how we hold it, who we share it with, and how you can access it, correct it or complain.

1. What we collect

We collect the information needed to run a booking marketplace:

• Account information: your name, email address, password (stored only as a salted cryptographic hash), and any phone number or profile bio you choose to add.
• Host information: listing details for your property, and the payout account details you provide directly to our payment provider, Stripe, when you set up payouts. We receive an account identifier and onboarding status from Stripe, not your bank details.
• Booking information: the property, dates, guest count, price, payment status and any message you send with a booking.
• Content: reviews, photos and other material you submit.
• Technical information: IP address, browser type and pages visited, collected through server logs and essential cookies, used for security (including rate limiting) and to operate the service.

We do not collect payment card numbers (Stripe processes payments directly) and we do not ask for or store firearms licence numbers. Hosts may sight licences in person at check-in.

2. Why we collect it

We collect, hold and use personal information to:

• create and administer accounts, listings and bookings;
• process payments and host payouts through Stripe;
• send transactional messages (booking confirmations, cancellations, payout notices) and, with your consent, marketing you can opt out of at any time;
• keep the Platform secure and prevent fraud and misuse;
• moderate content and enforce our Terms of Service; and
• meet our legal obligations.

If we cannot collect the information we need, we may be unable to provide the service (for example, we cannot confirm a booking without contact details).

3. Who we share it with

• Between Guests and Hosts: when a booking is made, we share the details each party needs for the stay to happen: names, booking dates, guest count, messages, and contact details where needed.
• Service providers: Stripe (payments and payouts), our email delivery provider, and our hosting and database providers, in each case only to the extent needed to provide their service to us.
• Legal requirements: where disclosure is required or authorised by law, including to law enforcement in connection with suspected unlawful activity such as firearms offences.

We do not sell personal information, and we do not share it with third parties for their own marketing.

4. Overseas disclosure

Some of our service providers (including Stripe, our email provider and cloud hosting) may store or process information on servers located outside Australia, including in the United States. We take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs, including through the providers' contractual and certification commitments.

5. How we hold and protect it

• passwords are stored only as salted bcrypt hashes;
• data is transmitted over encrypted connections (HTTPS);
• production data is held in access-controlled databases with role-restricted administrative access; and
• we apply security headers, input validation and rate limiting across the Platform.

No system is perfectly secure. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

6. Cookies

We use essential cookies to keep you signed in (session authentication) and to protect the Platform (security tokens). We do not use third-party advertising cookies. If we add analytics in future, this policy will be updated first.

7. Data retention

We keep personal information while your account is active and for as long as needed afterwards to meet legal, accounting and dispute obligations (generally up to 7 years for transaction records). When you delete your account, or ask us to, we delete or de-identify personal information we no longer need.

8. Access, correction and deletion

You can view and update most of your information from your account. You may also ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and associated data. Contact us through the contact page and we will respond within 30 days. We may need to verify your identity before acting on a request.

9. Complaints

If you believe we have mishandled your personal information, contact us first and we will investigate and respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by phone on 1300 363 992.

10. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, and material changes will be notified by email or by notice on the Platform.

This policy is provided as a complete general-purpose document for an Australian marketplace. Insert your registered entity name and ABN, and have it reviewed by a solicitor before commercial launch.