Privacy Policy

The information we collect depends on how you use Tinystart.

When you use Tinystart, we and our service providers may automatically collect technical information such as:

• IP address;
• browser type;
• device type;
• operating system;
• pages viewed;
• referring website;
• dates and times of access;
• general location derived from an IP address;
• session information;
• error and diagnostic information; and
• interactions with Tinystart.

We may use cookies and similar technologies to collect some of this information.

If you contact Tinystart, we may collect:

• your name;
• email address;
• the contents of your message;
• information about the relevant account, registry or transaction; and
• any documents, screenshots or other information you provide.

We use this information to respond to you and investigate the matter.

We may collect personal information:

• directly from you;
• when you create or update an account;
• when you create or manage a registry;
• when you make a contribution;
• when you upload content;
• when you contact us;
• automatically when you use Tinystart;
• from Stripe;
• from another Tinystart user where necessary to provide the service; and
• from service providers that help us operate, secure or analyse Tinystart.

Where practicable, we collect information directly from the person it relates to.

We may collect, hold and use personal information to:

• create and manage Tinystart accounts;
• create and display registries;
• allow registries to be shared;
• process contributions;
• facilitate payouts;
• connect registry creators with Stripe;
• provide transaction information to registry creators and contributors;
• process refunds;
• investigate payment disputes and chargebacks;
• detect and prevent fraud;
• verify accounts;
• provide customer support;
• respond to enquiries and complaints;
• secure Tinystart;
• diagnose technical problems;
• improve Tinystart and understand how the service is used;
• communicate important service information;
• maintain business and accounting records;
• enforce our Terms & Conditions;
• comply with legal and regulatory obligations; and
• establish, exercise or defend legal claims.

We may also use aggregated or de-identified information to understand how Tinystart is used and improve our service.

Information you choose to include on your registry may be visible to people who have access to your registry.

This may include:

• your name;
• photographs;
• registry description;
• baby shower or event information;
• gift ideas;
• savings goals; and
• other content you choose to publish.

Registry creators are responsible for deciding what information they make available and who they share their registry with.

A person who receives your registry link may forward or share that link with someone else.

You should not include sensitive or confidential information in a registry unless you are comfortable with people who access the registry seeing that information.

Tinystart is intended to be used by adults.

Registry creators may choose to upload information or photographs relating to a child, partner, family member or another person.

If you provide personal information about another person, you should ensure that you have an appropriate reason, authority or permission to provide that information.

Parents and guardians should consider carefully what information about children they make publicly or privately available through a registry.

We do not knowingly allow children under 18 to create Tinystart accounts or make payments themselves.

We do not generally require sensitive information in order to provide Tinystart.

You should avoid entering health information or other sensitive information into public-facing registry content unless you intentionally wish to share that information.

If sensitive information is provided to us, we will handle it only where reasonably necessary and where permitted by applicable law.

We may disclose personal information where reasonably necessary to operate Tinystart. This may include disclosure to:

Tinystart does not sell your personal information to advertisers or data brokers.

We do not provide contributor or registry creator information to third parties for their own unrelated direct marketing purposes.

Tinystart uses Stripe for payment processing and related services.

Stripe may collect personal information directly from Tinystart users and may also receive information from us.

Stripe uses personal information for purposes including:

• processing payments;
• facilitating payouts;
• authentication;
• preventing and detecting fraud;
• managing financial risk;
• complying with legal and financial regulatory requirements;
• operating Stripe services; and
• improving its payment and fraud-prevention services.

Stripe may use cookies and device information as part of its security, authentication and fraud detection systems.

Stripe is responsible for its own handling of personal information where it acts independently of Tinystart.

More information is available in Stripe's Privacy Policy and Privacy Center.

Tinystart and our service providers may use cookies and similar technologies. These technologies may be used to:

• keep you signed in;
• remember preferences;
• provide important website functionality;
• protect accounts and payments;
• prevent fraud;
• understand how Tinystart is used;
• diagnose technical issues; and
• measure website performance.

Some cookies may be provided by third parties such as Stripe or analytics providers.

Where required, we will provide appropriate information or choices regarding non-essential cookies.

You can also control cookies through your browser settings. Disabling some cookies may affect the operation of Tinystart.

We may use analytics tools to understand how people use Tinystart. Analytics information may include:

• pages visited;
• features used;
• approximate location;
• device and browser information;
• referral source;
• session duration; and
• interactions with the service.

We use this information to improve Tinystart, identify problems and understand which features are useful.

Where possible, we use aggregated or de-identified analytics information.

We may send you communications relating to your Tinystart account or use of the service. These may include:

• account notifications;
• payment and payout information;
• security alerts;
• changes to our service;
• changes to our legal policies; and
• important operational messages.

These communications are necessary to provide the service and may not always be optional.

If we send promotional or marketing emails, you may opt out using the unsubscribe option provided in the message.

Opting out of marketing does not prevent us from sending essential service communications.

Some of the service providers used to operate Tinystart are international organisations or may process information outside Australia.

In particular, Stripe operates internationally. Stripe identifies entities in Australia and Ireland as relevant entities for Australian users and may use infrastructure, affiliates and service providers in other countries, including the United States.

Other technology providers used by Tinystart may also process information in countries outside Australia.

As our providers and infrastructure may change, it may not always be practicable to identify every country in which information may be processed.

Where Australian privacy law applies to an overseas disclosure, we will take reasonable steps required by applicable law in relation to that disclosure.

We take reasonable technical and organisational steps to protect personal information against:

• loss;
• misuse;
• unauthorised access;
• unauthorised disclosure;
• alteration; and
• destruction.

Measures may include:

• encrypted connections;
• access controls;
• authentication;
• secure cloud infrastructure;
• restricted administrative access;
• payment processing through Stripe;
• security monitoring; and
• software and infrastructure maintenance.

No internet-based service can guarantee absolute security.

You are also responsible for keeping your account credentials secure.

Please contact us immediately if you believe your Tinystart account has been compromised.

If we become aware of a security incident involving personal information, we will investigate it and take reasonable steps to limit its impact.

Where required by applicable law, we will notify affected individuals and relevant regulators.

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected or where we are required or permitted to retain it.

How long information is kept may depend on:

• whether your account remains active;
• whether a registry remains active;
• accounting and taxation requirements;
• payment records;
• fraud prevention;
• disputes and chargebacks;
• legal obligations;
• security requirements; and
• potential legal claims.

Some transaction information may need to be retained after an account or registry has been closed.

Stripe separately determines how long it retains information it collects through Stripe's services.

When personal information is no longer reasonably required, we may delete it or de-identify it, subject to legal requirements and normal backup processes.

You may close your Tinystart account or registry using functionality made available through Tinystart or by contacting us.

Closing an account does not necessarily result in the immediate deletion of every record relating to the account.

We may retain information where reasonably necessary for:

• transaction records;
• refunds;
• disputes;
• fraud prevention;
• accounting;
• security;
• legal obligations; or
• establishing or defending legal claims.

Public registry information will no longer be made available through the normal registry experience after the registry is closed, subject to reasonable processing and caching periods.

See our Data Deletion Instructions for how to delete your account.

You may request access to personal information Tinystart holds about you by contacting us.

We may need to verify your identity before providing access.

In some circumstances, applicable law may allow or require us to refuse access to particular information.

If this occurs, we will explain the reason where legally permitted.

Information held directly by Stripe may need to be requested from Stripe.

We want the personal information we hold to be accurate and up to date.

You can update some information through your Tinystart account.

You can also contact us if you believe information we hold about you is inaccurate, incomplete or out of date.

Information held directly by Stripe may need to be updated through Stripe.

You may ask us to delete personal information we hold about you.

We will consider deletion requests subject to any information we need or are permitted to retain for:

• legal requirements;
• payment records;
• accounting;
• fraud prevention;
• security;
• disputes;
• chargebacks; or
• legal claims.

Deleting information held by Tinystart does not automatically delete information held independently by Stripe or another service provider.

If you have a concern about how Tinystart has handled your personal information, contact us at:

support@tinystart.com.au

Please describe:

• what happened;
• what information is involved; and
• what outcome you are seeking.

We will investigate your complaint and respond within a reasonable period.

If the Privacy Act applies to the matter and you are not satisfied with our response, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC).

Information about privacy complaints is available at oaic.gov.au.

Tinystart may contain links to websites or services operated by other organisations.

We are not responsible for the privacy practices of third-party websites.

You should review the privacy policy of any external service you choose to use.

We may update this Privacy Policy when:

• Tinystart's features change;
• our technology providers change;
• our payment arrangements change;
• our information handling practices change; or
• applicable laws or regulatory requirements change.

The current version will be published on tinystart.com.au with its most recent update date.

If we make a material change to how existing users' personal information is handled, we will take reasonable steps to notify affected users where appropriate.

For privacy questions, access or correction requests, complaints, or requests relating to your personal information, contact:

Tinystart
Joshua Aaron Myers
ABN 25 467 752 123
Email: support@tinystart.com.au
Website: tinystart.com.au