Privacy Policy.

1.1 This Privacy Policy is issued by McKenzie Digital Group Pty Ltd ABN 29 161 056 677 trading as Cherry Permits (Cherry Permits, we, us or our). Cherry Permits operates an Australian marketplace and property assessment service that helps owners and authorised representatives of commercial, industrial and mixed-use properties understand outdoor advertising opportunities and connects suitable properties with outdoor media publishers and other industry participants (the Platform).
1.2 This policy explains how we collect, hold, use and disclose personal information, and how you can access and correct your personal information or make a privacy complaint. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1.3 The Platform is intended for commercial property opportunities only. We do not currently assess private homes, residential apartments, townhouses or residential land.

2.1 We collect personal information that you choose to provide, including:

(a) your name, email address, phone number, organisation or company details, your relationship to a property, and messages you send us;

(b) when you submit a property: the property address, property type, photographs, existing signage information, ownership and authority details, site documents, and other information needed to assess outdoor advertising potential;

(c) information and documents you provide to our staff when they assist you to submit a property or prepare a listing, including by email or telephone;

(d) when you create or use an account: login details, profile information, account activity, saved sites, preferences, uploaded files, support requests and correspondence; and

(e) records of your acceptance of our terms, including the version of the terms accepted, the date and time of acceptance, and associated account and technical details.

2.2 We also collect technical information when you use the Platform, including your IP address, browser type, device information, pages viewed, referring pages, approximate location, session activity, cookies and similar analytics information.
2.3 You can choose not to provide personal information, but if you do not, we may not be able to assess a property, publish a listing or provide some features of the Platform. Because we must verify property ownership and authority before publishing a listing, it is generally impracticable for us to deal with you anonymously or under a pseudonym in relation to a property submission, although you may browse public parts of the website without identifying yourself.

2.4 If you provide us with personal information about another person (for example, a co-owner, director or contact person), you must be authorised to do so and must take reasonable steps to make that person aware of this policy.

3.1 When we assess and enrich a submitted property, we collect information about the property, and in some cases about its owners, from third-party and publicly available sources. These include information provided by the person submitting the property, title searches and land registry information, cadastral datasets, council planning and mapping records, zoning and overlay information, aerial and street imagery, mapping and geocoding services (including OpenStreetMap), road and traffic information, and other government, commercial and third-party property datasets, together with comparable sources and providers that we may use from time to time.

3.2 Information collected from these sources may include ownership details and other personal information contained in public registers. We collect it because it is reasonably necessary to verify ownership and authority, assess a site’s suitability, prepare accurate marketplace listings and comply with our legal obligations.

4.1 We collect, hold and use personal information to:

(a) receive and review property submissions, verify ownership and authority, assess outdoor advertising potential and build site profiles;

(b) create, publish and manage marketplace listings and connect suitable opportunities with publishers and industry participants;

(c) operate the Platform’s messaging and workflow tools that support site investigations, proposals, negotiations and documentation between landowners and publishers;

(d) contact you about your enquiry, a submitted property, relevant marketplace activity or administrative matters, including re-contacting you about an archived property if we reasonably believe circumstances have materially changed and it may have become suitable;

(e) provide, administer and bill any optional services you request, such as enhanced marketplace promotion, detailed assessment, feasibility work, consultant coordination and permit-related services;

(f) send you information about Cherry Permits services and opportunities that may interest you, which you can opt out of at any time;

(g) operate, secure and improve the Platform, manage accounts, respond to support requests, keep records, prevent misuse and meet our legal obligations; and

(h) maintain records of acceptance of our terms and of dealings conducted through the Platform.

5.1 We may disclose relevant personal information and property information to outdoor media publishers and other industry participants for the purpose of assessing or progressing an outdoor advertising opportunity, and to professional consultants (such as town planners, engineers and surveyors) engaged in connection with services you request, and to our contractors, service providers, professional advisers and related bodies corporate for the purposes described in this policy, and to payment systems operators (where fees become payable), to third parties you specifically authorise, and to government agencies, regulators and law enforcement where required or authorised by law. We limit disclosure to what is reasonably needed for the relevant assessment, enquiry or opportunity.

5.2 We do not release your personal contact details to publishers as part of the ordinary marketplace process. Publishers and landowners communicate through the Platform’s built-in messaging and workflow tools, and any exchange of personal contact details occurs only if the parties choose to provide those details themselves during their engagement through the Platform.

5.3 We may also disclose personal information where required or authorised by law, to respond to a lawful request, to protect our rights or users, to investigate misuse, or in connection with a business transfer, merger, restructure or sale of assets, provided the recipient is bound to handle the information consistently with this policy.

5.4 We do not sell personal information. We may create, use and share aggregated or de-identified information that does not identify any individual, for research, market insight and service improvement purposes.

6.1 Our core marketplace infrastructure and data, including the marketplace application, databases, file and object storage, internal analytics and associated platform services, are hosted in Australia.

6.2 We use a number of third-party services, including Microsoft 365 and SharePoint, HubSpot, Google Analytics, Google Ads and Google Tag Manager. Where regional hosting options are available, we have selected Australian hosting regions for these services. We also use OpenStreetMap for mapping and geographic information; OpenStreetMap is not an Australian-hosted service, and where the Platform accesses OpenStreetMap-hosted services, certain technical information associated with those requests (such as IP address and request data) may be processed outside Australia. OpenStreetMap is not used to store our account, property or document data.

6.3 Accordingly, while our core marketplace data and configured business systems are hosted in Australia, some third-party services used by the Platform may process limited technical information overseas, including in the United States and the United Kingdom or other countries in which those providers operate. Where we disclose personal information to overseas recipients, we take reasonable steps to work with reputable providers and to ensure they handle personal information consistently with the Australian Privacy Principles.

7.1 We use cookies, pixels, analytics tools and similar technologies to operate the Platform, remember preferences, understand how visitors use the site, measure performance, improve content and protect the Platform. You can usually adjust your browser settings to block or delete cookies, although some features may not work properly if you do.

8.1 We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure, including access controls, account roles and permissions, secure hosting practices, monitoring, staff processes and service provider controls. No online service can guarantee absolute security; you should keep your login details secure and contact us promptly if you suspect unauthorised access.

8.2 If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the notifiable data breaches scheme under the Privacy Act.

9.1 We keep personal information for as long as reasonably needed for the purposes described in this policy, including to manage enquiries, assess properties, maintain marketplace records, provide services, comply with legal obligations, resolve disputes and protect our legitimate business interests.

9.2 If a submitted property is declined or archived as unsuitable, we may retain the site record, assessment history and property enrichment data for up to 5 years after archival, because a site that is unsuitable at one time may become suitable later. After that period we delete or de-identify that information unless we have an ongoing legal, operational or business need to retain it.

9.3 Personal information and sensitive documents supplied to us are retained only for as long as they are reasonably required for the purposes for which they were collected, and are deleted earlier where they are no longer relevant. Records of your acceptance of our terms are retained for as long as needed to evidence the relevant agreement.

10.1 You may request access to the personal information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading, by contacting us using the details in clause 12. We may need to verify your identity before responding, and we will respond within a reasonable period. We do not charge a fee for making an access or correction request or for making a correction, although we may charge a reasonable amount for the work involved in giving access to a large volume of information.

10.2 In limited circumstances permitted by the Privacy Act we may refuse access, including where giving access would be unlawful, would unreasonably impact the privacy of others, would prejudice enforcement activities or anticipated legal proceedings, would reveal commercially sensitive evaluative information connected with our assessment and decision-making processes (such as our internal site assessments and rankings), or where a request is frivolous or vexatious. If we refuse access or correction, we will give you written reasons (unless unreasonable to do so), take reasonable steps to give you access in another way that meets your needs where possible, and tell you how you can complain about the refusal.

10.3 You may also ask us to delete information, withdraw a consent you have given, opt out of marketing communications, or ask not to be re-contacted about an archived property. Some information may need to be retained for legal, security, operational or record-keeping reasons, and we will tell you if that is the case.

11.1 If you have a concern or complaint about how we have handled your personal information, please contact us using the details in clause 12. We will acknowledge your complaint, investigate it and respond within a reasonable period. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

12.1 Our Privacy Officer is responsible for how we handle personal information and for responding to access, correction and complaint requests. You can contact the Privacy Officer at assets@cherrypermits.com.au, by phone on (07) 2143 6097, or by post at Unit 7, 229 Junction Road, Cannon Hill QLD 4170.

12.2 We may update this Privacy Policy from time to time. The updated version will be published on the Platform with a revised “Last updated” date, and, where a change materially affects how we handle your personal information, we will take reasonable steps to bring it to the attention of account holders.

© McKenzie Digital Group Pty Ltd ABN 29 161 056 677 trading as Cherry Permits.