Privacy Policy

TruckPark Pty Ltd (ABN 55 695 402 423), trading as StorageFinder ("we", "us", "our") operates an online marketplace that connects storage space hosts with vehicle and equipment owners seeking secure parking and storage across Australia.

We are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). We have implemented practices, procedures, and systems to ensure we manage your personal information in accordance with the APPs and this Privacy Policy (APP 1).

This Privacy Policy explains how we collect, hold, use, and disclose your personal information when you use our website and services at storagefinder.com.au and associated domains.

By using StorageFinder, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described in this policy.

In accordance with Australian Privacy Principle 2, we acknowledge your right to transact anonymously or under a pseudonym where practicable. However, we are required to identify you in order to provide our services, process payments, verify your identity for safety and trust purposes, and maintain the integrity of our marketplace. As such, it is not practicable for you to use our services anonymously or under a pseudonym.

In accordance with Australian Privacy Principle 3, we only collect personal information that is reasonably necessary for our functions and activities. We collect your information for the following purposes:

• To create and manage your account
• To facilitate bookings between hosts and storers
• To process payments and payouts securely
• To verify user identity and prevent fraud
• To enable communication between users
• To provide customer support and resolve disputes
• To improve our services, including search relevance and user experience
• To send transactional notifications (booking confirmations, payment receipts, messages)
• To send marketing communications (only with your consent, and you can opt out at any time)
• To comply with legal obligations

In accordance with Australian Privacy Principle 6, we will only use or disclose your personal information for the primary purpose for which it was collected, or for a secondary purpose that is directly related to the primary purpose and reasonably expected by you.

We may disclose your personal information to:

• Other users: hosts see storer names, vehicle details, and booking dates; storers see host names and listing details
• Payment processors: Stripe, for processing payments, payouts, and identity verification
• Service providers: hosting providers, email services, analytics tools, and AI services that assist with platform functionality
• Law enforcement or regulators: where required or authorised by Australian law, by court order, or to protect the safety of our users (APP 6.2)

We will never sell your personal information to third parties for marketing purposes.

In accordance with Australian Privacy Principle 8, we inform you that some of your personal information may be disclosed to overseas recipients:

• Stripe: payment data and identity verification documents may be processed in the United States and other countries where Stripe operates
• Supabase: our database and authentication infrastructure is hosted on AWS. Our primary database region is ap-southeast-2 (Sydney, Australia). Some infrastructure services may involve data processing in other AWS regions.
• Google Gemini AI: listing description text (not personal information such as addresses, names, or contact details) may be processed by Google's AI services for the purpose of generating and improving listing descriptions. Google processes this data in accordance with their Cloud Data Processing Addendum. Users can opt out of AI-assisted listing generation by writing their listing descriptions manually.

We take reasonable steps to ensure that overseas recipients handle your personal information in accordance with the APPs. Where possible, we use service providers that comply with equivalent privacy standards or are subject to binding privacy commitments.

In accordance with Australian Privacy Principle 10, we take reasonable steps to ensure that the personal information we collect, use, and disclose is accurate, up to date, complete, and relevant.

You can update your personal information at any time through your account settings. We encourage you to keep your details current to ensure smooth communication and accurate bookings.

In accordance with Australian Privacy Principle 11, we take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our security measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with password hashing and optional multi-factor authentication
• Role-based access controls limiting internal access to personal information
• Regular security reviews and monitoring of our systems
• Payment card data handled exclusively by PCI-DSS compliant payment processor (Stripe)

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:

• Account data: retained for the life of the account plus 7 years (Australian tax record-keeping obligations)
• Booking and payment records: 7 years (financial record-keeping)
• Messages: 3 years after booking completion
• Analytics data: 26 months

When personal information is no longer needed for any purpose for which it may be used or disclosed, and we are not required by law to retain it, we will take reasonable steps to destroy or de-identify it.

In the event of a data breach that is likely to result in serious harm to any individual whose personal information is involved, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with Part IIIC of the Privacy Act 1988 (Notifiable Data Breaches scheme).

We maintain an internal data breach response plan and will take all reasonable steps to contain and remediate any breach as quickly as possible.

In accordance with Australian Privacy Principles 12 and 13, you have the right to:

• Access: request access to the personal information we hold about you. We will respond within 30 days of receiving your request.
• Correction: request correction of any personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading.
• Deletion: request deletion of your account and associated personal information, subject to any legal obligations we have to retain certain records (see section 10).

You can manage much of your information directly through your account settings. For formal access or correction requests, please contact us at privacy@storagefinder.com.au.

We may refuse access or correction in limited circumstances permitted by the Privacy Act 1988, such as where granting access would pose a serious threat to life or safety, or would unreasonably impact the privacy of others. If we refuse, we will provide you with written reasons.

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with us by contacting:

Privacy Officer
TruckPark Pty Ltd (ABN 55 695 402 423), trading as StorageFinder
Email: privacy@storagefinder.com.au
Phone: 07 4803 7388

We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. We will keep you informed of our progress throughout the process.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Phone: 1300 363 992
Post: GPO Box 5218, Sydney NSW 2001

We use cookies and similar tracking technologies to improve your experience on our platform. These include:

• Essential cookies: required for core functionality such as authentication, session management, and security
• Analytics cookies: help us understand how users interact with our platform so we can improve our services
• Preference cookies: remember your settings and preferences (such as search filters and location)

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent some features from functioning correctly.

Our marketing communications comply with the Spam Act 2003 (Cth). We will only send commercial electronic messages with your consent. Every marketing email includes a functional unsubscribe link, and we will process unsubscribe requests within 5 business days.

You can manage your email preferences at any time through your account settings at Settings > Notifications.

Our platform integrates with the following third-party services, each with their own privacy policies:

• Stripe: payment processing, payout management, and identity verification. Stripe's privacy policy is available at stripe.com/au/privacy
• Google Maps Platform: map display, geocoding, and address autocomplete services for displaying listing locations. Google's privacy policy is available at policies.google.com/privacy
• Google Gemini AI: used to assist with generating and improving listing descriptions. Only listing text is submitted for processing — personal information such as addresses, names, and contact details is not sent. Content submitted for AI processing is subject to Google's Privacy Policy
• Supabase: database hosting, authentication, and file storage. Supabase's privacy policy is available at supabase.com/privacy

We encourage you to review the privacy policies of these third-party services to understand how they handle your data.

We may update this Privacy Policy from time to time to reflect changes to our practices, legal requirements, or platform features. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users via email for significant changes
• Display a prominent notice on our platform when appropriate

Your continued use of StorageFinder after changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Privacy Officer:

Privacy Officer
TruckPark Pty Ltd (ABN 55 695 402 423), trading as StorageFinder
Email: privacy@storagefinder.com.au
Phone: 07 4803 7388

We maintain dedicated email addresses for different enquiry types: privacy@storagefinder.com.au for privacy matters, legal@storagefinder.com.au for legal queries, support@storagefinder.com.au for general support, and hello@storagefinder.com.au for general enquiries.