This Privacy Policy outlines how we handle the information you provide to us, whether you’re browsing our site, signing up for our services, or interacting with our team. We are committed to maintaining transparency about how we collect, use, and share data and ensuring that your personal information is handled in accordance with industry standards and applicable regulations. By using our services, you agree to the practices described in this policy.
1. Who we are and what this policy covers
This Privacy Policy explains how Taly Pty Ltd (“Taly”, “we”, “us”, “our”) collects, uses, discloses, stores and protects personal information when you use our software-as-a-service platform, websites and related services (together, the Services). We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
By using the Services, you consent to the handling of your information in accordance with this Privacy Policy.
2. Key definitions (plain English)
- Personal information: information or opinion about an identified individual or a reasonably identifiable individual (whether true or not, and whether recorded in material form or not).
- Business information: information about an identified business (e.g., ABN, business address).
- Data: all files, content and other information you upload or input into the Services (which may include personal information).
3. What we collect
The information we collect depends on how you interact with us. It may include:
Personal information (e.g., name, email address, phone, mailing address, role), and where relevant for account creation or support, date of birth.
Business information (e.g., business name, ABN, business address/phone, business type, size).
Account and usage information (e.g., login identifiers, sign-up date, last activity, device/browser type and version, session counts, language, approximate location/time, referral URLs).
Payment and billing information (to process subscriptions and comply with accounting/tax requirements).
4. How we collect information
We collect information when you:
- Create an account, subscribe or otherwise use the Services;
- Communicate with us (phone, email, chat, events, surveys);
- Interact with our websites and applications; or
- Connect third-party tools/integrations you choose to use with the Services.
We may also obtain information from third parties (e.g., onboarding partners, integration providers, publicly available sources) to help operate and improve the Services.
5. Cookies, analytics and online activity
Our websites use cookies and similar technologies to operate, remember preferences and improve user experience. We also use analytics (e.g., Google Analytics) to understand traffic and usage patterns. You can adjust your browser settings to block or delete cookies; some features may not work as intended if cookies are disabled. We may use advertising/retargeting technologies in accordance with applicable law (including the Spam Act 2003 (Cth)) and provide opt-outs for marketing (see Section 10).
6. How we use information
We use information to:
- Provide, administer and support the Services;
- Authenticate users and manage accounts;
- Process payments and comply with business/accounting obligations;
- Improve, secure and develop our Services (including diagnostics and performance);
- Communicate with you (service messages, updates, support);
- Conduct research, product development and internal analytics; and
- Conduct marketing (with consent where required and opt-out options available).
7. When we disclose information
We may disclose information to:
- Service providers (e.g., cloud hosting, security, analytics, email/communications, payments, professional advisers) to help us operate the Services;
- Government agencies or regulators where required or authorised by law;
- Integration providers you connect, solely as needed for interoperation (your choice controls this); and
- Other disclosures consistent with the Privacy Act (including directly related secondary purposes you would reasonably expect).
We may also share de-identified/aggregated insights about general usage trends. These do not identify you.
8. Overseas disclosures
Some providers we rely on may be based overseas or use servers outside Australia. Where we disclose personal information overseas, we take reasonable steps to ensure appropriate privacy and security protections are in place (e.g., contractual safeguards), and we only do so: (a) with your consent; (b) where we reasonably believe an overseas recipient is subject to a law or binding scheme substantially similar to the APPs and enforceable; or (c) where required or authorised by law or court/tribunal order.
9. Storage, security and location of data
We use reputable cloud infrastructure and apply technical and organisational controls designed to protect information from misuse, interference, loss, and unauthorised access, modification or disclosure (e.g., encryption in transit/at rest where appropriate, role-based access, monitoring, physical and logical security). Our primary production infrastructure may be hosted with third-party cloud providers (e.g., AWS).
No method of transmission or storage is 100% secure; your use of the Services carries some inherent risk.
10. Marketing communications
With your consent where required (or as otherwise permitted by law), we may send you information about features, events and offers. You can opt-out at any time by using the “unsubscribe” link in our emails or contacting us (Section 15). We will respect your communication preferences.
11. Data retention
We retain personal information only for as long as needed for the purposes described in this Policy, to provide the Services, or to comply with legal, tax, and audit requirements. We then delete or de-identify it in accordance with our data retention practices.
12. Access and correction
You may request access to, or correction of, the personal information we hold about you. We may need to verify your identity and, where permitted by law, charge a reasonable fee for access. We will respond within a reasonable period (typically within 14 days).
13. Notifiable Data Breaches (NDB)
If your personal information is involved in an eligible data breach likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law, and provide steps you can take in response.
14. Children
Our Services are designed for business use and are not directed to children. If we discover we have collected personal information from a child contrary to law, we will take reasonable steps to delete it.
15. Contacting us (requests & complaints)
If you have questions, want to exercise your privacy rights, or wish to make a complaint, contact us:
Taly Pty Ltd
PO Box 700, Fullarton SA 5063
Email: privacy@taly.com
We’ll investigate and respond within a reasonable timeframe. If you’re not satisfied with our response, you can contact the OAIC (see complaint guidance at the OAIC website).
16. Links and third-party services
Our websites may link to third-party sites or services. Their privacy practices are their own; we encourage you to review their privacy policies. If you access third-party sites from ours, your information may be collected by those third parties.
17. Changes to this Policy
We may revise this Privacy Policy from time to time to reflect changes to our practices, legal obligations, or service offerings. When we do, we will update the effective date at the top of this page and, where appropriate, provide you with notice by email or through our platform. We encourage you to review this page periodically to stay informed about how we are protecting your data and respecting your privacy preferences.