Privacy Policy & Data Protection

1. Introduction & Commitment

Dezzio Holdings Pty Ltd ("we," "us," or "Dezzio") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We adhere to the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), the General Data Protection Regulation (GDPR) for European users, the California Consumer Privacy Act (CCPA), and other applicable privacy laws worldwide.

2. Information We Collect

2.1 Information You Provide Directly

When you register, use our services, or contact us, we may collect:

• Personal Identification: Name, email address, phone number, postal address
• Business Information: Company name, business registration details, trading name, domain name, tax identification numbers
• Account Information: Username, password (encrypted), profile information
• Payment Information: Billing address and payment details (processed securely through third-party payment processors)
• Professional Details: Portfolio samples, service offerings, business references, insurance documentation
• Communications: Any information you provide in correspondence with us

2.2 Information Collected Automatically

When you access our website or services, we automatically collect:

• Device Information: IP address, browser type and version, device type, operating system
• Usage Data: Pages visited, time spent on pages, click patterns, referring/exit pages
• Location Data: General geographic location based on IP address
• Log Data: Server logs including timestamps, error messages, and system activity

The extent of automatic data collection may vary depending on your device type and settings.

2.3 Information from Third Parties

We may receive information about you from:

• Service providers and partners in our marketplace network
• Payment processors (Stripe, Wise, PayPal)
• Business verification services
• Social media platforms (if you choose to connect them)

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve our marketplace services
• Account Management: To create and manage your account, process transactions, and bill monthly fees
• Communication: To send service-related notifications, updates, and respond to inquiries
• Marketplace Operations: To connect service providers with clients and facilitate transactions
• Security: To detect, prevent, and address fraud, security issues, and technical problems
• Compliance: To comply with legal obligations and enforce our terms and conditions
• Analytics: To analyze usage patterns and improve our services
• Marketing: To send promotional materials (with your consent where required)

Important: Individual profile and company details are not used for any purpose other than for your own use and for billing your monthly fees, unless you engage service providers through our network.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on:

• Contract: Processing necessary to perform our contract with you
• Consent: You have given clear consent for specific purposes
• Legitimate Interests: Processing necessary for our legitimate business interests
• Legal Obligation: Processing required to comply with legal requirements

5. Information Sharing & Disclosure

5.1 Service Provider Network

When you engage service providers through our marketplace, your contact information and relevant project details are shared with those providers to facilitate service delivery.

5.2 Third-Party Service Providers

We share information with trusted third parties who assist in operating our platform:

• Payment Processors: Stripe, Wise, PayPal (all PCI DSS Level 1 compliant)
• Cloud Services: Hosting and storage providers
• Analytics: Google Analytics for website traffic analysis
• Communication: Email service providers
• Partners: Companies like Imagecloud for service delivery

5.3 Legal Requirements

We may disclose your information when required to:

• Comply with legal obligations, court orders, or legal processes
• Protect our rights, property, or safety and that of our users
• Investigate and prevent fraud or security issues
• Respond to lawful requests from public authorities

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.5 No Sale of Personal Data

We do not sell your personal information to third parties.

6. Cookies & Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality and authentication
• Session Cookies: Temporary cookies deleted when you close your browser
• Persistent Cookies: Remain on your device to remember preferences
• Analytics Cookies: Google Analytics to understand site usage

6.2 Your Cookie Choices

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality. We currently do not interact with advertising networks like Google AdWords.

6.3 Do Not Track

Our website responds to "Do Not Track" signals and will not track users when DNT is enabled.

7. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: SSL/TLS encryption for data transmission
• Payment Security: No credit card data is stored directly by Dezzio. All payment processing is handled by PCI DSS Level 1 compliant processors
• Access Controls: Restricted access to personal information on a need-to-know basis
• Regular Audits: Periodic security assessments and updates
• Secure Infrastructure: Protected servers and databases

Disclaimer: While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Privacy Rights

8.1 General Rights

You have the right to:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing in certain circumstances

8.2 GDPR Rights (EEA Users)

Under GDPR, you also have:

• The right to withdraw consent at any time
• The right to lodge a complaint with a supervisory authority
• The right not to be subject to automated decision-making

8.3 CCPA Rights (California Residents)

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

8.4 Exercising Your Rights

To exercise any of these rights, contact us at privacy@dezz.io. We will respond within the timeframes required by applicable law (typically 30 days).

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Retention periods vary based on:

• Active Accounts: Information retained while your account is active
• Closed Accounts: Essential information retained for legal, accounting, or fraud prevention purposes (typically 7 years)
• Marketing Data: Retained until you opt-out or request deletion
• Legal Requirements: As required by applicable laws and regulations

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including Australia and other jurisdictions where our service providers operate. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by relevant authorities
• Binding Corporate Rules where applicable
• Your explicit consent where required

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly.

If you believe we have collected information from a child, please contact us immediately at privacy@dezz.io.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the bottom of this policy
• Notify you via email or prominent notice on our website
• Obtain your consent where required by law

We encourage you to review this policy periodically. Your continued use of our services after changes constitute acceptance of the updated policy.

14. Contact Information & Data Protection Officer

For questions, concerns, or to exercise your privacy rights, please contact us:

For users in the European Economic Area, you may also contact your local data protection authority if you have concerns about how we process your personal information.

15. Dispute Resolution

If you have a complaint about our privacy practices, please contact us first at privacy@dezz.io. We will investigate and attempt to resolve complaints in accordance with this policy.

If you are not satisfied with our response, you may:

• Australia: Contact the Office of the Australian Information Commissioner (OAIC)
• EEA: Lodge a complaint with your national data protection authority
• California: Contact the California Attorney General

16. Specific Provisions by Jurisdiction

16.1 Australian Privacy Act

We comply with the Australian Privacy Principles (APPs) and handle personal information in accordance with the Privacy Act 1988 (Cth).

16.2 GDPR (European Users)

For users in the EEA, we act as a data controller. Our processing activities comply with GDPR requirements, including lawful basis, data minimization, purpose limitation, and accountability principles.

16.3 CCPA (California Residents)

California residents have specific rights under the California Consumer Privacy Act. We do not sell personal information as defined by CCPA.

16.4 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate, including but not limited to Canada's PIPEDA, Brazil's LGPD, and other regional privacy regulations.

17. Definitions

• Personal Information: Information that identifies or can be used to identify an individual
• Processing: Any operation performed on personal data, including collection, storage, use, and deletion
• Data Controller: Entity that determines the purposes and means of processing personal data
• Data Processor: Entity that processes personal data on behalf of the controller
• Consent: Freely given, specific, informed indication of data subject's wishes