Gettit Privacy Policy

Provided by: Gettit Pty Ltd (ACN 699 431 886, ABN 55 699 431 886) ("Gettit", "we", "us", "our") Contact for privacy matters: Privacy Officer, privacy@gettit.com.au / help@gettit.com.au Effective date: 1 August 2026 Version: 2026-08-01, last updated 1 August 2026 (re-issued alongside the updated Terms of Service; content unchanged from version 2026-07-31)

---

1. About this Policy

This Privacy Policy explains how Gettit Pty Ltd collects, holds, uses, discloses and protects personal information when you use the Gettit app, our website at gettit.com.au, and all related services (together, the "Platform").

We handle personal information in accordance with the Privacy Act 1988 (Cth) (the "Privacy Act") and the thirteen Australian Privacy Principles (the "APPs") set out in that Act. Where other laws apply to particular information, such as tax or anti-money-laundering laws, we comply with those as well.

By using the Platform you acknowledge that your personal information will be handled as described in this Policy. If you do not agree with this Policy, please do not use the Platform.

This Policy sits alongside our Terms of Service, our Community Guidelines and our End User Licence Agreement. Words that are capitalised but not defined here have the meaning given in the Terms of Service.

2. What we mean by personal information

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information is true or not and whether or not it is recorded in a material form. "Sensitive information" is a special category of personal information that includes things such as health information and biometric information, and it attracts higher protection under the Privacy Act.

3. The information we collect

We collect only what we need to run a safe marketplace, to move money securely, and to meet our legal obligations.

Information you give us directly

Account details, including your name, email address, phone number and password.
Profile details, including your display name, profile photo and any bio you choose to add.
Listings and messages, including item details, photos, and the content of chats you exchange with other members through the Platform.
Support requests, dispute submissions and any evidence you provide to resolve a dispute, which may include photos or video such as an unboxing video, and item identifiers like a serial number or IMEI, used to resolve disputes, verify items and prevent fraud.
Any other information you choose to give us, for example when you respond to a survey or contact our team.

Information we collect as you use the Platform

Location information. We collect device or listing location so we can show nearby items and enable local handovers. We hold your precise location on our servers, but we never publish it or expose it to other members. Other members only ever see a blurred, generalised area, not your exact address or pin. Section 6 explains this in detail.
Device and usage information, including app version, device type and identifiers, operating system, IP address, and your activity within the Platform. We use this for security, fraud prevention, troubleshooting and improving the product.
Cookies and similar technologies on our website and app, as described in section 12.

Information collected and held by our providers rather than by us

Payment information. Card and bank account details are collected and stored by our payment provider, Stripe. Gettit does not receive or store your full card number.
Identity verification information. To pay out sellers, and for risk-triggered checks, we use Stripe's identity verification. Identity documents and any biometric or selfie checks are collected and handled by Stripe as the regulated party. Gettit does not store your identity documents or biometric data. We keep only the outcome of the check (for example, verified or not verified), a reference number and the relevant timestamps. Because identity documents and biometric checks are sensitive information, we rely on your consent, given when you choose to verify, for this collection by our provider.

Information from third parties

We may receive information about you from our service providers (for example, a verification result from Stripe or a delivery status from Australia Post), and, where you have chosen to connect them, from third-party sign-in services. We may also receive information from other members, for example when they report a listing or raise a dispute involving you.

We do not collect sensitive information beyond what identity verification and safety reasonably require, and we do not ask you to provide it through your listings or messages.

4. How we collect information

We collect personal information directly from you wherever it is reasonable and practicable to do so, for example when you create an account, create a listing, message another member or contact support. We also collect information automatically as you use the Platform, and from the third parties described in section 3. If we ever receive personal information about you that we did not ask for and could not lawfully have collected, we will deal with it as the APPs require, including by destroying or de-identifying it where appropriate.

5. Why we use your information

We use personal information for the following purposes:

to create, manage and secure your account, and to verify your identity;
to operate the marketplace, including listings, search, messaging and "near you" discovery;
to process payments, hold a buyer's payment securely with our payment provider, release it, and pay out sellers;
to provide the Gettit Protection purchase guarantee on eligible shipped orders;
to prevent, detect and investigate fraud, scams, off-platform-payment attempts and other misuse, and to keep members safe;
to moderate content and enforce our Terms of Service and Community Guidelines;
to handle disputes, complaints and support requests;
to meet our legal, tax, regulatory and safety obligations, including obligations under the Online Safety Act 2021 (Cth);
to improve and develop the Platform, including through analytics; and
to send you service messages, and, where you have not opted out, product updates and offers about Gettit, in line with the Spam Act 2003 (Cth).

We will not use your personal information for a purpose that is unrelated to those above, or that you would not reasonably expect, unless you have consented or the law permits or requires it.

6. Location privacy

Location is central to how Gettit works, and to your safety, so we treat it with particular care.

Your precise location never leaves our servers in a form that identifies where you are.
When a listing or profile is shown to other members, we display only a blurred, generalised area, large enough to protect your exact whereabouts.
We use the precise value internally only to calculate distance, to power "near you" sorting, and for fraud and safety checks.
You can control location permissions through your device settings. If you switch location off, some features, such as local discovery, may not work as intended.

7. Automated processing and decision-making

We use automated tools to help keep the marketplace safe and to operate it efficiently. These tools support fraud and scam detection, content moderation, search ranking and parts of our dispute handling. Significant decisions that affect you, such as suspending an account, withholding or reversing a payout, or resolving a disputed payment, involve a defined process and are subject to human review, and you can ask us to explain a decision and to reconsider it by contacting us at help@gettit.com.au. We will tell you, in line with our obligations under the Privacy Act, where automated processing is used in a way that could reasonably be expected to significantly affect your rights or interests, and how it works at a general level.

8. When we share your information

We do not sell your personal information, and we do not sell advertising. We disclose personal information only in the following circumstances.

To other members, to the extent needed to complete a trade. For example, a seller's display name and the blurred area of a listing are visible to buyers, and for a shipped order the delivery details needed to generate an Australia Post label are made available so the parcel can be sent.
To service providers who help us operate the Platform, under contracts that require them to protect your information and use it only for the services they provide to us. These include Stripe (payments and identity verification), Australia Post (delivery and tracking), ShipStation, the shipping platform we use to buy the Australia Post label for your parcel and to retrieve its tracking, or any replacement provider we notify to you (the delivery details printed on the label, including the recipient's name and address, are provided to it for that purpose), and our hosting, messaging, mapping, analytics and customer-support providers.
Where required or authorised by law, including to courts, regulators and law-enforcement agencies, and to comply with the Online Safety Act 2021 (Cth), tax law and anti-money-laundering law.
To protect people and rights, where we reasonably believe disclosure is necessary to prevent or address fraud, a threat to life, health or safety, or harm to the rights, property or safety of members, the public or Gettit.
In a business transfer, such as a merger, acquisition or sale of assets, in which case your information would remain subject to a policy consistent with this one.

9. Sending information overseas

Some of our service providers store or process information outside Australia. The countries in which our providers may handle your information include the United States, Ireland and member states of the European Union. Before disclosing personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs, usually through contractual protections. In some cases, a provider may be subject to a law or binding scheme that protects the information in a way that is at least substantially similar to the APPs.

10. How we keep your information secure

We protect personal information with measures appropriate to its sensitivity. These include encryption of information in transit, access controls and least-privilege access for our team, an append-only financial ledger that is reconciled daily, signed and idempotent payment webhooks, secure hosting, logging and ongoing monitoring. We require our service providers to maintain appropriate security as well.

No system can be guaranteed to be perfectly secure. If a data breach occurs that is likely to result in serious harm, we will assess and respond to it in accordance with the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act, including by notifying affected individuals and the Office of the Australian Information Commissioner (the "OAIC") where required.

11. How long we keep your information

We keep personal information only for as long as we need it for the purposes set out in this Policy, or for as long as the law requires.

Account and profile information is kept while your account is active.
Transaction, payment and tax records are kept for the period required by law, which is generally at least five to seven years.
Safety, fraud and dispute records are kept for as long as needed to protect members and to meet our legal obligations.

When we no longer need personal information, we delete it or de-identify it. Some information may remain in secure backups for a limited period before it is overwritten.

12. Cookies and analytics

Our website and app use cookies and similar technologies to keep you signed in, remember your preferences, secure the Platform, and understand how the product is used so we can improve it. We use privacy-respecting analytics, and we do not use cookies for third-party advertising or to build advertising profiles. You can manage cookies through your browser or device settings, although some features may not work properly if you disable them.

13. Direct marketing

Where you have not opted out, we may send you updates and offers about Gettit. Every marketing message includes a simple way to unsubscribe, and we will action your request promptly. You can also opt out at any time by contacting us at help@gettit.com.au or by updating your notification settings. Service messages that are necessary to operate your account, such as security alerts and transaction updates, are not marketing and will continue regardless of your marketing preferences.

14. Your rights: access and correction

Under the APPs you can:

ask for access to the personal information we hold about you; and
ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.

You can update much of your profile directly in the app. For anything else, contact us at help@gettit.com.au. We will respond within a reasonable time, usually within 30 days, and we will verify your identity before acting on a request. If we cannot give you access or make a correction, we will tell you why in writing and explain how you can seek a review. We do not charge for making a request, although a reasonable cost may apply to give access in some cases, and we will tell you in advance if it does.

You can also ask us to close your account. We will do so, while keeping any records the law requires us to retain.

15. Children

Gettit is intended for people aged 18 and over. It is not designed for, or directed at, children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us at help@gettit.com.au and we will take reasonable steps to delete it.

16. Complaints

If you have a concern about how we have handled your personal information, please contact our Privacy Officer at privacy@gettit.com.au / help@gettit.com.au. We take privacy complaints seriously and will acknowledge your complaint promptly and aim to resolve it within a reasonable time, usually within 30 days.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, by phone on 1300 363 992, or by writing to GPO Box 5288, Sydney NSW 2001.

17. Changes to this Policy

We may update this Policy from time to time. If a change is material, we will take reasonable steps to notify you, for example through the app or by email, and, where appropriate, give you the chance to review it before it takes effect. The version in effect at any time is identified by its version number and effective date at the top of this Policy.

18. How to contact us

For any question about this Policy, to exercise a right, or to make a privacy complaint, contact:

Privacy Officer, Gettit Pty Ltd Email: privacy@gettit.com.au / help@gettit.com.au

The version of this Policy shown in the Gettit app is the same as the version published at gettit.com.au/legal/privacy_policy.