Privacy Policy

1.1 Park EZ Pty Ltd (ACN 699 400 836) (“Park EZ”, “we”, “us”) takes the privacy of your information seriously. This Privacy Policy explains how and why we collect, hold, use, and disclose information about you through the Park EZ website (the “Website” or the “Platform”), in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1.2 By using the Platform, you agree to this Policy. If you have any questions, contact us using the details in clause 19.

We may collect the following categories of personal information:

• Identity and contact details: first and last name, address, date of birth, mobile number, email address, and password/security details.
• Listing and booking details: details of any Parking Space you list, and details of any booking you make.
• Banking and payment details: BSB, account number, and account name (for Hosts to be paid); card type, card number, expiry date, and CVV (processed by our payment processor — see clause 6).
• Vehicle details: make, model, and registration number.
• Geotagged check-in/check-out photos and location information: as described in clause 3 below — this is central to how Park EZ verifies bookings and is different from ordinary “background” location tracking.
• General location details when you access the Website (e.g. approximate location from IP address, used for showing nearby parking search results).
• Device and usage information: IP address, browser/device type, and similar technical data collected automatically.
• Correspondence: messages between you and us, or between you and other Users through the Platform.
• Other information you voluntarily provide to us.

It is not compulsory to provide this information, but if you don’t, you may not be able to register, list a Parking Space, make a booking, or complete a check-in/check-out.

3.1 What it is. To confirm that a Guest has arrived at, and later departed from, the correct Parking Space, the Website requires the Guest to take a photo through their web browser at the start and end of each booking — typically using a mobile phone’s browser to access the camera. Each photo is captured together with the device’s GPS location and a timestamp embedded in the image data — a “geotagged photo”.

3.2 This is mandatory, not optional. Unlike general location permissions elsewhere on the Website, taking a geotagged photo is a required step to check in and check out of a booking. To do this, you must grant your browser both camera and location permissions when prompted. If you do not, you will not be able to complete check-in/check-out, and this may affect your ability to rely on the Money-Back Guarantee Policy or Cancellation Policy, which depend on this evidence to resolve disputes.

3.3 Why we require it:

• to confirm the Guest’s vehicle was present at the correct, booked Parking Space at the agreed start and end times;
• to record the condition of the Parking Space (and, where relevant, the vehicle) at check-in and check-out, to help resolve damage or condition disputes between Host and Guest;
• to verify claims made under the Money-Back Guarantee Policy (e.g. that a space was unavailable, materially different, or unsuitable) or the Cancellation Policy;
• to detect and prevent fraudulent bookings, “phantom” check-ins, or GPS/location spoofing; and
• to support Park EZ’s own dispute-resolution and guest support processes.

3.4 Who can see it. A Host can view the geotagged check-in/check-out photos for their own Parking Space, to confirm the booking was honoured and to raise any condition issues. Park EZ staff can access geotagged photos to investigate disputes, fraud, or complaints. Other Guests, and Hosts of other spaces, cannot see your photos.

3.5 Retention. Geotagged photos are retained for 12 months after the end of a booking, or longer if needed to resolve an active dispute, claim, or investigation, after which they are securely deleted.

3.6 This clause 3 is provided in addition to, and doesn’t replace, the general information in clause 8 (data security) and clause 14 (location and camera permission controls) below.

4.1 We collect personal information directly from you when you register, create a listing, make a booking, complete a check-in/check-out, or contact us, and automatically through the Website (e.g. IP address, device information, and — for check-in/check-out — camera and location data, where you’ve granted the relevant browser permissions).

4.2 We will tell you at or around the time we collect information the kind of information being collected and why, consistent with APP 5.

We use your information to:

• process and manage your bookings, whether you’re a Host or a Guest;
• collect payment of parking fees on behalf of Hosts;
• verify check-in and check-out using geotagged photos (clause 3);
• make general improvements to the Platform and the services we offer;
• analyse how Users use the Platform;
• present testimonials or reviews you post to the Platform;
• provide directions or commuting suggestions based on your aggregated usage habits;
• carry out internal administration, investigate complaints, and provide guest support;
• notify you of certain offers or new features (subject to your right to opt out); and
• comply with our legal obligations, including tax reporting (see clause 12).

We do not use geotagged photos or location data to build advertising profiles, and we do not sell your personal information to data brokers or third-party advertisers.

6.1 Card and bank payments are collected by our third-party payment processor, Stripe. We do not store full card numbers or CVV security codes on our own servers.

6.2 We may share information with service providers who help us run the Platform (e.g. cloud hosting [insert provider/region], mapping/geolocation APIs [insert provider], and payment processing), each of whom is only permitted to use it for the purpose we specify.

6.3 We may transfer personal information to a third party as part of a sale, merger, or restructure of our business, taking reasonable steps to keep your information protected.

6.4 We may share non-identifiable, aggregated information (e.g. anonymised usage statistics) with third parties to help them understand Platform usage patterns.

6.5 We do not disclose your personal information to anyone else without your permission, unless required or authorised by law (see clause 12).

Some service providers may store or process your information, including geotagged photos and location data, on servers located outside Australia. Before this happens, we take reasonable steps to ensure the overseas recipient protects your information consistently with the APPs, including through contractual protections.

8.1 When you visit the Website, we may store a small file (“cookie”) on your device to help us recognise you, remember your preferences, and improve your experience — for example, keeping you logged in, remembering your general location for search, or reminding you about an incomplete booking or listing.

8.2 We do not store passwords or card numbers in cookies. You can block or delete cookies through your browser settings, but parts of the Platform may not work correctly if you do.

We are not responsible for the privacy practices of other websites, even where you reach them via a link on our Platform, or where you reach our Platform via a link from another site. Check the privacy policy of any other website you visit.

10.1 We store personal information, including geotagged photos, securely, with access restricted to prevent loss, unauthorised access, modification, or disclosure.

10.2 We use encryption to protect sensitive data in transit, and recommend you use a strong, confidential password.

10.3 We may store personal information on servers or with hosting providers outside our direct control (see clause 7). While we take commercially reasonable steps to keep your information secure, we can’t guarantee the security of information you transmit to us, and you do so at your own risk.

10.4 Notifiable Data Breaches. If we experience a data breach likely to result in serious harm to you (an “eligible data breach” under Part IIIC of the Privacy Act), we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable, consistent with our legal obligations.

You may ask to access or correct the personal information we hold about you (including your geotagged photos and location history) by contacting us using the details in clause 19. We will respond within a reasonable time (ordinarily no later than 30 days) and won’t charge you for making a request.

12.1 We may disclose your information to courts, law enforcement, government or tax authorities, or other authorised third parties where required or permitted by law, including to: comply with a legal obligation or valid legal request (e.g. subpoena or court order); investigate suspected illegal activity or fraud; enforce our Terms and Conditions; respond to legal claims involving Park EZ; or protect the rights, property, or safety of Park EZ, our Users, or the public.

12.2 Sharing Economy Reporting Regime (SERR). Since 1 July 2024, because Park EZ operates an electronic distribution platform, we’re required under the SERR to report certain transaction information to the Australian Taxation Office (ATO), generally twice a year. This may include: your full legal name; date of birth (for individuals); primary address; bank account details; ABN or foreign tax identification number; phone and email details; the address of the Parking Space and the period it was booked for; and payment information including total gross and net payments, GST attributable to payments, and total fees/commissions withheld. Providing this information to the ATO under SERR does not breach this Policy or Australian privacy law.

12.3 Where appropriate and legally permitted, we will notify you of legal requests concerning your information, unless prohibited from doing so or unless notice would be futile, unsafe, or increase a risk of fraud or harm.

13.1 You can review and revoke the camera and location permissions you’ve granted to the Website at any time through your browser settings (for example, in Chrome or Safari on a mobile phone: tap the site information/lock icon next to the address bar, or go to your phone’s Settings > [Browser name] > Location/Camera). As explained in clause 3.2, revoking these permissions will prevent you from completing check-in/check-out and may limit your ability to claim under the Money-Back Guarantee or Cancellation Policy.

13.2 Any Website feature that requests broader, ongoing background location — beyond the point-in-time permission needed for a check-in/check-out photo — will always be a separate, clearly labelled request, and browsers generally do not allow websites to track location in the background once you close the tab.

The Platform is not directed at, and must not be used by, anyone under 18. We do not knowingly collect personal information, including geotagged photos or location data, from children.

We keep personal information, including geotagged photos, only as long as reasonably necessary for the purposes in this Policy or as required by law (e.g. financial and tax records for SERR compliance — see clause 12.2), after which it is securely deleted or de-identified. On closing your account, we will delete or de-identify your personal information within 90 days, except where we must keep it for legal reasons or an ongoing dispute

If you believe we’ve breached the APPs, contact our Privacy Officer using the details in clause 19. We will investigate and respond within 30 days. If you’re not satisfied with our response, you can complain to the OAIC: www.oaic.gov.au, 1300 363 992.

We may update this Policy from time to time. Changes take effect once posted on the Platform, whether or not you’ve seen them — please check back periodically. The “Last updated” date above shows the current version.

If you have views about this Policy, or an enquiry about your personal information, contact us — see clause 19.

Park EZ Pty Ltd, Email: support@parkez.com.au