Data Privacy.

Privacy and Cookie Policy

‍Last Updated: 12 August 2025

‍

Moots Technology Pty Ltd (“Moots Technology”, "Moots", "Moots Tech", “we”, “us”, “our”) provides customer self-hosted platforms, cloud-based software services, and professional services to business and organisational customers. We are committed to protecting your personal information in compliance with:

• The Australian Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs) and the Notifiable Data Breaches (NDB) scheme.
• Where applicable, the EU General Data Protection Regulation (GDPR), the UK GDPR, and other similar international privacy laws.

This Privacy Policy explains how we collect, store, process, and protect personal data in connection with our SaaS services and related business activities.

1. Who We Are and Contact Information

‍Data Controller (for account and billing data):

Moots Technology Pty Ltd, 169 Fullarton Rd, Dulwich SA 5065, Australia; or its current business address.

‍
EU Representative:

run-e Software & Consulting GmbH & Co KG, Pariser Bogen 7, 44269 Dortmund, Germany

‍
Privacy queries: Contact

2. Roles

For customer account and billing information, we act as a data controller.

For customer-uploaded data processed through our SaaS platform, we act as a data processor and process data only on the customer’s instructions.

3. Data We Collect

We may collect:

• Identity & Contact Data: name, business title, company, work email, work phone.
• Technical Data: IP address, browser type, device identifiers, access logs.
• Contract & Billing Data: invoices, payment confirmations.
• Support Data: information you provide in tickets or chats.
  

We do not knowingly collect data from children under 16.

‍

4. How We Collect Data

• Directly from you (forms, calls, emails).
• Automatically (cookies, logs).
• From third parties providing integrated services.

‍

5. Purposes of Processing

We process data to:

• Provide and operate the Services,
• Manage accounts and billing,
• Respond to support requests,
• Comply with legal obligations,
• Send service-related communications,
• Send, where permitted, relevant marketing communications.

‍

6. Cross-Border Data Transfers

6.1 Primary Hosting

We host customer SaaS data in:

• Australia for Australian customers,
• United States for US customers,
• European Union for EU customers.
  

6.2 Ancillary Services

We use certain third-party tools (e.g., live chat, CRM, email services, project management) that may process limited personal data in other jurisdictions.

We select providers with recognised certifications (ISO 27001, SOC 2) and require contractual safeguards equivalent to APPs and GDPR Standard Contractual Clauses.

‍

7. Security Measures

We encrypt data in transit and at rest, apply role-based access controls, conduct audits, and maintain an incident response plan.

‍‍

8. Data Subject Rights‍

• Australia: access and correction.
• EU/UK: access, correction, erasure, restriction, objection, portability, withdrawal of consent.
  

Requests: Contact

‍

9. Retention

• Billing records: 7–10 years (legal requirement).
• Support correspondence: up to 3 years.
• Customer SaaS data: deleted within 60 days of contract termination unless otherwise required by law.

‍

10. Breach Notification

We will notify the OAIC and affected individuals as soon as practicable for eligible breaches under the NDB scheme, and EU/UK supervisory authorities within 72 hours for GDPR-reportable breaches.

‍

11. Cookie Policy

‍

‍11.1 What Are Cookies

Cookies are small files stored on your device to help websites work and improve user experience.‍

‍

11.2 Cookies We Use

Our website uses:

• Essential cookies: required for the website to function (security tokens, session cookies).
• Analytics cookies: measure how visitors use our site and help us test improvements.
• Support cookies: enable live chat and store chat session details.

11.3 Consent in Certain Jurisdictions

In Australia and most jurisdictions, these cookies are set by default. In jurisdictions where local law requires prior consent, analytics and support cookies will only be set after you opt-in via our cookie notice.

11.4 Managing Cookies

You can block or delete cookies through your browser settings. Disabling essential cookies may affect site functionality, including live chat.

11.5 Third-Party Services

When we use Zoho services, Zoho acts as our data processor and processes data only according to our instructions. Zoho’s privacy policy is available at: https://www.zoho.com/privacy.html

12. Changes to This Policy

We review this Policy at least annually or when laws or our operations change. Updates will be published on this page with the “last updated” date.