Privacy and collection notice

BountyHunt is a business name operated by A.C.N. 700 220 784 PTY LTD (ABN 77 700 220 784), which is responsible for personal information handled through the Australian service. Privacy questions, access or correction requests and complaints may be sent to support@bountyhunt.com.au with the subject 'Privacy'. BountyHunt applies the safeguards in this notice as its Australian operating baseline whether or not every Australian Privacy Principle applies to a particular record or activity.

• Account and support contact details.
• Purchase requirements, broad location, budget range, timing and category answers entered in a Bounty.
• Product descriptions, retailer links, model numbers or other identifiers supplied for matching; never passwords, order credentials or payment-card details.
• Search sources, result snapshots, price-check time, ranking position, outbound-link events and conversion or commission references returned by an approved provider.
• Verification results, dates and provider references—not raw identity documents where a specialist provider can perform the check.
• Business identity, representative authority, licences, insurance and offer information.
• Consent records, access logs, fraud signals and technical information needed to protect the marketplace.

• Create and verify Bounties, match suitable businesses and present comparable offers.
• Search approved connected product sources, calculate total delivered price, explain coverage and keep commercial compensation out of ordinary ranking.
• Measure whether a disclosed referral led to a qualifying purchase and reconcile the resulting commission without exposing the buyer's contact details to losing businesses.
• Screen requests, businesses and transactions against prohibited-purchase, product-safety, fraud and market-activation rules.
• Keep personal contact details hidden until the buyer selects a business and gives a separate release consent.
• Operate support, complaints, security, legal and payment processes.
• Meet record-keeping, tax, sanctions, reporting, fraud-prevention and regulatory obligations.
• Improve aggregate marketplace coverage without selling identifiable buyer profiles.

Businesses receive only the non-identifying purchase facts needed to decide whether to make an offer. One selected business may receive the minimum approved contact details after the buyer consents and the current offer, business-verification, market and safety gates pass.

An approved shopping-data provider or connected retailer may receive the minimum product query, country and coarse delivery area needed to return price and availability. It does not receive a buyer's direct contact details merely because a search ran or a result appeared.

Service providers may process data for hosting, authentication, verification, payments, email, support, security and analytics under contractual and access controls. Some providers and their subprocessors may handle information outside Australia, including in the United States and other countries in which their infrastructure or support teams operate. BountyHunt takes reasonable steps appropriate to the disclosure and updates the provider record when the service changes.

Government bodies, regulators, courts, law-enforcement agencies or professional advisers may receive information where required or authorised by law, including seller and transaction information reportable to the Australian Taxation Office for applicable service transactions.

This notice applies to the Australian service. A global BountyHunt front door does not mean buyer intake, business participation or a purchase category is available everywhere in Australia. An exact market and category opens only when its current operational, privacy, merchant, safety and support controls are active.

England, the United States and every later country require their own adopted collection, processing, transfer, rights, retention, security and breach-notification pack before intake opens there.

• A Bounty is pseudonymous to businesses, not invisible to BountyHunt.
• Marketing consent is separate from service messages and contact-release consent.
• No business may resell contact data or use it outside the selected purchase.
• Contact access is time-limited, logged and revocable where the transaction no longer requires it.

Email support@bountyhunt.com.au with the subject 'Privacy' to request access to or correction of personal information, withdraw optional consent, close an account or ask whether information can be deleted or de-identified. BountyHunt may need to retain marketplace, consent, payment, fraud, tax, dispute, suppression and corporate records for the period reasonably required by law and operational risk. We will explain a refusal or continuing retention where required and aim to respond within 30 days.

BountyHunt keeps personal information only for as long as reasonably needed for the purpose collected and applicable legal, tax, fraud, dispute, security and audit requirements. Account and active marketplace records are reviewed when an account or Bounty closes; support and incident records are reviewed against their risk and limitation periods; tax, transaction, consent and material dispute evidence may be retained for up to seven years or longer where law or an unresolved proceeding requires it. Suppression evidence may be retained as a protected hash for as long as needed to honour an unsubscribe. Information no longer required is deleted or de-identified where practicable.

BountyHunt uses role-based access, encryption for protected support content, hashed one-time offer links, audit records and data minimisation. No system is risk-free. Suspected incidents enter a human-led response process that assesses containment, affected information and whether the Notifiable Data Breaches scheme requires notice to the Office of the Australian Information Commissioner and affected people.

The initial service is for people aged 18 or older. Automated screening may block a clearly prohibited request or hold an uncertain request away from businesses. Matching and risk signals assist operations but must not make undisclosed materially significant decisions without an appropriate explanation and human review path. BountyHunt will publish meaningful information about any automated decision system before it affects a customer.

Email support@bountyhunt.com.au with the subject 'Privacy complaint'. We will acknowledge the complaint, assign it to a human owner and explain the outcome. If the issue is not resolved, a person may be able to complain to the Office of the Australian Information Commissioner. Nothing in this notice discourages a lawful complaint to a regulator, bank, court, law-enforcement agency or other appropriate body.