Micah Group Pty Ltd ("we", "us", or "our") operates the LocalStalls SaaS ("Service"). This Privacy Policy outlines how we collect, use, and protect your personal data when using our Service. We are committed to complying with applicable privacy laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Australian Privacy Act 1988 (APPs).

1. Information We Collect

1.1 Personal Data

We may collect the following personal information:

• Name, email address, phone number, and address
• Payment information
• Session data and usage patterns
• Business or organisational details (e.g., company name, business address, ABN)
• IP address and device identifiers

1.2 Non-Personal Data

We may collect aggregated, anonymised data for analytics and service improvement.

2. Purpose of Data Collection

We use your data to:

• Provide and improve our services
• Facilitate payments and transactions
• Ensure compliance with legal and regulatory requirements
• Enhance security and fraud prevention

3. Legal Basis for Processing (UK & EU GDPR)

For users in the UK and EU, we process personal data based on:

• Contractual necessity (e.g., providing our Service)
• Legal obligations (e.g., regulatory compliance)
• Legitimate interests (e.g., improving our platform)
• Consent (where required, such as for marketing communications)

4. Data Storage & International Transfers

We operate globally and store data in multiple locations:

• UK/EU user data is stored on servers within the UK/EU.
• Australian user data may be stored in Australia or other regions.
• We use Standard Contractual Clauses (SCCs) or adequacy decisions when transferring data outside the UK/EU.

5. Data Sharing & Third Parties

We may share your data with:

• Payment providers (e.g., Stripe) to process transactions
• Analytics providers (e.g., Google Analytics) to improve our services
• Regulatory authorities, if required by law

We do not sell or rent personal data.

6. Data Retention

We retain data only as long as necessary. Upon account termination, data is securely deleted or anonymised unless required for legal or audit purposes.

7. Your Rights (UK/EU Users)

If you are in the UK or EU, you have the right to:

• Access your data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Withdraw consent where applicable
• Request data portability

To exercise these rights, contact us at hello@localstalls.com. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority.

8. Your Rights (Australian Users)

Under the Australian Privacy Act 1988, you have the right to:

• Access and correct your personal data
• Complain to the Office of the Australian Information Commissioner (OAIC) if your privacy rights are violated

9. Security Measures

We implement industry-standard security measures, including encryption, secure servers, and access controls, to protect your data.

10. Cookies & Tracking Technologies

We use cookies and tracking technologies for service improvement and analytics. You can manage cookies through your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be notified via email or on our website.

12. Contact Us

If you have any questions, contact us at:

Email: hello@localstalls.com
Website: https://localstalls.com