Privacy Policy.

Effective date: 2 July 2026

Humid Pty Ltd (ABN 83 695 252 763), trading as "iGreat" 3 Goldman Lane, Double Bay, Sydney, NSW 2028, Australia igreat.cloud | contact@igreat.cloud

Humid Pty Ltd (ABN 83 695 252 763), trading as "iGreat", of 3 Goldman Lane, Double Bay, Sydney, NSW 2028, Australia ("iGreat", "we", "us") is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, hold, use and disclose personal information, and how you can access or correct it or make a complaint.

We handle personal information in two capacities:

As the operator of the Platform. For our own account holders (Businesses and their Authorised Users) and website visitors, we decide how their information is handled.
On behalf of a Business. When a Member interacts with a Business through the Platform, we handle that Member's personal information on the Business's behalf and under its instructions. The relevant Business's own privacy policy also applies to that Member.

Capitalised terms have the meanings given in the iGreat Terms of Service.

1. The personal information we collect

Information you provide to us:

account information, such as name, email address, phone number and password;
business information, such as business name, address, ABN or tax details, and service offerings;
profile details you choose to add;
communications, such as messages, feedback and support requests; and
payment-related information. We do not store full card numbers; card payments are handled by our payment provider, Stripe, which is PCI-DSS compliant. We may hold limited transaction records such as amount, date, status and the last four digits of a card.

Information collected automatically:

usage data, such as pages and features used, actions taken and timestamps;
device and log data, such as browser, operating system, device identifiers and IP address;
approximate location derived from your IP address, and precise location only if you grant permission; and
information collected through cookies and similar technologies (see clause 7).

We collect personal information by lawful and fair means, directly from you where reasonable and practicable, and collect only what we reasonably need.

2. How and why we use personal information

We use personal information to:

provide, operate, secure and improve the Platform, including bookings, memberships and the facilitation of payments;
send transactional communications, such as confirmations, reminders and security and account notices;
provide support and respond to your requests;
send marketing about our features and offers where you have consented or as otherwise permitted by the Spam Act 2003 (Cth); you can opt out at any time;
detect and prevent fraud, abuse and security incidents; and
comply with our legal obligations.

We will only use or disclose personal information for the purpose for which it was collected, a directly related purpose you would reasonably expect, or as otherwise permitted under the Australian Privacy Principles.

3. When we disclose personal information

We do not sell personal information. We disclose it in the following circumstances:

To the relevant Business. When a Member books or purchases, we share the information the Business needs to fulfil that booking or purchase.
To service providers who help us operate the Platform, such as cloud hosting and database, payment processing, email delivery and analytics providers, under obligations of confidentiality and security.
As required by law, to comply with a law, court order or lawful request.
In a business transfer, in connection with a merger, acquisition or sale of assets, subject to this policy.
With your consent, otherwise as you direct.

4. Overseas disclosure

Some of our service providers store or process personal information outside Australia. Our current overseas providers include:

our database and hosting provider (Supabase, operating on Amazon Web Services), located in India;
our web hosting and content-delivery provider (Vercel), located in the United States;
our payment provider (Stripe), located in the United States;
our network, storage and email-routing provider (Cloudflare), located in the United States; and
our transactional email providers (Amazon Web Services and Resend), located in the United States.

Before disclosing personal information overseas, we take steps that are reasonable in the circumstances to ensure that the recipient handles it consistently with the Australian Privacy Principles, and we remain accountable for that information as required by the Privacy Act.

5. Data security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, including:

encryption of data in transit using TLS;
access controls and separation of each Business's data;
use of PCI-DSS-compliant payment processing, so that full card data is not stored on our systems; and
monitoring and periodic security review.

No system is completely secure. If an eligible data breach occurs, we will comply with the Notifiable Data Breaches scheme and notify affected individuals and the Office of the Australian Information Commissioner as required.

We retain personal information only for as long as it is needed for the purposes described in this policy or as required by law, after which we destroy or de-identify it.

6. Accessing and correcting your information, and complaints

You may:

request access to the personal information we hold about you;
request correction of information that is inaccurate, out of date or incomplete; and
opt out of marketing communications at any time.

To make a request, contact our Privacy Officer at contact@igreat.cloud. We will respond within a reasonable time, generally within 30 days, and we do not charge for making a request.

If you are not satisfied with how we have handled your personal information or your complaint, you may contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

7. Cookies and similar technologies

We use cookies and similar technologies for:

essential functions, such as authentication and security;
analytics, to understand how the Platform is used so we can improve it; and
preferences, to remember your settings.

You can manage cookies through your browser settings. Disabling some cookies may affect functionality.

8. Children

The Platform is intended for users aged 18 and over and is not directed at children. We do not knowingly collect personal information from children. Where a Business offers services to minors, the Business is responsible for obtaining any parental or guardian consents required.

9. Changes to this policy

We may update this policy to reflect changes in our practices or the law. We will post the updated policy with a new effective date and, for material changes, take reasonable steps to notify you.

10. Contact us

Humid Pty Ltd (ABN 83 695 252 763), trading as iGreat Attention: Privacy Officer 3 Goldman Lane, Double Bay, Sydney, NSW 2028, Australia Email: contact@igreat.cloud Web: igreat.cloud

Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992