Personal information: what, why, who, how long

This policy lists the personal information Deft Swaphaldine handles, the purposes, the legal bases, the disclosures, the retention periods and your rights under the Australian Privacy Act,

A note on data minimisation as a design rule: the platform collects what a function needs when that function is used, not in anticipation of future uses, so a feature that ever requires new information will ask for it at that moment with its purpose stated, rather than mining a surplus gathered years earlier.

applying from your first visit and written to be read.

1. Definitions

Individual: the person the information describes. Personal information: data identifying a person. APP entity: the platform operated under the Deft Swaphaldine brand. Processor: a provider handling data on our instructions. Usage data: the traces your visits leave.

2. Personal information collected

At registration: given name, surname, phone and email. At verification: details from your identity document and declared address. In support exchanges: the content of your message and our reply. The site serves people aged 18 and over only.

3. Usage data

Recorded per visit: pages viewed, time, device and browser type, and IP address. Uses: security, fault diagnosis and aggregated statistics that identify no one.

4. Cookies

Essential cookies keep sessions and preferences alive; analytics cookies run only with your consent and measure aggregate use. Blocking or deleting cookies in your browser breaks nothing except some convenience.

5. Privacy contact

The APP entity is the platform operated under the Deft Swaphaldine brand, 28-36 Ainslie Avenue, Level 3, Canberra City ACT 2601, reachable at [email protected] with the subject "Privacy".

6. Purposes

Account operation and access; KYC/AML verification; support replies; fraud and prohibited-use prevention; legal obligations; and, consent permitting, commercial messages about the platform itself.

7. Legal bases

Service contract performance for account operation; legal obligation for verification and prevention; legitimate interest for security and fraud defence; and explicit consent for marketing, revocable at any time through the unsubscribe link in every send.

8. Retention

Account data lives while the account does and, after closure, for the legally required period. KYC documents follow AML retention rules, support correspondence is kept for two years, and usage statistics de-identify within weeks, a schedule reviewed annually so retention never drifts from its stated purpose.

9. Disclosure

Recipients: cloud infrastructure, email delivery, analytics and KYC providers (all processors under contract); payment providers; operationally related group companies; and

On the difference between sharing and selling, since the two are often conflated: sharing means named categories of recipients receiving specific fields for a stated service, all listed in section nine above, while selling means trading your information for value, which this platform does not do in any form, with anyone, ever.

authorities such as AUSTRAC on a valid legal basis. Personal information is never sold for advertising, and international transfers ride the Privacy Act's safeguards.

10. Security

Encryption in transit and at rest, role-based access, audit logging and periodic permission review, and if an incident touches your information, notification follows without undue delay with the corrective measures attached.

11. Your rights

Access, correction of inaccurate or incomplete records, and information about disclosures. Written requests to [email protected] are answered within the statutory periods after identity confirmation, access and correction typically inside five business days, and every extension carries a reason and a fresh date, because silence is the one response this process is never allowed to give.

12. Providers

The provider list stays deliberately short and purpose-bound, cloud, email, analytics, KYC and payment processing, each under a processor contract forbidding own-use of the data, a boundary audited annually rather than merely promised.

13. Analytics and retargeting

Aggregate measurement only today; any future retargeting would require prior, clearly notified consent and one-click opt-out, and no third-party advertising network runs on this site now.

14. Third-party links

Convenience links out, payment providers for instance, land on pages governed by their own policies; this policy covers the Deft Swaphaldine site and platform.

15. Minors

Service restricted to over-18s, information about a minor being deleted immediately and the account closed once identified, with guardians able to start that procedure through the privacy contact.

16. Changes and contact

Updates publish here with the current date and material changes notify registered users. Questions: [email protected].

Last updated: 10/2026.