Privacy Policy

Version 1.2  ·  Last updated: 23 May 2026  ·  ABN: 80 103 984 544

This Privacy Policy explains how Gabriel Woo, trading as One Strata Home (ABN 80 103 984 544) (“we”, “us”, “our”), handles personal information in connection with the OneStrata platform and related services (the “Service”). It forms part of, and should be read together with, our Terms and Conditions. We handle personal information in a manner consistent with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). By using the Service, you agree to this Policy.

1. The information we hold

1.1 Information you enter. We only hold personal information that you (or your authorised users) enter into the Service. We do not independently collect personal information about you or any other person beyond what is entered into the Service. This may include names, email addresses, phone numbers, unit and building details, levy and financial records, documents, and messages.

1.2 Account and contact information. When you register, we hold the account details you provide, such as your name, email address, and phone number, and a record of your communications with us.

1.3 Technical information. Like most online services, basic technical information (such as that needed to keep you securely logged in) is processed when you use the Service. See the section on cookies below.

1.4 Payment information. Payments are processed by our payment provider (Stripe). We do not store full card details ourselves; these are handled directly by the payment provider.

2. Information about other people

2.1 You are responsible for the data you enter about others. The Service allows you, as the customer or administrator, to enter and store personal information about other people, such as owners and residents of a building. Where you do this, you are responsible for ensuring you have the right and authority to provide that information, and for notifying those individuals as required by law.

2.2 We act on your behalf. In relation to information you enter about other people, we act only as the software platform that stores and displays that information on your behalf. We are not the primary collector of that information and we are not responsible for how it was obtained or for your compliance with privacy law in collecting it.

3. How we use information

We use the personal information held in the Service to:

• provide, operate, maintain, and improve the Service;
• set up and manage your account and process your payments;
• communicate with you about the Service, including service, security, and account messages;
• provide support and respond to your enquiries;
• send you product updates, news, and marketing communications (you can opt out of marketing at any time using the unsubscribe link or by contacting us); and
• comply with our legal obligations and protect our legal interests.

4. Disclosure and service providers

4.1 Service providers. We use trusted third-party providers to deliver the Service, who may handle personal information on our behalf, including: Supabase (database and hosting), Stripe (payment processing), and Netlify (website hosting). We may engage additional service providers from time to time without separately notifying you, on the basis that they are bound to handle information appropriately.

4.2 Other disclosures. We may disclose personal information where required or permitted by law, to protect our rights or the safety of others, or in connection with a sale, restructure, or transfer of our business.

4.3 We do not sell your data. We do not sell personal information.

5. Storage and overseas processing

5.1 Where data is stored. Personal information entered into the Service is primarily stored on infrastructure hosted in Sydney, Australia.

5.2 Overseas processing. Some of our service providers (such as our payment and hosting providers) operate internationally, and as a result some personal information may be stored or processed overseas. By using the Service, you consent to this. We take reasonable steps to use reputable providers, but to the extent permitted by law, we are not liable for the handling of information by overseas providers acting outside our reasonable control.

5.3 Security. We take reasonable steps to protect personal information from misuse, loss, and unauthorised access. However, no online service can be guaranteed to be completely secure, and you provide information at your own risk. You are responsible for keeping your account credentials secure.

6. Retention

We retain personal information for as long as necessary to provide the Service, to operate our business, and to meet our legal and regulatory obligations. We may retain or delete information at our discretion in accordance with these purposes. You are responsible for keeping your own independent records of any information you may need.

7. Cookies and similar technologies

7.1 The Service uses cookies and similar technologies (such as browser storage) for essential functions, including keeping you securely logged in and remembering your session. These are necessary for the Service to work.

7.2 We may also use cookies or analytics tools to understand how the Service and our website are used so we can improve them. You can manage or disable cookies through your browser settings, but some features may not work correctly if you do.

8. Access, correction, and your choices

8.1 Your account information. You can access and update much of your account information directly within the Service. You may also contact us to request access to, or correction of, the personal information we hold about you.

8.2 Information held on behalf of an administrator. If you are an owner or resident and your information was entered by a building administrator, that administrator controls your information within the Service. Requests to access, correct, or delete that information should be directed to your building administrator, who is responsible for managing it. We will assist administrators where reasonably required.

8.3 Marketing opt-out. You can opt out of marketing communications at any time using the unsubscribe link in those messages or by contacting us. We may still send you non-marketing service and account messages.

9. Data breaches

In the event of a data breach involving personal information, we will respond and provide any notifications required of us under applicable law, including the Notifiable Data Breaches scheme where it applies. Our obligations are limited to those required by law.

10. Complaints and contact

10.1 Contact us first. If you have any questions, requests, or complaints about how we handle personal information, please contact us at contact@onestratahome.com. We ask that you raise any complaint with us first so we have an opportunity to resolve it.

10.2 Escalation. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The current version will always be available through the Service, and the version number and date above will reflect the latest update. Continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.