Privacy Policy

Last updated: 4 July 2026

1. Introduction

Base Analytics Pty Ltd (ABN 88 666 144 609) (“Base Analytics,” “we,” “our,” or “us”) is committed to protecting the privacy of individuals’ personal information. This Privacy Policy explains how we collect, use, disclose, store and safeguard your information when you visit our website at baseanalytics.com.au (the “Site”), use our services, or otherwise interact with us.

2. Application

This Privacy Policy applies to all personal information collected by Base Analytics through our website, service platforms (including Yaar and FreeCare), client engagements, digital communications, and any other interactions with us. It applies to clients, prospective clients, website visitors, users of our platforms, job applicants, and any other individuals whose personal information we may handle.

3. Information We Collect

We may collect the following types of personal information:

Identity and Contact Information

Full name, business name, job title, email address, telephone number, postal address, and professional credentials.

Business and Professional Information

Company details, industry sector, business requirements, project scopes, technical specifications, service preferences, and contractual information.

Usage and Technical Data

IP address, browser type and version, device identifiers, operating system, referring URLs, page interaction data, session duration, and other browsing behaviour collected through cookies and similar tracking technologies.

Communications

Records of correspondence when you contact us via email, telephone, web forms, or social media, including call recordings where permitted by applicable law.

Platform Data

For users of our platforms (including Yaar and FreeCare), we may additionally collect account credentials, profile information, user-generated content, communications with other users, and platform usage analytics in accordance with each platform’s separate privacy notice.

4. How We Collect Information

We collect personal information through the following means:

  • Direct interactions: when you submit web forms, contact us via email or phone, engage our services, create accounts on our platforms, or correspond with us.
  • Automated technologies: through cookies, server logs, analytics tools (including Google Analytics 4), and similar tracking mechanisms when you browse our Site.
  • Third parties: from business partners, referrers, publicly available sources, credit reporting bodies, recruitment platforms, and social media networks where you have authorised the sharing of information.
  • Client engagements: during the course of providing consultancy, software development, digital marketing, or other professional services.

5. Purpose of Collection and Use

We collect, use, and process personal information for the following purposes:

  • Providing, maintaining, and improving our services, platforms, and client deliverables.
  • Communicating with you regarding your enquiries, service requests, project updates, and account management.
  • Processing payments, invoicing, and managing contractual obligations.
  • Marketing and business development, including sending service updates, newsletters, case studies, and event invitations where you have provided consent or we have a legitimate interest.
  • Analysing website usage to improve user experience, optimise content, and enhance platform performance.
  • Complying with legal and regulatory obligations, including record-keeping, reporting, and law enforcement requests.
  • Detecting, investigating, and preventing fraudulent, unauthorised, or illegal activity.
  • Recruiting and evaluating job applicants.

6. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal basis for processing your personal information includes:
  • Consent: where you have given clear consent for us to process your personal data for a specific purpose.
  • Contractual necessity: where processing is necessary for the performance of a contract with you or to take steps at your request before entering a contract.
  • Legitimate interests: where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Legal obligation: where processing is necessary for compliance with a legal or regulatory obligation.

7. Disclosure of Information

We may disclose personal information to the following categories of recipients:

  • Service providers: cloud infrastructure providers (including Vercel Inc., Google Cloud, Firebase), email communication platforms (including Resend), analytics providers (Google Analytics 4), payment processors, and other third-party vendors who assist us in delivering our services.
  • Professional advisers: lawyers, accountants, auditors, insurers, and other professional advisors where reasonably necessary.
  • Regulatory bodies: government agencies, law enforcement, courts, or other regulatory authorities where required by applicable law or to protect our legal rights.
  • Business transferees: in connection with any merger, acquisition, sale of assets, or business restructuring, personal information may be transferred as part of the transaction.
  • Consent-based disclosures: any other third party where you have provided your consent.

We do not sell, rent, or trade personal information to third parties for their own marketing purposes without your express consent.

8. International Data Transfers

Your personal information may be transferred to, stored in, and processed in countries outside Australia, including the United States (where our cloud service providers are based). Where we transfer personal information internationally, we take reasonable steps to ensure that the recipient handles your information in a manner consistent with the Australian Privacy Principles (APPs) and, where applicable, the General Data Protection Regulation (GDPR), including through the use of standard contractual clauses or equivalent safeguards.

9. Data Retention

We will retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period varies depending on the nature of the information and the purpose of collection. When personal information is no longer required, we will take reasonable steps to destroy or de-identify it. We typically retain client records for a period of seven (7) years after the end of the client relationship to comply with legal and tax obligations.

10. Data Security

We implement reasonable technical and organisational security measures to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These measures include:
  • Encryption of data in transit (TLS 1.2+) and at rest.
  • Access controls, authentication protocols, and role-based permissions.
  • Regular security assessments, vulnerability scanning, and penetration testing.
  • Secure data centre infrastructure provided by our cloud service providers.
  • Staff training on data protection and privacy obligations.

Despite these measures, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.

11. Your Rights

Under applicable privacy laws, including the Australian Privacy Act 1988 (Cth) and the GDPR (where applicable), you may have the following rights regarding your personal information:

  • Access: request access to the personal information we hold about you.
  • Correction: request correction of inaccurate or incomplete personal information.
  • Deletion: request deletion of your personal information in certain circumstances (subject to legal retention obligations).
  • Restriction: request restriction of processing in certain circumstances.
  • Data portability: request a copy of your personal information in a structured, commonly used, and machine-readable format.
  • Objection: object to processing of your personal information for direct marketing purposes or where processing is based on legitimate interests.
  • Withdrawal of consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the details set out in Section 18 below. We will respond to your request within the timeframes required by applicable law.

12. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance user experience, analyse site traffic, and support our marketing efforts. Cookies are small text files placed on your device when you visit a website.

Types of cookies we use:

  • Essential cookies: required for the operation of our Site, including session management and security.
  • Analytics cookies: help us understand how visitors interact with our Site by collecting anonymous information about pages visited, time spent, and error messages.
  • Functional cookies: remember your preferences and settings to provide a personalised experience.
  • Marketing cookies: used to deliver relevant advertisements and measure the effectiveness of our marketing campaigns (where you have consented).

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Site. For more detailed information about the cookies we use, please contact us.

13. Third-Party Links

Our Site and communications may contain links to third-party websites, platforms, or services, including Google Calendar, YouTube, LinkedIn, and GitHub. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you interact with. We are not responsible for the privacy practices of third parties.

14. Children’s Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information without parental consent, please contact us immediately, and we will take steps to delete that information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. We will notify you of any material changes by posting the updated policy on our Site with a revised “Last updated” date. We encourage you to review this Privacy Policy periodically.

16. Complaints

If you believe that we have breached the Australian Privacy Principles or any other applicable privacy law, you may lodge a complaint by contacting us using the details below. We will acknowledge your complaint within five (5) business days and will investigate and respond within thirty (30) days. If you are dissatisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

17. Governing Law

This Privacy Policy is governed by the laws of Western Australia and the Commonwealth of Australia. By providing personal information to us, you consent to the collection, use, and disclosure of that information in accordance with this Privacy Policy and applicable Australian law.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

Base Analytics Pty Ltd

Perth, Western Australia

Email: support@baseanalytics.com.au

ABN: 88 666 144 609