Privacy Policy
Last updated: 4 July 2026
1. Introduction
2. Application
3. Information We Collect
We may collect the following types of personal information:
Identity and Contact Information
Full name, business name, job title, email address, telephone number, postal address, and professional credentials.
Business and Professional Information
Company details, industry sector, business requirements, project scopes, technical specifications, service preferences, and contractual information.
Usage and Technical Data
IP address, browser type and version, device identifiers, operating system, referring URLs, page interaction data, session duration, and other browsing behaviour collected through cookies and similar tracking technologies.
Communications
Records of correspondence when you contact us via email, telephone, web forms, or social media, including call recordings where permitted by applicable law.
Platform Data
For users of our platforms (including Yaar and FreeCare), we may additionally collect account credentials, profile information, user-generated content, communications with other users, and platform usage analytics in accordance with each platform’s separate privacy notice.
4. How We Collect Information
We collect personal information through the following means:
- Direct interactions: when you submit web forms, contact us via email or phone, engage our services, create accounts on our platforms, or correspond with us.
- Automated technologies: through cookies, server logs, analytics tools (including Google Analytics 4), and similar tracking mechanisms when you browse our Site.
- Third parties: from business partners, referrers, publicly available sources, credit reporting bodies, recruitment platforms, and social media networks where you have authorised the sharing of information.
- Client engagements: during the course of providing consultancy, software development, digital marketing, or other professional services.
5. Purpose of Collection and Use
We collect, use, and process personal information for the following purposes:
- Providing, maintaining, and improving our services, platforms, and client deliverables.
- Communicating with you regarding your enquiries, service requests, project updates, and account management.
- Processing payments, invoicing, and managing contractual obligations.
- Marketing and business development, including sending service updates, newsletters, case studies, and event invitations where you have provided consent or we have a legitimate interest.
- Analysing website usage to improve user experience, optimise content, and enhance platform performance.
- Complying with legal and regulatory obligations, including record-keeping, reporting, and law enforcement requests.
- Detecting, investigating, and preventing fraudulent, unauthorised, or illegal activity.
- Recruiting and evaluating job applicants.
6. Legal Basis for Processing (GDPR)
- Consent: where you have given clear consent for us to process your personal data for a specific purpose.
- Contractual necessity: where processing is necessary for the performance of a contract with you or to take steps at your request before entering a contract.
- Legitimate interests: where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Legal obligation: where processing is necessary for compliance with a legal or regulatory obligation.
7. Disclosure of Information
We may disclose personal information to the following categories of recipients:
- Service providers: cloud infrastructure providers (including Vercel Inc., Google Cloud, Firebase), email communication platforms (including Resend), analytics providers (Google Analytics 4), payment processors, and other third-party vendors who assist us in delivering our services.
- Professional advisers: lawyers, accountants, auditors, insurers, and other professional advisors where reasonably necessary.
- Regulatory bodies: government agencies, law enforcement, courts, or other regulatory authorities where required by applicable law or to protect our legal rights.
- Business transferees: in connection with any merger, acquisition, sale of assets, or business restructuring, personal information may be transferred as part of the transaction.
- Consent-based disclosures: any other third party where you have provided your consent.
We do not sell, rent, or trade personal information to third parties for their own marketing purposes without your express consent.
8. International Data Transfers
9. Data Retention
10. Data Security
- Encryption of data in transit (TLS 1.2+) and at rest.
- Access controls, authentication protocols, and role-based permissions.
- Regular security assessments, vulnerability scanning, and penetration testing.
- Secure data centre infrastructure provided by our cloud service providers.
- Staff training on data protection and privacy obligations.
Despite these measures, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.
11. Your Rights
Under applicable privacy laws, including the Australian Privacy Act 1988 (Cth) and the GDPR (where applicable), you may have the following rights regarding your personal information:
- Access: request access to the personal information we hold about you.
- Correction: request correction of inaccurate or incomplete personal information.
- Deletion: request deletion of your personal information in certain circumstances (subject to legal retention obligations).
- Restriction: request restriction of processing in certain circumstances.
- Data portability: request a copy of your personal information in a structured, commonly used, and machine-readable format.
- Objection: object to processing of your personal information for direct marketing purposes or where processing is based on legitimate interests.
- Withdrawal of consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us using the details set out in Section 18 below. We will respond to your request within the timeframes required by applicable law.
12. Cookies and Tracking Technologies
Our Site uses cookies and similar tracking technologies to enhance user experience, analyse site traffic, and support our marketing efforts. Cookies are small text files placed on your device when you visit a website.
Types of cookies we use:
- Essential cookies: required for the operation of our Site, including session management and security.
- Analytics cookies: help us understand how visitors interact with our Site by collecting anonymous information about pages visited, time spent, and error messages.
- Functional cookies: remember your preferences and settings to provide a personalised experience.
- Marketing cookies: used to deliver relevant advertisements and measure the effectiveness of our marketing campaigns (where you have consented).
You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Site. For more detailed information about the cookies we use, please contact us.
13. Third-Party Links
14. Children’s Privacy
15. Changes to This Privacy Policy
16. Complaints
17. Governing Law
18. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:
Base Analytics Pty Ltd
Perth, Western Australia
Email: support@baseanalytics.com.au
ABN: 88 666 144 609