Privacy Policy

Effective date: 3 June 2026

REALM Group Freight (operated by REALM Group Global Pty Ltd, "REALM", "we", "us") is committed to protecting your personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

• Account information: name, email, phone, business name, ABN, role (buyer, seller, carrier).
• Identity & compliance: data required to onboard you to Stripe Connect (legal name, date of birth where required, address). This data is collected by Stripe directly; we receive only confirmation status.
• Transaction data: listings, offers, orders, freight bookings, weighbridge events, AFIA grades, photographs and documents you upload.
• Communications: in-platform messages, support tickets, and notes related to disputes.
• Usage data: IP address, device and browser information, pages visited, cookies and similar technologies.
• Location data: the pickup/delivery addresses on listings, and (with your permission) device coordinates on proof-of-delivery uploads.

2. How we use it

• To operate the marketplace and complete the transactions you direct.
• To verify identity, prevent fraud, and comply with Australian sanctions and anti-money-laundering laws (AML/CTF Act 2006).
• To send transactional emails, dispute notices and security alerts.
• To improve the Platform — analytics, debugging, A/B testing.
• To send marketing only where you have opted in (Spam Act 2003 compliance); you can unsubscribe at any time.

3. Who we share with

• Payment processor: Stripe Payments Australia Pty Ltd (transaction, identity verification).
• Hosting & infrastructure: Railway / Vercel (web hosting), Supabase Inc. (database and authentication).
• Communications: Resend / Postmark (transactional email), Twilio (SMS) where used.
• Counterparties: when you transact with another user, we share the information necessary to complete the transaction.
• Legal: when required by law, court order, or to protect rights, safety or property.
• We do not sell your personal information.

4. Overseas disclosure

Some of our service providers (Stripe, Supabase, Vercel, Resend) are based in the United States or other overseas jurisdictions. By using the Platform you consent to the overseas disclosure of your personal information to these providers for the purposes described above.

5. Retention

We retain account and transaction records for as long as your account is active and for up to 7 years afterwards to meet Australian tax and audit requirements. Identity verification records are retained per Stripe's policy. You can request deletion (see §7) — we will honour the request except where law requires retention.

6. Security

We use industry-standard safeguards: TLS in transit, encryption at rest (Supabase managed), row-level security on tenant data, scoped API keys, and access logging.

7. Your rights — Australian Privacy Principles

You have the right to:

• Access the personal information we hold about you (APP 12).
• Request correction of inaccurate personal information (APP 13).
• Request deletion, subject to legal retention obligations.
• Opt out of direct marketing at any time.
• Complain about a breach of the APPs (see §8).

To exercise a right, email privacy@realmgroup.global with the subject line "Privacy Request". We will respond within 30 days.

8. Complaints

If you believe we have breached the APPs, contact us first at privacy@realmgroup.global. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

9. Children

The Platform is not directed to children under 18 and we do not knowingly collect their personal information.

10. Changes

We may update this Policy. Material changes will be notified by email or in-platform notice at least 14 days before they take effect.

11. Contact

Privacy questions? /contact or privacy@realmgroup.global.