Privacy Policy
Last updated: January 2026
1. Introduction & Scope
This Privacy Policy explains how Bowerlens collects, uses, discloses, stores, and protects personal information.
- We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
- This policy applies to all personal information processed by the Bowerlens Platform, website, mobile app, marketplace, and connected systems.
- By accessing the Platform, you consent to the handling of your personal information as described here.
2. Important Disclaimer – No Legal Reliance
Bowerlens provides general tools, templates, workflows, inspections, and AI-generated information.
- Nothing produced by the Platform constitutes legal, financial, compliance, tenancy, WHS, real estate, or professional advice.
- Users must obtain independent professional advice before relying on any document or output.
- Users bear full responsibility for verifying compliance with state or territory legislation (e.g., QLD RTRA Act, NSW Fair Trading requirements).
3. Who We Collect Information From
We collect personal information from:
- account holders (landlords, property owners),
- tenants whose data is uploaded by users,
- contractors and marketplace tradies,
- website visitors and app users,
- business partners and vendors.
4. Collection of Children's Data
The Platform is not intended for individuals under 18.
- We do not knowingly collect personal information of minors.
- If users upload information about minors (e.g., dependent residents), they must have lawful authority to do so.
- Any accidental collection will be promptly deleted upon notification.
5. Types of Personal Information We Collect
We may collect:
- identity and contact (name, email, phone, address),
- tenancy information (leases, documents, photos),
- property data (condition reports, inspections, maintenance records),
- financial data (billing information via payment processors),
- technical data (IP address, device identifiers, logs, cookies),
- marketplace interaction data (quotes, reviews, service history).
6. How We Collect Personal Information
We collect information through:
- user input into the Platform,
- uploads of documents, photos, and forms,
- automated collection via cookies and analytics,
- integrations or authorised third parties,
- customer support interactions,
- marketplace workflows (jobs, quotes, invoices).
7. User Responsibilities When Uploading Data
Users are responsible for:
- ensuring all personal information uploaded is lawful, accurate, and collected with proper consent,
- not uploading sensitive or personal data without authority,
- complying with the Privacy Act 1988 when collecting tenant or contractor data,
- ensuring tenants are notified and understand the purpose of data collection.
Bowerlens does not verify or supervise the lawfulness of user-uploaded personal information.
8. Purposes for Which We Use Personal Information
We use personal information to:
- operate, maintain, and secure the Platform,
- generate AI outputs, workflows, forms, inspections, and compliance logs,
- process payments and manage subscriptions,
- support and communicate with users,
- run analytics and improve Platform performance,
- deliver marketplace interactions,
- comply with laws, regulators, and safety obligations.
9. Automated Processing & Profiling
Some features may involve automated analysis or AI processing.
- This may include pattern recognition, categorisation, predictions, or text generation.
- Automated processing does not make binding decisions.
- It is at the User discretion to request/obtain human review in applicable situations.
10. Direct Marketing & Spam Act Compliance
We comply with the Spam Act 2003 (Cth).
- Operational communications do not require consent.
- Marketing communications require explicit opt-in.
- Users may unsubscribe at any time via the provided link.
- We record marketing consent and timestamps for audit purposes.
11. Disclosure of Personal Information
We may disclose personal information to:
- cloud hosting providers (e.g., AWS, GCP),
- payment processors,
- analytics and security vendors,
- contractors and marketplace tradies (when the user consents),
- regulators, law enforcement, or courts when legally compelled,
- professional advisers, insurers, and auditors.
12. Data Storage, Residency & Overseas Transfers
Personal information may be stored in:
- Australia,
- Singapore,
- the United States,
- the EU/EEA.
We use contractual and technical safeguards to ensure APP-equivalent protection for overseas transfers.
13. Employee Access Controls
Access to personal information is restricted to authorised Bowerlens employees and support contractors.
- All access is logged and monitored.
- Staff undergo privacy and confidentiality training.
- Access is granted on a strict need-to-know basis.
14. Security Measures
We apply administrative, technical, and organisational controls:
- MFA for privileged access,
- encryption at rest and in transit,
- audit logging and monitoring,
- secure SDLC and penetration testing,
- vendor risk management.
No system is 100% secure; users must maintain device security.
15. Data Retention & Deletion
We follow the Bowerlens Internal Data Retention Schedule.
- Data is retained only as long as necessary for operational or legal requirements.
- Users may request deletion; some data may be retained for legal defence, audit obligations, or dispute resolution.
- Deleted records are removed from backups once their lifecycle expires.
16. Data Portability Rights
Users may request:
- export of personal information,
- export in a machine-readable format,
- transfer of personal data where technically feasible.
17. Access & Correction Requests
Users may request access or correction of their personal information at any time.
- We will respond within a reasonable period.
- If we refuse, we will provide written reasons and complaint options.
18. Law Enforcement & Regulatory Requests
We may disclose personal information when:
- required by a warrant, subpoena, or lawful notice,
- necessary to report fraud or unlawful activity,
- required under WHS or safety legislation.
19. Data Breach Response (NDB Scheme)
We comply with the Notifiable Data Breaches scheme.
- Eligible breaches will be assessed promptly.
- Affected individuals and the OAIC will be notified when required.
- Remediation steps will be taken to reduce harm.
20. Consequences of Privacy Misuse by Users
Bowerlens may suspend or terminate accounts if:
- users misuse personal information,
- users upload unlawful or unauthorised personal data,
- users breach privacy obligations.
Users indemnify Bowerlens for unlawful handling of data they upload.
21. Cookies & Tracking Technologies
We use cookies for:
- authentication and essential functionality,
- analytics and performance,
- preferences and enhancements,
- optional marketing (opt-in only).
Users may withdraw cookie consent at any time.
22. Third-Party Integrations
Some features may rely on external platforms.
- Integrations may receive data as required for functionality.
- Users authorise Bowerlens to exchange data with connected systems.
- Third-party privacy policies apply to their handling of data.
23. Changes to This Policy
We may update this Privacy Policy from time to time.
- Material changes will be communicated via email or in-app notice.
- Continued use of the Platform constitutes acceptance of the updated terms.
24. Contact & Complaints
Email: info@bowerlens.com
- We respond to complaints within a reasonable time.
- If unsatisfied, individuals may contact the OAIC.
