Privacy Policy
1. Introduction
Kruzer Ultraverse (“Kruzer Ultraverse”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and safeguard personal information across the Kruzer Ultraverse websites (collectively, the “Sites”), and the rights you have in relation to that information.
This policy is designed to meet the requirements of the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and applicable global privacy laws and best practice. Where local laws apply to you, the rights and protections in those laws are in addition to the general protections set out in this policy.
By using the Sites, registering for an account, contacting us, or subscribing to our communications, you acknowledge that you have read and understood this Privacy Policy.
2. Who we are
Kruzer Ultraverse is the operator of the Sites and acts as the “data controller” (under GDPR/UK GDPR), “APP entity” (under the Australian Privacy Act), and “business” (under the CCPA/CPRA) responsible for your personal information.
For any privacy-related questions, requests, or complaints, please contact:
- Privacy contact: admin@kruzer.com.au
- Postal address:Kruzer Ultraverse Pty Ltd
(ABN 62 686 962 783)
Level 13, 60 Castlereagh Street,
Sydney NSW 2000, Australia - Website operator: Kruzer Ultraverse
If you are in the EU or UK and require an Article 27 representative, please contact us at the address above and we will provide current details.
3. Scope
This Privacy Policy applies to all of the Kruzer Ultraverse websites and the services accessed through them. It does not apply to third-party websites or services that may be linked from the Sites; those third parties have their own privacy policies which we encourage you to review.
4. Personal information we collect
We collect personal information in three broad categories:
4.1 Account and login information
When you create an account or sign in to the Sites, we collect information such as:
- Your name and display name or username
- Email address
- Password (stored in hashed form — we never store plain-text passwords)
- Account preferences and settings
- Profile information you choose to provide
- Authentication metadata (for example, sign-in timestamps, IP address used to sign in, and approximate location derived from IP for security purposes)
4.2 Site analytics and technical information
When you visit the Sites, we and our analytics providers automatically collect certain technical information, including:
- IP address and approximate geographic location
- Device type, operating system, and browser type and version
- Referring URL and pages viewed
- Date, time, and duration of visit
- Clickstream and interaction data
- Cookie identifiers and similar tracking technologies (see Section 7)
This information is generally collected in aggregate and pseudonymised form for analytics purposes.
4.3 Contact forms and newsletter sign-ups
When you contact us through a form, subscribe to a newsletter, or otherwise communicate with us, we collect:
- Your name
- Email address
- Any other information you choose to include in your message
- Subscription preferences and email engagement data (for example, whether emails are opened or clicked)
4.4 Information we do not knowingly collect
We do not knowingly collect “sensitive information” (as defined under the Australian Privacy Act) or “special category” data (as defined under the GDPR) — such as health information, racial or ethnic origin, religious beliefs, political opinions, sexual orientation, or biometric data — unless you voluntarily provide it to us in a message and it is necessary for the purpose of your enquiry.
5. How we collect personal information
We collect personal information:
- Directly from you, when you register, log in, fill in a form, subscribe to a newsletter, or otherwise interact with the Sites
- Automatically, through cookies, server logs, and analytics technologies when you visit the Sites
- From third-party service providers, such as authentication providers, analytics platforms, and email service providers, in accordance with their own privacy policies
6. Why we use your personal information (purposes and lawful bases)
We use personal information for the following purposes. Where the GDPR or UK GDPR applies, we have indicated the lawful basis we rely on:
| Purpose | Lawful basis (GDPR / UK GDPR) |
|---|---|
| Creating and managing your account, authenticating sign-ins, and providing site functionality | Performance of a contract; legitimate interests |
| Responding to your enquiries submitted via contact forms | Legitimate interests; performance of pre-contractual steps at your request |
| Sending newsletters and marketing communications you have signed up for | Consent (which you may withdraw at any time) |
| Improving the Sites, troubleshooting, and understanding how visitors use the Sites (analytics) | Legitimate interests; consent (for non-essential cookies, where required) |
| Securing the Sites, preventing fraud, abuse and unauthorised access | Legitimate interests; legal obligation |
| Complying with legal, regulatory, tax, and audit requirements | Legal obligation |
| Enforcing our Terms of Service and protecting our legal rights | Legitimate interests |
We will not use your personal information for a purpose materially different from the purpose for which it was collected without first notifying you and, where required, obtaining your consent.
7. Cookies and similar tracking technologies
The Sites use cookies and similar technologies (such as pixels, local storage, and SDKs) to make the Sites work, remember your preferences, and understand how visitors use the Sites.
We use the following categories of cookies:
- Strictly necessary cookies — required to operate the Sites, including session and authentication cookies. These do not require your consent.
- Functional cookies — remember your preferences (for example, language or display settings).
- Analytics cookies — help us understand site usage in aggregate so we can improve the Sites.
- Marketing cookies — used in limited circumstances to measure the effectiveness of campaigns (if and where deployed).
Where required by law (for example, in the EU/UK), we will request your consent before setting non-essential cookies. You can manage or withdraw consent at any time through the cookie banner or your browser settings. Disabling certain cookies may affect Site functionality.
8. Disclosure of personal information
We may disclose personal information to:
- Service providers and processors who help us operate the Sites, including hosting, authentication, analytics, email delivery, customer support tools, and security providers. These providers are contractually required to handle personal information only as instructed by us and consistent with this policy.
- Professional advisers such as legal counsel, accountants, and auditors, where necessary.
- Government authorities and regulators, where we are required by law, court order, or to protect our or others’ rights, safety, or property.
- A successor entity in connection with a merger, acquisition, restructuring, or sale of all or part of our business, subject to the recipient committing to protect personal information in a manner consistent with this policy.
We do not sell your personal information. We do not “share” your personal information for cross-context behavioural advertising as those terms are defined under the CCPA/CPRA.
9. International data transfers
We are based in Australia. Some of our service providers may store or process personal information outside your country of residence, including in the United States, the European Union, the United Kingdom, and other jurisdictions.
Where personal information of EU or UK residents is transferred outside the EEA or UK to a country that has not been recognised as providing an adequate level of protection, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable), or another lawful transfer mechanism. A copy of the safeguards can be requested at the contact details in Section 2.
By using the Sites, you understand and acknowledge that your personal information may be transferred to and processed in countries other than your own.
10. Marketing communications and newsletters
If you have subscribed to a newsletter or other marketing communication from us, we will use the email address and preferences you provided to send you those communications.
You can unsubscribe at any time by clicking the “unsubscribe” link at the bottom of any marketing email, or by contacting us at admin@kruzer.com.au. Unsubscribing from marketing emails does not affect transactional or service-related communications (such as account security notices or important changes to our Sites or terms).
11. Data security
We implement reasonable technical and organisational security measures designed to protect personal information from unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encryption of data in transit (TLS) and at rest where appropriate
- Hashing of passwords using industry-standard algorithms
- Access controls and authentication requirements for our personnel
- Regular review of our security practices and service providers
No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. If you believe your account or information has been compromised, please contact us immediately.
12. Data retention
We retain personal information only for as long as is necessary for the purposes set out in this policy, including:
- Account information — for as long as your account is active, plus a reasonable period afterwards to comply with legal and accounting obligations and to handle disputes
- Contact form submissions — for as long as needed to resolve your enquiry, plus a reasonable period for record-keeping
- Newsletter subscriber data — until you unsubscribe, after which we retain a suppression record (typically your email address only) so we can honour your unsubscribe request
- Analytics and log data — retained in identifiable form for a limited period and then aggregated or deleted
When personal information is no longer required, we will securely delete or de-identify it.
13. Your privacy rights
Subject to the laws that apply to you, you may have the following rights in relation to your personal information:
- Access — request a copy of the personal information we hold about you
- Correction / rectification — ask us to correct information that is inaccurate or out of date
- Deletion / erasure — ask us to delete personal information in certain circumstances
- Restriction / objection — ask us to restrict or object to certain processing
- Data portability — request a copy of certain personal information in a machine-readable format
- Withdraw consent — withdraw consent at any time where we rely on consent (this does not affect the lawfulness of processing before withdrawal)
- Opt out of marketing — opt out of receiving marketing communications at any time
- Opt out of “sale” or “sharing” — under the CCPA/CPRA. We do not sell or share personal information as defined under that law, but if this changes we will provide a “Do Not Sell or Share My Personal Information” option
- Non-discrimination — exercise your rights without being discriminated against for doing so
To exercise any of these rights, please contact us at admin@kruzer.com.au. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law (typically within 30 days under the GDPR/UK GDPR; 45 days under the CCPA/CPRA, with the possibility of an extension).
If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority:
- Australia: the Office of the Australian Information Commissioner (OAIC) — oaic.gov.au
- EU: your local Data Protection Authority
- UK: the Information Commissioner’s Office (ICO) — ico.org.uk
- California: the California Privacy Protection Agency or the California Attorney General
We would, however, appreciate the chance to address your concerns first.
14. Children’s privacy
The Sites are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe that a child has provided us with personal information, please contact us at admin@kruzer.com.au and we will take steps to delete that information.
15. Automated decision-making
We do not use your personal information for any automated decision-making that produces legal or similarly significant effects on you.
16. Third-party links
The Sites may contain links to third-party websites, plug-ins, applications, or services. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this policy. If the changes are material, we will provide a more prominent notice (for example, by email or by an on-Site banner) before the change takes effect. Your continued use of the Sites after the effective date constitutes your acceptance of the updated Privacy Policy.
18. Contact us
If you have any questions, concerns, or requests about this Privacy Policy or our handling of your personal information, please contact us:
- Email: admin@kruzer.com.au
- Postal:Kruzer Ultraverse Pty Ltd
(ABN 62 686 962 783)
Level 13, 60 Castlereagh Street,
Sydney NSW 2000, Australia
This document is a general-purpose privacy policy template prepared for the Kruzer Ultraverse websites. It is intended as a starting point and should be reviewed by qualified legal counsel — and tailored to the specific data flows, service providers, and jurisdictions in which Kruzer Ultraverse operates — before being published.