Privacy Policy
Last Updated: June 2026
SPACE Platform Pty Ltd respects privacy and designs analytics technology for physical places without trying to identify individual visitors.
This Privacy Policy explains how SPACE collects, uses, stores and discloses personal information when people use our website, dashboard, applications and services, contact us, or interact with us commercially. It also explains how SPACE handles visitor analytics generated by SPACE Pin devices at client locations. In this policy, 'SPACE', 'we', 'us' and 'our' means SPACE Platform Pty Ltd.
1. Who this policy applies to
This policy applies to: • Business contacts, including people who contact us, book a demo, receive communications from us, or deal with us on behalf of a client, supplier or partner. • Dashboard users, including people who access SPACE dashboards, portals, mobile applications or support channels. • Website users, including people who visit spaceplatform.co or interact with our online forms. • Job applicants, including people who apply for roles with SPACE. • Client-location visitors, meaning people who visit a location where a client has deployed SPACE Analytics or SPACE Pin devices.
2. Our privacy approach
SPACE's approach is to minimise the personal information we collect and to provide clients with de-identified and aggregated analytics wherever possible. SPACE Analytics is designed not to collect names, email addresses, phone numbers, payment details, message content or direct contact details from client-location visitors. SPACE Pin devices detect device signals to generate visitor analytics. Visitor analytics are de-identified and aggregated before reporting. Reports provided to clients are summary reports and do not contain names, contact details, raw device identifiers, device-specific records or individual-specific records. We do not sell personal information. We do not use client-location visitor analytics to identify or contact individual visitors for direct marketing.
3. Personal information we collect
We may collect the following personal information. Business contacts: Name, role, organisation, work email address, phone number, business address, enquiry details, demo requests, meeting notes and communication preferences. Dashboard users: Name, work email address, organisation, role, login details, access permissions, support requests, usage logs and dashboard activity needed to operate and secure our services. Website users: Technical and usage information such as IP address, browser type, device type, pages viewed, referring page, approximate location derived from technical data, session information and website analytics events. Job applicants: Name, contact details, CV, employment history, qualifications, references, interview notes and other information provided during recruitment. Client-location visitors: SPACE Analytics is designed not to collect names, contact details or direct identifiers from client-location visitors. SPACE Pin devices may detect device signals, such as the presence of a device, signal strength, device manufacturer and a device-derived identifier. This information is used to generate de-identified and aggregated visitor analytics.
4. How we collect information
We may collect information: • directly from you when you contact us, book a demo, use our dashboard, submit a form, apply for a role, or communicate with us; • automatically when you use our website, dashboard, applications or services; • from clients, suppliers, partners or service providers where it is reasonably necessary for our business; and • through SPACE Pin devices deployed at client locations, for the purpose of generating de-identified and aggregated visitor analytics.
5. Why we use information
We use information to: • provide, operate and improve SPACE products and services; • give clients access to dashboards, reports, support and account management; • generate de-identified and aggregated visitor analytics; • respond to enquiries and demo requests; • send service, support, administrative and security communications; • send marketing communications to business contacts where permitted by law; • maintain security, prevent misuse and troubleshoot technical issues; • manage contracts, billing, procurement and business operations; • comply with legal obligations and resolve disputes; and • assess job applications.
6. Client-location visitor analytics
SPACE Analytics helps clients understand how physical locations perform, including estimated unique visitors, new and returning visitors, visit duration, visitor paths and movement patterns across assets. SPACE Analytics is not designed to identify named individuals. SPACE does not use client-location visitor analytics to send targeted advertising to individual visitors. Clients are responsible for the locations they operate or manage, including any visitor notices required or appropriate for those locations. SPACE can provide clients with privacy wording for signage, tenant communications and procurement documentation on request.
7. Website analytics and cookies
SPACE's own website uses a privacy-focused, cookieless website analytics tool to understand website traffic and performance. It does not use cookies and does not require a cookie consent banner. The tool records only anonymised, aggregated usage data, such as pages viewed, the referring page, approximate location (for example country, region and city), device type, operating system and browser. It does not store names, contact details, IP addresses or other direct identifiers, and it does not build profiles of individual visitors. Instead of cookies, visitors are recognised using a value derived from the incoming request that resets each day, so visitors cannot be tracked from one day to the next or across other websites. We do not use this analytics data for advertising, retargeting or cross-site tracking, and we do not use Google Analytics, Meta Pixel, LinkedIn Insight Tag or similar advertising pixels. This analytics tool is provided by a third party that may process the anonymised data outside Australia. Our website may link to third-party websites or services, such as demo booking forms or social media pages. Those third-party services may have their own privacy policies and may handle information separately from SPACE.
8. Direct marketing
We may use business contact information to send information about SPACE products, services, events and updates where permitted by law. We do not use client-location visitor analytics to identify or contact individual visitors for direct marketing. You can opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us.
9. Disclosure of information
We may disclose personal information to: • cloud hosting, storage, security and IT providers; • email, CRM, support, analytics, website and business software providers; • professional advisers, including lawyers, accountants, insurers and auditors; • payment, billing and administration providers, where applicable; • government, regulatory or law enforcement bodies where required or authorised by law; • clients, but only where the information relates to their authorised users, accounts, services or dashboard access; and • another organisation in connection with a business sale, merger, restructure or investment process, subject to appropriate confidentiality controls. We provide visitor analytics to clients in de-identified or aggregated summary form. We do not provide clients with reports containing names, contact details, raw device identifiers, device-specific records or individual-specific records.
10. Overseas disclosure
Some of our service providers may store or process information outside Australia, for example certain hosting, cloud, analytics, email, support, security, form or business software providers. Where we disclose personal information overseas, we take reasonable steps required by applicable privacy laws to protect the information. These steps may include due diligence, contractual protections, access controls and security measures.
11. New Zealand
Where New Zealand privacy law applies, we handle personal information in accordance with the Privacy Act 2020 (NZ). Where SPACE or a client collects personal information indirectly in New Zealand, reasonable steps may be required to make individuals aware of that collection unless an exception applies. Where a New Zealand client uses SPACE Analytics at a location, the client remains responsible for visitor communications and notices at that location. SPACE can provide privacy wording to assist clients with those notices.
12. Security
We use technical and organisational measures designed to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These measures may include access controls, role-based permissions, encryption in transit and at rest where appropriate, secure cloud infrastructure, logging, monitoring, backups, vulnerability management, staff access controls and contractual controls with service providers. Our security controls are designed to align with recognised information security practices, including ISO/IEC 27001:2022. SPACE is not currently ISO 27001 certified. No method of transmission or storage is completely secure. If we become aware of a data breach involving personal information, we will assess and respond to it in accordance with applicable data breach laws.
13. Data breaches
We maintain procedures for identifying, assessing, containing and responding to data breaches. Where required by law, we will notify affected individuals and the relevant privacy regulator of an eligible data breach.
14. Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law. Business contact and account information is kept while we have an active relationship with the relevant organisation and for a reasonable period afterwards. Support and service records are kept for operational, security and audit purposes. Job applicant information is kept for recruitment and legal record-keeping purposes. Visitor analytics data is de-identified or aggregated and retained in accordance with our client agreements and internal retention settings. When information is no longer required, we take reasonable steps to destroy it or de-identify it.
15. Access and correction
You may request access to personal information we hold about you, or ask us to correct it, by contacting us. We may need to verify your identity before responding. In some cases, we may be unable to provide access or correction, for example where an exception applies. If that happens, we will explain why where it is reasonable to do so.
16. Anonymity and pseudonymity
You can browse our website without telling us who you are, although technical information may still be collected to operate and secure the website. For some interactions, such as dashboard access, support, demos, contracts, billing and job applications, we need identifying information to provide the relevant service.
17. Children and sensitive information
Our services are not directed to children. SPACE Analytics is designed to provide de-identified and aggregated analytics and not to identify children or other client-location visitors. We do not intentionally collect sensitive information through SPACE Pin devices. If we become aware that we have collected sensitive information without a lawful basis, we will take reasonable steps to delete or de-identify it.
18. Automated decisions
SPACE Analytics provides aggregated analytics and insights to clients. It is not designed to make automated decisions about identified individuals, and we do not use visitor analytics data to make decisions that significantly affect an individual's rights or interests. If our use of automated decision-making changes in a way that requires additional privacy disclosures, we will update this policy.
19. Complaints
If you have a privacy complaint, please contact us and describe the issue clearly. We will acknowledge your complaint and aim to respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner. If New Zealand privacy law applies, you may also contact the New Zealand Office of the Privacy Commissioner.
20. Changes to this policy
We may update this Privacy Policy from time to time by publishing the updated version on our website.
21. Contact us
Privacy Officer SPACE Platform Pty Ltd Email: info@spaceplatform.co