PRIVACY POLICY

THE ARTIST PLATFORM PTY LTD (ACN 696 166 220) (“TAP, we, us, our”) operates The Artist Platform, available at theartistplatform.com.au and related applications (the “Platform”).

This policy explains how we collect, hold, use and disclose personal information, and how you can access and correct it or make a complaint. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”).

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not it is true and whether or not it is recorded in a material form. For most users it will include things like your name, contact details, profile information, messages and booking history.

This policy applies to personal information we handle through the Platform and in our other dealings with you, including launch events, surveys, competitions and marketing.

This policy describes how TAP handles personal information. We seek consent where required by applicable law, including for certain sensitive information and optional disclosures to approved partners. Using this platform does not, by itself, constitute every activity described in this policy. Where consent is required TAP will describe the relevant purpose, information and recipient, and how consent may be withdrawn.

You can deal with us anonymously or under a pseudonym where it is lawful and practicable to do so, such as when you make a general enquiry about the Platform.

Artists may present publicly on the Platform under a stage name. We still need accurate identity and contact details behind the profile to operate your account, verify users, and administer bookings and once launched, payments.

TAP will only request verified identity information where reasonably necessary for account security, bookings, legal compliance or if a specific service requires it. Public stage names do not need to reveal the user’s legal name.

What we collect depends on how you use the Platform.

Artists:

• •Name and stage name, date of birth, contact details, location, genre and profile information, biography, photographs, audio and video recordings, links to streaming and social media accounts, and publicly available metrics associated with those accounts (such as follower and listener counts). We also collect details of your past and upcoming performances, your preferred performance locations and availability, and any other information you include in your profile or electronic press kit.
• •Where booking or superannuation features request it, superannuation fund details you choose to provide, such as your fund name and member number, so that a venue or other hiring party can make superannuation contributions for a booking. Providing these details is optional.
• •Any insurance details you choose to provide for bookings, such as confirmation that you hold public liability insurance for your performances.

Venues:

• •Business and trading name, ABN, venue address, contact person details, venue capacity, applicable licence details (such as a OneMusic licence number), and profile information including images and listing details. Where venue staff administer the account, we collect their name, role and contact details.
• •Insurance confirmations and details, including whether the venue holds public liability insurance, whether that insurance covers live performance, and any policy details or certificates of currency provided.

All users:

• •Account credentials, communications sent through the Platform’s messaging tools, booking history, support correspondence, records of your dealings with us by phone, email or social media, survey and competition responses, referral activity, and your marketing and communication preferences.

Visitors:

• •If you visit the Platform without an account, we collect only the technical information described in clause 3.9 and, if you sign up for updates, your name and email address.

Payment information:

• •During the Platform’s initial phase we do not collect payment details. When subscriptions and booking fees launch, we will collect billing details, which will be processed by a third-party payment provider. We will not store full card numbers.

Sensitive information:

• •We do not generally ask for sensitive information, such as information about your health, racial or ethnic origin, religious beliefs or sexual orientation. If a profile field invites information of that kind, providing it is optional, and we will only collect and use it with your consent and for the purpose described when you provide it.

Unsolicited information:

• •If we receive personal information we did not ask for, and we determine that we could not have collected it under the APPs, we will destroy or de-identify it where it is lawful and reasonable to do so.

Technical information:

• •Device and browser type, IP address, pages visited, and usage data collected through cookies and analytics tools as described in section 12.

If you do not provide information:

• •If you do not provide the personal information we request, we may not be able to create your account, match you with venues or artists, process bookings or otherwise provide you with some or all of the Platform’s features.

If you provide us with personal information about another person (for example, band members or a venue contact), you must have their permission and refer them to this policy.

Tax file numbers:

• •We do not ask for tax file numbers, and you should not include them in your profile, messages or documents you upload. If we receive a tax file number, we will delete or de-identify it.

TAP identifies required fields at collection. Optional information may be omitted unless needed for a particular feature or service. We collect only personal information reasonably necessary for the platform’s functions or described activities. Information from connected third-party accounts may include those listed in this clause 3 and where enabled by the user or otherwise lawfully collected. We do not treat information as anonymous merely because names have been removed.

We collect personal information directly from you, including when you create an account or build a profile, complete booking details, communicate through the Platform’s messaging tools, contact our support team, take part in a survey, competition, promotion or launch event, or subscribe to updates.

We collect some information automatically from your use of the Platform, as described in clause 3.9 and section 12.

We also collect personal information from third parties, including:

• •publicly available sources and the streaming and social media accounts you link to your profile;
• •approved partners, where you have consented (for example, where a partner refers a venue to us);
• •our service providers, such as analytics and customer support providers; and
• •co-promoters of competitions or events you enter, where this is disclosed at the point of entry

As soon as practical, at or before collection, TAP will provide any additional notice required by law relating to the circumstances, purposes, usual disclosures, consequences of non-provision and likely overseas disclosure. Where we collect information from third-parties, we will identify the source or the source category where appropriate.

Users under 18 may use the Platform only in accordance with our age eligibility and parental / guardian authorisation requirements. We apply additional safeguards to young users’ profile visibility, contact, location and data sharing where appropriate. We will update these arrangements to comply with any applicable Children’s Online Privacy Code.

We collect, hold and use personal information to:

• •operate the Platform, including creating profiles, verification, matching, filtering, messaging and bookings;
• •verify your identity and your eligibility to use the Platform;
• •display your profile and Content to other users in accordance with your settings;
• •generate matches and recommendations, which are produced using profile, booking and usage information;
• •administer free periods, referrals, subscriptions and, once launched, payments and booking fees;
• •prepare and pre-populate booking documents between users from profile and booking information;
• •operate the marketplace section of the Platform, including displaying third-party provider listings and offers, attributing referrals and offer redemptions to the relevant provider, and administering the discounts, commissions and other benefits involved;
• •run surveys, competitions, promotions and launch events;
• •provide support and communicate with you about the Platform;
• •maintain the security of the Platform, prevent fraud, spam and misuse, and enforce our user terms;
• •improve and develop the Platform, including developing matching, recommendation and analytics features, using aggregated or de-identified data wherever practicable;
• •send you marketing about the Platform, partner initiatives and industry opportunities, where permitted by law and subject to your right to opt out; and
• •comply with our legal obligations and protect our legal interests.

We may state a more specific purpose at the point we collect particular information, in which case that purpose applies.

We use your profile attributes, location, genre, availability and booking history to filter, rank and recommend artists and venues. We do not use sensitive personal information for matching unless specifically disclosed and lawfully permitted.

Where an automated computer program uses personal information to make or substantially and directly inform a decision that could significantly affect an individual’s rights or interests, we describe the kinds of information used and the relevant kinds of decisions, as required by applicable privacy law.

We may disclose personal information to:

• •other users, to the extent your profile and Content are designed to be visible to them;
• •the counterparty to a booking: when a booking or enquiry is made through the Platform, the artist and the venue each receive the other’s relevant details, such as contact information and the terms of the booking;
• •marketplace providers: if you choose to contact or engage a third-party provider listed in our marketplace, or to use an offer a provider makes available, we share with that provider the information needed to administer your enquiry, engagement or offer, such as your name, contact details and the offer concerned. Providers handle personal information under their own privacy policies;
• •our service providers, including software development, hosting, analytics, communications, customer support and, once launched, payment processing providers, who are bound to handle it only for our purposes;
• •approved industry partners, only as described in section 8;
• •co-promoters of competitions or events you enter, where this is disclosed at the point of entry;
• •our professional advisers, insurers and auditors;
• •debt collection providers, once paid features launch, where amounts are owed to us; and
• •police, courts, government bodies and regulators where required or authorised by law, or where we reasonably believe disclosure is necessary to investigate suspected unlawful activity or a serious breach of our user terms.

Sale of the Platform:

• •If we sell, transfer or restructure all or part of our business, or are in genuine negotiations to do so, personal information may be disclosed to the prospective or actual acquirer as part of that transaction. Any acquirer will be required to handle your personal information in accordance with the Privacy Act.

We do not sell identifiable personal information as a standalone dataset that identifies you to third parties unless we clearly disclose the arrangement and have a lawful basis for doing so. We may share information with approved partners only as described in clause 8, and with providers to deliver services as described above. Aggregated reports are shared only where they do not identify, or reasonably enable identification of, individuals.

TAP works with approved industry partners (for example, OneMusic Australia and, in future, other industry bodies and education institutions) on initiatives including venue licensing verification, licensing education, and improving the quality of industry data.

We will only share information that identifies you or your venue with an approved partner where you have opted in. The opt-in is a separate consent presented at registration or available in your account settings; it is not buried in our terms.

Information shared under an active opt-in may include, for venues, your trading name, contact details, venue capacity and licence details, and, for artists, your profile and booking activity information. The specific categories will be described at the point of consent.

You may withdraw your consent at any time in your account settings or by contacting us. We maintain records of consent and withdrawal. Withdrawal operates prospectively and does not affect sharing that occurred while your consent was active.

We may share aggregated or de-identified information that does not identify any individual or venue with partners and other third parties without consent, including industry statistics and trends.

A current list of approved partners is available here: Australian Independent Record Labels Association.

TAP uses service providers and contractors that may store, access or process personal information outside Australia. The countries in which overseas recipients are likely to be located include Australia. Likely overseas recipient categories include cloud hosting, platform development, analytics and support.

If we expand the Platform to other countries personal information may be disclosed to recipients in those countries to the extent needed to operate the Platform there, and we will update this policy before doing so.

Some offshore storage under TAP’s effective control may be a use rather than a disclosure.

Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles (in particular APP 8), subject to applicable exceptions, including assessment of appropriate contractual and security safeguards. We remain subject to all applicable Privacy Act accountability requirements.

We may send you marketing communications about the Platform and related opportunities by email, SMS or in-Platform notification, in accordance with the Spam Act 2003 (Cth).

You can opt out of marketing at any time by using the unsubscribe facility included in every marketing message, adjusting your account settings, or contacting us at the details in section 16.

Opting out of marketing does not stop service messages we need to send you about your account.

We will not give your personal information to anyone else for their own direct marketing unless you have expressly agreed.

We distinguish essential account or booking notices from promotional messages. Where consent is required for electronic marketing or disclosure for a partner’s direct marketing, we will obtain it separately and provide effective unsubscribe or preference controls.

We hold personal information electronically, on infrastructure operated by us and our hosting providers. Access is limited to people who need it to do their work, and our staff and contractors are subject to confidentiality obligations.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including access controls, encryption in transit and contractual obligations on our providers. No system is completely secure, and you should keep your credentials confidential.

If you suspect any misuse or loss of, or unauthorised access to, your personal information, please contact us immediately at the details in section 16.

We retain personal information for a period reasonably needed for the purpose(s) collected and any applicable legal, accounting, security or dispute obligations. Our retention periods vary by category (for example account profiles, bookings, messages, analytics, financial records). When no longer required we take all reasonable steps to destroy or de-identify information unless retention is required by law, court order or similar governing body regulation. We maintain processes to assess suspected eligible data breaches. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.

Cookies are small files placed on your device that allow the Platform to recognise your device, keep you logged in and remember your preferences.

We use strictly necessary cookies, which the Platform needs in order to function; functional cookies, which remember your settings; and analytics cookies, which help us understand how the Platform is used.

We use third-party analytics services, which may collect usage data under their own privacy policies.

Our emails may contain a small image or link (sometimes called a pixel or web beacon) that tells us whether an email has been opened and which links were clicked, so that we can make our communications more relevant.

Essential cookies keep you signed in and the Platform working, and cannot be switched off. They include a secure sign-in cookie, small cookies that tell the site whether you are signed in and have finished onboarding, and local storage that holds a draft of a form you are filling in and your cookie choice.

With your consent, we also use Google Tag Manager and Google Analytics to count visits and see which pages and links bring people to the Platform, and Google Ads measurement to see how our advertising performs. These stay off until you accept them, and are not used if you choose Essential only.

Some links to profile pages carry extra details at the end of the address, such as utm_source, utm_medium and utm_campaign. They are not cookies. They tell our analytics where a visit came from, and are only used if you have accepted analytics cookies.

Some features, such as signing in with Google and paying for a marketplace service, are run by other companies who may set their own cookies under their own policies.

You can change your cookie choices at any time using Cookie settings, or block or delete cookies in your browser settings.

Information that does not identify you or anyone else, such as aggregated usage statistics, is not personal information, and we may use it for any purpose, including as described in clause 8.5.

Our use of analytics, email pixels and social media pixels may involve collecting device identifiers, browsing events and interactions and disclosing them to partners or vendors. We describe material tracking practices and available preference controls in this clause 12 and in our cookie settings. We do not use tracking tools to collect sensitive information except where lawfully permitted.

The Platform contains links to websites operated by others, such as artists’ streaming and social media pages, venue websites and partner resources. We are not responsible for those websites or their privacy practices, and this policy does not apply to them. We encourage you to read the privacy policy of any website you visit.

Where a third-party service is embedded in our Platform and collects information through our pages, the handling of such information is governed by clauses 7, 9 and 12 herein.

You may request access to, or correction of, the personal information we hold about you by contacting us at the details in clause 16 below. We will respond within a reasonable period, and we will not charge for making a request. Much of your profile information can also be viewed and corrected directly in your account.

Before giving access, we may ask you to verify your identity.

If we refuse a request (for example, because granting access would unreasonably affect the privacy of others), we will tell you why and how you can complain about the refusal.

If you ask us to correct information and we do not agree that correction is needed, you may ask us to attach a statement to the information noting that you consider it inaccurate, incomplete or out of date.

If you have a privacy complaint, contact us first and we will investigate and respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

We may update this policy from time to time as our services and legal obligations change, including as new features launch. The current version will always be available on the Platform along with the effective date, and we will notify you of material changes where appropriate. Where a new use or disclosure requires consent, we obtain it before proceeding.

Privacy enquiries: privacy@theartistplatform.com.au, or in writing to:

This policy was last updated on 9 October 2026.