PRIVACY POLICY

THE ARTIST PLATFORM PTY LTD (ACN 696 166 220) (“TAP, we, us, our”) operates The Artist Platform, available at theartistplatform.com.au and related applications (the “Platform”).

This policy explains how we collect, hold, use and disclose personal information, and how you can access and correct it or make a complaint. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”).

Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not it is true and whether or not it is recorded in a material form. For most users it will include things like your name, contact details, profile information, messages and booking history.

This policy applies to personal information we handle through the Platform and in our other dealings with you, including launch events, surveys, competitions and marketing.

By using the Platform, you consent to the handling of your personal information as described in this policy. Where we ask for a separate, specific consent (for example, partner data sharing under section 8), that consent operates in addition to this policy.

You can deal with us anonymously or under a pseudonym where it is lawful and practicable to do so, such as when you make a general enquiry about the Platform.

Artists may present publicly on the Platform under a stage name. We still need accurate identity and contact details behind the profile to operate your account, verify users, and administer bookings and, once launched, payments.

What we collect depends on how you use the Platform.

Artists:

• •Name and stage name, date of birth, contact details, location, genre and profile information, biography, photographs, audio and video recordings, links to streaming and social media accounts, and publicly available metrics associated with those accounts (such as follower and listener counts). We also collect details of your past and upcoming performances, your preferred performance locations and availability, and any other information you include in your profile or electronic press kit.
• •Where booking or superannuation features request it, superannuation fund details you choose to provide, such as your fund name and member number, so that a venue or other hiring party can make superannuation contributions for a booking. Providing these details is optional.
• •Any insurance details you choose to provide for bookings, such as confirmation that you hold public liability insurance for your performances.

Venues:

• •Business and trading name, ABN, venue address, contact person details, venue capacity, applicable licence details (such as a OneMusic licence number), and profile information including images and listing details. Where venue staff administer the account, we collect their name, role and contact details.
• •Insurance confirmations and details, including whether the venue holds public liability insurance, whether that insurance covers live performance, and any policy details or certificates of currency provided.

All users:

• •Account credentials, communications sent through the Platform’s messaging tools, booking history, support correspondence, records of your dealings with us by phone, email or social media, survey and competition responses, referral activity, and your marketing and communication preferences.

Visitors:

• •If you visit the Platform without an account, we collect only the technical information described in clause 3.9 and, if you sign up for updates, your name and email address.

Payment information:

• •During the Platform’s initial phase we do not collect payment details. When subscriptions and booking fees launch, we will collect billing details, which will be processed by a third-party payment provider. We will not store full card numbers.

Sensitive information:

• •We do not generally ask for sensitive information, such as information about your health, racial or ethnic origin, religious beliefs or sexual orientation. If a profile field invites information of that kind, providing it is optional, and we will only collect and use it with your consent and for the purpose described when you provide it.

Unsolicited information:

• •If we receive personal information we did not ask for, and we determine that we could not have collected it under the APPs, we will destroy or de-identify it where it is lawful and reasonable to do so.

Technical information:

• •Device and browser type, IP address, pages visited, and usage data collected through cookies and analytics tools as described in section 12.

If you do not provide information:

• •If you do not provide the personal information we request, we may not be able to create your account, match you with venues or artists, process bookings or otherwise provide you with some or all of the Platform’s features.

If you provide us with personal information about another person (for example, band members or a venue contact), you must have their permission and refer them to this policy.

Tax file numbers:

• •We do not ask for tax file numbers, and you should not include them in your profile, messages or documents you upload. If we receive a tax file number, we will delete or de-identify it.

We collect personal information directly from you, including when you create an account or build a profile, complete booking details, communicate through the Platform’s messaging tools, contact our support team, take part in a survey, competition, promotion or launch event, or subscribe to updates.

We collect some information automatically from your use of the Platform, as described in clause 3.9 and section 12.

We also collect personal information from third parties, including:

• •publicly available sources and the streaming and social media accounts you link to your profile;
• •approved partners, where you have consented (for example, where a partner refers a venue to us);
• •our service providers, such as analytics and customer support providers; and
• •co-promoters of competitions or events you enter, where this is disclosed at the point of entry

If you are under 18, you may only use the Platform with the consent of a parent or guardian, and we may ask for evidence of that consent before activating or continuing your account.

We collect, hold and use personal information to:

• •operate the Platform, including creating profiles, verification, matching, filtering, messaging and bookings;
• •verify your identity and your eligibility to use the Platform;
• •display your profile and Content to other users in accordance with your settings;
• •generate matches and recommendations, which are produced using profile, booking and usage information;
• •administer free periods, referrals, subscriptions and, once launched, payments and booking fees;
• •prepare and pre-populate booking documents between users from profile and booking information;
• •operate the marketplace section of the Platform, including displaying third-party provider listings and offers, attributing referrals and offer redemptions to the relevant provider, and administering the discounts, commissions and other benefits involved;
• •run surveys, competitions, promotions and launch events;
• •provide support and communicate with you about the Platform;
• •maintain the security of the Platform, prevent fraud, spam and misuse, and enforce our user terms;
• •improve and develop the Platform, including developing matching, recommendation and analytics features, using aggregated or de-identified data wherever practicable;
• •send you marketing about the Platform, partner initiatives and industry opportunities, where permitted by law and subject to your right to opt out; and
• •comply with our legal obligations and protect our legal interests.

We may state a more specific purpose at the point we collect particular information, in which case that purpose applies.

We may disclose personal information to:

• •other users, to the extent your profile and Content are designed to be visible to them;
• •the counterparty to a booking: when a booking or enquiry is made through the Platform, the artist and the venue each receive the other’s relevant details, such as contact information and the terms of the booking;
• •marketplace providers: if you choose to contact or engage a third-party provider listed in our marketplace, or to use an offer a provider makes available, we share with that provider the information needed to administer your enquiry, engagement or offer, such as your name, contact details and the offer concerned. Providers handle personal information under their own privacy policies;
• •our service providers, including software development, hosting, analytics, communications, customer support and, once launched, payment processing providers, who are bound to handle it only for our purposes;
• •approved industry partners, only as described in section 8;
• •co-promoters of competitions or events you enter, where this is disclosed at the point of entry;
• •our professional advisers, insurers and auditors;
• •debt collection providers, once paid features launch, where amounts are owed to us; and
• •police, courts, government bodies and regulators where required or authorised by law, or where we reasonably believe disclosure is necessary to investigate suspected unlawful activity or a serious breach of our user terms.

Sale of the Platform:

• •If we sell, transfer or restructure all or part of our business, or are in genuine negotiations to do so, personal information may be disclosed to the prospective or actual acquirer as part of that transaction. Any acquirer will be required to handle your personal information in accordance with the Privacy Act.

We do not sell personal information that identifies you to third parties outside the circumstances described in this policy.

TAP works with approved industry partners (for example, OneMusic Australia and, in future, other industry bodies and education institutions) on initiatives including venue licensing verification, licensing education, and improving the quality of industry data.

We will only share information that identifies you or your venue with an approved partner where you have opted in. The opt-in is a separate consent presented at registration or available in your account settings; it is not buried in our terms.

Information shared under an active opt-in may include, for venues, your trading name, contact details, venue capacity and licence details, and, for artists, your profile and booking activity information. The specific categories will be described at the point of consent.

You may withdraw your consent at any time in your account settings or by contacting us. Withdrawal operates prospectively and does not affect sharing that occurred while your consent was active.

We may share aggregated or de-identified information that does not identify any individual or venue with partners and other third parties without consent, including industry statistics and trends.

A current list of approved partners is available here: Australian Independent Record Labels Association.

Some of our service providers, including members of our development team, are located outside Australia, and some data is hosted on infrastructure that may be located overseas.

The countries in which overseas recipients are likely to be located include Australia.

If we expand the Platform to other countries personal information may be disclosed to recipients in those countries to the extent needed to operate the Platform there, and we will update this policy before doing so.

Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.

We may send you marketing communications about the Platform and related opportunities by email, SMS or in-Platform notification, in accordance with the Spam Act 2003 (Cth).

You can opt out of marketing at any time by using the unsubscribe facility included in every marketing message, adjusting your account settings, or contacting us at the details in section 16.

Opting out of marketing does not stop service messages we need to send you about your account.

We will not give your personal information to anyone else for their own direct marketing unless you have expressly agreed.

We hold personal information electronically, on infrastructure operated by us and our hosting providers. Access is limited to people who need it to do their work, and our staff and contractors are subject to confidentiality obligations.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including access controls, encryption in transit and contractual obligations on our providers. No system is completely secure, and you should keep your credentials confidential.

If you suspect any misuse or loss of, or unauthorised access to, your personal information, please contact us immediately at the details in section 16.

We keep personal information only for as long as we need it for the purposes described in this policy or as required by law, and then take reasonable steps to destroy or de-identify it. Closed account data is deleted or de-identified within 24 months except where retention is required for legal, accounting or dispute purposes.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner in accordance with the notifiable data breaches scheme.

Cookies are small files placed on your device that allow the Platform to recognise your device, keep you logged in and remember your preferences.

We use strictly necessary cookies, which the Platform needs in order to function; functional cookies, which remember your settings; and analytics cookies, which help us understand how the Platform is used.

We use third-party analytics services, which may collect usage data under their own privacy policies.

Our emails may contain a small image or link (sometimes called a pixel or web beacon) that tells us whether an email has been opened and which links were clicked, so that we can make our communications more relevant.

You can adjust your browser settings to refuse or delete cookies, though parts of the Platform may not function properly if you do.

Information that does not identify you or anyone else, such as aggregated usage statistics, is not personal information, and we may use it for any purpose, including as described in clause 8.5.

The Platform contains links to websites operated by others, such as artists’ streaming and social media pages, venue websites and partner resources. We are not responsible for those websites or their privacy practices, and this policy does not apply to them. We encourage you to read the privacy policy of any website you visit.

You may request access to, or correction of, the personal information we hold about you by contacting us at the details below. We will respond within a reasonable period, and we will not charge for making a request. Much of your profile information can also be viewed and corrected directly in your account.

Before giving access, we may ask you to verify your identity.

If we refuse a request (for example, because granting access would unreasonably affect the privacy of others), we will tell you why and how you can complain about the refusal.

If you ask us to correct information and we do not agree that correction is needed, you may ask us to attach a statement to the information noting that you consider it inaccurate, incomplete or out of date.

If you have a privacy complaint, contact us first and we will investigate and respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

We may update this policy from time to time, including as new features launch. The current version will always be available on the Platform, and we will notify you of material changes.

Privacy enquiries: privacy@theartistplatform.com.au, or in writing to:

This policy was last updated on 28 August 2026.