Privacy & Cookies Policy

1. INTRODUCTION

This Privacy & Cookies Policy explains how DTMC Media Pty Ltd ACN 695 899 122 ATF DTMC Media Trust ABN 16 626 214 056 ("we", "us", "our") collects, uses, stores and discloses personal information through our websites, apps, and streaming platforms, including but not limited to OnionUnlimited Radio, OURAD.IO, EPK+, TRXX, TCHRDR, and MUSO GIGS (collectively, the "Services").

We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Our websites and apps provide:

• Live audio streaming
• On-demand audio content
• Interactive features such as "like" functions
• Contact forms and community engagement features
• EPK+ accounts, public electronic press kits, and paid plans

By using the Services, you agree to the terms of this Policy.

2. WHAT PERSONAL INFORMATION WE COLLECT

We may collect personal information that is reasonably necessary for our functions and activities, including:

Information You Provide Directly

• Name
• Email address
• Phone number (if provided)
• Account details, including password or magic-link authentication data, and plan status
• Messages submitted via contact forms, and transactional emails we send you (for example magic links and billing notices)
• Information provided when creating an Electronic Press Kit (EPK), including artist biographies, location, social media links, press photos, streaming links, gigs, tech rider data, themes, and similar materials you choose to add
• Billing information handled primarily by Stripe. We receive limited payment metadata (for example customer/subscription IDs and payment status), not your full card number

Information Collected Automatically

When you access our websites or streaming services, we may collect:

• IP address
• Browser type and device information
• Date and time of access
• Pages viewed
• Referral URLs
• Approximate location derived from IP address
• Streaming activity
• Interaction data (e.g. "likes")
• Basic analytics about public EPK views where that feature is enabled

In most cases, this information does not directly identify you. However, it may be considered personal information under Australian law if it can reasonably identify you.

3. HOW WE COLLECT PERSONAL INFORMATION

We collect personal information:

• Directly from you when you submit forms, create an account, or interact with features
• Automatically through cookies, session data and browser storage
• Through third-party service providers (e.g. analytics, streaming, payment, or maps services)

We only collect personal information by lawful and fair means.

4. WHY WE COLLECT PERSONAL INFORMATION

We collect and use personal information to:

• Provide live and on-demand streaming services
• Enable interactive features (such as "like" functionality)
• Create and display your public EPK+ as you configure it
• Authenticate you and secure accounts
• Process subscriptions and payments
• Respond to enquiries and send service-related notices
• Monitor abuse, prevent fraud, and enforce our Terms
• Improve website performance and content
• Maintain website security
• Comply with legal obligations
• Produce aggregated or de-identified industry insights, statistics, and reports
• Produce industry insights and reports that may include identifiable personal information, as described in this Policy

We will not use your personal information for unrelated purposes without your consent, unless required or authorised by law.

5. PUBLIC INFORMATION

Content you publish on a public EPK+ (including username, bio, media, and gig listings) can be seen by anyone with the link and may be indexed by search engines or shown in Discover. Do not publish information you wish to keep private.

6. DISCLOSURE OF PERSONAL INFORMATION

We may disclose personal information to:

• IT and website service providers, including hosting and infrastructure that store the Services
• Stripe, for payment processing
• Email delivery providers, for transactional email
• Maps and places providers, when you use location autocomplete
• Embed providers, when an EPK loads third-party players (for example music or video platforms); those providers may collect data under their own policies
• Streaming platform providers
• Analytics providers
• Professional advisers
• Regulatory authorities where required by law

Some third-party providers may store data outside Australia. Where this occurs, we take reasonable steps to ensure your information is handled in accordance with Australian privacy law.

We do not sell personal information to third parties for their own marketing or as a standalone data product.

7. BUSINESS TRANSFERS AND INDUSTRY INSIGHTS

If we sell, transfer, merge, or otherwise dispose of the Services, or substantially all of our assets, personal information we hold may be transferred to the purchaser or successor as part of that transaction, provided they agree to handle it in accordance with this Policy (or a similar privacy policy) and applicable Australian privacy law. Where practicable, we will take reasonable steps to notify you of such a transfer.

We may use information in aggregated or de-identified form (so that it cannot reasonably identify you) to produce industry insights, statistics, and reports. Aggregated and de-identified information is not personal information and may be shared with third parties.

We may also use and disclose identifiable personal information to third parties for industry insights, statistics, and reports. This is a purpose of collection and use under this Policy. It does not replace the other disclosures described above (for example to service providers or where required by law).

8. DATA SECURITY

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure.

These measures may include:

• Secure hosting environments
• Access controls
• Encrypted connections (HTTPS)
• Session management systems

While we take reasonable precautions, no system is completely secure.

9. RETENTION

We keep personal information for as long as your account is active and as needed to provide the Services, meet legal and accounting requirements, resolve disputes, and enforce agreements. You may request account deletion; some records may remain where we must retain them by law or for legitimate business needs (for example billing history).

10. ACCESS AND CORRECTION

Depending on where you live, you may have rights to access, correct, update, or delete certain personal information, or to object to or restrict certain processing. You can update much of your EPK+ profile data in your dashboard. For other requests, contact us using the details at the end of this Policy. You may also unsubscribe from non-essential marketing emails where offered.

We will respond within a reasonable time, as required under the Australian Privacy Principles.

11. CHILDREN

Our Services, including EPK+, are not directed at children under 16. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

12. COMPLAINTS

If you believe we have breached the Privacy Act or the Australian Privacy Principles, you may contact us in writing.

We will investigate and respond within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at:

Website: https://www.oaic.gov.au
Phone: 1300 363 992

13. WHAT ARE COOKIES?

Cookies are small text files placed on your device when you visit a website. They help the website recognise your device and store certain information.

We also use:

• PHP session variables (temporary server-side session data)
• JavaScript local storage (browser-based storage of preferences and interactions)

14. TYPES OF COOKIES AND STORAGE WE USE

A. Essential Cookies & Session Data

These are necessary for our websites and streaming services to function properly.

• Maintain secure streaming sessions
• Manage server load
• Prevent repeated "likes"
• Support website security
• Enable access to on-demand content
• Maintain EPK+ sessions, authentication, and security

B. Functional Cookies & Local Storage

We may use JavaScript local storage or cookies to:

• Remember your audio player settings
• Store "like" interactions
• Remember recently played content
• Improve user experience

C. Analytics Cookies (If Applicable)

If we use analytics services, they help us understand:

• How users interact with our content
• Streaming popularity
• General website performance

15. MANAGING COOKIES

You can control cookies through your browser settings.

Please note:

• Disabling essential cookies may affect streaming and interactive features.
• Clearing browser data will remove stored preferences and "like" history.

16. THIRD-PARTY SERVICES

Our websites may contain embedded services (e.g. streaming platforms or social media integrations). These providers may use their own cookies. We do not control third-party cookies and recommend reviewing their privacy policies.

17. CHANGES TO THIS POLICY

We may update this Privacy & Cookies Policy from time to time. Updates will be published on this page with a revised effective date.

18. CONTACT US

If you have questions about this Policy or wish to request access to your information, please email hello@onionunlimited.com.au.