books.com.au

Privacy Policy

This policy covers the books.com.au Book Week waitlist — what we collect, why, and your rights. It will be replaced by a fuller platform Privacy Policy before story creation opens.

1. Who we are

PLC Corporation Pty Ltd (ACN 679 210 112, ABN 62 679 210 112), trading as books.com.au ("books.com.au", "we", "us", "our"), is the entity responsible for handling your personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, hold, use and disclose personal information in connection with the Book Week waitlist.

2. What we collect right now

At this stage, we collect only:

your email address, when you join the Book Week waitlist;
your IP address and browser/device information, automatically, to detect duplicate or fraudulent sign-ups; and
a record of the consents and attestations you give us — including the date, time and version of the terms you accepted.

We do not collect any information about a child at this stage — not a name, nickname, age, photo, or any other detail. Joining the waitlist is an adult-only action. If, once the platform is live, we ask a parent or guardian for details to personalise a story for their child, we will collect only the minimum needed (a first name or nickname, and a broad age bracket) directly from the guardian, never from the child — and a separate, more detailed privacy notice covering that collection will apply before any of it begins.

3. Why we collect it

To add you to the Book Week waitlist and administer it, including preventing duplicate or fraudulent sign-ups.
To send you a one-off notice when the platform opens and it's your turn to create a story — a transactional message about the waitlist you joined, not a marketing message.
If you separately opt in, to send you marketing updates about books.com.au.

4. How we use it — the consent model

Joining the waitlist and receiving marketing from us are different things, and we keep them separate:

Joining the waitlist requires your email address and your acceptance of our Waitlist Terms. This creates a transactional relationship, not a marketing one — we will contact you once, transactionally, when the platform launches.
Marketing (ongoing updates or offers beyond that single launch notice) is only sent if you separately tick the optional marketing box, and only after you confirm that by clicking a link in a confirmation email (double opt-in), consistent with the Spam Act 2003 (Cth). You can withdraw marketing consent at any time — every marketing email carries a working unsubscribe link, effective immediately. Withdrawing marketing consent does not remove you from the waitlist.

5. Overseas disclosure (APP 8)

We use Amazon Web Services' Simple Email Service (AWS SES) to send waitlist confirmation and launch-notice emails. This processing takes place in the AWS Sydney region (ap-southeast-2), so your email address is handled in Australia. AWS SES is provided by Amazon Web Services, Inc., which is part of a global group headquartered in the United States, and limited access to that data from outside Australia cannot be excluded. Where that occurs, we rely on our contractual arrangements with AWS — which require it to handle personal information consistently with the Australian Privacy Principles — as the reasonable steps we take under APP 8. We do not otherwise disclose your personal information to overseas recipients.

6. How long we keep it (APP 11.2)

If you join the waitlist but never go on to create a story, we retain your waitlist email and consent records for up to 24 months of inactivity, after which they are deleted, unless you ask us to delete them sooner. If you withdraw marketing consent, we stop marketing to you immediately regardless of this retention period. If your waitlist entry converts into an active account once the platform launches, retention from that point is governed by our full platform Privacy Policy (to be published before story creation opens).

7. If something goes wrong — data breach handling

If we become aware of an eligible data breach involving your personal information — one likely to result in serious harm — we act in line with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth): we contain and assess the breach, and where required, notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable.

8. Access and correction (APP 12, APP 13)

You can ask us what personal information we hold about you, and ask us to correct it, at any time — see Contact below. We aim to respond within a reasonable period, and in any case no later than 30 days.

9. Complaints

If you have a concern about how we've handled your personal information, contact us first using the details below. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: www.oaic.gov.au, or 1300 363 992.

10. Contact us

Entity	PLC Corporation Pty Ltd, trading as books.com.au
ACN	679 210 112
ABN	62 679 210 112
Privacy contact	hello@books.com.au

We handle contact by email only at this stage — no postal address is published.