PRIVACY POLICY

Jolaana Pty Ltd trading as IPELLIO (“IPELLIO”, “we”, “us” or “our”) is responsible for the personal information it handles in connection with its services.

This policy applies to our website, customer accounts, Brand Check, Historical Research, My Dashboard, reports, registration and application services, and customer support.

“Personal information” means information or an opinion about an identified individual or an individual who is reasonably identifiable. Business information and publicly accessible records may contain personal information.

We handle personal information subject to applicable privacy laws, including the Privacy Act 1988 (Cth) and Australian Privacy Principles where they apply.

Service-specific notices may provide additional details at the point of collection. Our Terms of Use govern service conditions, while our Search Scope & Limitations explain the coverage and limitations of research results.

This policy does not waive or exclude rights or obligations under applicable law.

The information involved depends on the services you use.

• Account and contact information: This may include your name, email address, telephone number, business details, account identifiers, authentication information and preferences.
• Searches and saved research:
  • This may include search terms, selected filters, search activity, shortlisted names, saved records, reports, and information you add to My Dashboard.
  • Search information may be personal information where it identifies an individual or is associated with an identifiable account.
• Applications and registrations: When you request a registration or application service, we may collect the information required to prepare, submit and administer that request. Depending on the service, this may include:
  • Applicant, owner or registrant details;
  • Business and contact information;
  • Addresses, including addresses for service;
  • Relevant business or registry identifiers;
  • Eligibility information;
  • Declarations and authorisations; and
  • Supporting documents or correspondence.
• Orders and payments:
  • This may include purchase details, invoices, billing information, transaction references, payment status and refund or dispute records.
  • Payment processing may involve information collected directly by the payment provider as well as information exchanged with IPELLIO.
• Support and communications: This includes enquiries, feedback, correspondence and attachments you provide.
• Technical and usage information: This may include IP addresses, browser and device information, session identifiers, website interactions, error records and operational logs.
• Public and third-party records:
  • We obtain records from public registers and other authorised sources. These may contain names, ownership details, addresses, record numbers, classifications, dates, statuses and other information relevant to research.
  • We do not collect every category for every service.

API connections allow systems to exchange information. Depending on the transaction, information may pass through IPELLIO, be received from another system or be retained as part of an account, research record or service transaction.

Where lawful and reasonably necessary, we may associate information from these sources to provide the service requested.

You may browse general website information without identifying yourself where practical. Some functions require an account or identifying information. If necessary information is withheld, we may be unable to provide the relevant service.

If you provide information about another person, including a client, applicant, director, business owner or representative, you must have appropriate authority to do so.

You should ensure that the person is aware of the relevant information handling and provide any notices or obtain any consent required by law.

Please provide only information relevant to the service. Do not include passwords, unrelated identity documents or sensitive personal information in general enquiries.

Where we receive unsolicited personal information, we will assess whether it is appropriate and lawful to retain it and take any steps required by applicable law.

Where applicable law requires consent for an activity, we will seek it through the relevant process. Merely publishing this policy does not establish consent to unrelated uses of personal information.

We may use aggregated or de-identified information for analysis and service improvement. Information remains subject to this policy where an individual is reasonably identifiable.

IPELLIO uses public registers and other authorised data sources to provide research, historical discovery and reports, including paid reports.

Records may contain personal information about applicants, owners, representatives or other individuals. Public accessibility does not necessarily remove the personal nature of that information or applicable privacy obligations.

Historical records describe information associated with a particular time or event. They may not reflect current ownership, contact information or status.

Information from these sources may be organised, indexed, matched and presented in results or reports. Matching does not establish that different records necessarily relate to the same person.

If you believe personal information displayed by IPELLIO is inaccurate, misleading or has been included inappropriately, contact us with sufficient details to identify the record. We will assess the request and applicable requirements.

We cannot directly amend an external register. A correction may also need to be requested from the registry or organisation responsible for the source record.

Each provider performs a different function. Listing a provider does not mean that all customer information is supplied to it.

Providers may act on our behalf or handle information under their own legal obligations and privacy policies, depending on their role. Their separate obligations do not remove obligations that apply to IPELLIO.

If our business undergoes a proposed or completed sale, restructuring or transfer, personal information may be disclosed where lawful and reasonably necessary, subject to appropriate confidentiality and privacy protections.

When you request an application or registration, relevant information is supplied to the registry or provider processing it.

Depending on the service and applicable registry rules, information may become publicly accessible. This may include applicant, owner or registrant details, addresses for service and application or registration information.

Review the information and notices presented before submission, particularly when supplying personal addresses or acting for someone else.

Once information has been submitted to an external registry or provider, changes, restrictions and removal are subject to its processes and applicable law.

Closing an IPELLIO account does not remove information from a public register, cancel an application or terminate a registration or domain service.

Payments are processed through payment providers, including Stripe.

Payment providers may collect and process payment details, billing information, device information and transaction information for purposes such as processing payments, authentication, fraud prevention and regulatory compliance.

IPELLIO may receive information needed to administer the transaction, such as payment status, transaction references and relevant billing or payment-method details.

Please do not send complete payment-card details or security codes to us through email or general support enquiries.

Stripe’s handling is described in its Privacy Policy.

IPELLIO is operated by an Australian company. Some providers supporting our services operate internationally, and their services may involve processing outside Australia.

The locations relevant to particular information depend on the service and processing involved. A provider’s place of incorporation does not, by itself, establish where every item of information is stored.

Further details about these providers are available in Stripe’s Privacy Policy and GitHub’s Privacy Statement.

Where IPELLIO discloses personal information overseas, we will take the steps required by applicable privacy law. This may include reasonable steps concerning the recipient’s handling and appropriate contractual arrangements, unless a lawful exception applies.

We will update this policy or relevant collection notices as necessary to describe material changes to our arrangements.

Using IPELLIO does not, by itself, constitute consent to waive protections concerning overseas disclosures.

If you download, export or share research, check whether the material contains personal information or confidential information before distributing it.

Where sharing features are available, review the audience and access information presented for the feature.

Information shared publicly may be copied or redistributed. Revoking access to a link may not retrieve copies already downloaded or received.

Recipients and external platforms may handle information under their own practices and privacy policies. Your decision to share a particular result does not authorise unrelated disclosure of other information held in your account.

Links to external services do not make this policy applicable to those services.

Cookies and similar technologies may support website functionality, authentication, preferences, security and usage analysis.

You can manage or delete cookies through your browser settings. Restricting cookies may affect sign-in and other functions.

Where applicable law requires additional information, consent or choices for particular tracking technologies, these will be provided through the relevant notice or control.

We may send communications concerning your account, enquiries, purchases, applications, security or changes affecting a service you use.

Where we send marketing communications, we will do so in accordance with applicable law. You may unsubscribe using the option provided or by contacting admin@ipellio.com

Opting out of marketing does not prevent necessary communications about an existing account, transaction or requested service.

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

The safeguards appropriate to particular information depend on its nature, the service involved and the associated risks.

No online service or electronic storage system can guarantee absolute security. This statement does not limit our obligations under applicable law.

Please protect your credentials and contact us promptly if you suspect unauthorised account access or an information-security issue.

Where we become aware of a suspected incident involving personal information, we will assess it, take appropriate response measures and make notifications required by applicable law.

We retain personal information for as long as reasonably needed for the purposes for which it is held, including service delivery, recordkeeping, legal compliance and dispute resolution.

You may request account closure or deletion. We will assess the request and explain applicable limitations, including information that must be retained.

Deletion from active systems may not immediately remove copies from backups. Retained information remains subject to applicable protections.

Where personal information is no longer required and retention is not required by law, we take reasonable steps to destroy or de-identify it.

Information held independently by a registry or provider remains subject to that organisation’s obligations and processes.

You may request access to personal information we hold about you and seek correction of information that is inaccurate, incomplete, outdated, irrelevant or misleading.

We may require reasonable evidence of your identity or a representative’s authority before responding. Verification requests will be proportionate to the circumstances.

We will respond within a reasonable period and comply with applicable requirements. If we refuse access or correction, in whole or in part, we will explain the decision and complaint options to the extent required by law.

If a correction request is not accepted, you may ask us to associate a statement of the disputed information with the relevant record where applicable law provides that right.

Requests concerning original registry records may also need to be directed to the source registry.

Where processing relies on your consent, you may withdraw that consent by contacting us. Withdrawal does not invalidate earlier lawful handling and may affect our ability to continue a particular service.

Additional rights may apply depending on the law governing your circumstances.

Contact:

Please explain your request or concern and include enough information for us to identify relevant records. Do not include passwords or unnecessary sensitive information.

We will assess complaints and respond within a reasonable period. We aim to respond within 30 days and will explain if further time or information is needed.

If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner, where the matter falls within its jurisdiction: www.oaic.gov.au

We may update this policy to reflect changes to our services, information handling or legal obligations.

The current version and its revision date will be published on our website. Where required, we will provide additional notice or seek consent before implementing a relevant change.

An update to this policy does not retrospectively authorise unlawful handling or override applicable rights.