PRIVACY
POLICY

1. Introduction

ROM Services Pty Ltd (ABN 95 695 998 924, ACN 695 998 924) ("we", "us", "our") is committed to protecting the privacy of personal information we collect, use, and disclose in accordance with the Australian Privacy Act 1988 (Cth) ("Privacy Act") and the Australian Privacy Principles (APPs). This Privacy Policy explains how we handle personal information and your rights regarding that information.

This policy applies to all personal information collected by ROM Services Pty Ltd, whether collected through our website at romservices.space, by email, telephone, in person, or through any other means.

2. Australian Privacy Principles (APPs)

ROM Services Pty Ltd is bound by the Australian Privacy Principles (APPs) contained in Schedule 1 of the Privacy Act 1988 (Cth). The APPs regulate how organisations collect, use, disclose, store, and provide access to personal information. We are committed to complying with all 13 APPs in our handling of personal information.

3. Information We Collect

We may collect and hold the following types of personal information:

• Name, address, email address, and telephone number
• Business name, ABN, ACN, and other business identifiers
• Payment and billing information
• Records of our communications with you, including emails and telephone calls
• Information you provide through our website, forms, or during consultations
• Website usage data, including IP addresses, browser type, and access times
• Any other information relevant to the services we provide

ROM Services Pty Ltd does not generally collect sensitive information as defined under the Privacy Act 1988, unless it is reasonably necessary for our functions and you have consented to its collection.

4. How We Collect Information

In accordance with APP 3 (Collection of solicited personal information), we collect personal information by lawful and fair means, including:

• Directly from you when you fill out forms, send us correspondence, or engage our services
• From third parties such as referral partners, business associates, or publicly available sources
• Automatically through our website using cookies, analytics tools, and server logs

Where it is reasonable and practicable, ROM Services Pty Ltd will collect personal information directly from you. We will only collect personal information from third parties where it is unreasonable or impracticable to collect it from you directly, and where you have consented to such collection or would reasonably expect us to collect the information in this way.

5. Purpose of Collection

In accordance with APP 6 (Use or disclosure of personal information), we collect, hold, use, and disclose personal information for the following purposes:

• To provide, manage, and improve our professional services
• To communicate with you regarding our services, updates, and promotions
• To process payments and manage billing
• To comply with our legal and regulatory obligations under Australian law
• To respond to your enquiries and provide customer support
• To maintain and improve the functionality of our website
• To protect our legitimate business interests and enforce our terms of service
• To comply with any court orders, subpoenas, or requests from Australian regulatory authorities

6. Disclosure of Information

ROM Services Pty Ltd may disclose your personal information to:

• Our employees, contractors, and service providers who assist in our operations
• Professional advisors, including accountants, lawyers, and auditors
• Government agencies and regulatory bodies as required by law, including the Australian Taxation Office (ATO) and the Australian Securities and Investments Commission (ASIC)
• Third-party service providers who process data on our behalf (e.g., payment processors, hosting providers, email service providers)
• Courts, tribunals, and regulatory authorities if required by law or to protect our legal rights

We will not sell, rent, or trade your personal information to any third party for their marketing purposes without your explicit consent.

7. Data Security (APP 11)

In accordance with APP 11 (Security of personal information), ROM Services Pty Ltd takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. We implement appropriate technical and organisational security measures, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Secure data storage practices
• Regular security assessments and updates
• Staff training on privacy and data protection obligations

When personal information is no longer needed for the purposes for which it was collected, and we are not required by law to retain it, we will take reasonable steps to destroy or de-identify the information in accordance with APP 11.2.

8. Access and Correction (APPs 12 & 13)

In accordance with APP 12 (Access to personal information) and APP 13 (Correction of personal information), you have the right to request access to, and correction of, your personal information held by ROM Services Pty Ltd.

To make such a request, please contact us using the details provided below. We will respond to your request within 30 days and in accordance with the Australian Privacy Principles. We may require you to verify your identity before providing access to your information.

If we refuse a request for access or correction, we will provide you with written reasons for the refusal and information about how you can complain about the refusal.

9. Cookies and Website Analytics

Our website at romservices.space may use cookies and similar tracking technologies to improve user experience and gather analytics data. Cookies are small text files stored on your device that help us understand how you interact with our website.

You can manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of our website. By continuing to use our website, you consent to the use of cookies in accordance with this Privacy Policy.

10. Overseas Disclosure (APP 8)

In accordance with APP 8 (Cross-border disclosure of personal information), ROM Services Pty Ltd may disclose personal information to overseas recipients where necessary to provide our services. Before doing so, we will take reasonable steps to ensure the overseas recipient complies with the APPs or is subject to a substantially similar privacy regime.

If we disclose personal information to an overseas recipient, we will remain accountable for any acts or practices of the overseas recipient that breach the APPs, as required under the Privacy Act 1988.

11. Direct Marketing (APP 7)

In accordance with APP 7 (Direct marketing), ROM Services Pty Ltd may use your personal information for direct marketing purposes where you have consented to receiving marketing communications, or where you would reasonably expect us to use your information for this purpose.

You can opt out of receiving marketing communications at any time by contacting us at owner@romservices.space or by using the unsubscribe mechanism in any marketing communication.

12. Notifiable Data Breaches Scheme

ROM Services Pty Ltd complies with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Cth). If we experience an eligible data breach that is likely to result in serious harm to any individual whose personal information is involved, we will notify the affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.

13. Complaints

If you believe ROM Services Pty Ltd has breached the Australian Privacy Principles, you may lodge a complaint with us by contacting our privacy officer at owner@romservices.space.

We will investigate your complaint and respond within 30 days. Our complaint handling process includes:

• Acknowledgement of your complaint within 7 business days
• Investigation of the complaint by our privacy officer
• Written response within 30 days outlining our findings and any actions taken

If you are unsatisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

14. Changes to This Policy

ROM Services Pty Ltd reserves the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Your continued use of our services or website after changes to this policy constitutes acceptance of those changes.

15. Contact Us

If you have any questions about this Privacy Policy or how ROM Services Pty Ltd handles your personal information, please contact us:

ROM Services Pty Ltd
ABN: 95 695 998 924 | ACN: 695 998 924
Address: Melbourne, VIC 3000, Australia
Email: owner@romservices.space
Website: romservices.space

This Privacy Policy was last updated in March 2026. This policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.