Last Updated: 17/06/26

1. Introduction Welcome to novaly.au (“the Platform”). The Platform is owned and operated by Carden Group PTY LTD (“we,” “us,” or “our”). We are committed to protecting the privacy and security of your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains how we collect, use, disclose, and manage your data when you use our platform, including our property listings, directory, online store, and community features. By using our services, you agree to the terms of this policy.

2. Information We Collect We collect information that you voluntarily provide to us, as well as data automatically generated by your use of our site.

a) Information You Provide:

• Account Information: Your name, email address, username, and password when you register.

• Profile Data: Any additional information you add to your user profile, such as a profile photo, bio, company details, or contact numbers.

• Property & Build Data: Information you submit for a listing, including property addresses, architectural descriptions, floorplans, photos, and contact information.

• E-commerce Data: Your billing address, shipping address, and payment information when you purchase a subscription or product through our online store. (Note: Payment details are securely processed by our third-party payment gateways; we do not store raw credit card numbers on our servers).

• Community Content: Any content you post, comment on, or share within our community forums or portfolio spaces.

• Inquiry Data: Information you submit when filling out a contact form to inquire about a specific property or build.

b) Information We Collect Automatically:

• Website Usage Data: We collect information about your interactions with our site, such as pages visited, time spent on each page, search queries, and navigation paths.

• Device and Location Data: We may collect information about the device you use (e.g., IP address, browser type, operating system) and general geographic location based on your IP address.

• Cookies and Tracking Technologies: We use cookies and similar technologies to remember your preferences, keep you logged in, track your activities, and provide a personalised experience.

3. How We Use Your Information We use your information to operate our marketplace, provide our services, and communicate with you.

• To Provide Services: To display property and build listings, process your orders, route your inquiries to the correct professionals, and manage your community profile.

• To Improve Our Services: We analyse usage data to understand how our site is used and to make improvements to our search filters, platform features, and user interface.

• For Communication: We use your contact information to send you transactional emails (order confirmations, lead notifications, password resets), marketing emails (if you opt in), and notifications about your community activity.

• For E-commerce & Subscriptions: To process payments, manage account tiers (e.g., Plus, Pro, Agency), and provide customer support.

• For Platform Automation: Your data is used within the Novaly ecosystem to automate processes based on your actions. For example, a subscription purchase will automatically update your user role, or submitting an inquiry will automatically populate a CRM card for the listing agent.

• For Legal and Security Reasons: To comply with legal obligations, prevent fraud, enforce our Terms of Use, and maintain the security of our platform.

4. How We Share and Disclose Your Information We do not sell your personal information to third-party data brokers. We only share your data in the following operational capacities:

• With Sellers (Lead Routing): When you submit an inquiry on a property, build, or professional profile, the contact details and message you provide are routed directly to that specific real estate agent, builder, or creative professional so they can contact you.

• Publicly on Your Behalf: Any information you actively submit for public display (e.g., property addresses, portfolio photos, profile bios, and community forum posts) will be publicly visible to all internet users.

• With Service Providers: We share your data with trusted third-party services that help us operate our business, such as payment processors (e.g., Stripe), cloud hosting providers, and email delivery services. These providers are strictly bound by confidentiality obligations.

• Within Our Platform: Your data is shared between different internal systems (e.g., our directory, CRM, and forums) to ensure a seamless experience and to power our automations.

• For Legal Reasons: We may disclose your information if required by law, court order, subpoena, or government request to protect our rights or the safety of our users.

5. Your Rights and Choices You have the right to access, update, and control your personal information.

• Access and Update: You can access, review, and update your account and profile information at any time through your user dashboard.

• Cookies: You can manage or disable cookies through your browser settings. Please note that disabling cookies will affect your ability to log in and use core platform functionality.

• Marketing Communications: You can opt out of promotional emails by clicking the “unsubscribe” link at the bottom of any marketing email. You will still receive essential transactional emails regarding your account or active leads.

• Data Deletion: You may request that your personal data be deleted from our systems, subject to certain legal and record-keeping exceptions. To initiate a deletion request, please contact us at privacy@novaly.au.

6. Data Security We take robust, industry-standard measures to protect your information from unauthorised access, use, or disclosure. This includes using SSL encryption for data transmission and secure servers for storage. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

7. Changes to this Policy We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the “Last Updated” date at the top. We encourage you to review this policy periodically.

8. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at: Email: privacy@novaly.au Operating Entity: Carden Group PTY LTD