Privacy Policy

Working policy notice

This is a working privacy policy for the current pre-launch and platform build. The final legal entity and contact details below must be completed before launch, paid subscriptions, creator onboarding or advertising sales. Until then, the placeholders mark the information that will be confirmed.

Who operates The Yarn

The Yarn is operated by:

• [LEGAL ENTITY NAME]
• [ABN/ACN]
• [REGISTERED ADDRESS]
• [PRIVACY CONTACT EMAIL]

These details are placeholders and must be replaced with the confirmed operator and contact information before launch or monetisation.

Scope

This policy applies to theyarn.xyz and related The Yarn public pages, our newsletters, accounts, creator and publication tools, advertising enquiries and future campaigns, support and contact interactions, and our security and operational logs.

Creator publications may also need their own privacy notices for the audiences they own.

Kinds of personal information we collect

Depending on how you use The Yarn, we may collect:

• your email address
• your name or display name if you create an account
• login and account details
• publication and profile details for creators
• advertiser enquiry details
• support and contact messages
• subscription status, consent records and unsubscribe or suppression records
• usage, log and device data such as IP address, browser, device, pages visited and timestamps
• payment and billing identifiers in the future if paid products are enabled
• analytics and campaign attribution data in the future

We do not intentionally request sensitive information. If sensitive information is provided to us, we handle it with additional care and only where permitted.

How we collect personal information

• directly from you when you subscribe, create an account, contact us, publish, advertise or use the site
• automatically through logs, cookies and similar technologies
• from creators and publications where they later use The Yarn tools for their own audience
• from service providers where needed to operate the platform

Why we use and disclose personal information

We use and disclose personal information to:

• operate and secure the platform
• deliver newsletters and content
• manage accounts
• manage creator and publication tools
• respond to support and contact requests
• record consent and unsubscribe status
• prevent spam, abuse, fraud and security threats
• comply with the law
• improve site performance and understand how the site is used
• and, only if those products are later enabled, support billing and advertising

The Yarn does not sell your personal information. Paid subscriptions and self-serve advertising are not live, and this policy does not claim them as current services.

Email subscribers and newsletter consent

When you subscribe, The Yarn collects your email address so we can send the newsletter you asked for. Newsletter messages may be commercial electronic messages under the Spam Act 2003 (Cth).

The Yarn should only send newsletter or marketing email where there is consent or another lawful basis. Consent, confirmation, unsubscribe and suppression records may be retained so that opt-outs can be honoured. We do not promise to delete records that must be kept to ensure you are not contacted again.

Direct marketing and unsubscribe

You can opt out of direct marketing at any time using the unsubscribe link in our emails or by contacting us using the privacy contact below. Unsubscribe requests should be honoured promptly.

Suppression records may be retained so that a person who has opted out is not contacted again. You do not need to log in or create an account simply to unsubscribe.

Creator-owned audiences and publication subscriber lists

This is central to how The Yarn works. Each creator/publication owns its own audience and subscriber list. The Yarn provides the platform tools and infrastructure.

• The Yarn does not claim ownership of creator subscriber lists
• The Yarn does not pool creator audiences into a shared or global audience
• The Yarn does not expose raw subscriber emails to advertisers
• The Yarn does not export or disclose creator subscriber lists outside agreed product flows or legal requirements

If creators later import their own lists, they must confirm they have a lawful basis and the necessary consent for those contacts.

Cookies, analytics and logs

The Yarn may use essential cookies and logs for security, sessions, preferences and the operation of the site. The Yarn may also use analytics to understand how the site is used.

We do not claim that the site uses no cookies. You can adjust your browser settings to limit cookies, but some features may not work correctly if you do.

Service providers

The Yarn relies on third-party service providers in categories such as hosting and infrastructure, database and storage, email delivery, authentication and security, analytics, and, in the future, payment processing and advertising tools.

These providers may handle personal information only to provide their services to The Yarn.

Overseas disclosures

Some service providers may store or process information overseas. The countries involved may depend on the infrastructure each provider uses.

The Yarn aims to take reasonable steps to use reputable providers and appropriate safeguards when information is handled outside Australia.

Security

The Yarn takes reasonable technical and organisational measures to protect personal information. However, no method of transmitting or storing information is completely secure, and we cannot guarantee absolute security.

You should also help protect your account by keeping your login credentials confidential.

Retention

The Yarn keeps personal information only for as long as is reasonably needed for the purposes it was collected, together with legal compliance, security, dispute resolution and business records.

Unsubscribe and suppression records may be retained to honour opt-outs. Information may be deleted, de-identified or archived when it is no longer needed.

Access and correction

You may request access to, or correction of, the personal information The Yarn holds about you. We may need to verify your identity before acting on a request.

We may decline a request where the law permits. To make a request, use the privacy contact below.

Deletion and suppression

You may request deletion of your personal information where appropriate. Deletion is not absolute: some information must be retained for legal, security, audit, unsubscribe or suppression, or legitimate business reasons.

For that reason, The Yarn does not promise complete erasure of all records in every case.

Complaints and the OAIC

If you have a privacy complaint, you can contact The Yarn using the privacy contact below. We will assess your complaint and respond within a reasonable time.

If your complaint is not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner.

Notifiable Data Breaches

The Yarn will assess suspected eligible data breaches. Where a data breach is likely to result in serious harm to affected individuals, The Yarn will, where required, notify those individuals and the Office of the Australian Information Commissioner.

Children and minors

The Yarn is not directed to young children. Where permission or supervision is required, under-age users should use the platform only with that permission or supervision.

The Yarn does not currently operate age-verification or identity-verification technology. Future laws and codes may require changes to how The Yarn handles information about children and minors.

Changes to this policy

The Yarn may update this policy from time to time. Material changes may be notified by a notice on the site or by other reasonable means. If you continue to use The Yarn after a change, the updated policy applies to you.

Last updated: [DATE TO BE INSERTED]

Contact

For privacy questions or requests, contact:

• [LEGAL ENTITY NAME]
• [PRIVACY CONTACT EMAIL]
• [REGISTERED ADDRESS]