Privacy Policy

Last updated: November 2026

Your privacy matters to us. This policy explains what personal information we collect, why we collect it, who we share it with, where it is stored, and the choices and rights you have.

1. Who we are and what this policy covers

1.1 StockUnify Pty Ltd (ABN 32 699 041 293) (“StockUnify”, “we”, “us”, “our”) is an Australian company. We provide cloud-based inventory management software (the “Services”) through www.stockunify.com and i.stockunify.com (together, the “Website”).

1.2 This Privacy Policy explains how we handle personal information. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where they apply to us, we also comply with:

the UK General Data Protection Regulation and the Data Protection Act 2018 (UK GDPR);
the EU General Data Protection Regulation (EU GDPR);
the New Zealand Privacy Act 2020;
the South African Protection of Personal Information Act 2013 (POPIA); and
applicable United States state privacy laws.

1.3 We handle personal information in two different roles:

(a) As a controller. This covers information about our own website visitors, people who sign up for or buy our Services, account users, billing contacts, partners and people who contact us. This policy applies in full to this information.
(b) As a processor (service provider). This covers information that our customers enter or import into StockUnify, such as details of their own customers, suppliers and staff (“Customer Data”). Our customer (the “Organisation”) decides what Customer Data is collected and how it is used. The Organisation is responsible for its own privacy obligations to those individuals. We process Customer Data only on the Organisation’s instructions, as set out in our Terms of Use and Data Processing Agreement. If your details are held in an Organisation’s StockUnify account, please contact that Organisation first.

2. Information we collect

2.1 Information you give us:

(a) account and contact details, such as name, email address, phone number, business name and address, job title, username and password;
(b) billing details, such as billing contact, billing address and tax identifiers. Card payments are processed by Stripe. We do not store full card numbers, and our staff cannot see them;
(c) communications with us, such as support requests, emails, chat messages, call notes, survey responses and feedback;
(d) partner and referral program details, if you apply to become a partner.

2.2 Information we collect automatically:

(a) technical and log information, such as IP address, browser and device type, operating system, pages visited, referring URLs, and dates and times of access;
(b) product usage information, such as features used, actions taken, error reports and performance data;
(c) information from cookies and similar technologies (see section 8).

2.3 Information from third parties. When you connect StockUnify to a third-party service (for example Shopify, Xero or ServiceM8), we receive the access credentials and data that you authorise that service to share with us. We may also receive information from our resellers and partners, payment processors, and advertising and analytics providers.

2.4 We do not intentionally collect sensitive information, such as information about health, racial or ethnic origin, religion or political opinions. Please do not enter this kind of information into StockUnify unless it is necessary and you are lawfully permitted to do so.

2.5 You can choose not to give us certain information. If you do, we may be unable to provide some or all of the Services. You can make general enquiries without identifying yourself or under a pseudonym. However, we will need to identify you before we give you access to an account.

3. How we use information

3.1 We use personal information to:

(a) create and administer accounts, provide the Services and process payments;
(b) provide customer support. This includes viewing your account where you give permission or where it is reasonably necessary to resolve an issue;
(c) keep the Services secure, detect and prevent fraud, abuse and security incidents, and diagnose technical problems;
(d) send you service messages, such as account, billing, security and change notices;
(e) send you marketing about StockUnify products and services, where the law permits. You can unsubscribe at any time using the link in our emails or by contacting us;
(f) understand how the Website and Services are used and improve them, including by using aggregated or de-identified information;
(g) comply with our legal obligations, and establish, exercise or defend legal claims.

3.2 Legal bases (UK and EU users). Where the UK GDPR or EU GDPR applies, we rely on these legal bases:

performance of a contract, for 3.1(a), (b) and (d);
our legitimate interests in running, securing, marketing and improving our business, balanced against your rights, for 3.1(c), (e) (business contacts) and (f);
your consent where the law requires it, such as for non-essential cookies and certain marketing;
compliance with legal obligations, for 3.1(g).

3.3 Customer Data. We access and use Customer Data only to:

provide and support the Services;
keep the Services secure;
comply with the law; or
follow the Organisation’s other instructions.

Our staff access Customer Data only when needed for these purposes, on a need-to-know basis. We may create aggregated, de-identified statistics from use of the Services, such as the number of transactions processed. These statistics do not identify any Organisation or individual, and we do not attempt to re-identify them.

3.4 We do not sell personal information. We do not share personal information with third parties for their own marketing purposes.

4. Who we share information with

4.1 We share personal information only as described in this policy. This includes sharing with:

(a) service providers who help us run our business and provide the Services, such as hosting (Amazon Web Services), payment processing (Stripe), email delivery, customer support, analytics and advertising providers. They may use the information only to provide services to us. The current list of our sub-processors is in our Data Processing Agreement;
(b) third-party services that you or your Organisation choose to connect to StockUnify, such as Shopify, Xero or ServiceM8. Their own privacy policies govern how they handle the information;
(c) the Administrator of your Organisation’s account, who can see the information of users in that account;
(d) our professional advisers, such as lawyers, accountants and auditors;
(e) a buyer, investor or successor (and their advisers) in a proposed or actual merger, acquisition, financing, restructure or sale of all or part of our business. We will require the recipient to handle the information in line with this policy;
(f) law enforcement, regulators, courts or other parties, where we are required or authorised by law, or where it is necessary to protect the rights, property or safety of StockUnify, our customers or others.

5. Where information is stored and international transfers

5.1 Customer Data and account data are hosted on Amazon Web Services (AWS) in the Asia Pacific (Sydney) region, Australia. Backups are also stored in that region. We do not currently offer hosting in other regions.

5.2 Our customers and users are located around the world, so personal information is transferred to Australia when you use the Services. Some of our service providers may process personal information in other countries, including the United States. Examples are payment, email, analytics and advertising providers. Our staff may also access information from the countries where they are located.

5.3 When we disclose personal information outside Australia, we take reasonable steps to make sure the recipient handles it consistently with the APPs. In addition:

UK and EU. Australia is not covered by an adequacy decision under the UK GDPR or EU GDPR. For transfers to us and onward transfers, we rely on the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or another valid transfer mechanism.
New Zealand and South Africa. Where the NZ Privacy Act or POPIA applies, we rely on comparable safeguards, contractual protections or your authorisation, as those laws permit.

6. How we protect information

6.1 We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include:

encrypting data in transit using TLS;
access controls and authentication for our staff;
logically separating each Organisation’s data; and
daily backups.

6.2 No system is completely secure. You are responsible for keeping your login details confidential, using a strong password, and controlling which users can access your Organisation’s account.

6.3 Data breaches. We may become aware of a data breach that is likely to result in serious harm, or that meets a similar threshold under applicable law. If so, we will notify affected individuals and the relevant regulator within the timeframes the law requires. Depending on where you are, the regulator may be:

the Office of the Australian Information Commissioner, under the Notifiable Data Breaches scheme;
the UK Information Commissioner’s Office; or
an EU supervisory authority.

If the breach affects Customer Data, we will notify the affected Organisation within 48 hours of becoming aware of it, so it can meet its own obligations.

7. How long we keep information

7.1 We keep personal information only for as long as we need it for the purposes in this policy. This includes meeting legal, tax, accounting and reporting requirements.

7.2 Customer Data in a free trial account that is not converted to a paid plan may be deleted at any time after the trial ends. When a paid subscription ends, we keep the Organisation’s Customer Data for 12 months so it can request an export, and may then delete it. You can ask us to delete it sooner. See our Terms of Use for details. Deleted data may remain in our backups until those backups are overwritten in the ordinary course.

7.3 We usually keep billing and transaction records for at least 7 years to meet tax and accounting obligations.

8. Cookies and similar technologies

8.1 Cookies are small files stored on your device. We use:

(a) essential cookies, which are needed to sign you in, keep your session secure and remember your settings;
(b) analytics cookies (Google Analytics), which help us understand how visitors use the Website;
(c) advertising cookies (Meta Pixel), which help us measure our advertising and show relevant ads on other platforms.

We also use Ahrefs Web Analytics, which measures website traffic without setting cookies.

8.2 If you visit from the UK, the European Economic Area or Switzerland, we do not set analytics or advertising cookies unless you accept them in our cookie banner. Visitors from other regions can turn these cookies off at any time. Everyone can change their choice using the “Cookie settings” link at the bottom of every page. You can also:

block or delete cookies in your browser settings (blocking essential cookies may stop the Services from working);
opt out of Google Analytics at tools.google.com/dlpage/gaoptout; and
manage ad preferences in your Meta account settings.

9. Your rights

9.1 You can ask to access the personal information we hold about you, and ask us to correct it. Depending on where you live, you may also have the right to:

ask us to delete it;
restrict or object to our processing of it, including for direct marketing;
receive a copy in a portable format;
withdraw consent at any time (this does not affect processing that happened before you withdrew); and
not be discriminated against for exercising your rights.

9.2 To make a request, email support@stockunify.com. We may need to verify your identity first. We will respond within 30 days, or any shorter period the law requires. We do not charge for making a request, but we may charge a reasonable fee for providing access where the law permits. If we refuse a request, we will tell you why and how you can complain.

9.3 If your request relates to Customer Data held by an Organisation, we will refer the request to that Organisation or help the Organisation respond.

10. Children

10.1 The Services are designed for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe we have done so, please contact us and we will delete it.

11. Third-party websites

11.1 The Website may contain links to third-party websites and services. We are not responsible for their privacy practices. We encourage you to read their privacy policies.

12. Complaints

12.1 If you have a concern about how we have handled your personal information, please contact us first at support@stockunify.com. We will acknowledge your complaint promptly and aim to resolve it within 30 days.

12.2 If you are not satisfied with our response, you can complain to the relevant regulator, including:

the Office of the Australian Information Commissioner (www.oaic.gov.au);
the UK Information Commissioner’s Office (www.ico.org.uk);
the data protection authority in your EU member state;
the New Zealand Office of the Privacy Commissioner (www.privacy.org.nz); or
the South African Information Regulator (www.inforegulator.org.za).

13. Changes to this policy

13.1 We may update this policy from time to time. We will post the updated version on this page with a new “Last updated” date. If the changes are material, we will also notify account holders by email or in the Services before the changes take effect.

14. Contact us

StockUnify Pty Ltd (ABN 32 699 041 293), Victoria, Australia Privacy enquiries: support@stockunify.com