How we handle your personal information

One Final Song (we, us, our) operates the funeral services directory at onefinalsong.com (the Site). We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains what personal information we collect, how we use and disclose it, and how you can access, correct or complain about it. By using the Site you agree to this Policy.

1. What personal information we collect

Depending on how you use the Site, we may collect:

• Enquiry information — when you contact a funeral provider through the Site: your name, email address, phone number (if you provide it) and the contents of your message, plus the listing(s) you enquired about.
• Account information — if you register, or claim a listing as a provider: your name, email address and password (stored in encrypted form), and, if you sign in with Google, your name, email address and profile details supplied by Google.
• Listing information — if you claim or manage a listing: business name, contact details, services, locations, packages, pricing and related details.
• Technical information — your IP address, browser type and user agent, device information, pages viewed and similar log and analytics data collected automatically when you use the Site. Features such as the provider comparison shortlist are also stored against your browsing session.

Because of the nature of the Site, an enquiry may mention a person who has died or details of a funeral you are arranging. We treat every enquiry with care and use it only to connect you with the provider(s) you choose. Please do not include sensitive information (such as health or financial account details) beyond what is needed for your enquiry.

2. How we collect it

We collect personal information directly from you when you submit an enquiry, create an account, claim a listing or otherwise contact us. We also collect technical information automatically through cookies and server logs. Directory listings are compiled from publicly available business information, such as providers' own websites and public business profiles.

3. Why we collect, hold and use your information

We use personal information to:

• forward your enquiry to the provider(s) you select so they can respond;
• create and manage your account and authenticate logins;
• create, verify and maintain directory listings;
• operate, secure, personalise and improve the Site;
• respond to your questions and provide support;
• prevent fraud, spam and misuse of the Site;
• send you service-related communications and, where permitted, marketing; and
• comply with our legal obligations.

If you do not provide the information we ask for, we may be unable to forward your enquiry or provide certain features.

4. How we disclose your information

We may disclose your personal information to:

• Funeral providers — when you submit an enquiry, we forward your details and message to the provider(s) you choose so they can contact you. Each provider then handles your information under its own privacy practices, which we do not control.
• Service providers — third parties who help us run the Site, such as hosting, email delivery, authentication (including Google sign-in) and analytics providers, who may only use the information to provide services to us.
• Legal and safety — law enforcement, regulators or other parties where required or authorised by law, or to protect our rights, users or the public.
• Business transfers — a successor entity in connection with a sale, merger or restructure of our business.

We do not sell your personal information.

5. Direct marketing

We may send you marketing communications about the Site and related services where you have consented or where it is otherwise permitted under the Spam Act 2003 (Cth) and the Privacy Act. Every marketing email includes an unsubscribe option, and you can opt out at any time by using that option or by emailing us. We do not use or disclose your information for marketing by other organisations without your consent.

6. Cookies and analytics

The Site uses cookies and similar technologies to keep you signed in, remember your preferences (including your comparison shortlist), maintain security and understand how the Site is used. You can set your browser to refuse or delete cookies, but some features may not work properly if you do. We may use analytics tools to collect aggregated, non-identifying usage statistics.

7. Overseas disclosure

Your personal information is primarily stored on servers located in Australia. Some of our service providers (for example, authentication, email or analytics providers) may store or process information overseas. Where this occurs, we take reasonable steps to ensure your information is handled consistently with the APPs.

8. How we keep your information secure

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure — including access controls, encryption of passwords and secure hosting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. How long we keep it

We retain personal information only for as long as needed for the purposes described in this Policy or as required by law. When it is no longer needed, we take reasonable steps to delete or de-identify it.

10. Accessing and correcting your information

You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Contact us using the details below. We will respond within a reasonable time and may need to verify your identity first. If we decline a request, we will tell you why.

11. Data breaches

If a data breach occurs that is likely to result in serious harm, we will respond in accordance with the Notifiable Data Breaches scheme under the Privacy Act, including notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) where required.

12. Third-party sites

The Site links to funeral providers' websites and other third-party sites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal information.

13. Complaints

If you have a privacy concern or believe we have breached the APPs, please contact us via our contact form and we will investigate and respond within a reasonable time. If you are not satisfied with our response, you may contact the OAIC at www.oaic.gov.au or on 1300 363 992.

14. Changes to this Policy

We may update this Policy from time to time by posting the updated version on this page with a new "last updated" date. Please check back periodically.

15. Contact us

For any privacy question or request, contact us via our contact page.