Privacy
Policy.

Introduction

OnlyPark is committed to protecting the privacy of individuals. This Privacy Policy explains how we collect, hold, use, and disclose personal information in accordance with the Privacy Act 1988 (Cth) and, where applicable, the Information Privacy Act 2009 (Qld).

OnlyPark manages parking compliance on privately managed and controlled land in accordance with site-specific authority, clearly displayed Terms of Entry, and applicable laws.

Definitions

For the purposes of this Privacy Policy:

• "Personal Information" has the meaning given in the Privacy Act 1988 (Cth) and includes any information or opinion about an identified individual, or an individual who is reasonably identifiable.
• "You / User" means any individual who interacts with parking facilities managed by OnlyPark, including motorists, visitors, guests, contractors, or members of the public.
• "Services" means parking management, compliance, enforcement, payment, and related services provided by OnlyPark, including QR-based registration, digital permits, licence-plate recognition monitoring, Pay-By-QR parking payments, compliance monitoring, and enforcement activities.
• "Terms of Entry" means the parking terms and conditions displayed at, or otherwise applicable to, a privately managed car park site.
• "Non-Compliance Notice" means a notice issued where a vehicle is parked in breach of the applicable Terms of Entry, which may include a request for payment under private contractual arrangements.
• "Appeal" means a request submitted by a user seeking review or cancellation of a Non-Compliance Notice.

Collection of Personal Information

OnlyPark collects personal information for the purposes of managing parking authorisations, verifying compliance with Terms of Entry, facilitating payments, communicating with users, and supporting enforcement and recovery activities.

The types of personal information we may collect include:

• Vehicle registration number
• Images or footage of vehicles
• Date, time, and location data
• Name, email address, and phone number
• Payment confirmation information (where applicable)
• Information relating to enquiries, appeals, or correspondence with us

How Personal Information is Collected

Personal information may be collected or generated through:

• Automated parking management and compliance systems
• QR-based registration and Pay-By-QR payment systems
• Licence-plate recognition technologies
• Online portals, dashboards, and forms
• Direct communications with users
• Third-party service providers engaged to support parking operations
• Publicly available sources, where lawful

Use of Personal Information

OnlyPark uses personal information to:

• Verify vehicle registration and authorisation
• Monitor compliance with Terms of Entry
• Facilitate and validate parking payments
• Issue and manage Non-Compliance Notices
• Review and assess Appeals
• Recover unpaid amounts in accordance with applicable law
• Communicate with users regarding parking matters
• Provide reports to landowners, managers, or principals
• Improve and manage our Services
• Comply with legal and regulatory obligations

Personal information provided in connection with Appeals may also be used for follow-up communications, reminder notices, or recovery action where applicable. Information may be retained for audit, enforcement, dispute resolution, or legal compliance purposes.

Technology Platforms and Service Providers

OnlyPark uses secure third-party technology platforms to support the delivery of its Services, including parking management systems, compliance monitoring tools, and payment platforms.

These technology providers process personal information on OnlyPark's behalf and are subject to contractual confidentiality and privacy obligations.

OnlyPark remains responsible for determining how personal information is used in connection with parking management, compliance, enforcement, and recovery activities.

Disclosure of Personal Information

OnlyPark may disclose personal information:

• To landowners, site managers, or principals with authority over the relevant site
• To technology platform providers engaged to operate parking management, compliance, and payment systems on our behalf
• To payment service providers (including Stripe) for the purpose of processing parking payments
• To recovery agents or legal representatives in connection with unpaid Non-Compliance Notices
• To regulatory authorities where required or authorised by law
• To professional advisers or potential purchasers in connection with a business sale or restructure

OnlyPark does not issue government fines or infringements. All enforcement activity is undertaken under private contractual arrangements in accordance with site signage and applicable legislation.

Payments

Where parking payments are made using Pay-By-QR or other digital payment methods:

• Payments are processed by secure third-party payment providers, including Stripe
• OnlyPark receives payment confirmation and transaction reference information only
• OnlyPark does not store full credit card or banking details

Payment data may be linked to vehicle or parking session information to confirm compliance with parking conditions.

Marketing Communications

OnlyPark may use personal information to send information about our Services or related updates.

Users may opt out of marketing communications at any time by using the unsubscribe function included in communications or by contacting us directly.

We do not sell personal information for marketing purposes.

Data Security

OnlyPark takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure, including:

• Secure system access controls
• Encryption of data in transit where appropriate
• Monitoring and audit controls

Access and Correction

Individuals may request access to, or correction of, personal information held by OnlyPark by contacting us using the details set out in Section 15 (Privacy Complaints).

We will respond to access and correction requests within a reasonable timeframe in accordance with the Privacy Act 1988 (Cth).

Data Breach Notification

In the event of a data breach that is likely to result in serious harm, OnlyPark will investigate the incident and take appropriate steps in accordance with the Privacy Act 1988 (Cth), including notification where required.

Minors

Our Services are intended for individuals of legal driving age. We do not knowingly collect personal information from minors.

Changes to this Policy

This Privacy Policy may be updated from time to time. The current version will be published on our website and will take effect from the date of publication.

Privacy Complaints

If you have a concern or complaint about how OnlyPark has handled personal information, you may contact us at:

We will investigate privacy complaints and respond within a reasonable timeframe. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Acceptance

By using parking facilities managed by OnlyPark, you acknowledge that personal information may be collected and used in accordance with this Privacy Policy, the applicable Terms of Entry, and our Terms of Use.

Personal information collected in connection with parking enforcement is used strictly for administering compliance with the Terms of Entry displayed at the relevant site.