OSEAS CARRIER PRIVACY POLICY

Effective Date: 21 September 2025

Version: 1.0 (Read Only)

OSEAS (ABN 53 982 125 080) (“OSEAS”, “we”, “us”, “our”) is committed to protecting the privacy of carriers who access or use the OSEAS platform (“Carriers”, “you”). This Privacy Policy explains how we collect, use, store, and disclose personal information in connection with our services, and sets out your rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Policy forms part of, and should be read together with, the OSEAS Website/Platform Terms and Conditions of Use and any other policies published on the OSEAS platform.

1.          PERSONAL INFORMATION WE COLLECT

1.1       We may collect the following categories of personal information from or about Carriers:

(a)        identity and contact details, including name, business name, ABN, address, email address, and phone number;

(b)        account and verification information, including licences, permits, certificates of currency, and insurance details;

(c)        vehicle and driver information;

(d)        payment and payout information, processed via third-party payment providers including Stripe, which may store or process payment data in the United States and other countries in which Stripe operates;

(e)        transaction, booking, and service history;

(f)          communications with OSEAS and other platform users; and

(g)        technical and usage data relating to your use of the platform, including device identifiers, IP addresses, browser type, and log data.

2.          HOW WE COLLECT PERSONAL INFORMATION

2.1       We collect personal information when you:

(a)        register for an OSEAS carrier account;

(b)        upload documents or provide verification details;

(c)        accept or perform shipments through the platform;

(d)        communicate with us or other users via the platform; or

(e)        use or interact with the platform and related systems, including through cookies and analytics technologies.

2.2       Where practicable, we collect personal information directly from you. In some cases, we may collect information from third parties, such as identity verification providers, insurers, or regulatory bodies, where this is necessary to verify your credentials or comply with our legal obligations.

3.          HOW WE USE PERSONAL INFORMATION

3.1       We use personal information to:

(a)        provide, operate, and improve the OSEAS platform and our services;

(b)        verify your eligibility, credentials, and compliance with applicable regulatory obligations;

(c)        facilitate load matching, bookings, payments, and payouts;

(d)        communicate with you regarding shipments, your account, and support matters;

(e)        manage risk, fraud prevention, and platform integrity;

(f)          comply with our legal and regulatory obligations; and

(g)        enforce our Terms and Policies.

3.2       We will not use your personal information for direct marketing without your consent, and you may opt out of any marketing communications at any time by contacting us using the details in clause 12.

4.          DISCLOSURE OF PERSONAL INFORMATION

4.1       We may disclose personal information to the following categories of recipients:

(a)        Shippers: we may disclose your name, business name, vehicle information, and contact details to shippers where this is reasonably necessary to facilitate a shipment you have accepted. We will not disclose more information than is necessary for that purpose;

(b)        Payment processors: including Stripe, for the purpose of processing payments and payouts in connection with your use of the platform;

(c)        Service providers: third parties who assist us in operating the platform, including cloud hosting, analytics, identity verification, and customer support providers, who are required to handle personal information in accordance with our instructions and applicable privacy laws;

(d)        Regulators, courts, and authorities: where we are required or authorised to do so by law, court order, or regulatory direction; and

(e)        Professional advisers: including legal and accounting advisers, subject to confidentiality obligations.

4.2       We do not sell personal information to third parties.

4.3       We do not disclose personal information for the purpose of direct marketing by third parties.

5.          CROSS-BORDER DISCLOSURE

5.1       Personal information may be stored or processed outside Australia, including through third-party service providers such as cloud hosting and payment processing platforms. These providers may be located in countries including the United States of America and other jurisdictions where OSEAS’s service providers operate. In particular, payment data processed via Stripe may be stored or processed in the United States. Stripe operates under binding privacy frameworks, including contractual commitments consistent with applicable data protection requirements.

5.2       Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient does not breach the APPs in relation to that information, including by entering into data processing agreements or relying on contractual protections consistent with APP 8.

5.3       Where we are unable to ensure an overseas recipient will comply with the APPs, we will seek your consent to the disclosure or rely on an applicable exception under the Privacy Act 1988 (Cth).

6.          DATA STORAGE AND SECURITY

6.1       We take reasonable technical and organisational measures to protect personal information from misuse, loss, unauthorised access, modification, or disclosure. These measures include:

(a)        encryption of data in transit and at rest where appropriate;

(b)        access controls limiting personal information to authorised personnel; and

(c)        regular review of our security practices.

6.2       While we take reasonable steps to protect your personal information, no data transmission or storage system is completely secure. If you become aware of any security concern, please contact us using the details in clause 12.

6.3       In the event of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth), and will complete our assessment of the breach within 30 days of becoming aware of it as required by law.

7.          RETENTION OF PERSONAL INFORMATION

7.1       We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, including to:

(a)        provide our services and maintain your account;

(b)        comply with legal and regulatory obligations, including tax, financial reporting, and transport compliance requirements;

(c)        resolve disputes and enforce our agreements; and

(d)        maintain records required by applicable law.

7.2       As a general guide, we retain:

(a)        account and identity verification records for a minimum of 7 years after your account is closed, in accordance with applicable legal obligations;

(b)        transaction and booking records for a minimum of 7 years after the relevant transaction; and

(c)        communications and support records for a minimum of 2 years after the relevant communication.

7.3       When personal information is no longer required, we will take reasonable steps to destroy or de-identify it.

8.          COOKIES AND ANALYTICS

8.1       OSEAS uses cookies and similar technologies (including web beacons and tracking pixels) to operate and improve the platform, monitor usage patterns, and enhance user experience.

8.2       Where OSEAS uses third-party analytics or tracking tools, including Google Analytics, these providers may collect data in accordance with their own privacy policies. Non-essential cookies are only placed with your consent.

8.3       You may configure your browser to refuse cookies or to alert you when cookies are being sent. However, some features of the platform may not function correctly if cookies are disabled.

9.          ACCESS AND CORRECTION

9.1       You have the right to request access to the personal information we hold about you, and to request correction of any information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

9.2       To make an access or correction request, contact us using the details in clause 12. We may require you to verify your identity before responding to your request.

9.3       We will respond to access and correction requests within a reasonable time and in accordance with the APPs. If we decline a request, we will provide written reasons.

9.4       We do not charge a fee for making an access or correction request, but we may charge a reasonable fee to cover the cost of providing access where permitted by law.

10.       PRIVACY COMPLAINTS

10.1   If you believe we have handled your personal information in a way that does not comply with the Privacy Act 1988 (Cth) or the APPs, you may make a complaint by contacting us using the details in clause 12.

10.2   We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days. If we require additional time, we will notify you.

10.3   If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):

(a)        Website: www.oaic.gov.au

(b)        Phone: 1300 363 992

(c)        Post: GPO Box 5218, Sydney NSW 2001

11.       CHANGES TO THIS POLICY

11.1   We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

11.2   We will provide reasonable notice of material changes to this Policy by publishing the updated version on the OSEAS platform and, where practicable, notifying you by email at least 14 days before the change takes effect.

11.3   The latest version of this Policy will be published on the OSEAS platform and will apply from the effective date shown. Your continued use of the platform after the effective date constitutes your acceptance of the updated Policy.

12.       CONTACT US

12.1   For privacy enquiries, access or correction requests, or complaints, please contact:

OSEAS

Email: support@oseas.com.au

Website: https://www.oseas.com.au/

ABN: 53 982 125 080

13.       ELECTRONIC SIGNING AND ACCEPTANCE

13.1   This Privacy Policy may be accepted electronically. Electronic acceptance is the default method of acknowledgement for Carriers accessing or registering on the OSEAS platform.

13.2   Electronic acceptance is effected by a Carrier selecting the checkbox confirming acceptance of this Privacy Policy at the point of account creation or as otherwise presented by OSEAS. Before selecting the checkbox, Carriers are directed to review the full current version of this Privacy Policy.

13.3   By selecting the checkbox confirming acceptance, the Carrier acknowledges that they have read and understood this Privacy Policy and consents to the collection, use, and disclosure of their personal information as described in it.

13.4   OSEAS retains a record of each electronic acceptance, including:

(a)        the date and time of acceptance;

(b)        the version of this Privacy Policy accepted;

(c)        the account details associated with the acceptance; and

(d)        the method used to provide acceptance.

13.5   Where OSEAS specifically requests it, or where electronic acceptance is not available, a Carrier may provide acknowledgement by completing and returning a written or manually completed form provided by OSEAS. Manual acknowledgement has the same legal effect as electronic acceptance under this clause.

13.6   A Carrier who has provided electronic or manual acceptance and subsequently continues to use the OSEAS platform following any update to this Privacy Policy will be taken to have accepted the updated version in accordance with clause 11.

ACKNOWLEDGEMENT

By creating an OSEAS carrier account, or by selecting the checkbox below confirming acceptance of this Privacy Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described in it. For the full terms governing electronic acceptance, see clause 13.

Where OSEAS specifically requests it, you may be required to provide acknowledgement in another form, including a written or manually completed acknowledgement.

OSEAS retains a record of your acknowledgement, including:

(a)        the date and time of acceptance;

(b)        the version of this Privacy Policy accepted;

(c)        the account details associated with the acceptance; and

(d)        the method used to provide acknowledgement.

Electronic acknowledgement (default):