Privacy Policy

Last Updated: March 2026

1. Introduction

NextMaps Pty Ltd (ACN 694 165 583) ("we", "our", or "us") operates the MineSales WA service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, phone number (optional), company name (optional)
Payment Information: Processed securely through Stripe (we don't store card details)
Alert Preferences: Areas of interest, holder names, notification settings
Marketplace Listings: Tenement details, contact information, uploaded documents
Map States: Saved map configurations and preferences
Location Data: With your explicit permission, real-time GPS coordinates when using the geolocation feature. If you record a trail, the GPS coordinates, timestamps, and route data are collected and may be saved to your account.

Location Data: We only access your device location when you explicitly activate the "Show my location" feature. Your browser will ask your permission before sharing location data. Trail recordings are saved to your account only when you choose to save them. You can delete saved trails at any time. Location data is never shared with third parties or used for advertising.

2.2 Information Collected Automatically

Usage Data: Features accessed, searches performed, layers viewed, clicks, and navigation patterns
Session Replay: We use analytics tools that record user sessions, including mouse movements, clicks, scrolls, and page content viewed, to help us understand how the Service is used and to improve user experience. Sensitive form inputs (e.g., passwords) are automatically masked and not captured.
Device Information: Browser type, operating system, screen resolution
IP Address: For security and compliance purposes
Cookies: Session management, preferences, and analytics

3. How We Use Your Information

Purpose	Legal Basis
Provide the Service	Contract performance
Send alert notifications	Contract performance
Process payments	Contract performance
Customer support	Legitimate interests
Service improvements	Legitimate interests
Legal compliance	Legal obligation
Display your location on the map and record trails	Consent (browser permission prompt)
Marketing (with consent)	Consent

4. Information Sharing

We do not sell, trade, or rent your personal information. We may share information in these circumstances:

Service Providers: Stripe (payments), SendGrid (emails), Cloudflare (hosting), PostHog (analytics and session replay)
Marketplace Transactions: Contact details shared with buyers after they submit an introductory message through the platform
Legal Requirements: When required by law or to protect rights
Business Transfers: In case of merger or acquisition
Consent: With your explicit permission

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Encryption in transit (HTTPS)
Encrypted database storage
Access controls and authentication
Regular security audits
Secure password storage (bcrypt hashing)

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

Account Data: Retained while account is active, deleted 30 days after account closure
Alert History: Retained for 12 months for service improvement
Saved Trails: Retained until manually deleted by the user
Marketplace Listings: Retained until manually deleted or tenement expires
Payment Records: Retained for 7 years for tax compliance
Legal Compliance: Terms acceptance retained for 7 years

7. Your Rights

You have the right to:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data (subject to legal requirements)
Portability: Receive your data in a structured format
Objection: Object to certain processing activities
Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at: [email protected]

8. Cookies and Tracking

We use the following types of cookies and tracking technologies:

Essential: Required for authentication and security
Functional: Remember your preferences and settings
Analytics: Understand how the Service is used, including event tracking and session replay (via PostHog). For authenticated users, analytics data may be associated with your account to help us provide better support and improve features relevant to your usage.

You can control cookies and analytics through your browser settings or by using browser extensions that block tracking scripts. Disabling cookies may limit some features.

9. Third-Party Services

Our Service integrates with:

DMPE: Mining tenure data (public information)
Stripe: Payment processing
Cloudflare: Content delivery and protection
PostHog: Product analytics and session replay

These services have their own privacy policies. We encourage you to review them.

10. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If we discover we have collected information from a child, we will delete it immediately.

11. International Data Transfers

Your information may be processed in countries outside Australia. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance.

13. Contact Information

For privacy-related questions or concerns:

NextMaps Pty Ltd
ACN: 694 165 583
Email: [email protected]
Website: www.nextmaps.com.au

14. Complaints

If you're not satisfied with our response to your privacy concern, you may lodge a complaint with:

Office of the Australian Information Commissioner (OAIC)
Phone: 1300 363 992
Website: www.oaic.gov.au

By using MineSales WA, you consent to the collection and use of your information as described in this Privacy Policy.