Privacy Policy

1. Who are we?

Sugarfar.com is operated by Disp I/S, a partnership registered in Denmark under CVR no. 38507508, with registered address at Maglebjergvej 6, 2800 Kongens Lyngby, Denmark. We handle the personal information of our Australian users in accordance with the Australian Privacy Principles (APPs) set out in the federal Privacy Act 1988 (Cth), to the extent that Act applies to our processing of Australian users' information.

To contact us about privacy or to lodge a privacy complaint, write to: support@sugarfar.com

2. What information do we collect?

We collect the following kinds of personal information from Australian users (and only the information reasonably necessary for the purposes set out below, in line with APP 3):

Information you provide to us

• Account information: Email address, username and password upon registration
• Profile data: Age, gender, Australian city or state/territory, profile text, interests and preferences
• Photos: Profile pictures and gallery images you upload
• Messages: Chat messages and images sent to other users
• Payment information: Processed directly by Stripe — we never receive or store your card details

Information we collect automatically

• Technical data: IP address, browser type, device type and operating system
• Usage data: Page views, clicks and interactions with the platform
• Cookies: See section 8 on cookies

Where possible, you may use a pseudonym or interact with us anonymously, but in practice creating a Sugarfar profile requires personal information so the platform can match you with other users.

3. What do we use your information for?

We use your personal information for the primary purposes of:

• Service delivery: Creating and maintaining your profile, displaying you to other users, and enabling chat
• Security: Verifying profiles, detecting and preventing abuse, fraud and fake profiles
• Improvement: Optimising the platform, features and user experience
• Communication: Sending service notifications, match notifications and (with your consent) marketing communications in compliance with the Spam Act 2003 (Cth)
• Payment: Processing subscription payments via Stripe in Australian dollars (AUD)

We will only use your information for a secondary purpose where you would reasonably expect us to, where we have your consent, or where the use is otherwise permitted under APP 6.

4. Who do we share information with?

We do not sell your personal information. We disclose information only to trusted service providers that process data on our behalf, including Stripe (payments), our hosting and database provider, and our email/transactional service providers.

Our service providers are located outside Australia (primarily in the European Union and the United States). When personal information is transferred overseas, we take reasonable steps under APP 8 to ensure that the overseas recipient handles it consistently with the APPs, including by relying on Standard Contractual Clauses and written data processing agreements.

5. Security

We protect your information with reasonable administrative, technical and physical safeguards, as required by APP 11:

• All data transmission takes place via HTTPS (TLS encryption)
• Passwords are hashed with industry-standard algorithms — we can never see your password
• Payment details are handled exclusively by Stripe (PCI DSS certified) and are never stored on our servers
• Access to personal information is restricted to authorised personnel on a need-to-know basis
• Row Level Security (RLS) ensures that users can only see information they are entitled to

6. Retention and deletion

We retain your personal information only as long as necessary for the purposes for which it was collected, and otherwise destroy or de-identify it consistent with APP 11.2.

• Chat images: Automatically deleted after 5 days
• Profile data: Deleted upon deletion of your account
• Payment history: Retained for up to 5 years for tax and bookkeeping purposes (consistent with Australian Taxation Office expectations and our Danish bookkeeping obligations)
• Log files: Automatically deleted after 90 days

You can delete your profile at any time under "My Account". All your profile data, photos and messages will be permanently deleted.

7. Your rights under the Privacy Act 1988

As an Australian individual, the APPs give you the following rights:

• Access (APP 12): The right to request access to the personal information we hold about you
• Correction (APP 13): The right to request correction of inaccurate, out-of-date, incomplete, irrelevant or misleading information
• Anonymity / pseudonymity (APP 2): Where lawful and practicable
• Erasure: You can delete your profile and all associated data via "My Account"
• Withdrawal of consent: Where processing is based on consent, you can withdraw it at any time
• Marketing opt-out: You may opt out of direct-marketing communications at any time using the unsubscribe link in our emails

Requests should be sent to: support@sugarfar.com. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a privacy complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Cookies

Sugarfar uses cookies to deliver and improve the service. We distinguish between:

• Necessary cookies: Required for the platform to function (login sessions, security). These do not require consent.
• Analytical cookies: Used to understand how visitors use the site. Subject to your consent.
• Marketing cookies: Used to target advertisements. Subject to your consent.

You can change your cookie preferences at any time via the cookie settings in the site footer. You can also block cookies in your browser, but certain features may not function optimally.

9. Notifiable data breaches

If we experience an eligible data breach (one that is likely to result in serious harm to one or more affected individuals) and the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 applies to us, we will notify affected Australian users and the OAIC as soon as practicable.

10. Changes to this policy

We may update this privacy policy from time to time. In the event of significant changes, we will inform you via email or a notice on the platform. The latest version will always be available on this page.

11. Contact

Questions or complaints about this privacy policy or the handling of your personal information can be directed to:

Disp I/S
Maglebjergvej 6, 2800 Kongens Lyngby, Denmark
CVR: 38507508
Email: support@sugarfar.com