Dela Privacy Policy

Last updated: 14 April 2026 | Effective: 28 April 2026 

Delaxchange Pty Ltd (ABN 19 680 240 297) (“Dela”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and protect your information in connection with our website, mobile application, and related services (together, the “Platform”).  

1. What Information We Collect

We may collect the following types of personal information:

• Identity Details: Name, date of birth, and government-issued identification (e.g. passport or driver licence). Government-issued identification is collected and processed by our third-party identity verification provider, Stripe Identity, for the purpose of verifying seller identity. This information may include biometric data derived from identity documents. Dela does not directly access, store, or retain copies of your government-issued identification documents. Stripe processes this data in accordance with its own Privacy Policy.

• Contact Details: Email address, phone number, residential or mailing address.
• Transaction Information: Details related to purchases, payments, and interactions made through our Platform.
• Payment Information: While you may be asked to enter bank or card details through our app, these are securely transmitted via API to our third-party payment provider, Stripe. Dela does not access, store, or retain your full payment credentials. Stripe processes this data in accordance with its own Privacy Policy.
• Device and Technical Information: IP address, browser type, operating system, device identifiers, and session data.
• Usage Data: Information about your use of the Platform, including interactions, preferences, and navigation behaviour.
• In-app chat data: We hold data for up to 3 months (90 days) after a transaction is completed, or longer if needed for an active dispute or legal reason. After this, chat data is permanently deleted or anonymised.

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children without parental consent. Users are required to confirm they are at least 18 years of age during Account registration. If we become aware that a User is under 18, we may suspend or terminate their Account and delete any associated personal information.

Due to the nature of the Platform, which facilitates payments, shipping, and identity verification, Users are required to identify themselves to use the Platform. Anonymous or pseudonymous use is not available, as identification is reasonably necessary for the operation of the services.

2. How We Collect Information

We may collect personal information:

• Directly from you: When you register, complete forms, transact, or communicate with us.
• Automatically: Through cookies and similar technologies that track your Platform usage.
• From third parties: Including identity verification services, service providers, and publicly available sources.

3. Why We Collect and Use Your Information

We collect your personal information where it is reasonably necessary for our business operations or activities, or as otherwise required or authorised by law.

We may use your information to:

• Deliver and operate our services and the Platform.
• Facilitate payments and transactions.
• Verify your identity and detect fraud or misuse.
• Conduct automated fraud checks, including device and browser fingerprinting, IP and payment method analysis, and other automated processing, to protect Users and the integrity of the Platform.
• Automatically scan and redact personal contact information shared in in-app messages, to protect User privacy and safety.
• Respond to queries, complaints, or customer service requests.
• Comply with legal, regulatory, or contractual obligations.
• Analyse Platform usage and improve user experience.
• Provide relevant updates, features, or promotional communications (where permitted).

4. Who We May Share Your Information With

We may disclose your personal information to:

• Service Providers:Such as Stripe (payments and identity verification), courier and shipping partners, and platform infrastructure providers. Stripe is based in the United States and processes data in accordance with its own Privacy Policy.
• Government or Regulatory Bodies: When legally required or permitted, including disclosures to the Australian Transaction Reports and Analysis Centre (AUSTRAC) where Dela suspects money laundering, terrorism financing, or other suspicious activity.
• Successors or Acquirers: In the event of a business restructure, sale, or merger.
• Other parties: Where you provide consent or direct us to do so.

Cross-border disclosure: Some third parties we work with are located outside Australia. In particular, Stripe Inc. is based in the United States. Where personal information is disclosed outside of Australia, we take reasonable steps to ensure that those recipients comply with the Australian Privacy Principles or are subject to laws that offer substantially similar protection. Where this is not possible, we will inform you and obtain your consent, where required.

5. Security of Your Information

We take the security of your information seriously. We use administrative, technical, and physical safeguards to protect it against loss, misuse, unauthorised access, or disclosure. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information only as long as necessary to fulfil the purposes outlined in this policy or as required by law. As a general guide:

• Transaction records, payment references, and audit logs: Retained for up to 5 years to comply with Australian tax, accounting, and regulatory obligations.
• Identity verification records: Retained for the duration of your Account and for a reasonable period after closure, as required by applicable law.
• In-app chat data: Retained for up to 90 days after a transaction is completed, or longer if required for an active dispute, fraud investigation, or legal obligation.
• Device and technical data: Retained for up to 12 months for fraud prevention and security purposes.
• Account profile data: Deleted or anonymised upon Account deletion, subject to the retention periods above.

Where personal information is no longer required for any purpose, it will be securely deleted or anonymised.

7. Your Rights

Under the Privacy Act 1988 (Cth), you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Opt out of direct marketing communications at any time by using the unsubscribe link in any marketing email, or contacting us at support@delaxchange.com. We will process your opt-out request within a reasonable timeframe. You may not opt out of transactional or service-related communications that are necessary for the operation of your Account or active Deals.
• Withdraw your consent to the extent that our processing relies on consent. This may affect our ability to provide some services.
• Request information about whether your personal information has been disclosed to overseas recipients and, if so, which countries.

To exercise these rights, please contact us using the details provided below.

Complaints: If you believe your privacy has been breached, or you are dissatisfied with how we have handled your personal information, you may lodge a complaint with us by emailing support@delaxchange.com. We will acknowledge your complaint within 7 business days and aim to resolve it within 30 business days. If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

     8. Account Deletion

You may request deletion of your Dela account at any time through the Platform, subject to the conditions below.

If you do not have any active transactions or disputes in progress, you may delete your account directly through the Platform. When you delete your account:

• Your personal profile information (including name, email address, phone number, profile photo, and saved preferences) will be permanently deleted or anonymised.
• Your account will be deactivated and you will no longer be able to access the Platform.
• Content associated with your account, such as listings, messages, or saved data, may be deleted or anonymised.

If you have an active transaction, shipment, or dispute in progress, account deletion will be temporarily unavailable until the transaction is completed or the dispute is resolved. This is necessary to ensure the completion of payments, delivery of goods, refunds, and dispute resolution.

We may retain certain information where required to comply with legal, regulatory, accounting, fraud prevention, or dispute resolution obligations, including transaction records, payment references, shipment records, and audit logs, in accordance with the retention periods set out in section 6. Any information retained for these purposes will no longer be linked to an identifiable user.

     9. Cookies and Tracking Technologies

Our Platform uses cookies and similar tracking technologies to enhance your browsing experience, understand usage patterns, and provide personalised content. You can modify your browser settings to manage or block cookies, though doing so may limit functionality.

    10.  Data Breach Notification

In the event of an eligible data breach (as defined under Part IIIC of the Privacy Act 1988 (Cth)), Dela will comply with the Notifiable Data Breaches scheme. This includes taking reasonable steps to contain and assess the breach, and where required, notifying affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable. Dela maintains a data breach response plan to ensure timely and effective response to any suspected or confirmed breach.

    11.  Third-Party Links

The Platform may contain links to third-party websites, services, or applications (including Stripe, app stores, and courier tracking services). Dela is not responsible for the privacy practices, content, or security of any third-party site or service. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Platform.

    12.  Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any material updates will be posted on our website and reflected by the “Last Updated” date above. Your continued use of the Platform constitutes acceptance of any revised terms. For more information about your use of the Platform, please refer to our Terms of Use.

    13. Contact Us

For questions about this Privacy Policy or your personal information, contact us at:

Email: support@delaxchange.com

Mailing Address:
L1 457-459 Elizabeth St, Surry Hills, Sydney, NSW, Australia, 2010