BAZE PRIVACY POLICY

Accessories Stop Pty Ltd (ACN 666 120 903), operating the Baze platform — effective September 2026

Baze is a cloud platform used by vehicle-rental businesses to run their operations. This policy explains how Accessories Stop Pty Ltd ("Baze", "we") handles personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It applies to our website (baze.com.au), our platform, our staff mobile app, our browser extension and our dealings with prospective and current customers.

1. Two kinds of personal information

(a) Information about our customers and contacts. When a business enquires about or subscribes to Baze, we collect the details we need to deal with it: names, roles and contact details of its representatives, business identifiers (ABN/ACN), billing details, the information it provides during onboarding, and records of our communications and support interactions. Where a customer connects a third-party service to its workspace, we hold the credentials it supplies, encrypted, solely to operate that connection.

(b) Information inside a customer's workspace. Rental businesses use Baze to record their own customers, drivers, vehicle owners and agents — including identity documents, contact details, payment arrangements, toll and infringement records and communications. That information belongs to the rental business, which collects it for its own purposes and is the party responsible for it under privacy law. We process it only on that business's behalf and instructions, to provide the platform. If you are a renter, driver, vehicle owner or agent of a business that uses Baze, please direct requests about your personal information to that business; we will assist it to respond.

2. How we collect information

Directly from you (forms, onboarding, support, email), automatically when you use our website or platform (device, browser, log and usage information, cookies needed to run the service), and from the rental business that operates the workspace you interact with.

3. Why we use it

To provide, secure, support and improve the platform; to bill and communicate with customers; to respond to enquiries; to meet legal obligations; and, in aggregated and de-identified form, to understand how the platform is used. We do not sell personal information and we do not use workspace information to train artificial-intelligence models.

4. Who we disclose it to

• Service providers we use to run the platform — cloud hosting and storage, content delivery, email delivery, real-time messaging infrastructure, error and performance monitoring, mapping and address verification, and government reference data — under contracts that limit their use of the information.
• Providers our customers connect themselves — payment, messaging, telematics, artificial-intelligence and government or toll-road platforms. Those disclosures are made by the rental business, under its own accounts and terms, and the platform transmits data to them only as that business configures.
• Authorities, where required by law. Where lawful, we tell the affected customer before responding.
• A successor to our business, if we are sold or merge, on the same privacy terms.

Overseas disclosure. Our platform is hosted in Australia. Some service providers — in particular artificial-intelligence and document-reading services, and some monitoring and email-delivery services — process information outside Australia, including in the United States. The current providers and their locations are listed on our Integration List at baze.com.au/legal/integrations.

5. What the staff app uses on a device

The Baze staff app is a tool for the employees of a rental business, and it cannot be used without an account that business issues. On a phone it asks for two permissions, both only when the feature is used and both refusable:

• Camera — to photograph paper documents such as infringement notices and registration certificates. A photograph is sent to the workspace of the business the staff member works for, read there, and filed against a vehicle. It is not saved to the phone's camera roll.
• Photo library — to let a staff member choose a document they have already photographed or been sent, instead of taking a new picture. The app reads only the file chosen and does not browse the library.

The app collects no location, no contacts, no advertising identifier and no analytics profile, and it shows no advertising. The only personal information it holds about the staff member is the email address they sign in with. Sign-in credentials are held in the device's own secure keychain and can be removed by signing out.

6. Security

We encrypt information in transit and at rest, give each customer a separate database and storage area, require multi-factor authentication for our administrative access, log support access, store credentials encrypted, never store payment-card data in raw form, and keep regular, protected backups. No system is perfectly secure; if a data breach is likely to cause serious harm, we will notify affected customers and, where we are required to, the Office of the Australian Information Commissioner.

7. Retention

We keep customer and contact information while we have a relationship with the customer and for as long as needed afterwards for legal, accounting and dispute purposes. Workspace information is retained while the customer's subscription is active and is deleted after the subscription ends, following an export window, as our customer agreement provides. Backups are retained for a limited period and then deleted.

8. Access, correction and complaints

You may ask us for access to, or correction of, personal information we hold about you by writing to privacy@baze.com.au. We will respond within 30 days. If your information is held in a rental business's workspace, we will refer your request to that business. If you are unhappy with how we have handled your information, contact us first; if we cannot resolve it, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

9. Changes

We may update this policy from time to time. The current version is always published at baze.com.au/privacy, with its effective date.

Contact: Accessories Stop Pty Ltd, 608/19 Shoreline Drive, Rhodes NSW 2138 · privacy@baze.com.au

Published at baze.com.au/privacy. Last reviewed 25 September 2026.