This policy explains how MasterKey (“we”, “us”) handles personal information collected through heymasterkey.com. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

Information you give us. When you join the waitlist, contact us, or sign up for updates, we ask for some combination of your name, email address, your role, your property’s name, its approximate number of rooms, and whatever you write in the message field. Only the email address is ever required — the rest is optional and simply helps us reply usefully.

Information collected automatically. When a form is submitted we also record which page it came from and your browser’s user-agent string, which helps us tell genuine enquiries from automated ones. We use analytics to understand how the site is used in aggregate — pages viewed, roughly where in the world visitors are, and which links are clicked. We have not turned on advertising or remarketing features.

We do not ask for, and have no use for, sensitive information as the Privacy Act defines it.

Why we collect it

To reply to you, and to send the confirmation email you expect.
To manage the waitlist and let you know when we can onboard your property.
To understand which parts of the site are useful, so we can improve them.
To process a payment, if you choose to buy something from us.

We do not sell personal information, and we do not share it for anyone else’s marketing.

Who else handles it

We use a small number of service providers to run the site — to host it, to store enquiries, to send our emails, to process payments if you buy something, and to measure how the site is used. They only receive what they need for that purpose, and only to provide the service to us.

Card details are handled entirely by our payment processor. They never reach us and we never store them.

Some of these providers store data outside Australia, including in the United States. By submitting a form you consent to that overseas disclosure. We choose providers we consider reputable, but we cannot guarantee they will handle information the way an Australian entity would be required to.

Cookies

Google Analytics sets cookies to tell repeat visits from new ones. We set no advertising or tracking cookies of our own. You can block or delete cookies in your browser settings, or install Google’s opt-out add-on; the site works fine either way.

How long we keep it

We keep enquiries for as long as we may still reasonably act on them, and no longer than three years from your last contact with us, unless you have become a customer and we need the records for tax or accounting. You can ask us to delete yours sooner. Analytics data expires on our analytics provider’s standard retention schedule.

Your choices

You can ask us to show you what we hold about you, correct it, or delete it. Email admin@heymasterkey.com and we will action it within 30 days. Marketing emails carry an unsubscribe link, and unsubscribing does not stop us replying to a direct question.

If you think we have mishandled your information, tell us first — we would rather fix it. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner.

Security

The site is served over HTTPS, and enquiries are stored in a database that cannot be read from the browser. Access is limited to the founders. No system is perfectly secure and we will not pretend otherwise — but we will tell you promptly if something happens that affects you.

Children

This is a product for hotel businesses. It is not directed at children, and we do not knowingly collect information from them.

Changes

If we change how we handle personal information we will update this page and move the date at the top. Material changes will be flagged to anyone on our list.