Privacy policy

1. Scope and accountability

LOOKSGOOD.AU PTY LTD is responsible for the personal information it controls through Newsycle. A creator, publication or seller may separately control information it collects for its own newsroom, audience, fulfilment or marketing purposes and must give any additional notice required for that handling.

This policy covers Newsycle websites, accounts, newsletters, complaints, publishing tools and enabled memberships or shops. External publisher sites, seller sites and third-party services have their own privacy practices. A journalism-related exemption, where available, does not automatically apply to account, marketing, employment or commerce data.

Where practical, you may browse public reporting without identifying yourself or use a public-facing pseudonym. Identification is required where reasonably necessary for an account, payment, order, seller verification, rights request, safety response or legal obligation.

2. Information Newsycle collects

Account information can include name, email address, authentication and recovery records, public profile, display name, preferences, follows, saves, comments, consent history and support communications. Creator and seller information can include publication, team, business, identity-verification, tax, connected-account and payout-status information.

Commerce information can include seller, product, cart, order, delivery, return, refund, dispute, invoice and tax records. Payment-card entry is handled by the disclosed payment provider; Newsycle should not receive or store a full card number or card security code.

Technical and usage information can include IP address, device and browser data, approximate network location, cookie or local-storage identifiers, request and security logs, page and feature interactions, referral information, performance data, and email delivery, bounce, open or click events where configured.

Formal complaints may include contact details, URLs, allegations, supporting evidence and case correspondence. Do not send unnecessary identity documents, passwords, full payment credentials, medical records, confidential-source material or sensitive personal information through a public comment or ordinary email.

3. Sources of information

Newsycle receives information directly from you; from your use of the service; from an authorised publication, team or shop administrator; and from providers returning authentication, email, delivery, payment, fraud, advertising or security events.

Public or licensed sources may be used for reporting, verification and platform integrity. Newsycle does not treat information as unrestricted merely because it is public. If personal information is received unexpectedly, it is assessed and deleted or de-identified where the law requires and retention is not otherwise justified.

4. Purposes for handling information

Newsycle handles relevant information to provide requested accounts and features; authenticate users; publish and deliver reporting; remember choices; operate follows and saves; send opted-in newsletters; enable orders, returns and seller support; calculate fees; prevent misuse; investigate complaints; maintain security; comply with law; and keep accounting, audit and dispute records.

Information may also be used in aggregated or de-identified form to understand reliability and use, improve navigation and measure performance. Newsycle does not use a privacy policy as permission for a materially different purpose. A new incompatible use requires a lawful basis and, where required, fresh notice or consent.

Automated signals may help detect spam, fraud, unsafe listings or abuse. A consequential restriction should be reviewable by a person where lawful and practical. Newsycle does not claim that automated detection is always correct.

5. Sensitive information and younger users

Sensitive information—such as health, political opinion, racial or ethnic origin, religious belief, sexual orientation, union membership or biometric information—is collected only where reasonably necessary and lawfully permitted, including with consent where required. Reading a news category is not automatically treated as permission to build a sensitive advertising profile.

Newsycle is not designed for a child to operate a paid creator or seller business without valid adult and legal authority. If Newsycle learns that personal information was collected from a person unable to consent to the relevant service, it will assess deletion, restriction and any required guardian or safety response. Child-safety reports may be preserved and disclosed where law or safety requires.

6. Follows, newsletters and direct marketing

Following does not join an email list. Publication newsletters, platform newsletters, partner offers and transactional account or order messages are separate. Newsycle records the relevant choice and withdrawal. Commercial messages identify the sender and include a simple unsubscribe facility.

An unsubscribe request is actioned promptly and within five working days where the Spam Act applies. Marketing unsubscribe does not require a fee, login or extra personal information beyond identifying the relevant address, and the facility remains functional for at least 30 days after the message. Necessary security, account, legal and order messages may continue.

Sensitive information is not used for direct marketing without the consent required by law. Newsycle does not sell, rent or provide raw account or newsletter email addresses to advertisers. Advertisers may receive campaign measurement or aggregated results, not unrestricted audience lists.

7. Disclosures and public information

Relevant information may be disclosed to authorised personnel and service providers for hosting, database, authentication, email, payments, delivery, analytics, advertising, customer support, professional advice, security and incident response. Providers receive only information reasonably needed for their function and are expected to protect it under applicable agreements and law.

A seller receives buyer, order and delivery information needed to fulfil and support an order. A publication receives audience information only for authorised publication functions. Neither receives unrestricted access to the other person’s account or permission for unrelated marketing.

Public profiles, comments, storefronts and published content may be indexed, quoted, copied or archived by others. Newsycle may disclose information where reasonably necessary to comply with law or a valid legal process, prevent serious harm or fraud, establish or defend legal rights, or complete a genuine business transfer with appropriate safeguards.

8. Service providers and overseas processing

Current infrastructure includes Vercel application hosting, Supabase databases and Railway collection or rehearsal services. Configured service providers can include Resend for email, Stripe for payments and connected accounts, and Google advertising services on production pages. Providers may change as operations change; the current policy is updated when a material category changes.

Information may be stored or processed in Australia, the United States, India and other locations used by a provider or subprocessor. Global content delivery, fraud review and support may involve access from additional countries. Newsycle does not promise that all information stays in Australia.

Before an overseas disclosure, Newsycle takes the steps required by applicable law and uses contractual, technical or organisational safeguards appropriate to the information and service. Use Newsycle’s secure contact form for current information relevant to a particular overseas-processing concern.

9. Cookies, analytics and advertising

Cookies and similar storage support authentication, anti-forgery protection, security, load balancing, theme and preferences. Analytics and email events can measure performance, use and delivery. Advertising providers may process device or browser information and use identifiers when advertising is enabled.

Optional analytics or advertising storage is used subject to applicable notice and consent requirements. Newsycle controls apply only to the activities they describe and do not delete every third-party cookie or change settings on an external site. Blocking essential storage may prevent sign-in, checkout or another requested function.

10. Security, data breaches and retention

Newsycle uses role-based and server-side access controls, transport protection, secrets separation, logging and other safeguards proportionate to the information. No online system is perfectly secure. Report suspected compromise promptly and never email a password, full card number or card security code.

Suspected data breaches are contained and assessed. If the Notifiable Data Breaches scheme applies and an eligible breach is likely to cause serious harm, Newsycle will notify affected individuals and the Office of the Australian Information Commissioner as required. A breach response may include provider coordination, credential resets and preservation of forensic records.

Information is retained only as reasonably needed for its purpose and applicable accounting, tax, consumer, legal, safety, fraud and dispute obligations. Retention periods vary by record. When information is no longer required, Newsycle deletes or de-identifies it where reasonably practicable and the law permits. Account closure does not instantly erase backups or records that must be kept.

11. Access, correction, deletion and complaints

Use account controls or the secure contact form to request access to or correction of personal information, account closure, consent changes or other available privacy rights. Newsycle may verify identity proportionately and may provide the information in a practical form. If access or correction is refused, Newsycle explains the lawful reason and available complaint route where permitted.

Deletion is not absolute where information must be retained for law, security, fraud prevention, public-interest journalism, another person’s rights, an active dispute or a completed transaction. Newsycle will explain a material limitation where permitted and can restrict processing where appropriate.

Privacy complaints may be submitted through the complaint or secure contact form. Newsycle aims to acknowledge a substantive complaint within five business days and provide a substantive response or progress update within 30 days. You may contact the Office of the Australian Information Commissioner or another competent regulator; urgent remedies do not depend on completing the internal process.

12. Changes and contact

Newsycle publishes dated versions and updates this policy when handling practices materially change. New consent is sought where required for a new use. Publication of the policy is not permission for otherwise unlawful processing.

Questions and requests may be directed through the secure contact form linked on this page. Include enough information to identify the account or activity, but do not send secret credentials or unnecessary identity documents through a general enquiry form.

Audience protection

Newsycle does not sell, rent or provide raw account or newsletter email addresses to advertisers. News-reading preferences such as politics or health are not automatically converted into advertising targeting categories. Sensitive or political targeting is not offered through Newsycle promotion tools.