Privacy Policy

Effective Date: 31 July 2026
Last Updated: 11 August 2026

1. About This Privacy Policy

Discover Adelaide Korea, also known as DAK, respects your privacy and is committed to handling personal information responsibly, transparently and securely.

This Privacy Policy explains how we collect, hold, use, disclose, protect, access and correct personal information when you use:

  • the DAK website;

  • DAK mobile applications, if introduced;

  • user accounts and profiles;

  • the business directory;

  • local guides and Australia Updates;

  • community posts, comments and reviews;

  • maps and location-based functions;

  • promotions and saved content;

  • AI-assisted search, summaries and recommendations;

  • premium services; and

  • any other services operated by DAK.

We intend to handle personal information consistently with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, where those laws apply to us.

Nothing in this Privacy Policy limits any rights available to you under applicable Australian law.

2. Who Operates DAK

DAK is operated by:

Legal Entity or Business Name: [Insert legal entity or registered business name]
Trading Name: Discover Adelaide Korea / DAK
ABN: 29 114 002 930
Location: Adelaide, South Australia, Australia
Privacy Contact Email: admin@discoveradelaidekorea.au\

References to "DAK", "we", "us" and "our" mean the entity identified above.

3. Meaning of Personal Information

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information is true or recorded in a material form.

Sensitive information is a category of personal information that may include information about a person's:

  • racial or ethnic origin;

  • political opinions;

  • religious beliefs;

  • sexual orientation;

  • health;

  • disability;

  • biometric information; or

  • criminal record.

DAK does not ordinarily require users to provide sensitive information. Users should avoid posting unnecessary sensitive information in public areas of the platform.

4. Personal Information We May Collect

Depending on how you use DAK, we may collect the following information.

4.1 Account and identity information

  • Name

  • Display name or username

  • Email address

  • Password in encrypted or hashed form

  • Profile photograph

  • Preferred language

  • Account role

  • Login provider identifier

  • Account creation and login history

  • Age or confirmation that eligibility requirements are met

4.2 Profile and preference information

  • Suburb, region or preferred location

  • Saved businesses, posts and guides

  • Favourite categories

  • Notification preferences

  • Language preferences

  • Search and content preferences

  • Subscription status

4.3 Community content

  • Posts

  • Comments

  • Reviews

  • Ratings

  • Images and other uploaded files

  • Reports submitted about content

  • Messages sent to DAK support or moderators

  • Content moderation and enforcement records

Community content may contain personal information where a user chooses to include it.

4.4 Business directory information

Where you create, claim or manage a business listing, we may collect:

  • Business representative name

  • Business email address

  • Business phone number

  • Position or relationship to the business

  • Business ownership or authority evidence

  • Business address

  • ABN or other business registration information

  • Business photographs and descriptions

  • Promotion details

  • Verification records

  • Communications with DAK

Some business information may not be personal information where it relates only to a business entity. Information relating to sole traders or identifiable representatives may constitute personal information.

4.5 Transaction and subscription information

If paid services are introduced, we may collect:

  • Subscription plan

  • Transaction reference

  • Payment status

  • Billing name and address

  • Refund and cancellation records

  • Limited payment-related information provided by our payment processor

DAK does not intend to store complete payment card numbers. Payments will ordinarily be processed by an external payment provider.

4.6 Technical and usage information

We may automatically collect:

  • IP address (processed only in truncated or anonymised form where practicable)
  • Browser type
  • Operating system
  • Screen resolution
  • Device type
  • Pages viewed
  • Referring website
  • Approximate country or region derived from an IP address
  • Error, security and diagnostic logs
  • Aggregated website analytics

4.7 Location information

With your permission, DAK may collect or process:

  • Approximate location

  • Suburb or postcode

  • Map search area

  • Device location for nearby business or service searches

Where precise device location is requested, we will seek permission through the device or browser. You may disable location permission, although some map or nearby-search features may become unavailable.

4.8 AI interaction information

When you use AI-assisted features, we may process:

  • Search prompts

  • Questions

  • Instructions

  • Conversation context

  • Search results

  • Feedback

  • Relevant account preferences

  • Content submitted for summarisation or categorisation

You should not enter passwords, payment card details, government identifiers, medical records, immigration documents or other unnecessary sensitive information into AI features.

Information submitted to AI features may be processed by third-party AI service providers solely for the purpose of generating responses, subject to applicable contractual and privacy safeguards.

4.9 Communications

We may collect information when you:

  • Contact customer support

  • Make a privacy enquiry

  • Submit a complaint

  • Report content

  • Appeal a moderation decision

  • Participate in a survey

  • Communicate with us through email, social media or contact forms

4.10 Event information

Where DAK lists an event organised by someone else, we may collect and publish:

  • Organiser name

  • Contact details the organiser has published publicly for enquiries about the event, such as a social media account, page or open chat link

  • The address of the original announcement

This information is collected from publicly available sources rather than from the organiser directly, and is published so that readers can reach the organiser and check the original. An organiser may ask for their details to be amended or removed at any time using the contact details in section 29, and we will action the request without requiring a reason.

5. How We Collect Personal Information

We may collect personal information:

  • Directly from you

  • When you create or update an account

  • When you submit content

  • When you claim or manage a business listing

  • When you use search, map or AI features

  • When you contact us

  • Automatically through cookies, logs and similar technologies

  • From a social login provider with your authorisation

  • From businesses or authorised representatives

  • From publicly available sources

  • From government business registers

  • From third-party service providers

  • From another user who reports or refers to your content

Where reasonable and practicable, we collect personal information directly from the individual concerned.

Where we collect personal information indirectly, we will do so only where permitted by applicable law.

6. Anonymous and Pseudonymous Use

You may browse publicly available DAK content without creating an account where the relevant feature permits this.

You may also use a display name or username instead of publicly displaying your legal name.

However, we may require identifying information where it is impracticable to provide the service anonymously or under a pseudonym, including for:

  • Account security

  • Business ownership verification

  • Paid subscriptions

  • Fraud prevention

  • Moderation appeals

  • Privacy access or correction requests

  • Legal compliance

  • Enforcement of DAK policies

7. Information We Did Not Request

DAK may receive personal information that we did not actively request, including information contained in:

  • Community posts

  • Reviews

  • Uploaded images

  • Business listing submissions

  • Support enquiries

  • Reports about other users

Where we receive unsolicited personal information, we will assess whether we could lawfully have collected it.

Where we could not lawfully have collected it, we will take reasonable steps to destroy or de-identify it, unless retaining it is required or authorised by law.

8. Notification When We Collect Information

At or before the time we collect personal information, or as soon as practicable afterwards, we may provide a collection notice explaining matters such as:

  • Who is collecting the information

  • Why it is being collected

  • Whether collection is required or optional

  • The consequences of not providing it

  • The types of organisations to which it may be disclosed

  • Whether it may be disclosed overseas

  • How to access this Privacy Policy

  • How to request access or correction

  • How to make a privacy complaint

This Privacy Policy provides general information. Additional notices may appear on registration forms, business claim forms, payment pages, cookie banners, location prompts and other collection points.

9. Why We Collect, Hold and Use Personal Information

We may collect, hold and use personal information to:

  • Create and manage user accounts

  • Authenticate users

  • Provide search and discovery functions

  • Display personalised content

  • Provide maps and location-based results

  • Allow users to create posts, comments and reviews

  • Manage business listings

  • Verify business representatives

  • Operate DAK Exclusive promotions

  • Save favourites and preferences

  • Send notifications requested by users

  • Provide AI-assisted search, summaries and recommendations

  • Moderate content and investigate reports

  • Detect fraud, spam, abuse and security threats

  • Process subscriptions, payments and refunds

  • Respond to support requests

  • Improve our products and user experience

  • Understand how visitors use DAK

  • Improve website navigation and user experience

  • Perform anonymous analytics and measure platform performance

  • Develop new features

  • Communicate service changes

  • Enforce our Terms of Service and policies

  • Comply with legal obligations

  • Establish, exercise or defend legal claims

  • Protect users, DAK and the public

We will not generally use or disclose personal information for a materially unrelated purpose unless:

  • you consent;

  • you would reasonably expect the use or disclosure and the purpose is related to the original purpose;

  • the use or disclosure is required or authorised by law; or

  • another permitted exception applies.

10. Public Content

DAK includes public or community-facing functions.

Information you publish in a public profile, business listing, post, comment, review or uploaded image may be visible to:

  • Other users

  • Visitors without accounts

  • Businesses

  • Search engines

  • External websites linking to DAK

You should not publish another person's personal information without their permission or another lawful basis.

Deleting your account may not immediately remove all public content. Some content may be retained or de-identified where necessary for community integrity, legal compliance, dispute resolution or enforcement purposes.

Search engines and third-party services may retain cached or archived copies of publicly available content beyond DAK's control.

11. AI-Assisted Features

DAK may use artificial intelligence systems to assist with:

  • Search

  • Translation

  • Korean-language summaries

  • Content classification

  • Recommendations

  • Duplicate detection

  • Moderation support

  • Business information processing

  • Australia Updates

  • Illustrations for shareable image cards

  • User support

Information submitted to an AI feature may be sent to an external AI service provider.

We will seek to minimise the personal information sent to AI providers and may use de-identification, filtering, caching or other controls where appropriate.

AI outputs may be inaccurate or incomplete. Users should not rely solely on AI-generated information for medical, legal, migration, financial, tax, safety or other professional decisions.

DAK does not intend to use solely automated AI processing to make decisions that have a legal or similarly significant effect on users without appropriate review and safeguards.

Where AI assists moderation or ranking, final decisions may be subject to human review where appropriate.

Information recorded without the person's agreement

DAK also records some rental listings from advertisements published in public places, where the advertiser has not been asked. What DAK records in these cases is limited to the objective facts of the advertisement — suburb, weekly rent, room type, availability and stated conditions — together with a link to the original.

For these listings DAK does not collect, store or publish:

  • contact details of any kind
  • photographs
  • the advertiser's name
  • the exact address of the property
  • any other detail that would identify the advertiser

DAK records the source and the date the listing was last checked, and deletes the record automatically fourteen days after it is created.

Right to removal. Anyone whose advertisement DAK has recorded may have the record deleted by contacting admin@discoveradelaidekorea.au. No reason is required. DAK aims to action such requests within 24 hours, and the record is deleted rather than hidden.

DAK does not record listings from private or members-only groups.

12. Disclosure of Personal Information

We may disclose personal information to:

  • Hosting and cloud infrastructure providers

  • Database and storage providers

  • Email and notification providers, currently Resend, Inc. for service messages such as password resets

  • Image hosting providers, currently Cloudinary Ltd, which stores the photographs and generated artwork shown on the site

  • Authentication providers

  • Analytics and performance providers

  • Map and location service providers

  • AI service providers, currently Anthropic PBC for text and OpenAI, L.L.C. for images

  • Payment processors

  • Security and fraud-prevention providers

  • Customer support providers

  • Professional advisers

  • Contractors assisting with platform operations

  • Businesses where you submit an enquiry or promotion claim

  • Law enforcement, regulators or government authorities where required or authorised

  • A purchaser or successor in connection with a merger, acquisition, restructure or sale

Service providers may only use information for the purposes for which it was provided, subject to their contracts, privacy terms and applicable law.

DAK does not sell personal information in the ordinary meaning of selling personal information for money.

We do not intend to rent user contact lists to third parties for unrelated marketing.

Where required by law, DAK may disclose personal information without prior notice to comply with legal obligations or lawful requests from government authorities.

13. Third-Party Login Services

DAK may allow you to sign in using services such as:

  • Google

  • Apple

  • Kakao

  • Naver

  • Facebook

When you use a third-party login provider, we may receive information authorised by you, such as:

  • Name

  • Email address

  • Profile image

  • Provider-specific account identifier

The login provider separately handles information under its own privacy policy.

DAK does not receive your password for the third-party service.

14. Direct Marketing

With your consent, or where otherwise permitted by law, we may send:

  • Newsletters

  • Weekly digests

  • Platform announcements

  • Personalised recommendations

  • DAK Exclusive promotion information

  • Premium service offers

  • Event or business updates

You may unsubscribe by:

  • Selecting the unsubscribe link in an email

  • Changing notification settings

  • Contacting us

  • Using any other opt-out method included in the communication

We will take reasonable steps to process opt-out requests promptly.

Service and transactional communications, such as security alerts, password resets, address verification, subscription notices and policy updates, may still be sent where necessary.

DAK will also seek to comply with applicable requirements of the Spam Act 2003 (Cth).

You may continue to receive essential service communications even after opting out of marketing communications.

15. Overseas Disclosure and Processing

Some of the services DAK relies on store or process personal information outside Australia. The providers currently in use, and the countries involved, are:

  • Singapore — application hosting and the database in which accounts, saved items and published content are stored.

  • United States — two AI providers and one image host. Anthropic drafts Korean-language summaries of Australian news articles; only the text of the source article is sent. OpenAI generates the illustration for a social card; what is sent is a description of the picture to be drawn, written from DAK's own published summary. Cloudinary stores the images shown on the site, including rental photographs supplied by advertisers with their agreement and the artwork generated for cards. No account information, and no personal information beyond what an advertiser has agreed to publish, is sent to any of the three.

  • Content delivery network — the web font used across the site is served from a public content delivery network. Your browser requests the font files directly, which means the network operating it receives your IP address and browser details. No account information is involved, and this happens whether or not you are signed in.

  • Japan — transactional email is sent through Resend, a service operated by Resend, Inc. in the United States, using its Tokyo processing region. Your email address and the content of the message are sent to Resend so that it can be delivered. This applies only to service messages such as password resets, not to marketing.

DAK does not currently operate payment processing or a customer support platform, and this section will be updated before either is introduced.

Before disclosing personal information to an overseas recipient, we will take reasonable steps required by applicable law to ensure the recipient handles it consistently with the Australian Privacy Principles, unless an exception applies.

Because internet and cloud services are global, it may not always be practicable to identify every location in which information is technically routed or temporarily processed. We will identify likely overseas locations where practicable.

Website Analytics

DAK uses GoatCounter, a privacy-friendly analytics service operated by Martin Tournoij.

Depending on the hosting environment used by GoatCounter, anonymous analytics information may be processed or stored outside Australia.

GoatCounter does not use cookies or persistent identifiers and is used solely to understand website usage and improve the platform.

16. Government-Related Identifiers

DAK does not ordinarily collect or use government-related identifiers such as:

  • Driver licence numbers

  • Passport numbers

  • Medicare numbers

  • Tax file numbers

  • Centrelink reference numbers

  • Visa grant numbers

Where identity or business verification is required, we will seek to collect the minimum information reasonably necessary.

We will not adopt a government-related identifier as a DAK user identifier.

We will only use or disclose a government-related identifier where permitted or required by law.

Users should not publish government identifiers in posts, reviews, profiles, business listings or AI prompts.

17. Quality and Accuracy of Information

We take reasonable steps to ensure that personal information we collect, use and disclose is:

  • Accurate

  • Up to date

  • Complete

  • Relevant

  • Not misleading

You are responsible for keeping your account and business information current.

Users may update certain information through their account settings, including their display name, which can be changed at any time from the account page. You may also request correction of anything not editable there by contacting us.

DAK may request evidence before changing information where necessary to prevent fraud, impersonation or unauthorised changes.

18. Security

We take reasonable technical and organisational steps to protect personal information from:

  • Misuse

  • Interference

  • Loss

  • Unauthorised access

  • Unauthorised modification

  • Unauthorised disclosure

Depending on the stage of the platform, safeguards may include:

  • Encrypted transmission

  • Password hashing

  • Access controls

  • Role-based permissions

  • Multi-factor authentication for administrators

  • Security logging

  • Backup procedures

  • Vulnerability management

  • Restricted production access

  • Secure development practices

  • Vendor security assessment

  • Incident response procedures

  • Staff and contractor confidentiality obligations

No internet service is completely secure. We cannot guarantee that unauthorised access or disclosure will never occur.

Users are responsible for maintaining the confidentiality of their account credentials and notifying DAK promptly if they believe their account has been compromised.

You should use a strong, unique password and protect access to your email and devices.

19. Data Breaches

DAK will maintain procedures for identifying, assessing, containing and responding to suspected data breaches.

Where the Notifiable Data Breaches scheme applies and an eligible data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

A notification may describe:

  • What happened

  • The types of information involved

  • Recommended protective steps

  • How to contact DAK

  • Other information required by law

20. Retention and Deletion

We retain personal information only for as long as reasonably necessary for:

  • Providing DAK services

  • Maintaining account and community integrity

  • Security and fraud prevention

  • Resolving disputes

  • Enforcing policies

  • Maintaining financial and transaction records

  • Complying with legal obligations

DAK does not currently operate automatic deletion after a fixed period. Information is retained while it is needed for the purposes above, and is deleted when you ask us to delete it or when we determine it is no longer required.

In practice this means:

  • Account information: retained while the account exists, and deleted when you close your account or ask us to delete it

  • Content you have published: remains visible until you delete it or ask us to remove it

  • Search records and anonymous website analytics are retained until manually removed as part of DAK's data management practices. DAK does not currently apply automatic deletion periods to analytics records, and they are not linked to any account or identifiable individual.

  • Payment and taxation records: retained as required by applicable law

  • Backup copies: retained for disaster recovery only, and overwritten in the ordinary course of backup rotation

If you want your personal information deleted, contact us using the details in section 29 and we will action the request unless we are required or authorised by law to retain it.

We will introduce scheduled deletion as the platform develops, and this section will be updated to describe it before it takes effect.

When information is no longer required, we will take reasonable steps to destroy it or de-identify it, unless retention is required or authorised by law.

Deletion from active systems may not immediately remove information from secure backups.

Secure backup copies will be retained only for disaster recovery and security purposes and will be overwritten or deleted in accordance with DAK's backup retention practices.

21. Access to Personal Information

You may request access to personal information that DAK holds about you.

Requests should be sent to:

Email: admin@discoveradelaidekorea.au

Your request should include sufficient information to identify:

  • Your account

  • The information requested

  • The preferred method of access

We may ask you to verify your identity before providing access.

We will respond within a reasonable period, ordinarily within 30 days, although complex requests may take longer.

We will generally not charge for making a request. Where permitted, we may charge a reasonable administrative cost for providing access and will notify you beforehand.

Access may be refused or limited where permitted by law, including where providing access would:

  • Unreasonably affect another person's privacy

  • Reveal commercially sensitive evaluative information

  • Prejudice an investigation

  • Be unlawful

  • Pose a serious threat to safety

  • Relate to legal proceedings or anticipated legal proceedings

  • Reveal information connected with suspected unlawful activity or misconduct

Where access is refused, we will generally provide written reasons and information about available complaint mechanisms, unless it would be unreasonable or unlawful to do so.

Where full access cannot be provided, we will consider whether access can be provided in another form.

22. Correction of Personal Information

You may request correction of personal information that is:

  • Inaccurate

  • Out of date

  • Incomplete

  • Irrelevant

  • Misleading

You may update certain information directly through your account settings or contact us at:

Email: admin@discoveradelaidekorea.au

We will respond within a reasonable period and ordinarily within 30 days.

We will not normally charge for a correction request.

If we correct information that was previously disclosed to another organisation, you may ask us to notify that organisation. We will take reasonable steps to do so unless it is unlawful or impracticable.

If we refuse to make a requested correction, we will generally:

  • Explain the reasons in writing

  • Provide information about complaint options

  • Allow you to request that a statement be associated with the information noting that you consider it inaccurate, out of date, incomplete, irrelevant or misleading

23. Privacy Complaints

You may complain if you believe DAK has mishandled your personal information or failed to comply with this Privacy Policy.

Send your complaint to:

Privacy Contact: DAK Privacy Contact
Email: admin@discoveradelaidekorea.au

Please include:

  • Your name and contact details

  • A description of the issue

  • Relevant dates

  • Relevant account or transaction information

  • The outcome you are seeking

We will:

  1. Acknowledge the complaint within 7 business days.

  2. Investigate the complaint fairly.

  3. Request additional information if required.

  4. Aim to provide a substantive response within 30 days.

  5. Explain any delay where more time is reasonably required.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

Nothing in this Privacy Policy limits your rights to make a complaint to a regulator or seek other remedies available under applicable law.

The OAIC may ordinarily expect you to complain to DAK first and allow us a reasonable opportunity to respond.

24. Children and Young People

DAK is intended primarily for users aged 16 years and over.

We do not knowingly seek to collect personal information from children below the minimum permitted age without appropriate authorisation.

If we become aware that a child has provided personal information contrary to our eligibility requirements, we may:

  • Restrict or close the account

  • Remove the information

  • Contact a parent or guardian where appropriate

Parents or guardians who believe a child has provided personal information may contact us.

Before launch, DAK must confirm its minimum age, parental consent approach and whether community or location features will be available to minors.

25. Cookies and Privacy-Friendly Analytics

DAK does not currently use cookies or similar persistent identifiers for website analytics.

To understand how the website is used, DAK uses GoatCounter, a privacy-friendly analytics service operated by Martin Tournoij.

GoatCounter collects limited technical information including:

  • Pages visited
  • Referring website
  • Browser type
  • Operating system
  • Screen resolution
  • Approximate country or region

GoatCounter does not use cookies, advertising identifiers, fingerprinting or cross-site tracking technologies.

Analytics information is collected solely to:

  • Understand how visitors use DAK
  • Improve the website and user experience
  • Measure platform performance

Users may disable JavaScript or use browser privacy features, although doing so may reduce the accuracy of anonymous usage statistics.

You may manage or disable cookies through your browser settings, although some features of DAK may not function correctly as a result.

26. External Links and Embedded Services

DAK may link to or embed:

  • Government websites

  • Business websites

  • Maps

  • Social media posts

  • Videos

  • News articles

  • Payment pages

  • External booking or ordering services

Those services are operated independently and may collect information under their own privacy policies.

DAK is not responsible for the privacy practices of independent third parties.

27. Business Transfers

If DAK undergoes a merger, acquisition, investment, restructure, insolvency process or sale of assets, personal information may be disclosed to advisers and potential purchasers.

We will take reasonable steps to protect confidentiality and ensure that personal information continues to be handled consistently with applicable law.

28. Changes to This Privacy Policy

We may update this Privacy Policy when:

  • DAK features change

  • Service providers change

  • Data handling practices change

  • Legal requirements change

  • New AI, payment or analytics functions are introduced

The current version will be published on the DAK website with an updated effective date.

Where changes materially affect how we handle personal information, we may provide additional notice through email, account notifications or the website.

Continued use of DAK after the updated Privacy Policy becomes effective constitutes acceptance of the revised Policy, to the extent permitted by applicable law.

Search Logging

DAK records the words entered into its search box, together with the number of results returned and the time of the search. This record carries no account identifier, no IP address and no session identifier, and cannot be linked back to the person who searched.

It exists so that DAK can see what readers are looking for and, in particular, what they look for and do not find.

29. Information About People Who Are Not DAK Users

Some content DAK publishes contains personal information about people who do not hold a DAK account and have not dealt with DAK directly. This includes the contact details of event organisers and of people advertising rental accommodation.

Where DAK publishes such information with the person's agreement:

  • Contact details are published only where the person has given DAK permission, or where they have themselves published those details for the purpose of being contacted about that event or property.

  • DAK keeps a record of the permission given, including the date and the channel through which it was given, so that a later question about consent can be answered.

  • Photographs are used only where the person has supplied them or agreed to their use.

  • The information is removed on request, without requiring a reason, by contacting admin@discoveradelaidekorea.au.

Where a listing is removed or expires, the personal information in it is removed from the published page. Records kept for the purpose of demonstrating consent, or as required by law, may be retained separately.

30. Contact Us

For privacy enquiries, access requests, correction requests or complaints:

Privacy Contact: DAK Privacy Team
Email: admin@discoveradelaidekorea.au
Website: [https://discoveradelaidekorea.au]