Privacy Policy

Last updated: 8/8/26

Bermly ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using Bermly, you agree to the collection and use of information as described in this policy.

1. What Information We Collect

We may collect the following types of personal information:

  • Account information: name, email address, phone number, password
  • Listing information: details you provide about a vehicle for sale, including photos, description, location (suburb/postcode), and price
  • Communications: messages you send through the Platform or to our support email
  • Technical information: IP address, browser type, device information, and usage data (e.g. via cookies or analytics tools)

We do not collect payment information, as all payments occur directly between users, off-platform.

2. How We Collect Information

We collect information:

  • Directly from you, when you create an account, post a listing, or contact us
  • Automatically, through cookies and similar technologies when you use the Platform

3. How We Use Your Information

We use personal information to:

  • Create and manage your account
  • Display your listings to other users
  • Enable communication between buyers and sellers
  • Respond to support requests and enforce our Terms of Service
  • Improve and maintain the Platform
  • Detect and prevent fraud, misuse, or breaches of our Terms
  • Comply with legal obligations

4. Disclosure of Information

We may disclose personal information to:

  • Other users, where necessary for a listing to function (e.g. your listing location and contact method are visible to interested buyers)
  • Signed-in buyers, if you order a PPSR check for a listing — the resulting government-issued PPSR certificate is viewable by any signed-in user so they can verify the listing before purchasing, and may include details from the PPSR government register itself, such as registered party names
  • Service providers who help us operate the Platform (e.g. hosting, analytics), under confidentiality obligations
  • Law enforcement or government authorities, where required by law or where we reasonably believe disclosure is necessary to investigate fraud, theft, or unlawful activity
  • A third party, in the event of a sale, merger, or transfer of the business, subject to this policy continuing to apply

We do not sell your personal information to third parties.

5. Cookies

We use cookies and similar technologies to operate the Platform, remember your preferences, and understand how the Platform is used. You can control cookies through your browser settings, though disabling them may affect Platform functionality.

6. Data Security

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information for as long as necessary to provide the Platform and comply with our legal obligations, and take reasonable steps to destroy or de-identify it once it is no longer needed. You may request deletion of your account and associated data at any time (see Section 9).

Messages. Conversations between buyers and sellers are deleted once 24 months have passed since the last message in them, along with any photos sent in them. Conversations are not deleted when the listing they relate to is removed. Both people keep their own copy, so that neither side loses their record of what was discussed, and so a dispute or safety concern can still be looked into afterwards. Removing a conversation from your own inbox hides it from you only — it does not delete the other person's copy.

Reports. If you report a listing or a conversation, we keep a record of that report, including which account it concerned, after the listing or conversation itself has been deleted. We do this so that repeated problems involving the same account can be identified. A conversation that is the subject of an open report is kept until that report has been dealt with, even if it is older than 24 months.

8. Overseas Disclosure

If we use overseas service providers (e.g. cloud hosting), your information may be stored or processed outside Australia. Where this occurs, we take reasonable steps to ensure the recipient handles your information in a manner consistent with the APPs.

9. Your Rights

Under the Privacy Act, you have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate or out-of-date information
  • Request deletion of your account and personal information, subject to any legal retention requirements
  • Make a complaint about how we have handled your personal information

To exercise any of these rights, contact us at support@bermly.com.au.

10. Complaints

If you believe we have breached the APPs or mishandled your personal information, please contact us first at support@bermly.com.au so we can try to resolve the issue. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Children's Privacy

The Platform is not intended for use by anyone under 18. We do not knowingly collect personal information from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

13. Contact Us

For any questions about this Privacy Policy or how we handle your personal information, contact us at:

support@bermly.com.au