Data Retention Policy

1.1 Purpose

This Data Retention Policy explains how Tool-O retains, archives and securely disposes of information collected through the Platform.

The purpose of this Policy is to ensure that information is retained only for as long as reasonably necessary to operate the Platform, comply with legal obligations, resolve disputes, prevent fraud and protect the legitimate interests of Tool-O and its Users.

1.2 Objectives

This Policy seeks to:

• establish clear data retention practices;

• support compliance with applicable laws;

• protect User privacy;

• maintain accurate business records;

• support fraud prevention and investigations;

• facilitate dispute resolution;

• enable Platform operations;

• securely dispose of information when appropriate.

1.3 Scope

This Policy applies to information collected, created or maintained by Tool-O in connection with:

• User Accounts;

• Listings;

• Bookings;

• payments;

• communications;

• Claims;

• disputes;

• reviews;

• customer support;

• Platform security;

• operational records;

• other Platform activities.

1.4 Guiding Principles

Tool-O seeks to retain information in accordance with the following principles:

• lawful retention;

• data minimisation;

• operational necessity;

• security;

• confidentiality;

• integrity;

• accountability;

• secure disposal.

1.5 Relationship with Other Policies

This Policy should be read together with the:

• Privacy Policy;

• Security Policy;

• AI Policy;

• Platform Integrity Policy;

• Terms of Use;

• all other Platform policies.

1.6 Updates

Tool-O may amend this Data Retention Policy from time to time.

The most current version published on the Platform replaces all previous versions.

2.1 General Principle

Tool-O retains information only for as long as reasonably necessary to:

• operate the Platform;

• provide services;

• comply with legal obligations;

• resolve disputes;

• investigate Claims;

• prevent fraud;

• enforce Platform policies;

• protect the legitimate interests of Tool-O and its Users.

2.2 User Account Information

Information associated with User Accounts may be retained while an Account remains active and for an appropriate period after closure where reasonably necessary for legal, operational, security or regulatory purposes.

2.3 Booking Records

Tool-O may retain Booking information including:

• Booking details;

• rental history;

• payment information;

• communications;

• timestamps;

• handover records;

• return records;

• related documentation.

2.4 Claims and Disputes

Information relating to Claims, disputes, investigations or legal matters may be retained for longer periods where reasonably necessary to:

• resolve disputes;

• comply with legal obligations;

• defend legal claims;

• investigate fraud;

• support law enforcement requests.

2.5 Financial Records

Financial and payment-related information may be retained for the period required by applicable accounting, taxation, financial reporting and regulatory obligations.

2.6 Security Information

Security logs, authentication records, fraud detection information and cybersecurity records may be retained for reasonable periods to protect the Platform and its Users.

2.7 Communications

Tool-O may retain communications exchanged through the Platform where reasonably necessary for:

• customer support;

• dispute resolution;

• fraud prevention;

• legal compliance;

• Platform administration.

2.8 AI and Operational Data

Information used to improve Platform operations, analytics or AI systems may be retained in accordance with applicable laws, the Privacy Policy and this Policy.

Where appropriate, such information may be de-identified or aggregated.

2.9 Legal Holds

Where information is subject to actual or anticipated litigation, regulatory investigations or legal preservation requirements, Tool-O may retain that information until the relevant matter has concluded or retention is no longer reasonably necessary.

2.10 Secure Disposal

When information is no longer required to be retained, Tool-O seeks to securely delete, destroy, anonymise or de-identify the information where reasonably practicable and consistent with applicable laws.

3.1 Data Classification

Tool-O may classify information according to its nature, sensitivity and operational importance to support appropriate retention, access, protection and disposal practices.

3.2 Storage

Information retained by Tool-O may be stored using secure electronic systems, cloud infrastructure, backup services or other appropriate storage solutions.

3.3 Backups

Tool-O may create periodic backups of Platform information to assist with:

• disaster recovery;

• business continuity;

• cybersecurity recovery;

• operational resilience;

• system restoration.

Backup data may be retained separately from live operational systems.

3.4 Access Controls

Access to retained information is limited to authorised personnel, contractors or service providers who require access for legitimate business, operational, legal or security purposes.

3.5 Data Integrity

Tool-O seeks to maintain the accuracy, completeness and integrity of retained information through reasonable administrative, technical and organisational safeguards.

3.6 De-Identification

Where reasonably appropriate, Tool-O may de-identify or anonymise information so that it no longer identifies an individual before using it for:

• analytics;

• reporting;

• research;

• service improvement;

• AI development;

• statistical purposes.

3.7 Third-Party Service Providers

Where information is stored or processed by third-party service providers, Tool-O seeks to ensure that such providers maintain appropriate security and retention practices consistent with applicable contractual obligations and relevant laws.

3.8 Cross-Border Storage

Information may be stored, processed or backed up in jurisdictions outside Australia where permitted by applicable laws and the Privacy Policy.

3.9 Disposal Procedures

Where retained information reaches the end of its applicable retention period and is no longer reasonably required, Tool-O seeks to securely dispose of that information using methods appropriate to its sensitivity.

3.10 Ongoing Review

Tool-O may periodically review retained information and associated retention practices to ensure they remain appropriate, lawful and consistent with operational requirements.

4.1 Governance

Tool-O is responsible for administering this Data Retention Policy and may establish internal procedures to support lawful, secure and effective information retention and disposal practices.

4.2 Compliance

Tool-O seeks to retain and dispose of information in accordance with applicable laws relating to privacy, taxation, consumer protection, financial reporting, cybersecurity and other relevant legal obligations.

Nothing in this Policy excludes, restricts or modifies any legal rights or obligations that cannot lawfully be excluded.

4.3 Audits and Reviews

Tool-O may periodically review its data retention practices to:

• improve compliance;

• strengthen security;

• enhance operational efficiency;

• reduce unnecessary data retention;

• improve record management.

4.4 Incident Management

Where Tool-O identifies unauthorised retention, loss, corruption or destruction of information, it may investigate the matter and take reasonable corrective action consistent with its Security Policy and applicable legal obligations.

4.5 Policy Review

This Policy may be reviewed periodically to reflect:

• legislative changes;

• technological developments;

• operational requirements;

• regulatory guidance;

• industry best practice.

4.6 Relationship with Other Policies

This Data Retention Policy should be read together with the:

• Privacy Policy;

• Security Policy;

• AI Policy;

• Records Retention Policy;

• Platform Integrity Policy;

• Terms of Use;

• all other Platform policies.

Where there is any inconsistency, the Terms of Use prevail to the extent permitted by applicable law.

4.7 Contact

Questions regarding this Policy or Tool-O's data retention practices may be directed to Tool-O using the contact details published on the Platform.

4.8 Policy Updates

Tool-O may amend this Data Retention Policy from time to time.

The latest version published on the Platform replaces all previous versions.

4.9 Commitment

Tool-O is committed to retaining information responsibly, protecting User privacy, maintaining appropriate security and disposing of information securely when it is no longer reasonably required.

4.10 Final Statement

Responsible information management supports the security, integrity and reliability of the Tool-O marketplace.

By implementing appropriate retention and disposal practices, Tool-O seeks to protect Users, comply with applicable laws and maintain confidence in the Platform.

END OF DATA RETENTION POLICY