Privacy Policy

Last Updated: February 2026

Incubate Pty Ltd trading as Collectaeon ("we," "our," or "us") understands that protecting your personal information is important. This Privacy Policy sets out our commitment to protecting the privacy of personal information provided to us, or otherwise collected by us, in connection with your use of our cloud-based luxury asset management platform (the "Platform" or "Services"). We help individuals and businesses manage valuable assets—such as vehicles, watches, jewelry, collectibles—and access various asset-related functionalities (e.g., valuations, storage referrals, insurance referrals, user interaction).

This Privacy Policy takes into account the requirements of the Privacy Act 1988 (Cth) and the Australian Privacy Principles, as well as the New Zealand Privacy Act 2020 and the Information Privacy Principles.

Privacy at a Glance

1. The Information We Collect

Personal information means information or an opinion about an individual who is identified or reasonably identifiable, whether the information or opinion is true or not, and whether recorded in a material form or not. The types of personal information we may collect about you include:

Our Commitment to Data Minimization

We believe privacy is a fundamental right. We adhere to a "Privacy by Design" principle, meaning we only collect the minimum data required to deliver our services.

1.1 Essential Identity Data

To secure your account, we collect your name and a primary contact (email or phone). We do not require, nor do we collect, social media profiles or personal imagery unless you explicitly choose to upload them for asset identification purposes.

1.2 Transactional Integrity

For financial transactions, we collect necessary financial identifiers. These are processed through bank-level encrypted gateways; our staff never has direct access to your full credit card or banking credentials.

1.3 Technical Discretion

To protect against unauthorized access, we log essential technical data such as your IP address and device type. We do not use this data for behavioural profiling or third-party marketing.

2. How We Collect Personal Information

We collect personal information in several ways:

3. Why We Collect Personal Information

We collect and use personal information only for:

4. Disclosure of Personal Information to Third Parties

We only share personal information where strictly necessary to deliver specific services, and we never share your data for marketing or advertising purposes.

5. Overseas Disclosure

Your primary data is stored in Switzerland (see Section 7). Some service providers (e.g., payment processors) may process limited data in their own jurisdictions to deliver their services. We ensure compliance with relevant privacy laws and principles when transferring data internationally.

6. Your Rights & Controlling Your Personal Information

Data Deletion: To request deletion of your personal data, contact support@collectaeon.com. We will complete your request within 30 days. Some data may be retained where required by law (e.g., financial records for tax compliance). All other data will be permanently and irreversibly destroyed.

7. Storage & Security

We prioritize the security of your data and assume strict obligations to protect it. We utilize industry-standard technical safeguards, including:

This ensures that even in the unlikely event of an interception, your information remains unreadable and secure.

Zero-Trust Access Control

We utilize a Zero-Trust network architecture. Access to any client data is governed by strict Role-Based Access Controls (RBAC) and requires Hardware-based Multi-Factor Authentication (MFA). Every instance of staff access is logged in an immutable audit trail.

Data Storage Location

Your data is stored exclusively in Switzerland. We do not move your data between international servers without your explicit, case-by-case consent.

Data Centre Security

Your data is housed in Tier-4 data centres that are monitored 24/7/365 by on-site security personnel.

While we use these robust security measures, we cannot guarantee absolute security of information transmitted over the Internet.

Data Breach Response

In the unlikely event of a data breach that poses a risk of serious harm, we will notify affected users and relevant authorities within 72 hours, in accordance with applicable law. We maintain an incident response plan and conduct regular security audits.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Once your personal information is no longer required, we will take reasonable steps to permanently destroy or de-identify it in a secure manner.

You have the option to delete your data at any time. The following data retention periods apply:

9. AI & Automated Decision-Making

Our Platform utilizes Artificial Intelligence (AI) and automated data models to enhance your experience, streamline data entry, and provide market insights.

AI-Assisted Data Entry

We use AI to help you manage your assets more efficiently:

Automated Valuations

The Platform may provide preliminary asset valuations based on automated market data models.

To request a human review of a valuation, please contact our support team. Please note that manual reviews or certified appraisals may be subject to a quoted fee.

10. Cookies & Tracking Technologies

We use cookies for website operation, analytics, and personalised in-app recommendations. You can manage cookie preferences through your browser settings.

We do not store any Personally Identifiable Information data in any of our application logging.

11. Google API Services

Our use of Google APIs complies with Google's User Data Policy. We limit data use to providing or improving our Services and do not use such data for personalised in-app recommendations without authorisation.

12. Additional Notes on Specific Integrations

External service providers may have their own privacy policies. We recommend reviewing their practices before sharing personal information.

13. Amendments

We will notify you of material changes to this policy via email or in-app notification at least 30 days before changes take effect. For significant changes to how we use your personal data, we will seek your renewed consent.

14. Contact Us

For questions, concerns, or complaints about our privacy practices, please contact us. Our support team is available from 9:00 AM to 5:00 PM, every day.

Email: support@collectaeon.com
Address: 1/959 Glen Huntly Road, Caulfield South, Melbourne, Victoria, Australia