PART A — FOUNDATION, APPLICATION AND LEGAL FRAMEWORK

1. Purpose and scope of this Privacy Policy
1.1 Purpose
COURTREADZ Book Club (“COURTREADZ”, “Court Reads”, “we”, “us” or “our”) is an Australian-operated digital book community offering subscription-based membership, literary discussions, interactive social networking, author engagement, publishing-related services, video and audio content, digital products and other related activities.
This Privacy Policy establishes the principles governing personal information handled through the COURTREADZ website, associated services, applications, databases, communications and authorised third-party integrations.
The Policy applies to personal information processed in connection with:
Website visits, navigation and account registration.
Paid and complimentary memberships.
Member profiles, photographs, biographies and reading interests.
Bookshelves, personal libraries, reviews, ratings and recommendations.
Home-feed publications, comments, reactions and tagged content.
Member-to-member messaging and communications with administrators.
Author and publisher accounts, storefronts and commercial arrangements.
Digital book purchases, payment processing and downloads.
Weekly livestreams, interactive discussions and audience participation.
Recorded interviews, podcasts, video calls and audio communications.
Contests, promotions, giveaways, surveys and voting activities.
Technical support, complaints, moderation and account investigations.
Website security, fraud prevention and abuse detection.
Marketing, promotional communications and authorised analytics.
Third-party integrations, hosting, storage, content delivery and streaming.
Legal compliance, dispute resolution and regulatory investigations.
This Policy applies regardless of whether a person accesses the platform through a computer, smartphone, tablet, compatible application, browser or other supported technology.
1.2 Persons covered
This Policy covers all persons aged 18 years or older whose personal information is handled by COURTREADZ, including paying members, free account holders, authors, publishers, podcast guests, interview participants, promotional entrants, business contacts, website visitors and former users.
Certain provisions also apply to people who contact COURTREADZ without creating an account.
1.3 Strict minimum age requirement — 18 years
COURTREADZ is an adult-only platform.
All persons must be at least 18 years old to access, register for, hold an account on, or participate in COURTREADZ services.
No person under 18 is authorised to:
Create a member, author or publisher account.
Purchase or use a membership.
Post content or participate in the home feed.
Send or receive messages through member services.
Join livestreams, podcasts or interactive video sessions.
Participate in giveaways, competitions or promotions.
Purchase or download products through account-restricted services.
Use community, networking or author services.
During registration, users must confirm that they are at least 18 years of age.
COURTREADZ may request reasonable additional age-verification information where required by law or where there is a reasonable concern about eligibility.
Any such verification must be proportionate, privacy-conscious and limited to information reasonably necessary for the purpose.
If COURTREADZ becomes aware that an individual under 18 has created an account or provided personal information, COURTREADZ may suspend access, investigate, delete the account and remove associated personal information where legally permissible.
Where a minor's information must be retained temporarily for security, investigation, statutory compliance or dispute resolution, it will be restricted to the extent reasonably practicable.
The accidental receipt of information concerning a minor does not authorise COURTREADZ to use that information for unrelated commercial purposes.
1.4 No guaranteed detection of false age declarations
COURTREADZ may rely on age declarations and proportionate verification processes but does not guarantee that every false declaration will be detected.
Users who knowingly provide false age information breach the platform's Terms and Conditions.
This provision does not remove any statutory duty imposed upon COURTREADZ to take reasonable steps to enforce age restrictions or protect personal information.

2. Applicable privacy legislation and regulatory framework
2.1 Australian law
Depending on the nature, size and activities of the business, COURTREADZ may be subject to the following Australian legislation and regulatory requirements:
Privacy Act 1988 (Cth).
Australian Privacy Principles (APPs).
Privacy and Other Legislation Amendment Act 2024 (Cth), including applicable amendments.
Notifiable Data Breaches scheme.
Australian Consumer Law under the Competition and Consumer Act 2010 (Cth).
Spam Act 2003 (Cth).
Telecommunications and applicable electronic communications laws.
Applicable state and territory surveillance-device, recording and privacy laws.
Applicable online safety and cybercrime legislation.
Applicable taxation, financial-record and consumer protection obligations.
COURTREADZ will determine whether the Privacy Act and Australian Privacy Principles apply to its activities, including where statutory turnover thresholds, exceptions or other jurisdictional conditions are relevant.
Where COURTREADZ is not legally required to comply with a particular Australian Privacy Principle, it may nevertheless adopt equivalent privacy practices as part of its internal operating standards.
2.2 Statutory privacy rights
Australian privacy law includes mandatory requirements that cannot simply be excluded through contractual wording.
In particular, Australian law introduced a statutory cause of action for certain serious invasions of privacy commencing 10 June 2025. This may apply beyond businesses ordinarily covered by the Australian Privacy Principles.
COURTREADZ will not interpret any provision of this Policy as excluding liability where doing so would be unlawful.
2.3 European Union and European Economic Area
Where the European Union General Data Protection Regulation (GDPR) applies to particular COURTREADZ activities, COURTREADZ will comply with the applicable requirements, including:
A valid legal basis for processing.
Appropriate transparency and privacy notices.
Data minimisation and purpose limitation.
Applicable individual access, correction and deletion rights.
Restrictions on international data transfers.
Appropriate processor contracts.
Security and breach notification obligations.
Applicable rights to object, restrict processing and obtain data portability.
The GDPR does not automatically apply merely because a European resident can visit an Australian website. Applicability must be assessed against the relevant territorial and processing criteria.
2.4 United Kingdom
Where applicable, COURTREADZ will comply with UK data protection legislation, including the UK GDPR and Data Protection Act 2018, as amended.
Applicable UK electronic marketing and cookie requirements will also be considered.
2.5 United States
Where relevant statutory thresholds and territorial conditions are met, COURTREADZ will comply with applicable United States federal and state privacy requirements.
These may include the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and other applicable state privacy laws.
2.6 Other international jurisdictions
COURTREADZ may have users in countries including Canada, New Zealand, Singapore, Brazil, Japan, South Africa and other jurisdictions.
Depending on the circumstances, additional privacy or data protection laws may apply, including:
Canada's Personal Information Protection and Electronic Documents Act and applicable provincial legislation.
New Zealand's Privacy Act 2020.
Singapore's Personal Data Protection Act.
Brazil's Lei Geral de Proteção de Dados (LGPD).
Japan's Act on the Protection of Personal Information.
South Africa's Protection of Personal Information Act.
The applicability of any foreign legislation depends on factors such as the location of users, nature of processing, targeting of services, local establishments, business activities and statutory thresholds.
COURTREADZ reserves the right to restrict particular services or jurisdictions where lawful compliance cannot reasonably be established.
2.7 Mandatory legal protections prevail
Where a provision of this Policy conflicts with a mandatory legal requirement, the applicable mandatory requirement prevails to the extent of the inconsistency.
Nothing in this Policy is intended to remove an individual's legally protected rights or remedies.

PART B — COLLECTION AND HANDLING OF PERSONAL INFORMATION

3. Categories of personal information collected
COURTREADZ may collect the following categories of information where reasonably necessary for an authorised service or legitimate operational purpose.
3.1 Identity and account information
Information may include:
Full name.
Display name and username.
Email address.
Country and general geographic location.
Date of birth or age-confirmation information where necessary.
Account identification numbers.
Membership status and subscription history.
Registration and verification dates.
Login credentials in appropriately protected form.
Account settings and preferences.
Account restriction, suspension or closure records.
Passwords should be stored using industry-standard one-way password hashing rather than recoverable plaintext.
3.2 Member profile information
Users may voluntarily provide:
Profile photographs.
Cover images.
Personal biographies.
Favourite books and authors.
Currently reading information.
Top five favourite books.
Book collections and personal libraries.
Book ratings and written reviews.
Reading preferences and genre interests.
Links to external social media accounts.
Other information voluntarily published through supported profile fields.
Users should avoid including unnecessary sensitive information in public or member-visible profile fields.
3.3 Community content
COURTREADZ may process information contained in:
Written posts.
Uploaded photographs and videos.
Comments and replies.
Likes, reactions and other engagement.
Book polls and votes.
Mentions and tags.
User-generated reviews.
Reports of inappropriate conduct.
Content-editing and moderation histories.
Associated timestamps and technical metadata.
Content may identify the person who created it and other people mentioned or depicted in it.
3.4 Private messages
Where messaging features are available, COURTREADZ may process message content and associated metadata to provide the messaging service.
Relevant information may include sender and recipient identifiers, timestamps, message content, attachments, delivery status and abuse reports.
Private messages are not intended for public display.
However, they should not be represented as end-to-end encrypted unless that protection is actually implemented and independently verified.
Authorised access to private messages may occur where reasonably necessary to investigate reported abuse, protect users, maintain security, comply with law or resolve technical incidents.
Access must be limited, logged where practicable and subject to appropriate confidentiality controls.
3.5 Payment and billing information
COURTREADZ may process information associated with:
Membership payments.
Author listing fees.
Digital purchases.
Subscription renewals.
Failed or disputed payments.
Refunds and chargebacks.
Invoices and receipts.
Payment transaction identifiers.
Billing addresses where required.
Applicable taxation records.
Where Stripe or another authorised payment processor is used, full payment card information should ordinarily be collected and stored by that processor rather than by COURTREADZ.
COURTREADZ may receive limited payment metadata necessary to manage purchases, subscriptions and financial records.
3.6 Author and publisher information
Author and publisher services may involve collection of:
Legal or trading names.
Professional pen names.
Business email addresses.
Publisher or imprint details.
Business identification and tax information where required.
Author biographies and promotional images.
Book descriptions and cover artwork.
Book pricing and publication details.
Storefront and sales records.
Customer transaction information.
Payout account status.
Verification and onboarding information.
Commercial agreements and correspondence.
Where payment processing or identity verification is undertaken by a third-party provider, that provider may independently collect additional information under its own privacy policy.
3.7 Livestream, video and audio information
When users participate in interactive livestreams, recorded interviews or video calls, COURTREADZ may process:
Display names and participant identifiers.
Voice recordings.
Video images.
Spoken statements.
Chat messages.
Audience questions.
Recording consent acknowledgements.
Session attendance information.
Participation timestamps.
Moderation and safety information.
Recording files and edited media.
Additional requirements concerning recording consent are addressed in Part E.
3.8 Giveaway and competition information
Depending on the promotion, information may include:
Entrant name.
Account identification.
Email address.
Country of residence.
Eligibility declarations.
Competition entry content.
Prize selection and winner information.
Postal address where physical delivery is required.
Bank transfer information where necessary for an authorised cash prize.
Prize delivery confirmation.
Tax or identity information required by applicable law.
Information collected for a giveaway will not automatically be used for unrelated marketing without an appropriate legal basis.
3.9 Technical and device information
When users access the website, certain technical information may be collected automatically, including:
Internet Protocol (IP) address.
Browser type and version.
Device type.
Operating system.
Login and session identifiers.
Approximate location inferred from network information.
Referring website addresses.
Pages visited.
Access times.
Error and diagnostic logs.
Security events.
Cookies and similar identifiers.
Network and connection metadata.
Technical information may be personal information where it identifies, or can reasonably identify, an individual.
3.10 Customer service information
When individuals contact COURTREADZ, we may collect correspondence, support requests, complaint details, screenshots, relevant transaction records and information necessary to investigate or resolve the matter.
3.11 Sensitive personal information
COURTREADZ does not ordinarily require users to provide sensitive personal information such as health information, religious beliefs, political opinions, sexual orientation, biometric identification information or criminal records.
Users must not assume that voluntarily posting such information is necessary or appropriate.
Where sensitive information is collected or processed, COURTREADZ will apply the additional requirements imposed by applicable law, including consent where required.
A user voluntarily publishing sensitive information does not automatically authorise unrestricted reuse by COURTREADZ.

4. Methods of information collection
4.1 Direct collection
Personal information may be collected directly when individuals:
Register or update accounts.
Purchase subscriptions.
Submit forms.
Upload content.
Participate in discussions.
Send messages.
Join recordings.
Contact support.
Apply for promotions.
Provide author or publisher information.
4.2 Automatic collection
Technical information may be collected through server logs, authentication systems, security services, cookies and authorised analytics technologies.
4.3 Third-party sources
Information may be received from payment processors, hosting providers, authorised authentication services, authors, publishers, fraud prevention providers and other services with which COURTREADZ legitimately interacts.
Information obtained from third parties must be collected and used in accordance with applicable law.
4.4 Information about other individuals
Users must not upload or disclose another person's personal information without an appropriate lawful basis.
This includes photographs, private communications, residential addresses, contact details and identifying information.
Where a user publishes information about another person, that user is responsible for obtaining any permissions legally required of them.
COURTREADZ retains its own obligations to respond appropriately to privacy complaints, unlawful disclosures and valid removal requests.

5. Purposes for which information is used
COURTREADZ may process personal information for the following purposes:
Creating and authenticating accounts.
Verifying eligibility for adult-only services.
Providing and administering subscriptions.
Processing payments and transactions.
Operating author and publisher storefronts.
Displaying user-authorised profile information.
Enabling community posting, messaging and interaction.
Hosting livestreams, podcasts and interviews.
Managing recording consent and content permissions.
Providing digital books and other products.
Administering competitions and prizes.
Communicating service announcements.
Responding to support requests.
Investigating complaints and misconduct.
Preventing fraud, impersonation and unauthorised access.
Detecting security threats and technical failures.
Maintaining reliable website performance.
Conducting appropriate business analytics.
Meeting accounting and taxation obligations.
Responding to lawful requests and legal proceedings.
Enforcing applicable Terms and Conditions.
Establishing, exercising or defending legal claims.
Improving services through lawful and proportionate analysis.
COURTREADZ will not treat this list as unrestricted permission to use personal information for any unrelated purpose.
Where a new purpose requires additional notice, consent or another lawful basis, appropriate steps will be taken before the processing begins.

6. Lawful bases for processing
Where a law such as the GDPR requires a specific legal basis, COURTREADZ will identify and document the applicable basis before processing personal information.
Depending on the activity, the basis may include:
Contractual necessity: Processing required to create accounts, provide purchased memberships, deliver digital products or administer contracted services.
Legal obligations: Processing necessary to comply with applicable tax, accounting, regulatory or statutory requirements.
Legitimate interests: Processing necessary for appropriate platform security, fraud prevention, service administration and other legitimate purposes, subject to applicable balancing requirements and individual rights.
Consent: Processing for activities requiring a freely given, specific, informed and unambiguous choice, including certain optional recordings, non-essential cookies and marketing activities.
Other lawful grounds: Additional legal bases may apply in limited circumstances where expressly permitted by applicable law.
Consent will not be relied upon where it is invalid, coerced or inappropriate for the processing concerned.
Where processing relies on consent, users may withdraw that consent through the applicable mechanism, subject to lawful limits and the effect of processing already undertaken.

7. Collection minimisation and accuracy
COURTREADZ will seek to collect only information reasonably necessary for identified purposes.
Where practicable, the platform will:
Avoid unnecessary mandatory registration fields.
Use age eligibility confirmation rather than collecting full identity documents unnecessarily.
Limit collection of precise location information.
Restrict access to sensitive records.
Avoid collecting full card details through its own systems.
Provide appropriate profile privacy controls.
Allow correction of inaccurate information.
Review whether stored information remains necessary.
Users are responsible for keeping account information reasonably accurate.
COURTREADZ may correct, update or restrict information where necessary and lawful.

PART C — INFORMATION VISIBILITY, DISCLOSURE AND THIRD PARTIES

8. Public, member-visible and private information
8.1 Visibility categories
COURTREADZ may distinguish between three categories of platform information.
Public information is content intentionally made available to persons who may not hold a COURTREADZ account.
Member-visible information is content accessible to authorised registered users, subject to applicable access settings.
Restricted information is information intended only for the relevant account holder, authorised recipients, approved service providers or authorised COURTREADZ personnel.
The classification of information depends on the actual platform configuration and user-facing privacy settings.
8.2 Home-feed information
Where the home feed is accessible to registered members, posts, comments, images, videos, usernames and associated engagement may be visible to those members.
Users acknowledge that other authorised members may view and interact with material made available to them.
Where permitted by the platform's functionality and applicable law, users may share links or references to content.
COURTREADZ cannot guarantee that another individual will never capture, photograph, screenshot, download, copy or unlawfully redistribute material visible on their device.
8.3 Unauthorised redistribution
Members must not misuse personal information obtained through COURTREADZ.
Prohibited conduct includes:
Publishing another person's private messages without lawful authority.
Disclosing residential addresses or private contact information.
Doxxing or threatening other members.
Distributing intimate or confidential material without consent.
Impersonating another individual.
Collecting member information for unauthorised commercial purposes.
Scraping or harvesting personal information.
Using information to stalk, intimidate or harass another person.
COURTREADZ may remove content, suspend accounts, preserve relevant evidence and report suspected unlawful activity to competent authorities where appropriate.
8.4 Limits of platform control
COURTREADZ does not control independently operated websites, external devices or the conduct of third parties outside its reasonable technical and legal authority.
COURTREADZ is not responsible for every independent act of a third party merely because that person originally encountered information through the platform.
However, this provision does not exclude liability arising from COURTREADZ's own unlawful disclosure, negligence, security failures, statutory breaches or failure to take legally required action.
8.5 Private messaging expectations
Private messages are intended for their selected recipients and should not appear in public feeds.
COURTREADZ will implement reasonable access controls appropriate to the sensitivity of the messaging service.
Users should not assume that messages are immune from lawful disclosure, security investigations, abuse reporting, authorised administration or technical processing necessary to operate the service.

9. Disclosure to third parties
9.1 Permitted disclosures
COURTREADZ may disclose personal information to third parties where reasonably necessary, legally authorised and consistent with this Policy.
Recipients may include:
Website hosting providers.
Cloud storage providers.
Content delivery networks.
Video and audio infrastructure providers.
Payment processors.
Email and notification providers.
Technical developers and support contractors.
Professional advisers.
Account verification providers.
Fraud and cybersecurity service providers.
Authors and publishers involved in authorised transactions.
Government agencies and courts where lawful disclosure is required.
COURTREADZ will seek to limit disclosure to the information necessary for the relevant purpose.
9.2 Website hosting
COURTREADZ uses or may use Digital Pacific and associated infrastructure for website hosting, server administration and related technical services.
Hosting providers may process personal information stored in website databases, account records, uploaded content, server logs and backups.
The extent of provider access will depend on contractual arrangements, system permissions and the services supplied.
9.3 Cloudflare and content storage
COURTREADZ plans to use or may use Cloudflare services, including Cloudflare R2, for storage, security, performance and delivery of uploaded media.
Depending on the configuration, such services may process account-related files, media, IP addresses, security information and request metadata.
Cloudflare's own contractual and privacy documentation may apply to its independent processing activities.
9.4 Agora livestream services
COURTREADZ plans to use or may use Agora technology for interactive video and audio functionality.
Where implemented, Agora or associated service providers may process participant identifiers, audio and video streams, connection data, technical diagnostics and other information necessary to deliver livestream functionality.
COURTREADZ will determine the applicable data-processing roles, retention settings, recording configuration and international transfer arrangements before activating the service.
9.5 Stripe and Stripe Connect
COURTREADZ uses or intends to use Stripe services for payments and Stripe Connect for author-related financial arrangements.
Stripe may independently collect and process payment details, financial information, identity verification records, payout information, fraud indicators and transaction information.
COURTREADZ will not represent that it has no responsibility for payment-related privacy merely because Stripe processes transactions.
9.6 Developers and technical contractors
Developers and authorised contractors may require limited access to website systems, logs, databases or files to perform maintenance and development services.
Where personal information is accessible, COURTREADZ will seek appropriate contractual protections, including confidentiality, restricted use, security requirements and incident reporting.
Contractors must not use member information for their own unrelated purposes without lawful authorisation.
9.7 Authors and publishers
Where a member purchases a digital product, communicates with an author or uses a publisher-related feature, limited information may be shared with the relevant author or publisher where necessary and lawfully authorised.
Information should not be disclosed to authors or publishers for unrelated marketing solely because a member uses the platform.
Where authors independently determine the purposes of processing information they receive, they may have their own privacy obligations.
COURTREADZ may require participating authors and publishers to comply with contractual privacy and confidentiality requirements.
9.8 Professional and legal advisers
Personal information may be disclosed to lawyers, accountants, insurers, auditors or other professional advisers where reasonably necessary for lawful business administration, advice, investigations, insurance claims or dispute resolution.
9.9 Law enforcement and regulatory authorities
COURTREADZ may disclose information where required or authorised by applicable law, including in response to valid court orders, subpoenas, warrants, statutory notices or other lawful compulsory processes.
Where disclosure is discretionary rather than mandatory, COURTREADZ will consider legality, necessity, proportionality and applicable user rights.
COURTREADZ may challenge requests considered invalid or excessive where lawful and appropriate.
9.10 Business restructuring or transfer
In connection with a lawful sale, merger, restructure or transfer of business assets, relevant information may be disclosed subject to confidentiality, due diligence, applicable privacy obligations and appropriate safeguards.
Any resulting material change in processing practices will be addressed through legally required notices and consent procedures.

10. International data transfers
10.1 Global operation
COURTREADZ is operated from Australia but may be accessed internationally.
Personal information may be processed, hosted, transmitted or accessed outside Australia depending on service-provider infrastructure and contractual arrangements.
10.2 Overseas recipient locations
Potential overseas processing locations may include the United States and other countries in which contracted technology providers operate.
Before publication, COURTREADZ must confirm the actual countries in which its providers store, access or receive personal information and identify likely overseas disclosure destinations where practicable.
A general statement that data may be processed anywhere in the world is not necessarily sufficient to satisfy Australian privacy notice requirements.
The Australian Privacy Principles specifically address overseas disclosures and the identification of recipient countries where practicable.
10.3 Cross-border safeguards
Where required, COURTREADZ will take reasonable steps to ensure overseas recipients protect personal information appropriately.
Measures may include:
Written data-processing agreements.
Contractual confidentiality obligations.
Restrictions on subcontractors.
Appropriate access controls.
Security and encryption requirements.
Incident reporting obligations.
International transfer assessments.
Standard Contractual Clauses where appropriate.
Other approved international transfer mechanisms.
10.4 European international transfers
Where GDPR or UK GDPR transfer restrictions apply, COURTREADZ will use an appropriate lawful transfer mechanism, potentially including adequacy arrangements, approved contractual clauses or other permitted safeguards.
European data protection rules provide specific requirements for transfers outside the European Economic Area.
10.5 No blanket transfer waiver
Accepting this Privacy Policy does not automatically constitute valid consent to every international transfer or eliminate COURTREADZ's responsibility for overseas service providers.
Where specific consent is relied upon as a legal exception, it must satisfy the requirements of the applicable law.

PART D — SECURITY, RETENTION AND DATA BREACH MANAGEMENT

11. Information security
11.1 Security commitment
COURTREADZ will seek to implement technical and organisational safeguards appropriate to the nature and sensitivity of information held, the risks of unauthorised access and the size and complexity of its operations.
11.2 Technical safeguards
Security controls may include, where appropriate:
HTTPS and TLS encryption for information in transit.
Encryption of sensitive information at rest.
Secure password hashing.
Multifactor authentication for privileged accounts.
Role-based access controls.
Restricted administrator privileges.
Secure session management.
Software and dependency updates.
Security patch management.
Firewall and web application protection.
Protection against common injection and scripting attacks.
Upload validation and malicious-file scanning.
Rate limiting and login abuse protection.
Security event monitoring.
Backup protection.
Secure credential and secret management.
Appropriate database access restrictions.
Testing and review of access permissions.
Vulnerability identification and remediation.
Appropriate vendor and contractor security controls.
This section describes the intended security framework. It must not be interpreted as a representation that every listed measure has already been deployed.
11.3 Administrative safeguards
COURTREADZ will seek to establish:
Confidentiality obligations for authorised personnel.
Access approvals based on operational necessity.
Removal of access when no longer required.
Secure handling of customer support information.
Incident reporting procedures.
Procedures for investigating privacy complaints.
Appropriate security awareness and training.
Documentation of significant privacy decisions.
Periodic review of third-party providers.
Procedures for secure disposal of information.
11.4 User responsibilities
Users are responsible for taking reasonable steps to protect their accounts, including maintaining confidential passwords, avoiding credential sharing and reporting suspected unauthorised access.
Users must not attempt to bypass security controls, access other accounts, exploit vulnerabilities or interfere with website infrastructure.
11.5 Security limitations
No internet-connected platform can guarantee absolute protection against all cyberattacks, malicious third parties, software vulnerabilities, infrastructure failures or unforeseen security incidents.
COURTREADZ does not warrant that its systems will be completely immune from every possible threat.
Nevertheless, COURTREADZ remains responsible for taking security measures required by applicable law.
The existence of cybersecurity risks does not excuse a failure to implement legally required safeguards.

12. Personal information retention
12.1 General retention principle
COURTREADZ will retain personal information only for as long as reasonably necessary for the purpose for which it was collected or for another lawful purpose.
Retention periods may depend on contractual requirements, accounting obligations, legal claims, safety investigations, operational needs and applicable privacy law.
12.2 Account records
Account information may be retained while an account remains active and for a limited period after closure where necessary for lawful purposes.
Information no longer required will be deleted, destroyed or appropriately de-identified, subject to applicable exceptions.
12.3 Financial records
Payment, taxation and accounting information may be retained for applicable statutory recordkeeping periods.
Deleting an account does not necessarily require deletion of records that must lawfully be preserved.
12.4 User-generated content
Posts, comments, photographs and videos may be retained while published on the platform.
Following removal or account closure, associated content will be handled according to applicable law, user rights, contractual permissions and operational retention requirements.
Content may remain in restricted backups temporarily until the applicable backup lifecycle expires.
12.5 Private messages
Private messages may be retained while needed to provide the messaging service, subject to deletion policies, recipient account status, safety investigations and legal obligations.
Deletion by one participant does not necessarily remove an independently retained copy belonging to another participant.
12.6 Recorded media
Recorded interviews, podcasts and livestream content may be retained for the duration permitted by the relevant recording agreement and applicable law.
The retention of raw recordings, edited media, published content and consent records may differ.
COURTREADZ will document the applicable arrangements and provide relevant information before recording.
12.7 Security and moderation records
Limited records of misconduct, fraud, account restrictions, security incidents and complaints may be retained where reasonably necessary to protect users, prevent repeated abuse or establish and defend legal claims.
12.8 Backup retention
Backups may temporarily contain information deleted from active systems.
Where immediate deletion from backups is not technically feasible, COURTREADZ will seek to restrict further use and ensure deletion occurs according to the applicable backup lifecycle.
Restored backups must be managed so that information previously deleted is not unnecessarily reintroduced into active use.

13. Data breaches and security incidents
13.1 Incident definition
A privacy or security incident may involve unauthorised access, unlawful disclosure, loss, alteration, destruction or compromise of personal information.
Examples include compromised administrator credentials, database exposure, accidental publication of private information, malicious access to files or disclosure to an unauthorised recipient.
13.2 Incident response
Where a suspected incident is identified, COURTREADZ will seek to:
Identify the incident and affected systems.
Restrict or contain unauthorised access.
Preserve relevant evidence.
Investigate the nature and scope of the incident.
Identify affected information and individuals.
Assess the likelihood and seriousness of harm.
Engage relevant technical or legal advisers where necessary.
Implement reasonable remedial measures.
Determine notification obligations.
Notify affected persons and authorities where legally required.
Document the response.
Review security controls to reduce recurrence.
13.3 Australian Notifiable Data Breaches scheme
Where the Notifiable Data Breaches scheme applies, COURTREADZ will assess suspected eligible data breaches in accordance with the Privacy Act.
An eligible data breach generally involves unauthorised access, disclosure or loss of personal information likely to result in serious harm, where remedial action has not removed that likelihood.
Regulated entities must take reasonable steps to complete a suspected eligible breach assessment within 30 calendar days and notify affected individuals and the OAIC as soon as practicable when notification is required.
13.4 International notification obligations
Where other privacy laws apply, COURTREADZ will assess additional notification requirements, including potentially shorter reporting periods under GDPR and other legislation.
The applicable deadline depends on the relevant law, role of COURTREADZ and nature of the incident.
13.5 No automatic exclusion of responsibility
COURTREADZ will not be deemed automatically liable for every incident involving an independent third party.
Equally, COURTREADZ cannot exclude liability for its own legally actionable conduct simply by describing an incident as a cyberattack.
Responsibility will be determined by applicable law, facts, contractual duties and the circumstances of the incident.

PART E — LIVESTREAMS, RECORDINGS, PODCASTS AND USER CONSENT

14. Video and audio recording privacy
14.1 Application
This section applies to livestreams, interactive video sessions, author interviews, influencer interviews, podcasts, audio discussions, recorded member participation and other recording activities operated or authorised by COURTREADZ.
14.2 Recording notice
COURTREADZ will provide an appropriate recording notice before collecting identifiable audio or video from a participant where consent or notification is required.
The notice will explain, as applicable:
Whether the session is being recorded.
The types of information collected.
The purposes of recording.
Whether the recording may be edited.
Whether the recording will be published.
The intended audience.
Whether the recording may be used promotionally.
Relevant retention arrangements.
How to contact COURTREADZ about privacy concerns.
14.3 First-time recording consent pop-up
COURTREADZ intends to implement a recording acknowledgement and consent mechanism for first-time participation in applicable recorded services.
Before a participant joins their first recorded livestream, interactive video session or recorded call, a pop-up will appear explaining that audio, video or other contributions may be recorded.
The pop-up will provide access to the complete Recording, Video and Audio Rights Agreement.
Where affirmative consent is the appropriate legal basis, the participant must actively select an unchecked consent box before proceeding.
The system should record:
The participant's account identifier.
The date and time of consent.
The version of the agreement accepted.
The recording activities covered.
The method by which consent was obtained.
Any subsequent withdrawal or replacement of consent.
14.4 Continuing consent
COURTREADZ may rely on a previously recorded acknowledgement or consent for subsequent sessions only where the original consent remains legally valid and sufficiently specific to cover those activities.
A new acknowledgement or consent may be required if the recording purpose, audience, publication arrangements, technology or applicable legal requirements materially change.
14.5 Joining recorded sessions
Participants who do not provide legally required consent may be prevented from joining interactive recording features.
Where practical, COURTREADZ may provide alternatives such as viewing without enabling a camera or microphone.
A person merely watching a livestream should not automatically be treated as having consented to the recording of their identifiable voice or image.
14.6 Editing and publication
Where appropriately authorised, recorded material may be edited for clarity, length, production quality and presentation.
Editing must not be used unlawfully to misrepresent an individual's statements or create misleading or defamatory material.
Any promotional or commercial use of identifiable recordings must comply with the applicable recording agreement, privacy law and other relevant rights.
14.7 Withdrawal of consent
Where processing relies on consent, individuals may request withdrawal through courtneyjaneofficial@gmail.com.
COURTREADZ will assess the request according to applicable law and the relevant recording agreement.
Withdrawal will not automatically invalidate processing lawfully completed before withdrawal.
Whether an already published recording must be removed depends on the legal basis for continued use, applicable rights and circumstances.
COURTREADZ will not claim an unrestricted perpetual right to process personal information merely because a participant previously accepted a recording agreement.
14.8 Recording by members
Members must not secretly or unlawfully record private communications, video calls or other participants.
Members are responsible for complying with applicable recording, surveillance and privacy laws.
COURTREADZ may investigate reports of unlawful recording and take appropriate moderation or legal action.
14.9 Separate recording agreement
The Recording, Video and Audio Rights Agreement governs additional matters, including applicable licences, recording permissions, editing rights, distribution, attribution and intellectual property.
Where there is a conflict between that agreement and mandatory privacy legislation, the mandatory law prevails.

PART F — COOKIES, ANALYTICS AND MARKETING

15. Cookies and similar technologies
15.1 Use of cookies
COURTREADZ may use cookies, local storage, session identifiers and similar technologies to operate and improve the website.
These technologies may support authentication, account security, session continuity, user preferences, technical diagnostics, performance measurement and lawful marketing activities.
15.2 Essential cookies
Essential technologies may be necessary to maintain secure logins, process transactions, protect accounts and provide requested services.
Where permitted by law, these may operate without separate opt-in consent.
15.3 Analytics cookies
Analytics technologies may collect information concerning website traffic, page interactions, device types and general usage patterns.
Where analytics cookies or similar technologies require consent, COURTREADZ will obtain it before activation.
15.4 Advertising and tracking technologies
COURTREADZ may use authorised advertising or measurement technologies to understand promotional performance.
Before implementing tracking pixels or behavioural advertising tools, COURTREADZ will assess the information transmitted, recipients, lawful basis, international transfers and relevant opt-out requirements.
The use of tracking pixels can create privacy obligations even where the business does not directly receive every item of information transmitted.
15.5 Cookie consent controls
Where required, COURTREADZ will provide an accessible consent mechanism allowing users to make meaningful choices concerning non-essential technologies.
The mechanism should not treat silence, inactivity or preselected boxes as valid consent where affirmative consent is legally required.
Users should be able to withdraw applicable consent without unnecessary difficulty.
15.6 Cookie register
COURTREADZ will maintain a record of cookies and similar technologies actually deployed, including their purposes, providers, approximate lifetimes and categories.
This information should be made available through a Cookie Policy or equivalent website disclosure.

16. Marketing communications
16.1 Types of communications
COURTREADZ may send communications relating to membership services, account security, transactions, livestream schedules, author interviews, website developments and optional promotional activities.
16.2 Service communications
COURTREADZ may send communications reasonably necessary to operate an account or fulfil a contract, including receipts, password resets, important policy changes and security notices.
These communications are distinct from optional direct marketing.
16.3 Promotional communications
Promotional emails, messages and notifications will be sent in accordance with applicable marketing and privacy law.
Where consent is required, COURTREADZ will obtain valid consent.
16.4 Unsubscribing
Marketing communications will include an appropriate method of unsubscribing where required.
COURTREADZ will honour valid marketing opt-out requests within the applicable legal timeframe.
Australian guidance requires appropriate consent, sender identification and unsubscribe mechanisms for covered commercial electronic messages.
16.5 No automatic marketing consent
Registering for a membership, entering a giveaway or participating in a podcast does not automatically authorise every form of unrelated marketing.
Separate consent will be obtained where required.
16.6 Social media advertising
COURTREADZ may advertise through third-party platforms, including Instagram and Facebook.
Those platforms may independently process information under their own privacy terms.
COURTREADZ will assess its own responsibilities when uploading customer lists, deploying tracking technologies or sharing information for advertising.

PART G — MEMBER RIGHTS AND PRIVACY REQUESTS

17. Access to personal information
Individuals may request access to personal information held about them.
Requests should be sent to:
courtneyjaneofficial@gmail.com
COURTREADZ may require reasonable identity verification before disclosing account-related or sensitive information.
Requests will be assessed under applicable law.
Access may be limited or refused where a lawful exception applies, including circumstances involving another person's privacy, legal privilege, security risks or other recognised grounds.
Where required, COURTREADZ will explain the reason for refusal and available complaint mechanisms.

18. Correction of personal information
Individuals may request correction of personal information that is inaccurate, incomplete, outdated, irrelevant or misleading.
COURTREADZ will take reasonable steps required by applicable law to investigate and correct information.
Where a requested correction is refused, COURTREADZ will provide any explanation and review mechanism required by law.

19. Account deletion and erasure
19.1 Deletion requests
Members may request closure of their accounts and deletion of personal information through available account controls or by contacting COURTREADZ.
19.2 Information that may be retained
COURTREADZ may retain information where lawfully necessary for:
Financial and taxation records.
Fraud prevention.
Security investigations.
Existing legal disputes.
Compliance with court orders.
Protection of other users.
Establishment or defence of legal claims.
Other lawful retention purposes.
19.3 Published content
Deletion requests involving published posts, reviews, recorded media or content shared with other users will be assessed in accordance with applicable privacy law, contractual permissions and the nature of the content.
COURTREADZ will not guarantee removal of copies independently and lawfully held by unrelated third parties beyond its control.
19.4 International erasure rights
Where GDPR, UK GDPR or another applicable law provides a right to erasure, COURTREADZ will assess and honour that right subject to lawful exceptions.

20. Additional privacy rights
Depending on applicable law, individuals may have rights to:
Access personal information.
Correct inaccurate information.
Request deletion.
Withdraw consent.
Object to certain processing.
Restrict certain processing.
Receive portable copies of eligible information.
Opt out of certain direct marketing.
Limit particular uses of sensitive information.
Obtain information about relevant automated decisions.
Lodge complaints with privacy regulators.
Exercise other statutory privacy protections.
These rights are not identical across all jurisdictions and may be subject to specific legal conditions.
20.1 California residents
Where the California Consumer Privacy Act applies, eligible residents may have rights to know, access, correct and delete certain personal information, and to opt out of qualifying sale or sharing practices.
Additional protections may apply to sensitive personal information and the exercise of privacy rights.
COURTREADZ does not currently declare that it sells personal information. Before publication, the business must verify whether any advertising or data-sharing practices constitute a sale or sharing under applicable legislation.
20.2 European and United Kingdom residents
Where GDPR or UK GDPR applies, eligible individuals may exercise the relevant statutory rights through the privacy contact identified in this Policy.
Requests will be handled within the applicable statutory period, subject to lawful extensions and exceptions.
20.3 Non-discrimination
COURTREADZ will not unlawfully discriminate against individuals for exercising protected privacy rights.
This does not prevent the platform from restricting a service where information genuinely necessary to provide that service cannot lawfully be processed.
21. Automated decision-making and profiling
21.1 General position
COURTREADZ may use automated technologies for account authentication, spam prevention, fraud detection, content recommendations and security monitoring.
21.2 Significant decisions
Where automated processing is used to make decisions that significantly affect an individual's rights or interests, COURTREADZ will assess applicable transparency, fairness and review requirements.
21.3 Human review
Where legally required, eligible individuals may request information or human review concerning qualifying automated decisions.
21.4 Australian transparency requirements
COURTREADZ will monitor the commencement and applicability of Australian privacy transparency requirements concerning significant decisions involving computer programs.
Before deploying such functionality, COURTREADZ will assess whether additional privacy disclosures are required.

PART H — GIVEAWAYS, AUTHORS AND SPECIAL PLATFORM ACTIVITIES

22. Privacy relating to giveaways and competitions
22.1 Purpose
Personal information collected for competitions and giveaways will be used for legitimate purposes associated with administering the promotion.
These may include verifying eligibility, reviewing entries, selecting winners, contacting winners, distributing prizes, preventing fraud and complying with applicable law.
22.2 Australian-only promotions
Where a promotion is restricted to Australian residents, COURTREADZ may request reasonable evidence of eligibility.
Such information must be collected proportionately and used only for authorised purposes.
22.3 Prize payments
Where a prize is paid by bank transfer, COURTREADZ may collect payment details reasonably necessary to complete the transfer.
Banking information must be handled securely and should not be displayed publicly.
22.4 Public winner announcements
COURTREADZ may publish limited winner-identification information where the promotion rules permit and applicable privacy law allows.
A winner's full residential address, bank details, identity documents or other unnecessary private information must not be publicly disclosed.
22.5 Marketing and competitions
Competition participation will not automatically enrol entrants into unrelated marketing communications without a valid legal basis.
22.6 Competition records
Records may be retained for the period required by applicable promotional, financial, consumer or legal obligations.

23. Author and publisher privacy
23.1 Commercial information
COURTREADZ may process author and publisher information to administer storefronts, book listings, digital purchases, payments, professional correspondence and contractual arrangements.
23.2 Author dashboards
Author dashboards must be configured to restrict access to information relevant to the authorised author or publisher.
An author must not receive unrestricted access to the personal information of unrelated members.
23.3 Customer information
Information relating to purchasers or readers may only be disclosed to authors where necessary and lawfully permitted.
23.4 Independent author responsibilities
Authors and publishers who receive personal information for their own independent purposes may be separately responsible for complying with applicable privacy laws.
Their obligations may include providing privacy notices, maintaining security, restricting use and responding to valid privacy requests.
23.5 Prohibited exploitation
Authors and publishers must not use COURTREADZ-derived information for harassment, spam, unauthorised marketing, identity theft, profiling or unrelated commercial exploitation.
23.6 Enforcement
COURTREADZ may investigate alleged misuse, restrict author services, terminate access and pursue available contractual or legal remedies.
These rights do not eliminate COURTREADZ's own obligations regarding disclosures and platform security.

24. Reviews, bookshelves and reading preferences
Information relating to a member's reading activity may be displayed according to the platform's privacy settings.
This may include ratings, reviews, favourite books, reading progress and personal library information.
COURTREADZ may use such information to provide relevant platform features and lawful recommendations.
Reading preferences will not automatically be treated as consent for sensitive profiling or unrelated advertising.
Users should avoid publishing personal information that they do not wish other authorised users to view.

25. Notifications and tagging
COURTREADZ may generate notifications concerning replies, mentions, tags, messages, announcements and other platform activity.
Notification information may include the relevant username, content reference, timestamp and type of interaction.
Where notification preferences are available, users may control eligible non-essential notifications.
Security, account and legally required notices may continue where necessary.
Members must not misuse tagging or notification functions for harassment, intimidation or unwanted disclosure of private information.

PART I — THIRD-PARTY CONDUCT, LIABILITY AND LEGAL PROTECTION

26. User-generated content and privacy responsibility
26.1 User obligations
Users are responsible for ensuring that information they submit or publish complies with applicable law and the platform's governing agreements.
Users must not knowingly publish personal information unlawfully or infringe another person's privacy rights.
26.2 Third-party misconduct
COURTREADZ may host material created independently by members, authors and other users.
The presence of user-generated material does not mean COURTREADZ endorses, verifies or adopts every statement or disclosure made by the person who posted it.
26.3 Complaints and removal
COURTREADZ may investigate reports involving privacy violations, harassment, unauthorised disclosure, impersonation or unlawful content.
Where appropriate, COURTREADZ may restrict access, remove content, suspend accounts, preserve evidence or refer matters to authorities.
26.4 No absolute immunity
Nothing in this section excludes liability that cannot lawfully be excluded.
COURTREADZ may have obligations to respond to unlawful content, maintain reasonable safeguards or address conduct brought to its attention.

27. External websites and services
COURTREADZ may contain links to independent websites, author pages, social media accounts, payment services and other third-party resources.
Independent providers may have their own privacy practices, security controls and legal responsibilities.
COURTREADZ does not control the privacy practices of every external website.
Users are encouraged to review relevant third-party privacy notices before providing personal information.
COURTREADZ remains responsible for its own conduct in selecting, integrating and disclosing information to third-party services to the extent required by applicable law.

28. Unauthorised account access
Users must notify COURTREADZ promptly if they reasonably suspect that their account has been compromised.
COURTREADZ may temporarily restrict an affected account to protect the user, other members or platform infrastructure.
Where appropriate, the platform may require credential resets, additional verification or other proportionate security measures.
Responsibility for an incident will be determined according to the facts and applicable law, rather than automatically attributed to the account holder.

29. Limitation of liability
29.1 General principle
To the maximum extent permitted by applicable law, COURTREADZ does not assume responsibility for losses arising solely from independent unlawful acts of third parties where those losses are not legally attributable to COURTREADZ.
29.2 Matters outside reasonable control
Such circumstances may include independent third-party misconduct, unauthorised redistribution of member content, external service outages or other events outside COURTREADZ's reasonable control.
29.3 Mandatory obligations
No limitation in this Policy excludes, restricts or modifies any statutory guarantee, privacy obligation, consumer right, duty of care or legal remedy where exclusion would be unlawful.
29.4 Interpretation
Any legally permitted limitation will operate only to the extent enforceable in the relevant jurisdiction.
The invalidity of one limitation does not automatically invalidate unrelated lawful provisions.
29.5 No blanket release
A member's acceptance of this Privacy Policy does not constitute a blanket release of COURTREADZ from all present or future privacy claims.
Privacy notices are primarily instruments of transparency and compliance, not substitutes for lawful conduct or enforceable commercial agreements.

30. Indemnities and contractual responsibility
Where appropriate, separate Terms and Conditions, Membership Agreements and Author Agreements may contain enforceable indemnity provisions addressing losses caused by a user's unlawful conduct or breach of contract.
Any indemnity must be drafted consistently with applicable consumer protection, unfair contract term and other laws.
This Privacy Policy does not itself impose an unlimited indemnity against individuals merely because they use the website.
COURTREADZ reserves the right to pursue lawful remedies against persons responsible for intentional misuse of personal information, unauthorised system access or other actionable misconduct.

PART J — COMPLAINTS, DISPUTES AND REGULATORY COOPERATION

31. Privacy complaints
31.1 Contact details
Individuals who believe their personal information has been mishandled may submit a complaint to:
31.2 Complaint information
A complaint should, where reasonably possible, identify the relevant concern, approximate date, affected account and outcome sought.
Individuals should not send unnecessary identity documents or sensitive information through insecure channels.
31.3 Complaint handling
COURTREADZ will seek to:
Acknowledge receipt within a reasonable period.
Identify the nature of the complaint.
Determine whether immediate protective action is necessary.
Investigate relevant information.
Consult appropriate personnel or advisers.
Assess applicable legal obligations.
Communicate an outcome.
Take reasonable corrective action where warranted.
Maintain appropriate complaint records.
31.4 Response timeframe
COURTREADZ aims to acknowledge privacy complaints within five business days and provide a substantive response within 30 calendar days where reasonably practicable.
These are operational targets, not replacements for shorter statutory deadlines that may apply.
Where additional time is reasonably necessary, COURTREADZ will provide an appropriate update.
31.5 Australian regulatory complaints
Where applicable, individuals may complain to the Office of the Australian Information Commissioner.
Individuals should ordinarily raise their concern directly with COURTREADZ first, where appropriate, but nothing in this Policy removes any statutory right to approach a regulator.
31.6 International regulators
Where foreign privacy laws apply, eligible individuals may have the right to lodge complaints with an appropriate overseas data protection authority.
COURTREADZ will cooperate with competent authorities as required by law.

32. Governing law and jurisdiction
COURTREADZ is operated from New South Wales, Australia.
Subject to mandatory laws and jurisdictional rules, the interpretation of this Policy is intended to be governed by applicable Australian law.
Nothing in this provision prevents a regulator or court from exercising jurisdiction conferred by mandatory Australian or foreign legislation.
Any separate contractual choice-of-law or dispute-resolution provisions must be assessed for enforceability.

33. Cooperation with lawful investigations
COURTREADZ may preserve and disclose information where required or authorised by applicable law in connection with investigations, court proceedings, regulatory inquiries or other lawful processes.
COURTREADZ will seek to restrict disclosure to information reasonably necessary for the relevant lawful purpose.
Confidentiality, legal privilege, data protection and other applicable protections will be considered.

PART K — POLICY GOVERNANCE AND FINAL PROVISIONS

34. Privacy management responsibilities
COURTREADZ will designate responsibility for overseeing privacy matters, including privacy requests, service-provider arrangements, data incidents and policy reviews.
The operator may delegate operational duties to authorised personnel or advisers while retaining any responsibilities imposed by applicable law.

35. Privacy by design
Where reasonably practicable, COURTREADZ will consider privacy and security during the design and development of new features.
Relevant considerations include:
Necessity of information collection.
Default visibility settings.
User consent requirements.
Appropriate access restrictions.
Security architecture.
Data retention.
International transfers.
Third-party integrations.
Risks to vulnerable individuals.
The potential consequences of misuse.
The ability to exercise privacy rights.

36. Privacy impact assessments
COURTREADZ will consider conducting a documented privacy impact assessment before introducing processing activities presenting significant privacy risks.
Such activities may include substantial changes to recording systems, automated profiling, sensitive information processing, identity verification or large-scale third-party data sharing.

37. Training and confidentiality
Individuals authorised to access personal information on behalf of COURTREADZ should receive appropriate instructions concerning confidentiality, information security, lawful use and incident reporting.
Access should be restricted to legitimate operational requirements.

38. Recordkeeping and accountability
COURTREADZ will seek to maintain appropriate records of privacy-related decisions and activities, including:
Current privacy notices.
Material policy revisions.
Consent records.
Relevant processing activities.
Service-provider agreements.
Security incidents.
Privacy complaints.
Requests for access or deletion.
Relevant international transfer assessments.
Significant security and privacy reviews.
Records will be protected and retained according to lawful operational requirements.

39. Changes to this Privacy Policy
39.1 Right to update
COURTREADZ may update this Policy to reflect changes in legislation, technology, platform functionality, business operations or information handling practices.
39.2 Material changes
Where a material change affects individuals' rights or the purposes for which information is processed, COURTREADZ will provide notice and obtain additional consent where required.
39.3 Effective date
The current version and effective date will be displayed on the website.
39.4 Previous versions
COURTREADZ may retain previous versions for legitimate recordkeeping, compliance and dispute-resolution purposes.
39.5 Continued use
Continued use of the website following a policy update does not automatically constitute legally valid consent where an affirmative choice is required.

40. Relationship with other COURTREADZ agreements
This Privacy Policy operates alongside the following documents:
General Website Terms and Conditions.
Membership Terms and Conditions.
Author and Publisher Agreement.
Recording, Video and Audio Rights Agreement.
Community Standards and Guidelines.
Applicable competition-specific Terms and Conditions.
Any additional legally required notices or contractual agreements.
Each document addresses distinct aspects of the relationship between COURTREADZ and its users.
The Privacy Policy governs information-handling practices but does not replace the other agreements.
Where provisions conflict, mandatory legislation prevails.

41. Severability
If a provision of this Policy is found invalid, unlawful or unenforceable, that provision will be interpreted or severed to the extent legally permissible.
The remaining provisions will continue to operate insofar as they remain lawful and capable of independent application.

42. No waiver
A failure or delay by COURTREADZ to exercise a lawful right does not necessarily constitute a waiver of that right.
This provision does not alter statutory limitation periods, mandatory duties or rights that cannot lawfully be waived.

43. Interpretation
References to legislation include applicable amendments and replacements unless the context requires otherwise.
Headings are included for convenience and do not independently alter the substantive meaning of this Policy.
Words in the singular may include the plural and vice versa where appropriate.

44. Contact and privacy enquiries
All privacy enquiries, access requests, correction requests, deletion requests, recording concerns and complaints should be directed to:
COURTREADZ BOOK CLUB

End of Comprehensive Privacy Policy