Work Collective Privacy Policy

Last updated: 06/10/2026

Work Collective is operated by Echo Tides Pty Ltd (ABN 12 690 982 524) (“we”, “us”, “our”). We respect your privacy, and this policy explains how we collect, use, store and share personal information about our Members, casual users, Guests, people who book our meeting rooms, website visitors and anyone who gets in touch with us.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect
Depending on how you deal with us, we may collect:
• Contact and business details: your name, email address, phone number, business name, ABN and postal address.
• Membership and booking details: your membership type, bookings, meeting room use, Guest registrations, attendance, and your communications with us.
• Identification: we may ask to see government-issued photo ID to confirm who you are.
• Payment information: billing details and transaction history. Card payments are processed by our payment provider, Stripe. We do not store your full card number.
• Access and security information: records of when your digital key is used to enter the Space, and CCTV footage of certain areas of the Space.
• Photos and video: only where you have agreed to appear in our marketing content.
• Website and app information: such as your IP address, device and browser type, and the pages you visit (see section 8).
• Guest information: a Guest’s name and contact details when a Member registers them. If you give us someone else’s details, please let them know about this policy.

We don’t ask for sensitive information, such as health information, and we ask that you don’t share it with us unless it’s needed.

How we collect it
Most information comes directly from you: when you sign up, make a booking through our website or
the Work Collective App, complete a form on our website, email or call us, or visit the Space. We also
collect some information automatically through our door access system, CCTV and website cookies,
and occasionally from others, such as a Member registering you as their Guest or an employer
arranging a membership for you.
You can make general enquiries without identifying yourself, but we need your details to provide a
membership, booking or access to the Space.

How we use it

We use personal information to:
• provide and manage your membership, bookings and access to the Space;
• process payments, issue invoices and follow up overdue amounts;
• keep the Space safe and secure, and investigate incidents or breaches of our Terms and
Conditions;
• contact you about your membership, the Space, or changes to our Terms and Conditions;
• send you news, events and offers (see section 5);
• improve our services, website and the Work Collective App; and

Work Collective — Privacy Policy (draft) | Page 2

• meet our legal obligations, such as tax and record-keeping requirements.

Marketing emails

We use ActiveCampaign to send emails about community events, news and offers. We only send these where you have agreed to receive them or where the Spam Act 2003 (Cth) allows it, and every email
includes an unsubscribe link. Unsubscribing won’t stop the emails we need to send about your
membership or bookings.

Who we share it with

We don’t sell your personal information. We only share it with:
• Service providers who help us run Work Collective: Optix (our member platform and the Work
Collective App), our door access provider, Stripe (payments), Xero (accounting), Wix (our website
and forms), Google Workspace (email and file storage) and ActiveCampaign (email marketing), as
well as professional advisers such as our accountant.
• Our landlord or building management: where needed for building access, safety or security.
• Police, regulators, insurers or others: where required or authorised by law, or where needed to
protect someone’s safety or property.
• A buyer of our business: if Work Collective is sold, so that your membership can continue.

Storing information overseas

Some of our service providers store information outside Australia, including in the United States,
Canada and other countries where they or their data centres operate. We choose reputable providers and take reasonable steps to make sure they handle your information in a way that is consistent with
the Australian Privacy Principles.

Cookies and analytics

Our website may use cookies and similar technologies, including analytics tools (such as Google
Analytics) and social media pixels (such as Meta’s), to understand how people use our site and to show
relevant ads. These collect information such as your IP address, device type and the pages you view.
You can turn off cookies in your browser settings, although some parts of the site may not work
properly.

CCTV

We use CCTV in certain areas of the Space for safety and security, and we let Members and visitors
know about it through our Terms and Conditions and this policy. Footage is kept for up to 14 days,
unless we need it to investigate an incident, in which case we may keep it longer and share it with
police or our insurers.

Keeping your information secure

We take reasonable steps to protect your information from misuse, loss and unauthorised access,
including password-protected systems, two-factor authentication where available, and limiting access to people who need it. We keep information for as long as we need it to provide our services and meet our legal obligations (for example, financial records are kept for five years for tax purposes), and then securely delete or de-identify it.
If a data breach is likely to cause serious harm to anyone, we will let the people affected know and
notify the Office of the Australian Information Commissioner (OAIC) where required.

Accessing and correcting your information

You can update most of your details yourself in the Work Collective App. You can also ask to see the
information we hold about you, or ask us to correct it, by emailing hello@workcollective.com.au. We will respond within 30 days. In limited cases the law allows us to refuse access, and if that happens we will explain why.

Questions and compaints

If you have a question or complaint about how we handle your personal information, please contact our Privacy Officer at hello@workcollective.com.au. We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.
If you’re not satisfied with our response, you can contact the Office of the Australian Information
Commissioner at www.oaic.gov.au or on 1300 363 992.

Changes to this policy

We may update this policy from time to time. The latest version will always be on our website, and we will let Members know about significant changes by email or through the Work Collective App.

Privacy Officer, Work Collective
3/322-326 West St, Umina Beach NSW 2257
hello@workcollective.com.au