Privacy Policy

1. Who Handles Your Information

AltScrap is owned and operated by Mighty Projects Pty Ltd (ABN 44 654 198 553). References to “AltScrap”, “we”, “us”, or “our” mean Mighty Projects Pty Ltd trading as or providing the AltScrap platform, unless the context requires otherwise.

Mighty Projects Pty Ltd provides software used by recycling and scrap-metal businesses. We handle personal information to provide, secure, maintain, support, and improve the platform.

Where you use a company-branded portal, the yard operator shown on that portal also handles information submitted through that portal for customer registration, supplier onboarding, material purchases, payments, receipts, reports, compliance, and support.

2. Information We Collect

Depending on how you use the service, we may collect:

• identity and contact details, including name, phone number, email address, address, and role;
• business details, including company name, trading name, ABN, GST status, store details, and staff details;
• customer and supplier details, including account status, verification status, pricing tier, and communications;
• transaction records, including materials, weights, prices, deductions, receipts, RCTI records, payout status, and payment history;
• supplier onboarding details, including ABN, GST declarations, bank account or PayID details, signatures, RCTI acknowledgements, and safety acknowledgements;
• technical and security information, including device data, browser type, IP address, login events, session data, audit logs, error logs, and usage activity;
• integration data from connected services, such as accounting, payment, email, mapping, storage, or reporting providers;
• support, sales, and correspondence records.

3. How We Collect Information

We may collect personal information:

• directly from you when you submit forms, create accounts, use the app, sign documents, or contact us;
• from yard operators, administrators, staff users, customers, suppliers, and authorised representatives;
• automatically through the service, including cookies, logs, device data, and analytics;
• from connected third-party systems, including payment, accounting, email, verification, and hosting providers;
• from public or official sources, such as ABN or business registers, where relevant to verification or compliance.

4. Why We Use Information

We use personal information to:

• provide, operate, personalise, secure, maintain, and improve the service;
• create and manage company, staff, customer, and supplier accounts;
• process customer registrations, supplier onboarding, receipts, reports, payments, RCTI workflows, and integrations;
• support identity, business, bank, GST, RCTI, fraud prevention, security, and compliance checks;
• send transactional messages, onboarding links, password resets, receipts, alerts, support replies, and administrative notices;
• diagnose errors, investigate disputes, recover data, monitor usage, prevent abuse, and enforce our terms;
• meet accounting, audit, taxation, legal, insurance, regulatory, and record-keeping obligations;
• respond to enquiries and communicate about our services where permitted by law.

5. Disclosure Of Information

We may disclose personal information to:

• the yard operator connected to your portal and its authorised staff or administrators;
• customers, suppliers, or counterparties where needed to issue receipts, RCTI records, payment records, or transaction documents;
• payment providers, banks, accounting platforms, email and SMS providers, hosting providers, storage providers, support tools, analytics providers, mapping providers, and security providers;
• professional advisers, insurers, auditors, accountants, lawyers, and dispute-resolution providers;
• regulators, government agencies, law enforcement, courts, or other parties where required or permitted by law;
• successors or potential successors in connection with a business sale, restructure, merger, financing, or asset transfer.

6. Overseas Processing

Some providers we use may store or process information outside Australia. Countries may include locations where our hosting, infrastructure, email, payment, accounting, support, analytics, or security providers operate. Where personal information is disclosed overseas, we take reasonable steps to use providers with appropriate privacy, security, and contractual safeguards.

7. Cookies, Analytics, And Device Data

We use cookies, local storage, session tools, and similar technologies to keep users signed in, protect accounts, remember preferences, detect abuse, and keep the service working. You can adjust browser settings to block some technologies, but parts of the service may not work correctly.

On the AltScrap marketing website (altscrap.com, not the yard portals) we also measure how the sign-up and payment process is used so we can see where people stop. To do this the browser stores a random identifier and, where present, the campaign parameters in the link that brought you here (utm_source, utm_medium, utm_campaign and similar), the referring website and the first page you landed on. These are sent to our own servers with the step reached (for example: viewed pricing, started registration, finished registration, started payment) and, if you create a company, are recorded against that company so we know how our customers found us. This data does not include the content of the forms you fill in.

Where enabled, we also use Google Analytics 4 on the marketing website with IP anonymisation. Google's handling of that data is described in Google's privacy policy. Yard portals and the staff console do not carry Google Analytics.

8. Security

We use technical, administrative, and operational safeguards designed to protect personal information. These may include access controls, authentication, encrypted transport, permission controls, audit logs, backup procedures, monitoring, staff access limits, and vendor security review.

No online service can guarantee absolute security. You are responsible for using strong passwords, keeping credentials secure, restricting staff access, and telling us promptly if you suspect unauthorised access or incorrect information.

9. Data Breaches

If we become aware of a data breach, we will assess and respond to it in accordance with applicable law. Where required, we will notify affected individuals and the Office of the Australian Information Commissioner. We may also notify yard operators, administrators, service providers, or regulators where appropriate to contain, investigate, or remediate an incident.

10. Retention

We keep personal information for as long as needed to provide the service, maintain business and audit records, support payments, reports, receipts, RCTI records and integrations, comply with legal and tax obligations, resolve disputes, enforce agreements, prevent fraud, and maintain security.

When information is no longer required, we take reasonable steps to delete, de-identify, archive, or securely restrict access to it. Backup copies and audit records may remain for a limited period according to backup, legal, and security requirements.

Website usage events described in section 7 are deleted automatically after 12 months. Sign-up verification codes are deleted once used or expired. Business records belonging to a company that has stopped subscribing are kept for at least 12 months so that tax, audit and compliance obligations can be met, then deleted or archived.

11. Access And Correction

You may request access to, or correction of, personal information we hold about you. We may need to verify your identity and may refuse, limit, or defer a request where permitted by law, including where access would affect another person's privacy, reveal confidential business information, compromise security, or interfere with legal obligations.

Yard operators may also control some records in their tenant portal. If your request relates to a specific yard, customer account, supplier account, receipt, payment, or transaction, we may direct the request to the relevant yard operator or work with them to respond.

12. Direct Marketing And Communications

We may send service, security, transactional, account, onboarding, receipt, and support communications. These are part of operating the service. We may also send marketing or product communications where permitted by law. You can opt out of marketing communications using the unsubscribe option or by contacting us, but you may still receive service-related messages.

13. Children

The service is intended for businesses, staff users, customers, and suppliers involved in recycling and scrap-metal operations. It is not directed to children. Users must not submit information about a child unless they have authority and the submission is lawful and necessary for the relevant transaction or compliance process.

14. Complaints

If you have a privacy question, access request, correction request, or complaint, contact us at support@altscrap.com. Please include enough detail for us to understand and investigate the issue. We may need to verify your identity.

We will respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

15. Changes To This Policy

We may update this policy from time to time. The updated version will be posted on this page with a new last-updated date. Where changes are material, we will take reasonable steps to notify affected users.