Last updated 23 August 2026
1. Who we are
RAYE Haus (rayehaus.com.au) is operated from Queensland, Australia. This Privacy Policy explains how we collect, use, disclose and protect your personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). "We", "us" and "our" refer to RAYE Haus. "You" refers to any visitor, applicant, member, seller or buyer using our website or platform.
2. Information we collect
We only collect information reasonably necessary to run the platform. This includes:
- Account information - business name, full name, email, chosen handle, password (hashed), timezone, tier selection.
- Profile information - avatar, bio, website, industry, location, social handles, offers and any content you publish to your directory profile or storefront.
- Application information - answers you provide when applying for Residency. Empire is invitation only, so there is no application to complete.
- Payment information - handled entirely by Stripe. We receive limited metadata (customer ID, subscription status, last 4 digits of card, country) but never see or store your full card number or CVC.
- Marketplace and referral data - listings, orders, messages, intro requests, endorsements, referral clicks and conversions.
- Technical data - IP address, browser and device information, pages visited, referring URL, timestamps and error logs.
- Communications - emails, support messages and any correspondence you send to us.
3. How we use your information
- To create and operate your account and directory profile.
- To process payments, subscriptions, applications, refunds and marketplace transactions.
- To match members with referrals, introductions and opportunities inside the platform.
- To send transactional emails (welcome, receipts, application updates, password resets, order notifications).
- To send member updates, event invitations and marketing where you have opted in - you can opt out at any time.
- To improve the platform, diagnose errors and secure the service against fraud and abuse.
- To meet legal, tax and regulatory obligations.
4. Cookies and similar technologies
We use cookies and browser storage to keep you signed in, remember your preferences, secure your session and understand how the platform is used. The categories we use:
- Strictly necessary - authentication tokens, session state, CSRF protection, load balancing. The platform will not function without these.
- Preferences - timezone, tier selection carried through signup, UI state.
- Analytics - aggregated, de-identified usage patterns to help us improve pages and flows.
- Payments - Stripe sets its own cookies on the embedded checkout to detect fraud and complete payment. See Stripe's cookie policy at stripe.com/cookies-policy/legal.
- Marketing - only where you have opted in (e.g. our RAYE Haus newsletter).
You can clear cookies or block them via your browser settings. Blocking strictly necessary cookies will stop you from signing in or completing a purchase.
5. When we share your information
We do not sell your personal information. We share it only with:
- Service providers we rely on to run the platform - hosting and database infrastructure, payments (Stripe), email delivery (Resend), error monitoring and analytics. Each is bound by their own privacy and security terms.
- Other members - information you publish to your directory profile, storefront, community rooms or listings is visible to other members and, where applicable, the public.
- Buyers and sellers - when you buy or sell, we share the details necessary to complete and support the transaction.
- Authorities - where required by Australian law, court order or to protect our rights, users or the public.
- A successor entity - if RAYE Haus is sold, merged or restructured, your information may transfer as part of that transaction.
6. Overseas disclosure
Some of our providers (including Stripe and our hosting infrastructure) store or process data outside Australia, including in the United States and the European Union. By using RAYE Haus, you consent to this cross-border processing. We take reasonable steps to ensure providers handle your data to a standard consistent with the Australian Privacy Principles.
7. Data retention
We keep personal information for as long as your account is active and for a reasonable period after closure to meet legal, tax, dispute-resolution and record-keeping obligations. Payment records are retained for the period required by Australian tax law (currently 7 years). You can request deletion at any time - see below.
8. Security
We use industry-standard measures including TLS in transit, encrypted storage at rest, hashed passwords, row-level security on our database, scoped access controls and audit logging. No system is perfectly secure - you are responsible for keeping your password confidential and notifying us of any suspected unauthorised access.
9. Your rights
Under Australian privacy law you can:
- Access the personal information we hold about you.
- Ask us to correct information that is inaccurate or out of date.
- Request deletion of your account and associated personal information, subject to legal retention obligations.
- Opt out of marketing at any time by using the unsubscribe link in any email.
- Make a complaint about how we have handled your information.
If you are not satisfied with our response you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
10. Children
RAYE Haus is intended for adults operating a business. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with information, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to members by email.
12. Contact us
Privacy questions, access requests, corrections or complaints:
- Email: privacy@rayehaus.com.au
- General: hello@rayehaus.com.au
- Web: rayehaus.com.au
- Location: Queensland, Australia
We will respond to privacy requests within 30 days.

