Home Grown Store Operations Privacy Policy

Last updated: 1 September 2026

This policy explains how Home Grown Musicals (AUS) Ltd, ABN 12 606 130 045 (Home Grown, we, us or our), manages personal information in connection with the Home Grown website, sheet music store and Store Operations app (the App).

1. PERSONAL INFORMATION WE COLLECT AND HOLD

Depending on how you interact with Home Grown, we may collect and hold:

- identity and contact details, including name, email address, phone number and postal address;

- artist profile information, biographies, headshots and professional details;

- song, composition, contributor, rights and sheet music information;

- uploaded music, artwork and supporting files;

- agreement versions, acceptance records and communications;

- customer order, payment, refund and transaction information received from the store platform;

- artist statement, entitlement, payment and remittance records;

- bank account details supplied for artist payments;

- consented bank account and transaction information for the dedicated store account;

- sign-in, security, audit, support and exception-resolution records; and

- technical information reasonably required to secure and operate the website and App.

We do not seek sensitive information unless it is reasonably necessary for a specific activity and permitted by law. Please do not provide unnecessary personal or sensitive information in biographies, files or free-text fields.

2. HOW WE COLLECT INFORMATION

We may collect information:

- directly from artists, customers, authorised users and other people who communicate with us;

- through forms, uploads, agreement acceptance and use of the website or App;

- from Home Grown's existing business and financial records;

- from Squarespace when Home Grown authorises a commerce connection;

- from an Australian Open Banking provider after the account holder gives the required consent; and

- from service providers that help us deliver, secure, support or account for our activities.

The App does not collect or store online-banking passwords. Bank authentication occurs through the relevant bank or Open Banking provider.

3. WHY WE COLLECT, HOLD, USE AND DISCLOSE INFORMATION

We use personal information to:

- operate the website, sheet music store, App and artist portal;

- identify and communicate with artists, customers and authorised users;

- administer music, rights information, agreements and store listings;

- import and verify sales, refunds, fees and settlement information;

- calculate entitlements, prepare statements and reconcile store activity;

- prepare, approve and record payments and remittance information;

- investigate exceptions, disputes, errors, fraud and security concerns;

- maintain financial, governance, tax and audit records;

- improve our systems and support users; and

- meet legal and regulatory obligations.

We do not sell personal information.

4. AUTOMATED PROCESSING AND HUMAN REVIEW

The App may automatically import records, apply documented calculation rules, suggest transaction matches, generate statements and flag exceptions. These processes support administration. A human operator must review exceptions and approve outgoing artist payments, and the bank separately requires payment authorisation. The App does not independently transfer funds.

5. WHEN INFORMATION MAY BE DISCLOSED

We may disclose information where reasonably necessary to:

- authorised Home Grown personnel and professional advisers;

- artists, customers or other rights holders in connection with their own records and entitlements;

- technology providers that host, secure, communicate with or support the website and App;

- Squarespace and connected commerce or payment services;

- the consented Australian Open Banking provider and participating financial institutions;

- email and document-delivery providers;

- accountants, auditors, insurers and legal advisers; and

- government agencies, regulators, courts or law-enforcement bodies where required or authorised by law.

Service providers may process information only for the services they provide to us and are subject to their own security, privacy and legal obligations.

6. OVERSEAS PROCESSING

Some technology and commerce providers may store or process information outside Australia, including in the United States and other countries where their infrastructure or support teams operate. Privacy protections and legal requirements in those locations may differ from those in Australia. We take reasonable steps appropriate to the circumstances when selecting and configuring providers.

7. STORAGE, SECURITY AND RETENTION

We use reasonable administrative and technical safeguards appropriate to the information involved. These include access controls, audit records and encryption for stored integration credentials and artist bank details. Access to the App is restricted to authorised users.

No system can be guaranteed completely secure. If we become aware of a data incident, we will investigate it and take action required by applicable law.

We retain information for as long as reasonably required for the purposes described in this policy, to perform agreements, resolve disputes and meet legal, financial, tax, governance and archival obligations. Information that is no longer required is deleted, de-identified or securely archived where reasonably practicable.

8. ACCESS AND CORRECTION

You may ask to access personal information we hold about you or request that inaccurate or out-of-date information be corrected. We may need to verify your identity and may decline access where permitted or required by law. We will explain a refusal where the law requires us to do so.

Requests can be sent to homegrown@homegrownaus.com.

9. PRIVACY QUESTIONS AND COMPLAINTS

If you have a privacy question or believe we have mishandled personal information, contact us in writing with enough detail for us to investigate. We will acknowledge and assess the matter and aim to respond within 30 days. If you are not satisfied, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au: https://www.oaic.gov.au/.

10. CHANGES TO THIS POLICY

We may update this policy when our activities, providers or legal obligations change. The current version and its update date will be published on the Home Grown website. We will take reasonable steps to communicate material changes where appropriate.

11. CONTACT

Home Grown Musicals (AUS) Ltd

6 Kiewa Crescent, Dallas VIC 3047, Australia

homegrown@homegrownaus.com