Privacy Policy

Last updated: 1 January 2026

Castonex ("we", "us", "our") is committed to protecting your personal information. This policy explains what data we collect, how we use it and your rights regarding that data when you use the Service at https://castonex.com. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Information we collect

1.1 Information you give us directly

• Account information: name, email address and phone number.
• Payment information: billing details processed through our secure payment provider. We do not store full card numbers.
• Support correspondence: the messages and information you send to [email protected] or through the contact form.

1.2 Information collected automatically

• Usage data: pages visited, features used, session duration and subscription status.
• Device information: device type, operating system and IBO Player version.
• IP address: used for region detection, fraud prevention and service delivery.
• Cookies: session cookies for authentication and analytics cookies for service improvement (see section 6).

1.3 Information we do not collect

We do not collect sensitive personal information such as government identifiers, biometric data, health information or financial account details beyond what payment processing requires.

2. How we use your information

• Deliver the Service: activate and manage your subscription, authenticate your device and stream content.
• Process payments: complete transactions and issue receipts.
• Provide support: respond to enquiries, troubleshoot faults and resolve disputes.
• Improve the Service: analyse usage patterns to strengthen performance and the content offering.
• Send service communications: activation confirmations, renewal reminders and important notices. We do not send unsolicited marketing.
• Prevent fraud and abuse: detect and block unauthorised account sharing or misuse.
• Meet legal obligations: respond to lawful requests from Australian authorities.

We do not sell, rent or trade your personal information to third parties for marketing purposes.

3. Legal basis for processing

• Contract performance: processing necessary to deliver your subscription.
• Legitimate interests: fraud prevention, service security and analytics.
• Legal obligation: compliance with applicable Australian law.
• Consent: where we have asked for it explicitly, such as optional communications.

4. Data sharing

We share your data only with:

• Payment processors, to complete transactions securely under their own privacy policies.
• Infrastructure providers, being hosting and delivery-network providers that process data on our behalf under written agreements.
• Legal authorities, where required by law or court order, or to protect the rights and safety of Castonex and its users.

All third-party processors are required to maintain appropriate security measures and are prohibited from using your data for their own marketing.

5. Data retention

After the retention period, data is permanently deleted or irreversibly anonymised.

6. Cookies

• Essential cookies are required for login sessions and service functionality and cannot be disabled.
• Analytics cookies help us understand how visitors navigate the site. You may opt out through your browser settings.

We do not use advertising cookies or third-party behavioural tracking.

7. Your rights

Under the Privacy Act 1988 and comparable frameworks, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your information, subject to legal retention requirements
• Restrict or object to certain processing activities
• Receive your data in a structured, machine-readable format
• Withdraw consent where processing relies on it

To exercise any of these rights, write to [email protected]. We respond within 30 days. If you are not satisfied with our handling of a privacy complaint, you may refer the matter to the Office of the Australian Information Commissioner.

8. Data security

• TLS encryption for all data in transit
• Encrypted storage for sensitive account information
• Access controls limiting who can view personal data
• Regular security reviews of infrastructure and process

No system is entirely secure. In the event of an eligible data breach we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

9. Children's privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, contact [email protected] and we will delete it promptly.

10. International transfers

Your data is processed and stored in secure data centres. Where information is transferred outside Australia, we ensure appropriate safeguards are in place consistent with Australian Privacy Principle 8.

11. Changes to this policy

We may update this policy from time to time. The current version is always published at https://castonex.com/privacy.html with a revised "Last updated" date. For material changes we will notify you on WhatsApp or a prominent notice on the site.

12. Contact

Email: [email protected]
Website: https://castonex.com
Post: Level 12, 200 Queen Street, Melbourne VIC 3000, Australia

Our related commitments are set out in the terms of service.