This Privacy Policy sets out how On-Market BookBuilds Pty Ltd (“OnMarket”), uses and protects any information that you give OnMarket when you use this website or mobile application. This policy explains how OnMarket is in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Any information you provide when using this website and mobile application will only be used in accordance with this privacy statement.
The privacy of your personal information is of utmost importance to us. Please note these important aspects of OnMarket.
We are committed to ensuring that your privacy is protected.
We won't disclose your personal information to anyone without your permission.
Tracking technologies: cookies, tags and pixels
OnMarket uses cookies and similar tracking technologies such as tags, SDKs and tracking pixels to monitor traffic patterns and to serve you more efficiently when you visit the site. We use: (a) strictly necessary technologies to operate our site; (b) analytics technologies to understand site usage; and (c) advertising/measurement technologies to show or measure advertising on third‑party platforms.
What are tracking pixels?
A tracking pixel is a small piece of code that loads when you visit a page and sends information about your activity (for example, the page URL, time, device/browser information and your IP address) to the pixel provider. Depending on configuration, pixels can also associate your activity with identifiers (such as a hashed email) to enable analytics, ad targeting and campaign measurement on third‑party platforms.
Which pixels we use
We may implement pixels and similar technologies provided by: Meta (Facebook) Pixel, LinkedIn Insight Tag, Google Ads / Google Tag, Campaign Monitor / email analytics, and other providers as updated from time to time.
What data is collected through pixels
Depending on settings, these technologies may collect: IP address; device and network information; page URLs and referrers; time/date and events on our pages; and, where configured, pseudonymous identifiers (for example, hashed email or advertising identifiers) for audience matching and ad measurement. We configure pixels to limit data collection to what is reasonably necessary for our functions. We do not use pixels to intentionally collect sensitive information (such as health, ethnicity or political opinions).
Our legal basis and your choices
Analytics pixels (for example, traffic measurement) are used on the basis that the collection is reasonably necessary for our functions and carried out by lawful and fair means. Advertising/retargeting pixels are used for direct marketing. You can opt‑out of advertising/measurement by adjusting your preferences on relevant third‑party platforms. We will not use pixels to collect sensitive information without your express consent.
Overseas disclosures
Some pixel providers process personal information overseas (for example, in the United States or other countries). Where we disclose personal information to an overseas recipient through these technologies, we take reasonable steps to ensure the recipient will handle the information in accordance with the Australian Privacy Principles (APP 8), such as by using contractual protections and technical controls, and we remain accountable for their handling under the Privacy Act unless an exception applies.
Managing your settings (opt‑out/consent)
You can opt‑out via third‑party tools such as Meta Ad Preferences, Google Ads Settings and LinkedIn Ad Settings. Disabling non‑essential pixels will not affect core site functionality.
We may collect anonymous information about how you use OnMarket to help us improve the website and mobile application. Google Analytics (a third party) records this data for us.
OnMarket may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
This policy is effective from 29 July 2026.
We collect your personal information directly from you most of the time, however on occasion, we may also collect information about you from other people and organisations.
We collect personal information when you:
While we are required to collect some types of personal information to meet our legal obligations, we do attempt to keep our collection of your personal information to what is necessary to offer you the products and services you require.
When you apply for financial products issued by a company or entity, Chapter 2C of the Corporations Act 2001 (Cth) requires information about you as a potential shareholder or unitholder to be collected. This includes your name, address and details of the financial products that you apply for. If your application is successful, this information will then be included in the public register of the company or entity in which you bought shares or units. This information is collected to administer your share or unit holding. If you do not provide all of this information, it may not be possible to complete an application for those financial products.
Many offers of financial products requires client identification to be verified prior to the shares or units being allocated. We have engaged GB Group plc and its group companies including GBG ANZ Pty Ltd (branded greenID) as a 3rd party ID verification service.
greenID allows you to verify your individual name, address, date of birth and document identifier against independent and reliable data sources, online in real time.
You have the rights and protections afforded to individuals under the Australian Privacy Principles (‘the APPs’) contained in the Privacy Act 1988 (Cth).
If you decline to consent to OnMarket’s use of greenID to verify your identity, you will be unable to subscribe for any securities offered via the OnMarket platform that require identity verification. greenID data security measures are outlined in their privacy policy which can be found on their website: https://www.gbgplc.com/apac/legal-and-regulatory/privacy-policy-anz/
OnMarket has obligations under the Anti‑Money Laundering and Counter‑Terrorism Financing Act 2006 (Cth) and the associated AML/CTF Rules, which are administered by the Australian Transaction Reports and Analysis Centre (AUSTRAC). Reforms to the AML/CTF Rules, made under the AML/CTF Amendment Act 2024, commenced on 31 March 2026.
We may collect, verify and hold additional information about you, including to:
We may disclose your personal information to AUSTRAC and other regulatory or law enforcement bodies, without notifying you, and we may be limited by law in what we can tell you about such a disclosure.
We do not hold member identification details (such as Medicare or your Driver’s License) on our secure OnMarket server, unless a manual verification is required.
We do not hold member identification details (such as Medicare or your Driver’s License) on our secure OnMarket server, unless a manual verification is required.
We store transaction information about transactions that you have made using our products and services.
We may ask you your preferences for the types of offers, businesses or securities that you are most interested in, and whether you are a retail, experienced, sophisticated or professional investor under the Corporations Act. We may ask you socio-demographic information, such as your gender identity, marital status, age, gender, and occupation. If you provide this information, we store it.
We collect information from you electronically when you use our services. This includes information such as:
We use information we collect about you for the following primary purposes.
When assisting you to make applications for financial products your personal information will be provided to other parties. These include the company or entity offering the shares or units and their share registry provider. If the entity is listed, it will also include ASX or NSX.
If you register your interest in a particular upcoming offer, we may provide your details to the company or entity making the offer.
We may also use personal information for purposes that are related to the primary purpose of collection. Such secondary purposes enable us to do the following things.
OnMarket may provide aggregated anonymous information about bidders and financial product applications made through its service in order to promote its services. The recipients of aggregated information may include potential issuers and their advisers, share registries, regulators, ASX or NSX and other persons involved in the business of capital raising.
If you become a member of this website or mobile application through a referral by another member, that other member will receive aggregated data about the total stamping fees payable in respect of shares that have been allocated to members that they have referred.
This information is required to be provided in order to administer aspects of reward program that we offer.
We use your information to improve the products and services we provide through activities such as:
We use your information to:
Where required, we use your personal information to comply with the law, including our regulatory obligations, including to:
We use your information to run our business in an efficient and proper way. This includes managing our financial position, business capability and planning, testing systems and processes, as well as managing communications, corporate governance, and audit.
We may share your information with our service partners, external service providers and other organisations that help us to supply products and services. These include information technology and cloud service providers and the email marketing platform program that we may use from time to time, such as Campaign Monitor and Google Ads SDKs. We may collect and share your information with other banks, third party payment providers, superannuation funds and financial services providers to provide you services, for example to process your transactions, facilitate payment reversals and provide refunds. We confirm that any third-party service provider with whom we share user data will provide the same or equal protection of user data as stated in this privacy policy.
We may share your information with regulatory bodies, government agencies and law enforcement bodies to comply with our legislative or regulatory obligations in any of the jurisdictions where we operate.
All information you provide is stored on secure servers. Only authorised employees, agents and contractors (who have agreed to keep information secure and confidential) have access to this information. However, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Where pixel providers process personal information overseas, we take reasonable steps to ensure those providers will handle the information in accordance with the APPs (APP 8), such as by implementing contractual safeguards, technical measures (for example, data filtering and server‑side tag governance), and regular reviews of pixel configurations.
All information provided by you on the OnMarket website or mobile application will not be provided to overseas third parties (unless you are applying for shares in a company that is domiciled overseas, in which case it will be disclosed in the offer document). However, if the particular offer requires the identity of the applicant (you) to be verified, and if you provide verification information from a country other than Australia, it is possible that greenID may transfer personal information to a country which is a member country of the United Nations or a country having observer status at the United Nations.
Therefore, we strongly recommend you check the GBG/greenID Privacy Policy;
https://www.gbgplc.com/apac/legal-and-regulatory/privacy-policy-anz/
For statistical purposes we collect information on web site activity. For example, this includes the number of users who visit our web site, the date and time of visits, the number of pages viewed, navigation patterns, what country and what systems users have used to access the site. When users enter our web site from another web site, we collect the address of that web site through the use of ‘cookies’. This information on its own does not identify an individual but it does provide us with statistics that can be used to analyse and improve our web site. We may also collect your personal information via your use of our web site. Generally, the information that we collect is what you give us when you complete a form or otherwise make an enquiry or transaction via the website. To evaluate the effectiveness of our website advertising, we may use third parties to collect statistical and measurement data. We also use third‑party tracking pixels (see Tracking technologies above) to understand on‑site behaviour and to measure and improve the effectiveness of our advertising campaigns on third‑party platforms.
OnMarket uses ‘cookies’ and other measures to monitor traffic patterns and to serve you more efficiently when you visit the site. We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Cookies do not contain information by which we can identify you but they identify your computer to our servers. You may set your browser so that you are notified before a cookie is downloaded and this will provide you with the opportunity to accept or reject it on each occasion. The help menu within your Internet browser will explain how to do this.
Our website and mobile application may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information that you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
You can update your personal information by logging into your OnMarket account and changing your personal information at any time. If you are unable to update your personal information for any reason, you can contact us and we will do it for you. However, we are unable to update member banking details. This must be updated by each OnMarket member. Provided you have met your obligations under our Terms of Use and have successfully answered your security questions, OnMarket will provide you with your data on request.
There is no fee to ask for your information, but sometimes we might charge a fee to cover the time we spend gathering the information you want. If there’s a fee, we’ll let you know how much it is likely to be, so you can choose if you want to go ahead.
We try to make your information available within 30 days after you ask us for it.
In some cases, we can refuse access or only give you access to certain information. For example, we might not let you see information that involves other people. If we do this, we will write to you explaining our decision.
You have the right to ask us to delete your personal information if there is no need for us to keep it. You can make the request verbally or in writing. There may be legal or other reasons why we need to keep your personal information and if so we will tell you what these are.
We will keep your personal information while you are a customer of ours. We aim to keep your personal information for only as long as we need it.
We generally keep your personal information for up to 7 years after you stop being a customer but we may keep your personal information for longer:
OnMarket will send you emails, SMS and push notifications covering a variety of topics such as account activation, Offer alerts, allocation notifications, product updates and newsletters.
All communications will clearly describe how you can be removed from the mailing list. Members can also manage notifications by signing into OnMarket>Menu>Member Details. You can also manage advertising and tracking preferences through third‑party ad settings (for example, Meta / Google / LinkedIn).
Please contact privacy@onmarket.com.au if you have any questions about changing your notifications.
For questions about your personal information or any questions of a more general nature about privacy, please contact us on privacy@onmarket.com.au or refer to our FSG which outlines our complaint procedure.
OnMarket is committed to providing a high standard of service to clients. If you have a query about our privacy policy or level of service regarding our privacy, or relating to the collection, use and disclosure of identification information for the purposes of requesting of information from, and provision of by, greenID, we would like to hear from you.
OnMarket has established the following resolution procedures:
Step 1: Contact Us
Usually problems can be quickly rectified and the sooner you refer an issue to us the better. This can be done by:
| Emailing | enquiries@onmarket.com.au |
|---|---|
| Calling | +61 2 8598 8559 |
Step 2: Complaints Officer
If you are unhappy with our response, you should write to our Complaints Officer who will work closely with you to address your concern quickly and amicably. We will update you regularly until the matter is resolved.
|
Complaints Officer |
Step 3: Contact OAIC
If you are not satisfied with the resolution offered by our Complaints Officer, you may lodge a complaint with the Office of the Australian Information Commission (OAIC) in writing.
For more information, please see the OAIC website:
https://www.oaic.gov.au/individuals/how-do-i-make-a-privacy-complaint
In addition to the above, we disclose limited personal information to third‑party pixel providers for the purposes of: (a) analytics (measuring site visits and performance); (b) ad targeting and measurement on third‑party platforms (direct marketing); and (c) attribution of campaign outcomes. The key recipients currently include Meta Platforms, Inc., Google LLC, LinkedIn Corporation and Campaign Monitor (and their affiliates). These providers may process your information outside Australia. See Overseas disclosures for details.
Avoiding sensitive information in pixels
We do not intentionally collect or disclose sensitive information (for example, health information, racial or ethnic origin, political opinions) via cookies or pixels. We configure our tags to block collection from form fields or URLs that could reveal sensitive information. If a use case requires processing of any sensitive information via tracking technologies, we will obtain your express consent before doing so.
Reviews of tracking technologies
We conduct regular reviews of the tracking technologies used on our website and in our emails to ensure they remain appropriate, configured to minimise data collection, and compliant with this Privacy Policy and the Australian Privacy Principles. We do not adopt a “set and forget” approach.