Privacy Policy

1. Purpose and Scope

This Privacy Policy (the Policy) outlines the commitment of Tapt Media Pty Limited (ACN 063 906 927) and its controlled entities (collectively referred to as “Tapt Media”, “we”, “us”, or “our“) to protecting the privacy of personal information we collect and hold.

Tapt Media operates a network of commercial radio stations and digital audio platforms, including 2GB, 3AW, 4BC and 6PR. This Policy applies to all personal information collected by us, whether via our radio broadcasts, websites, mobile applications, or through direct interactions with our listeners and customers.

We are committed to protecting and maintaining your privacy and we are bound by the Privacy Act 1988 (Cth) (the Privacy Act) and the Australian Privacy Principles (APPs), which regulate how we collect, use, disclose, and store personal information.

Due to the nature of our business activities, from time to time we will handle personal information relying on the media exemption in the Privacy Act where appropriate and this is discussed in more detail below. We may also rely on the related bodies corporate, employee records and other exemptions that are included in the Privacy Act.

This Privacy Policy is in addition to the general Terms of Use governing our digital services and should be read in conjunction with that policy.

If your personal information is being collected via one of our digital services, the specific collecting entity will be the entity listed by the digital service as the copyright owner and operator of the service will be listed. In most cases this will be Tapt Media. On a website, for example, you will usually find this listed at the bottom of the page.

If your personal information is being collected offline e.g. by phone or in-person, the relevant collecting entity will be made known to you as part of the collection notice given to you in connection with that activity.

2. What is Personal Information?

When used in this policy, the term “personal information” has the meaning given to that term in the Privacy Act. In general terms, it is any information that can be used to personally identify you. This may include (but is not limited to) your name, age, address and contact details (including phone numbers and email addresses) and possibly financial information, including your credit card, direct debit or PayPal account information. If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered personal information.

3. The Types of Personal Information We Collect

The types of personal information we collect are determined by your interactions with our business, stations and digital services. This information may include:

• Identification and Contact Data: Such as your name, residential or postal address, email address, and telephone numbers.
• Location and Demographic Information: Including your age, gender, and location.
• Digital Account Information: Account and profile data associated with digital accounts used to access our online streaming services or podcasts.
• Listener Participation Data: Information provided when you call our talkback lines (which may include recordings of your voice), participate in on-air segments, communicate with us by email or contribute content to any of our digital platforms.
• Competition and Promotion Data: Information supplied for entry into competitions, including identity verification documents (e.g., Driver’s Licence) where necessary to verify your identity or fulfill regulatory or prize requirements.
• Technical and Usage Data: IP addresses, device identifiers, browser types, location services and behavioural data regarding your interaction with our digital audio content and advertising.

4. How We Collect Personal Information

We collect personal information through various methods, including:

• Direct Collection: When you communicate with our stations, subscribe to our digital services, apply for job vacancies, enter competitions, subscribe to newsletters, or contact our customer support teams (including by email, phone or letter).
• Digital Interaction: Automatically via cookies, bots, web beacons, and other tracking technologies when you use our websites, or mobile apps.
• Third-Party Sources: We may access information, including personal information, about you from third-party sources and platforms (such as social networking sites, databases, recruitment platforms such as LinkedIn and Seek, online marketing companies, agents or representatives we have engaged via our digital services, Microsoft Products, third party digital services and data supply companies) and supplement the information we collect with information obtained from those third party sources.
• In order to access some of our services and products, you will be asked to register with us by providing us with certain information about you which we refer to in this Privacy Policy as your Tapt Media Account (although your account may not be branded as ‘Tapt Media’ and may be branded as the radio brand or service for which you have subscribed eg “3AW” or “2GB”). As part of creating your Tapt Media Account, you may also be requested to provide questions and secret answers, which we use to help verify your identity and assist in resetting your password, as well as an alternate e-mail address. Your account may, in some cases, also be created using your log-in details to third party platform providers like Facebook or Google. By signing in on one of our digital services, you may be automatically signed into other digital services that use your Tapt Media Account.

If you do not provide and we do not collect your personal information in the ways we have described above, we may not be able to as effectively provide you with our products and/or services that you have requested.

5. Purposes of Collection, Use and Disclosure

We only use or disclose personal information for the primary purpose for which we have collected it, or for another related secondary purpose, unless you have provided your consent for us to use it for another purpose. We may use or disclose your personal information for one or more of the following primary purposes relevant to your relationship with us, including:

• Operational Delivery: To facilitate radio broadcasting, provide digital audio streams, and manage podcast distributions including, to share with any member of Tapt Media as part of our business relationship with you, or because it is in our legitimate business interests to do so, for any of these purposes.
• Participant and Audience Engagement: To allow for participation in talkback programs, to ensure the integrity of on-air discussions and to contact you if your call drops out and/or if further information is required about your call. To contact and/or communicate with you because you have requested to be part of a digital program or an on-air programme or provided content for publication on our digital services. Enable on-air presenters to appropriately address you and/or communicate with you (whether during live programming or otherwise), know the subject matter of your call, whether you’ve called previously, contact you if your call drops out and/or if further information is required about your call; enable us to prepare for programs or lifestyle stories or articles; ensure that you are qualified to participate in a program; to share your information across the Tapt Media assets and social media platforms, such as Facebook, Instagram, TikTok, YouTube and X for marketing and promotional purposes related to the programs; hare your personal information with third parties directly involved in the producing, promoting, distributing and exploitation of a program, including but not limited to, producers, contractors and within Tapt Media; provide to third party advertisers or sponsors of programs where you are providing talent services.
• Account Management and Infrastructure: To manage user accounts and maintain the security and functionality of our digital platforms. To create, register and provide access to selected services and content provided by Tapt Media. This includes the use of third-party infrastructure providers to host data and facilitate user logins.
• Advertising and Personalisation: To deliver relevant content and advertising that is personalised and customised to your interests, preferences, and experiences. We may use de-identified or aggregated data to assist our advertising partners in serving targeted advertisements.
• Recruitment: engage in recruitment purposes, where you share personal information with us as part of a job application.
• Competitions: to conduct competitions and promotions either ourselves or for selected third parties such as our sponsors or advertiser customers. When you enter a competition run by our stations, including sharing your personal information with third parties associated with the competition.;
• Marketing: To provide you with updates and information about our programs, events, and promotions, including by direct marketing to you and sending you newsletters, product surveys and special offers. You can unsubscribe from these communications at any time.
• Metadata: In many circumstances you may use our digital services without providing any personal information to us. In these instances, we will collect metadata that results from your usage of our digital services including (but not limited to) browser type and version, operating system and interface, website from which you are visiting us (referrer URL), webpage(s) you are visiting on our digital services, date and time of accessing our digital services and internet protocol (IP) address (together, “Metadata”). We use this Metadata to improve the quality and services of our digital services by analysing the usage behaviour of our users in anonymised form and to prevent fraud, misuse of our IT systems, as well as to ensure physical, IT and network security. We may also use the Metadata we collect for other purposes, including to personalise online advertising or other marketing that you receive from us. See our Tracking and Targeting Policy for further details.
• Business Functions and Administration: conduct business process functions and other administrative functions for the operation of our digital services and/or our business including to, conduct business process functions and other administrative functions for the operation of our digital services and/or our business. To conduct a credit check of your business as part of setting up a Tapt Media corporate credit account.
• Legal and Regulatory Compliance: To comply with our obligations  under applicable laws, including to investigate any complaints about or made by you or assisting the police or any regulatory body to do so, or if we have reason to suspect that you are in breach of the terms and conditions of any of our products and services or that you are or have been otherwise engaged in any unlawful or prohibited activity; to use personal information as otherwise required or permitted by any applicable law (including the Privacy Act).
• Sensitive Information: We do not generally collect sensitive information as that term is used in the Privacy Act. This term applies to information such as your racial or ethnic origin, membership of political bodies, religion or trade unions, sexual preferences or activities, state of health or medical history and criminal record. You should not disclose any sensitive information to us which is not necessary or relevant to disclose. However, in some instances, sensitive information might be disclosed during the course of your interaction with us or during the course of interaction of others acting on your behalf with us or others acting on our behalf with you – for example during a talkback radio conversation. If we hold any sensitive information about you, that information will only be used and disclosed by us if you have consented to such use and disclosure (your provision of that information will be taken to be consent but will only be used and disclosed for the purpose that it was provided by you).

We may also use or disclose your personal data where we believe, acting reasonably, that it is necessary for a legitimate business, legal or regulatory reason.

You acknowledge and agree that your personal information may be shared within Tapt Media and with the third parties referred to in this Privacy Policy for use by those third parties for the purposes disclosed in this Privacy Policy.

6. What Marketing Communications Will You Receive?

• Opting In
  In certain contexts when we collect information from you, you may be asked to “opt in” to consent to us using or disclosing your personal information. For example, you may be asked to opt-in to receive further information or communications from our advertisers and partners. We do not provide your personal information to other organisations (outside Tapt Media) for the purpose of direct marketing unless expressly authorised by you.

We may send you direct marketing communications and information about products and services across the Tapt Media that we consider may be of interest to you. These communications may be sent in various forms, including mail, telephone, SMS or email, in compliance with applicable marketing laws, such as the Spam Act 2003 (Cth). If you indicate a preference for a method of communication, we will endeavour to use that method whenever practical to do so. If you receive communications from us that you believe have been sent to you other than in accordance with this Privacy Policy, or in breach of any applicable law, please contact us Privacy Enquiry.

• Opting Out / Unsubscribing
  You will be given the opportunity to “opt out” from receiving communications from us or from third parties that send communications to you in accordance with this Privacy Policy. For example, you will be given the option to unsubscribe from newsletters, emails, SMS communications and other marketing or promotional material sent by us. Our Tracking Policy includes information about how you may opt-out of ‘interest based advertising’ (also known as ‘online behavioural advertising’ (OBA)).

If you receive communications purporting to be connected with us or our services that you believe have been sent to you other than in accordance with this Privacy Policy, or in breach of any applicable law, please contact us at Privacy Enquiry.

7. Disclosure to Third Parties and Service Providers

In the course of our operations, we may disclose your personal information to third parties. These disclosures are made for the purposes identified above and include:

• Technical Service Providers: We engage third-party providers to provide critical infrastructure, including web hosting, digital platform management, data processing, and advertising technology services. These providers act as data processors on our behalf.
• Professional Advisers: Including legal, financial, and accounting advisers.
• Promotional Partners: Third parties with whom we conduct competitions or events, where you have provided consent for such disclosure.
• General Business Functions: including with joint venture entities, partners, contractors or external service providers to fulfil any of these purposes. External service providers may include (without limitation) web hosting providers, IT systems administrators, production companies, couriers, payment processors, photographic analysers, data entry service providers, outsourcing service providers, debt collectors and professional advisers.
• Regulatory and Legal Authorities: For the purpose of complying with applicable laws, including to share your personal information with the police and/or an appropriate government or community organisation if we consider you may be at risk of causing serious harm to yourself and/or a third party/s or would otherwise benefit from being contacted by the government or community organisation in relation to mental health information and/or support.

8. Targeted Advertising and Tracking

Information about how we use targeted advertising, including how we use and track Metadata is included in our Tracking and Privacy Policy.

9. Data Security and Storage

We take all reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure.

• Security Measures: We understand that the security of your personal information is important. It is our policy to require all employees of Tapt Media to understand and take reasonable steps to keep your personal information secure and only use it in accordance with this Privacy Policy. Once collected, we may hold your personal information in a number of different formats, including (but not limited to) software programs (located both onsite and offsite, including in the cloud), databases, filing systems, in offsite backup storage and in other similar technology. We take all reasonable steps to protect your personal information (and your anonymous usage data) and to keep it secure from loss, unauthorised access, modification, disclosure, interference or other misuse and we have appropriate controls in place to limit who in the Tapt Media can view, access and/or use your personal information and anonymous usage data.
• Third-Party Hosting: Your personal information may be stored in cloud-based environments or on servers managed by our technical service providers. We also impose strict requirements of security and confidentiality on all third parties (for example, those who provide us with technology services) as to how they store, handle and deal with the personal information and anonymous usage data that we hold.
• Overseas Disclosure: We or our service providers may store or process your personal information and anonymous usage data in jurisdictions outside Australia, including but not limited to the United States, Singapore, New Zealand, China, India, Malaysia, the Philippines. Our third party contractors and service providers may perform some of their services overseas and/or we may use data hosting and cloud based IP service providers whose operations are located overseas. In all instances where this occurs, we only disclose your personal information to them and authorise them to use it in accordance with the Privacy Act and this Privacy Policy.

10. Privacy Standards for Media and Journalism

As we are in the media industry, the APPs do not apply to acts done or practices engaged in by us in the course of journalism as we are committed to other journalistic standards dealing with privacy.

In relation to our radio broadcasting activities, we are committed to complying with the standards developed by Commercial Radio Australia (CRA) , as set out in the CRA “Codes of Practice and Guidelines” which are available on the CRA website at https://cra.au/regulation-and-codes.

11. Access, Correction and Deletion of Personal Information

Access and Correction

You have the right to request access to the personal information we hold about you and to request that we correct any inaccuracies.

• Requests: To make a request, please contact us HERE.
• Verification: We may require you to verify your identity before processing your request.

We will endeavour to acknowledge your request for access within 7 business days, and to provide you with the access to which you are legally entitled within 30 days of the date of receipt of your request. We will notify you if we consider it will take longer than 30 days to provide you with access. If you seek access to records held by us which are not current records, we may need to contact you to discuss your request and it may take a longer period of time to locate these records and we may charge you an administrative fee reflecting our cost of providing access. If we are not legally required to provide access to the personal information requested and we exercise our discretion not to provide that information, we will let you know our reasons for doing so.

Account Deletion

If you are a customer of one of the services provided by Tapt Media and no longer wish to use one of our services, you can ask us to delete the personal information you provided to that service when you registered for. We will take reasonable steps to respond to your request in accordance with applicable legal requirements. If your personal information is no longer needed for any purposes that justify its retention and we are not required by law to retain it, we will do what we can to delete, destroy or permanently de-identify it.

To request the deletion of your personal information from one of our services, please contact us HERE.

We may not be able to comply with all requests, for example for legal or business reasons such as if we need to continue using the personal information for the purposes for which it was initially collected or for related business purposes, the personal information is required to comply with our legal obligations including to third parties or the courts, or for certain classes of information which cannot be deleted for technical reasons. If you ask us to delete it, you may no longer be able to access or use our services.

12. Changes to this Privacy Policy

We may, from time to time, review and update this Privacy Policy to take account of new laws, technologies and changes to our business and operations. All personal information held by us will be governed by our most recent Privacy Policy which will always be available to view on our digital services. We will try to provide you with timely notice of any material changes to this Privacy Policy and you may elect to cancel your account with us or otherwise stop using our digital services if you do not agree to them. If you continue to use our digital services after having been notified of any material changes to our Privacy Policy you are deemed to have agreed to the updated terms of our Privacy Policy.

13. Procedure for Data Breaches

We do all we reasonably can do to ensure your data is collected, used and held securely in accordance with industry standards. If at any time we become aware of unauthorised access to or disclosure of personal information held by us and we consider this is likely to result in serious harm to any individual to whom the information relates we will follow the data breach notification requirements under applicable law including to notify the individual involved and the relevant regulator.

14. EU and Californian Residents

If you are based in the European Union or California, there are specific regulations that apply in relation to the collection, processing and storing of your personal information by organisations covered by those regulations. To the extent that we are legally required to comply with those regulations in relation to any personal information and/or anonymous usage data we collect, process, disclose or store about you, we will comply with those regulations. Please note that we do not develop, target or direct our websites, products or services towards individuals (including children) situated outside Australia. Our business is targeted at individuals who are domiciled in Australia even though you are able to subscribe for our services from outside Australia. We do not knowingly collect personal information about children under 16 years of age. If you believe a child in your care has provided us with personal information or data and you would like to request us to look into removing the data from our servers, please contact us HERE.

15. Complaints and Contact Details

If you have any questions about our Privacy Policy, complaints regarding how we handle your personal information or if you would like to make an access request, please contact us by mail at:

Privacy Officer, Ground Floor, Building C, 33-35 Saunders Street, Pyrmont NSW 2009 or electronically Privacy Enquiry.

All complaints received will be assessed by our Privacy Officer and reasonable steps will be taken to remedy any valid complaint. We will endeavour to acknowledge your complaint within 5 business days and to respond to your complaint within 20 business days of receipt of the complaint by our Privacy Officer. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

Last updated: 1 May 2026