Privacy Policy

Last updated: 8 June 2026

This policy explains how we handle personal information collected through the Duet website and early-access waitlist. Duet is in development and not yet available. When we launch services that access banking data through the Consumer Data Right (CDR), additional privacy protections and a separate CDR policy will apply; this policy currently covers only our website and waitlist.

This Privacy Policy describes how Callum Chisholm Newson-Brown trading as Duet Money Australia (ABN 60 849 134 683) ("Duet", "we", "us" or "our") collects, uses, holds and discloses your personal information, and how we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We are committed to protecting your privacy and being open about how we handle your information.

1. What personal information we collect

Through this website and our early-access waitlist, we collect:

Your email address, which you provide when you join the waitlist.
Limited technical information that is collected automatically when you visit the site, such as your IP address, browser type and pages visited, through our hosting provider's standard server logs.

We do not ask for, and you should not send us, sensitive information (such as financial account details) through this website at this stage.

2. How we collect your information

We collect your email address directly from you when you submit it through a form on this site. Technical information is collected automatically by our website hosting provider when you access the site. We only collect personal information by lawful and fair means.

3. Why we collect and use your information

We collect and use your personal information to:

add you to our early-access waitlist;
send you updates about Duet's development, early access and launch;
respond to your enquiries; and
understand and improve how our website is used.

We rely on your consent, given when you join the waitlist, to send you these communications. We will not use your information for any unrelated purpose without your consent. We do not sell your personal information.

4. Who we disclose your information to

We disclose your personal information to service providers who help us operate the website and waitlist, including:

Brevo (operated by Sendinblue SAS, France), our email and waitlist provider, which stores and processes the email addresses you submit; and
our website hosting provider, Amazon Web Services (AWS), which hosts the site and maintains server logs.

We may also disclose personal information where required or authorised by law. We do not otherwise disclose your information to third parties without your consent.

5. Overseas disclosure

Some of our service providers store and process personal information outside Australia. In particular, Brevo (Sendinblue SAS) may store your email address on servers located in the European Union. Before disclosing personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, and we choose providers that maintain recognised data-protection standards.

6. Direct marketing and how to opt out

Our emails to you are a form of direct marketing, sent with your consent. Every email we send includes an unsubscribe link, and you can opt out at any time by using that link or by contacting us. Once you unsubscribe, we will stop sending you marketing emails. We handle marketing communications consistently with the Australian Privacy Principles and the Spam Act 2003 (Cth).

7. Cookies and analytics

This website does not currently use tracking or advertising cookies. If we introduce analytics in the future, we will update this policy to explain what is collected and how you can opt out.

8. How we store and protect your information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Our providers (such as Brevo) maintain their own security measures. We keep your information only for as long as it is needed for the purposes described above. If you ask us to delete your information, or once it is no longer needed, we will take reasonable steps to delete or de-identify it.

9. Accessing and correcting your information

You may ask us to access the personal information we hold about you, or to correct it if it is inaccurate, out of date or incomplete. To do so, contact us using the details below. We will respond within a reasonable period. There is normally no charge to make a request, though we may need to verify your identity first.

10. Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first using the details below, and we will aim to resolve it. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Children

Duet is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the "last updated" date shown above.

13. Contact us

For any privacy question, request or complaint, contact:

Callum Chisholm Newson-Brown trading as Duet Money Australia
Email: callum@duetmoney.com.au
Postal address: 60 Brougham Street, Potts Point, NSW 2011, Australia