Privacy Policies
EngageRM Platform Privacy Notice
Last updated: 10 September 2026
Version: 1.0
1. Purpose of this Notice
This Privacy Notice explains how EngageRM Pty Ltd (“EngageRM”, “we”,“us”) processes personal information when providing and operating customer relationship management (CRM) and data analytics services on behalf of anorganisation (the “Customer”), such as a sporting organisation or venue.
EngageRM is a wholly-owned subsidiary of EngageRM Technologies Pty Ltd, the same corporate group as Power'd Pty Ltd. EngageRM and Power'd Pty Ltd are operated as separate companies, and each is separately responsible for its own role and obligations described in this Notice and in Power'd Pty Ltd's own Privacy Notice, where applicable.
EngageRM builds and configures its CRM application within the Customer's own Microsoft Dataverse/Dynamics 365 tenant, and does not independently determine how personal information is used. The Customer is responsible for determining what personal information is collected, why it is collected, and how it is used and disclosed. Please refer to the Customer's Privacy Policy forinformation about those matters.
2. Legal Basis for Processing
EngageRM processes personal data solely on behalf of the Customer. The legal basis for processing is determined by the Customer and may include performance of a contract, compliance with legal obligations, legitimate interest, or consent, as identified in the Customer's Privacy Notice.
3. Our Role
EngageRM acts as a service provider / data processor, and processes personal information solely on the instructions of the Customer and inaccordance with applicable data processing agreements.
EngageRM's CRM application is built and hosted within the Customer's own Microsoft tenant. This means personal information processed by EngageRM's CRM application remains within infrastructure controlled by the Customer, rather than infrastructure operated independently by EngageRM.
EngageRM does not sell personal information and does not use personal information for independent marketing, advertising, or profiling purposes.
4. Personal Information We Process
Depending on how the Customer has configured its CRM environment,EngageRM's application may process personal information including:
- identity and contact details (such as nameand email address),
- membership, hospitality and booking records,including catering or dietary preferences collected for logistics purposes,
- account and transaction history relevant tothe Customer's membership or hospitality program,
- technical and operational data (includingauthentication and system logs),
- information synchronised with digital portalsor applications operated on the Customer's behalf, including by other serviceproviders such as Power'd Pty Ltd.
EngageRM processes only the personal information reasonably necessary toprovide its CRM and data analytics services.
5. Payments
EngageRM does not process payment transactions. Where a Customer's digital portal or application enables payments, these are processed separately by the relevant platform operator (such as Power'd Pty Ltd) and its authorised third-party payment processor (such as Stripe or other third party payment gateways).
6. Purpose of Processing
EngageRM processes personal information solely to:
- operate and maintain the CRM and dataanalytics services,
- build and maintain records, assets andconfigurations (such as membership benefits or hospitality options) used bydigital portals or applications operated on the Customer's behalf,
- synchronise relevant data between the CRM andsuch digital portals or applications,
- provide technical support and systemadministration,
- ensure platform security,
- comply with legal and regulatory obligations.
7. Automated Decision-Making
EngageRM does not use personal information for automated decision-making or profiling that produces legal or similarly significant effects onindividuals.
8. Disclosure of Personal Information
EngageRM may disclose personal information only where necessary to the Customer, other authorised service providers engaged by the Customer to operate related digital portals or applications (such as Power'd Pty Ltd), and providers of technical support services.
For clarity, the Customer's own Microsoft tenant infrastructure(including Dataverse and Dynamics 365) is not engaged by EngageRM as asubprocessor, as it is owned and controlled by the Customer.
EngageRM does not disclose personal information for independentmarketing or advertising purposes.
9. Overseas Processing
Personal information processed by EngageRM's CRM application isprimarily held within the Customer's own Microsoft tenant, in the regionconfigured by the Customer. EngageRM may also access personal information fromAustralia in the course of providing support and administration services.
Where personal data is transferred outside the UK or EEA, EngageRM andthe Customer implement appropriate safeguards, including Standard Contractual Clauses, International Data Transfer Agreements, adequacy decisions or equivalent transfer mechanisms.
10. Data Security and Retention
EngageRM implements reasonable administrative, technical and organisational safeguards to protect personal information.
Personal information is retained only for so long as required to provide CRM and data analytics services, to comply with legal obligations or resolvedisputes, or as instructed by the Customer, unless a longer retention period is required by law.
On termination of the relevant Customer engagement, personal informationwill be deleted or returned in accordance with the Customer's instructions andthe applicable data processing agreement.
11. Privacy Rights
Individuals may have rights to access, rectification, erasure,restriction, portability, objection, and complaint to a supervisory authority.
Any requests relating to the aforementioned rights in relation to personal information should be directed to the Customer, whose Privacy Policygoverns those rights.
Where EngageRM receives a request directly, it will refer the request tothe Customer or assist as required under its contractual obligations.
12. Subprocessors
A current list of subprocessors is available upon request.
13. Contact
For questions about EngageRM's role as a CRM service provider, pleas econtact:
Email: security@engagerm.com
Company: EngageRM Pty Ltd
Portal Note:
EngageRM's CRM application may synchronise data with a separate digital portal operated by Power'd Pty Ltd on the Customer's behalf. Personal information handled by that portal is described in Power'd Pty Ltd's own Privacy Notice.
EngageRM acts solely as a service provider and data processor for its CRM application.
Power'd Platform Privacy Notice
Lastupdated: 10 September 2026
Version: 2.1
1. Purpose of this Notice
This Privacy Notice explains how Power'd Pty Ltd (ACN 684 073 970)(“Power'd”, “we”, “us”) processes personal information when providing and operating digital transaction and engagement platforms on behalf of an organisation (the “Platform Owner”), such as a sporting organisation or venue.
Power'd is a wholly-owned subsidiary of EngageRM Technologies Pty Ltd, the same corporate group as EngageRM Pty Ltd. Power'd and EngageRM Pty Ltd are operated as separate companies, and each is separately responsible for its own role and obligations described in this Notice and in EngageRM Pty Ltd's own Privacy Notice, where applicable.
Power'd provides the technical platform infrastructure only. Power'd does not control or independently determine how personal information is used.
The Platform Owner is responsible for determining what personal information is collected, why it is collected, and how it is used and disclosed. Please refer to the Platform Owner's Privacy Policy for informationabout those matters.
2. Legal Basis for Processing
Power'd processes personal data solely on behalf of the Platform Owner.The legal basis for processing is determined by the Platform Owner and mayinclude performance of a contract, compliance with legal obligations,legitimate interest, or consent, as identified in the Platform Owner's PrivacyNotice.
3. Our Role
When operating the platform, Power'd acts as a service provider / dataprocessor, and processes personal information solely on the instructions of thePlatform Owner and in accordance with applicable data processing agreements.
Power'd does not sell personal information and does not use personalinformation for independent marketing, advertising, or profiling purposes.
4. Personal Information We Process
Depending on how the Platform Owner has configured the platform, Power'd may process personal information including:
- identity and contact details (such as name and email address),
- account, transaction, booking or membership records,
- technical and operational data (including IP address, device information, security logs),
- media or content uploaded by or on behalf of the Platform Owner,
- payment-related references necessary to facilitate transactions.
Power'd processes only the personal information reasonably necessary to operate the platform.
5. Payments
Payments made through the platform are processed by authorisedthird-party payment processors (such as Stripe or other third party payment gateways).
Power'd facilitates the technical integration of payment services, doesnot store payment card details, and does not determine payment processing purposes. Payment processors handle personal information in accordance withtheir own privacy policies.
6. Purpose of Processing
Power'd processes personal information solely to:
- operate and maintain the platform,
- enable transactions, registrations or bookings initiated by the Platform Owner,
- provide technical support and system administration,
- ensure platform security and fraud prevention,
- comply with legal and regulatory obligations,
- maintain reconciliations of transactions and purchases.
7. Automated Decision-Making
Power'd does not use personal information for automated decision-making or profiling that produces legal or similarly significant effects on individuals.
8. Disclosure of Personal Information
Power'd may disclose personal information only where necessary to thePlatform Owner, authorised infrastructure and hosting providers, and paymentprocessors engaged by the Platform Owner.
Power'd does not disclose personal information for independent marketingor advertising purposes.
9. Overseas Processing
Power'd uses approved subprocessors located in Australia, the United Kingdom, the United States and the European Economic Area.
Where personal data is transferred outside the UK or EEA, Power'd and the Platform Owner implement appropriate safeguards, including Standard Contractual Clauses, International Data Transfer Agreements, adequacy decisions or equivalent transfer mechanisms.
10. Data Security and Retention
Power'd implements reasonable administrative, technical andorganisational safeguards to protect personal information.
Personal information is retained only for so long as required to provideplatform services, to comply with legal obligations or resolve disputes, or as instructed by the Platform Owner, unless a longer retention period is required by law.
On termination of the relevant Platform Owner's engagement with Power'd, personal information will be deleted or returned in accordance with the Platform Owner's instructions and the applicable data processing agreement.
11. Privacy Rights
Individuals may have rights to access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority.
Any requests relating to the aforementioned rights in relation to personal information should be directed to the Platform Owner, whose Privacy Policy governs those rights.
Where Power'd receives a request directly, it will refer the request tothe Platform Owner or assist as required under its contractual obligations.
12. Subprocessors
A current list of subprocessors is available upon request.
13. Contact
For questions about Power'd's role as a platform service provider, please contact:
Email:security@engagerm.com
Company:Power'd Pty Ltd
Portal Note:
This platform is operated by Power'd on behalf of the Platform Owner.
Personal information is handled in accordance with the Platform Owner's Privacy Policy. Power'd acts solely as a service provider and data processor.