Privacy Policy
Last updated: 9 October 2026
This Privacy Policy explains how ROGEM Business Services Pty Ltd (ABN 42 624 687 814) (“we”, “us”, “our”), trading as onestopcomps (the “Platform”), collects, holds, uses and discloses personal information.
We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
If you have questions about this Policy, contact us at support@onestopcomps.com.
1. Who we are
We operate an online software platform that helps event organisers run competitions and helps performers (and their parents/guardians or studios) discover events and book entries.
We are not the organiser of individual events, and we are not the merchant of record for event entry fees paid to organisers. Organisers use Stripe Connect to accept their own payments. See our Platform Terms and Organiser Terms.
2. Kinds of personal information we collect and hold
Depending on how you use the Platform, we may collect and hold:
Account and profile information
- Name, email address, password (stored in hashed form)
- Phone number and postal address (where you provide them)
- Studio or organisation name and whether you manage group routines (consumer accounts)
- Role (for example, consumer user or organiser) and, for organisers, association with a tenant organisation
Performer information (often relating to children)
- Performer or group name, team name, date of birth, and related booking snapshots
- You (or a parent/guardian/studio account holder) provide this so organisers can run age- or category-based events
Booking and event participation information
- Entries, routines/sections selected, schedules, attendance/check-in related records, scores or critiques where the organiser uses those features, invoices, and related communications
Payment-related information
- Payment status, amounts, currency, and Stripe identifiers associated with a checkout (for example session or payment intent references)
- We do not store full card numbers or CVCs on our systems. Card payments are processed by Stripe
Organiser / business information
- Organisation name, ABN, tax settings, country, website, support contact details, logo, and Stripe connected-account identifiers and onboarding status
Technical and security information
- Device/browser information, IP address, logs, and similar data generated when you use the Platform (including for security, fraud prevention, and diagnosing faults)
- Where Cloudflare Turnstile or similar bot-protection is enabled, related verification signals may be processed
Support communications
- Messages you send to us (for example by email) and related account context needed to help you
We do not intentionally collect sensitive information as defined in the Privacy Act except where it is reasonably necessary (for example, limited health-related notes an organiser elects to collect for an event — if that occurs, it is at the organiser’s direction and for that event’s purposes). Prefer not to include sensitive information in free-text fields unless required for the event.
3. How we collect and hold personal information
We collect personal information:
- Directly from you when you register, update a profile, add performers, create or manage bookings, configure organiser settings, upload files (for example music or terms PDFs), or contact support
- From organisers when they operate events on the Platform (for example event configuration that affects your booking)
- From payment providers (Stripe), limited to payment metadata needed to confirm bookings, reconcile application fees, and provide support
- Automatically through ordinary use of the website and applications (logs, cookies/local storage needed for sessions, theme preference, and offline-capable tools such as the music centre or judging app where used)
We hold information in electronic systems operated by us and our service providers (application hosting, database, file storage such as Cloudflare R2 for music and document files, email delivery, and Stripe). Access is restricted using authentication, authorisation, and tenant-isolation controls appropriate to a multi-tenant SaaS product.
4. Purposes for which we collect, hold, use and disclose personal information
We collect, hold, use and disclose personal information to:
- Provide, operate, secure, and improve the Platform
- Create and manage accounts (including email verification and password resets)
- Enable event discovery, booking, scheduling, music handling, judging, results, and related organiser tools
- Process and confirm bookings in conjunction with Stripe Checkout / Connect
- Collect the Platform’s booking/application fee and reconcile platform revenue
- Display organiser identity and support contacts to bookers
- Communicate with you about your account, bookings, security, and service changes
- Provide customer support
- Comply with law, enforce our terms, prevent fraud/abuse, and establish, exercise or defend legal claims
- Generate per-organiser operational reporting (not cross-tenant customer analytics for our own marketing)
Stripe Connect and organiser customers
When an organiser accepts payment via Stripe Connect direct charges, the organiser is the merchant of record for the entry fee. End-customers of that payment are the organiser’s customers.
As a Connect platform operator we may be able to see transaction-related information on connected accounts (for example amounts, customer name/email associated with the payment, payment status, and dispute status) so we can:
- operate checkout and booking confirmation
- reconcile application fees
- provide support
- manage platform risk and integrity
We process that information only to operate the Platform for those purposes. We do not use organiser-customer payment data for the Platform’s own marketing, and we do not sell that data. We do not build platform-level reports that aggregate end-customer personal information across organisers for analytics or advertising.
Organisers remain responsible for their own compliance with privacy and consumer laws in how they run events and handle their customers.
Disclosure to third parties
We may disclose personal information to:
- Stripe — payment processing and Connect
- Hosting, storage, email, and security providers who process data on our instructions to run the Platform
- Organisers — information reasonably necessary for the event and booking you make with them (they are independent controllers/businesses for their event relationship with you)
- Professional advisers (for example lawyers, accountants) under confidentiality where required
- Regulators, courts, or law enforcement where required or authorised by law
5. Overseas disclosure
Some of our service providers are located overseas or may store or access data from overseas. In particular:
- Stripe commonly processes payment data in the United States and other countries where Stripe operates
- Cloudflare (including R2 object storage) may process data in multiple regions
- Application hosting and related infrastructure providers may process data in Australia and/or other countries where those providers operate
Where we disclose personal information to an overseas recipient, we take steps we consider reasonable in the circumstances to ensure the information is handled in a way that is consistent with the APPs, noting that overseas providers are also bound by their own contracts and applicable laws.
6. Access and correction
You may request access to the personal information we hold about you, and request correction if it is inaccurate, out of date, incomplete, irrelevant or misleading.
Many account and performer details can be reviewed and updated by signing in to the Platform. For other requests, email support@onestopcomps.com.
We will respond within a reasonable period. If we refuse a request in whole or in part, we will tell you why (unless it is unreasonable to do so) and how you can complain.
7. Complaints
If you believe we have breached the APPs or mishandled your personal information:
- Email support@onestopcomps.com with details of your complaint
- We will investigate and respond within a reasonable time
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):
- Website: https://www.oaic.gov.au
- Phone: 1300 363 992
8. Children and performer data
The Platform is used to book competitions that often involve children. Performer personal information (including date of birth) is provided by an adult account holder (parent, guardian, or studio). Account holders must only submit information they are authorised to provide, and must keep it accurate.
We treat performer information as personal information and apply the safeguards described in this Policy. Organisers receive the performer information needed to administer their events.
9. Retention
We retain personal information for as long as needed to provide the Platform, meet legal, accounting, tax, and dispute-related obligations, and maintain business records (including invoices and payment confirmation records). When information is no longer required, we take reasonable steps to destroy or de-identify it, subject to backups and legal holds.
10. Security
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. Measures include encrypted transport (HTTPS), hashed passwords, access controls, tenant isolation in application queries, and restricting production secrets. No method of transmission or storage is completely secure; please use a strong unique password and protect your login.
11. Links and organiser sites
The Platform may link to organiser websites, terms PDFs, or third-party services. Those sites have their own privacy practices. We are not responsible for their content or privacy handling.
12. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date will change when we do. Continued use of the Platform after an update constitutes notice of the revised Policy where permitted by law. Material changes may also be communicated by email or in-product notice where appropriate.
13. Contact us
ROGEM Business Services Pty Ltd
ABN 42 624 687 814
Email: support@onestopcomps.com
Governing operations: Australia (Queensland).