Brolly Consent Management

Introduction to the Consumer Data Right (CDR)

The Consumer Data Right (CDR) regulates the collection and handling of CDR data in line with privacy safeguards and rules that:

• Ensure your data is managed securely
• Provide you with control over how your data is shared and used

Accredited Data Recipients (ADRs)

An Accredited Data Recipient (ADR) is an organisation approved under the CDR framework to receive and manage consumer data securely. ADRs are required to follow strict privacy and security rules, ensuring consumer data is used only with consent. ADRs and ADR representatives or partners are expected to:

• Transparently disclose how data is used
• Ensure secure storage and transfer of consumer data
• Implement privacy safeguards to protect user consent

Key benefits for users

• Choice and control: You decide what data to share, how it is used, and who can access it.
• Manage consent: You can view, modify, or revoke consents at any time.
• Data deletion requests: You can request data deletion or de-identification.

Data usage under CDR

Data collected under the CDR framework can be used for:

• Personalised services: Tailoring recommendations to your activities.
• Operational purposes: Preventing fraud, detecting abuse, and generating analytical insights using de-identified data.
• Communication: Sending updates and notifications aligned with your preferences.

Brolly transparently discloses the specific purposes for which we will use the data we collect from you and only requests the minimum data necessary to fulfil those purposes.

Data security requirements

Data security is a core element of CDR compliance. Data must be managed securely through strict protocols, including:

• Storage: Data must be securely stored in Australia only.
• Encryption: Encryption of data in transit and at rest.
• Access control: Access restricted to authorised personnel only.
• Audits: Regular audits to verify adherence to security practices.

Methods of managing consent

When you give consent, you remain in control. You can easily manage your consent at any time — whether that means reviewing, updating, or withdrawing it — using any of the following methods:

• Directly through the Brolly app. This is the easiest and preferred method.
• By contacting our support team via email at support@thebrolly.app.
• By calling our support team during business hours.

Data retention and de-identification