Privacy Policy

1. Who we are

This policy is issued by Victoria Peak Litigation Funding (Australia) Pty Ltd ("VPLF", "we", "us"). Formal entity details (ACN/ABN and registered address) to be confirmed before go-live. We are a prospective litigation funder. We are not a law firm.

This policy explains how we intend to handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), including APPs 1, 3, 5, 6, 8, 11, 12 and 13. We do not claim compliance until our practices have been independently verified.

2. What we collect (APP 3)

We collect only what is reasonably necessary for the purposes below:

• your name and contact details (email, phone, state and postcode);
• business details where relevant (business name and sector);
• Microsoft 365 subscription details and affected services;
• a description of how the outage affected you, including dates and times;
• proposed loss categories and estimated loss ranges; and
• documents you choose to upload as evidence (optional).

We do not ask for sensitive information (such as health information) at this initial stage. Please do not send medical records, payment card numbers, tax file numbers, government identifiers, or your customers' personal information. Redact these where possible.

3. Why we collect it and how we use it (APP 6)

• to investigate the feasibility of a potential Australian class action concerning the Microsoft 365 outage commencing 12 November 2026;
• to evaluate whether funding such a claim is commercially feasible;
• to investigate potential representative claims;
• to contact you about your registration and the investigation; and
• to disclose relevant information and documents in confidence to one or more independent Australian law firms (including potential retained firms), solely so they can evaluate, advise on and potentially advance claims or proceedings, subject to their legal and confidentiality obligations.

4. Who we may share it with

• independent Australian law firms, as described above (with your consent);
• professional advisers where strictly necessary, under confidentiality obligations;
• IT, hosting and storage providers that help us run this service, under confidentiality and security obligations; and
• others where required or authorised by law.

We will not sell your information, use it for unrelated marketing, or routinely disclose it to Microsoft. If proceedings are commenced, information may later need to be disclosed in the litigation or to other parties, where lawful. We will notify you as appropriate.

A law firm that evaluates potential claims may handle your information as an independent organisation under its own privacy obligations. It may contact you directly only with your consent. Registering does not make you a client of any law firm and does not create a solicitor-client relationship.

5. Overseas recipients (APP 8)

We intend to host the registration database in Sydney, Australia. However, a Sydney hosting region does not guarantee that every service provider (for example email, security or backup providers) stores or accesses data only in Australia. Before registration opens, we will identify the countries where any service provider may hold or access your information and list them here.

Overseas recipient countries: to be determined and disclosed before registration opens.

6. How we hold and secure it (APP 11)

• information stored in a private database with access restricted to authorised staff;
• documents kept in private storage with no publicly accessible links;
• administrator sign-in protected by multi-factor authentication;
• records kept of who views or exports information; and
• encryption in transit and at rest provided by our hosting provider.

These measures are planned and will be verified before registration opens. No method of storage or transmission is completely secure.

7. How long we keep it

We keep your information until the investigation, and any resulting claim or proceeding, is complete. After that we securely delete or de-identify it in line with a retention policy that will be finalised after legal review, unless the law requires us to keep it longer. We have not yet set a fixed retention period.

8. Your rights (APPs 12 and 13)

You may ask to access or correct your information, withdraw consent to further sharing, or ask us to remove your registration. We will respond within a reasonable time, usually 30 days. We may need to keep some information where the law requires it or where it has already been provided to a law firm. See Security, Access & FAQ for how to make a request.

9. Cookies and analytics

This site uses only what is needed to run it. Our hosting provider records basic visit statistics (pages viewed, country, browser and device type) without cookies, without storing anything on your device and without identifying you. We will not add optional analytics or advertising cookies without first asking for your consent.

10. Complaints

If you have a privacy complaint, contact us first. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Contact

Email: jonathan@vplf.com.au

Interim contact. A dedicated address (privacy@vplf.com.au) is TO BE VERIFIED.