Parallel

Privacy Policy

Parallel Platforms Pty Ltd

ABN 34 695 875 908

Effective Date: June 2026 | Last updated: October 2026 | Version 1.2


1. About This Policy

Parallel Platforms Pty Ltd (ABN 34 695 875 908) (“we”, “us”, “our”) is an Australian-incorporated advertising technology company. Our website is helloparallel.com. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our business operations in Australia and the United Kingdom.

We are committed to complying with:

  • The Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs); and
  • The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018) for individuals located in the United Kingdom.

This Policy does not apply to our AI-generated digital twin platform, which operates on de-identified data that does not relate to or identify any individual (see Section 9). It does apply to people who take part in our research studies (see Section 10).

2. Who We Are

Australia

Parallel Platforms Pty Ltd is the entity responsible for personal information in Australia under the Privacy Act 1988 (Cth). Our registered office address is:

Level 2, 135–153 New South Head Road
Edgecliff NSW 2027
Australia

United Kingdom

For the purposes of the UK GDPR, Parallel Platforms Pty Ltd acts as a data controller in respect of personal information processed in connection with UK-based clients, partners, and contacts.

As we are an Australian company without a UK establishment, we have appointed a UK Representative as required by Article 27 of the UK GDPR:

UK Representative (Article 27 UK GDPR)
Ben Dimond, Head of UK Sales
Parallel Platforms Pty Ltd
Email: privacy@helloparallel.com

The UK Representative can be contacted by UK individuals or the Information Commissioner’s Office (ICO) in relation to matters concerning the processing of personal data under the UK GDPR.

3. What Personal Information We Collect

Our core advertising technology platform does not process consumer personal information. We collect limited personal information only in connection with our commercial and administrative operations, from:

  • Representatives of media agencies and advertisers who enter into contracts with us;
  • Individuals who contact us via our website or other business channels; and
  • Our suppliers and service providers.

The types of personal information we may collect include:

  • Name, job title, and employer organisation;
  • Business email address and telephone number;
  • Billing and payment details (including business address and payment account information); and
  • Correspondence and communications.

We do not knowingly collect sensitive information (as defined under the Privacy Act) or special category data (as defined under the UK GDPR). We do not collect personal information from consumers or end-users of advertising campaigns. The one exception is people who choose to take part in one of our research studies, whose information is described in Section 10.

4. How We Collect Personal Information

We collect personal information directly from individuals when they:

  • Enter into or negotiate a contract or service agreement with us;
  • Contact us via our website (helloparallel.com), email, or telephone; or
  • Interact with us at industry events or through professional networks.

We may also receive personal information from third parties such as referral partners or publicly available professional directories where relevant to a business relationship.

5. Why We Collect and Use Personal Information

We collect and use personal information only for the following purposes:

  • Entering into and performing contracts with media agencies, advertisers, and service providers;
  • Invoicing and processing payments;
  • Communicating about our services, proposals, and business matters;
  • Complying with legal and regulatory obligations; and
  • Managing our business relationships.

We will not use personal information for any purpose incompatible with these purposes without your consent or as otherwise permitted by law.

Legal Bases (UK GDPR)

For UK individuals, we rely on the following legal bases under Article 6 UK GDPR:

  • Contract (Article 6(1)(b)): processing is necessary to perform a contract to which you are a party, or to take steps at your request before entering a contract;
  • Legal obligation (Article 6(1)(c)): processing is necessary to comply with a legal obligation to which we are subject; and
  • Legitimate interests (Article 6(1)(f)): processing is necessary for our legitimate business interests, such as managing business relationships and communications, where not overridden by your interests or rights.

6. Disclosure of Personal Information

We may disclose personal information to:

  • Our technology and service providers, including Google LLC in connection with the Google Ads platform used to run media activity on behalf of clients (governed by Google’s data processing terms);
  • Professional advisors such as lawyers and accountants;
  • Financial institutions for payment processing; and
  • Regulatory and law enforcement authorities where required by law.

We do not sell, rent, or trade personal information to third parties for marketing purposes.

7. International Transfers

As an Australian company serving UK clients and using global technology platforms (including Google Ads), personal information may be transferred to or accessed from countries outside Australia or the UK. Where personal information of UK individuals is transferred internationally, we ensure appropriate safeguards are in place consistent with UK GDPR requirements, such as adequacy regulations or the UK International Data Transfer Agreement (IDTA).

8. Storage and Security

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification, or disclosure. These measures include:

  • Password protection and access controls on business systems;
  • Secure email and communication practices; and
  • Use of reputable cloud service providers with appropriate security standards.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Business contract records are generally retained for seven years following contract expiry to satisfy legal and tax obligations. Research study data is kept for the period set out in Section 10.

9. Our AI Digital Twin Platform

Our platform creates AI-generated consumer personas (“digital twins”) to simulate how consumers respond to advertising. These models are built on:

  • Publicly available sources such as census and aggregate demographic data;
  • Anonymised, de-identified data sets obtained from third-party data providers; and
  • Combinations of the above to build statistically representative consumer models.

None of this data contains, or is capable of identifying, any individual. We do not attempt to re-identify individuals from any data source, and we contractually require third-party data providers to confirm that their data has been lawfully collected and anonymised in accordance with applicable privacy laws. Digital twins are statistical models and are not linked to any real person. The one exception is research study data (see Section 10). It is held under a random code, is not used to identify anyone, and is used only to test and improve our models.

We do not receive personal data from our clients relating to consumers as part of our platform service.

YouTube API Services

Our platform uses YouTube API Services to build and maintain a catalogue of publicly available YouTube content metadata (video and channel titles, descriptions, categories, and engagement statistics) for advertising suitability and media-planning analysis. By using our services, you also agree to the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy.

We do not use the YouTube API to access, collect, or store any YouTube user data. Our use of the YouTube API is limited to public content metadata via API key — we do not request authorised access to any YouTube account or offer YouTube sign-in. Separately, people who take part in our research studies may choose to share their online viewing history with us directly. That history does not come from the YouTube API and is covered by Section 10.

Data refresh and deletion. Stored YouTube API data is refreshed or deleted at least every 30 days in accordance with the YouTube API Services Developer Policies. Content metadata that can no longer be retrieved from the YouTube API is deleted from our systems. To request removal of your channel or content from our catalogue, contact us at the address in Section 14.

10. Research Studies

From time to time we run research studies in which adults recruited through a research panel provider (currently Prolific) answer questions and, if they choose, share their online viewing history. This section explains what we collect from those participants. It applies to them instead of Section 3 where the two differ.

What we collect

  • Answers to the study’s questions, including how participants rated videos they had watched and what they think of some brands.
  • Online viewing history. If they choose, participants share a list of videos and ads they have watched (video identifier, title, channel and time). Participants see the list on screen before it is sent and can remove anything they would rather not share. Removed items are not sent: we record only that something was removed, never what it was.
  • Details held by the panel provider. The provider shares details participants have already given it, such as age, sex, where they live and their work. We link them to the answers under a random code.
  • Technical details of the session: the type of browser and the network the connection comes from (not the full IP address), used only to check that later requests come from the same session.

We do not ask for names, email addresses, contact details, dates of birth, full postcodes or employer details. Answers and the viewing history are stored under a random code. The panel provider’s participant identifier is kept in a separate store, so that we can find and delete a person’s data if they ask.

Why, and our legal basis

We use this information to test whether advertising works better in front of some videos than others, and to match participants to the digital twins described in Section 9 and to test and improve those models. We rely on the participant’s consent (Article 6(1)(a) UK GDPR), given on screen before the study begins and again before viewing history is shared. A participant can withdraw consent at any time. A participant’s viewing history can reveal sensitive matters, so we ask for it only with a separate consent and let people remove entries first. We do not use it to identify or contact anyone, and we do not attempt to re-identify the people behind the random codes.

Who sees it

The panel provider recruits and pays participants and does not receive their answers or viewing history. We store research data with Google Cloud in London, United Kingdom. For participants in Australia, the link between their random code and the panel provider’s identifier is held in Australia. Section 7 applies to any other transfer. We do not sell this information.

How long we keep it

We keep research study data, including the separate store linking the random code to the panel provider’s identifier, for 24 months after the study and then delete it.

Deleting your data

A participant can ask us to delete everything we hold about them at any time. The easiest way is to send us a message through the panel provider’s own messaging system, quoting the study name. They can also email survey@helloparallel.com, saying which study they took part in and their panel provider identifier, so we can find their data. The rights in Section 12 apply.

11. Website and Cookies

Our website (helloparallel.com) uses cookies and similar technologies. Please refer to our Cookie Policy for full details of the cookies we use and how to manage your preferences. Any personal information submitted through the website will be handled in accordance with this Privacy Policy.

12. Your Privacy Rights

Australian Individuals

Under the Privacy Act, you have the right to:

  • Request access to the personal information we hold about you;
  • Request correction of inaccurate or out-of-date information; and
  • Make a complaint if you believe we have mishandled your personal information.

UK Individuals

Under the UK GDPR, you have the following rights:

  • Right of access to your personal data;
  • Right to rectification of inaccurate data;
  • Right to erasure in certain circumstances;
  • Right to restriction of processing;
  • Right to data portability;
  • Right to object to processing based on legitimate interests; and
  • Rights relating to automated decision-making (not applicable to our current operations).

To exercise any of these rights, please contact us using the details in Section 14. We will respond within the timeframes required by applicable law (30 days for UK GDPR requests; a reasonable period under the Privacy Act).

13. Complaints

Australia

If you believe we have breached the Australian Privacy Principles, please contact us in the first instance. If your complaint is not resolved to your satisfaction, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

United Kingdom

If you are a UK individual and believe we have not handled your personal data in accordance with the UK GDPR, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

14. Contact Us

For any privacy-related questions, access requests, or complaints, please contact our Privacy Officer:

Privacy Officer
Scot Liddell
Parallel Platforms Pty Ltd
Level 2, 135–153 New South Head Road
Edgecliff NSW 2027
Australia
Email: privacy@helloparallel.com
Website: helloparallel.com

For research studies, please use the panel provider’s messaging system where you can, or email survey@helloparallel.com. We will acknowledge your request promptly and respond within the timeframe required by applicable law.

15. Updates to This Policy

We may update this Privacy Policy from time to time. The current version will be published on our website (helloparallel.com) with the effective date noted at the top. We will notify affected individuals of material changes where practicable.