MALLincome Privacy Policy
Last updated: 29 September 2026
1. About this policy
This policy explains how National Corporate Services Pty Ltd trading as Mall Income (ABN 19 102 418 600) ("MALLincome", "we", "us") handles your personal information, and how we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
MALLincome provides a platform that shopping centre owners and managing agents ("centre operators") use to manage short-term bookings, casual leasing, vacant shops and ancillary income such as vending and advertising. When you register or make a booking, we handle your personal information both for our own purposes and on behalf of the centre operator whose space you book.
2. What personal information we collect
Depending on how you use the platform, we may collect:
- your name, email address and phone number;
- your business or company name and ABN;
- your address;
- details of your bookings (the sites and dates, the permitted use, and the amounts);
- payment references and payment status; and
- a record of your acceptance of a licence agreement, including your name, the date and time, and the IP address from which you signed.
We do not collect or store your card details. Card payments are handled by our payment processor, Stripe, and we receive only a reference and the payment status.
3. How we collect it
We collect personal information:
- directly from you, when you register, make a booking, or contact us;
- from a centre operator, where they provide us with details of their existing casual-leasing customers so that those customers do not have to re-register (in that case we will tell the individual, when we first contact them, that their details were provided to us by the centre operator); and
- automatically, as you use the platform (for example, booking and payment records).
4. Why we collect and use it
We use your personal information to:
- create and manage your account;
- manage your bookings and issue licence agreements and tax invoices;
- process and track payments and send you receipts;
- communicate with you about your bookings and account; and
- operate, support and improve the platform.
With your consent or where you would reasonably expect it, and always with a way to opt out, we may also send you marketing about relevant offers. You can opt out of marketing at any time using the unsubscribe link in the message or by contacting us.
5. Who we disclose it to
We may disclose your personal information to:
- the centre operator whose space you book, so they can manage the booking and their centre;
- our payment processor (Stripe), to process card payments;
- our email delivery provider, to send you booking and account emails;
- our hosting and technology providers, who help us run the platform; and
- others where you agree, or where we are required or authorised by law.
We do not sell your personal information.
6. Registering interest in a location
If you search for space in an area where no centre is currently available, you can ask to be notified when one becomes available. When you do, we collect your email address, your name if you choose to give it, the location you searched and details of your search.
Our platform is used by shopping centre owners and managers ("operators"), often on websites carrying their own brand. If you register interest on an operator's website, we collect your details on behalf of that operator and make them available to that operator so they can contact you about available space. That operator handles your information in line with its own privacy policy.
If you register interest on mallincome.com or casuallease.com.au, your details are held by MALLincome. We may use them to tell you about space in your requested area and may pass them to an operator with space in that area so that operator can contact you.
We keep registrations until you ask us to remove them. You can ask to be removed at any time by using the unsubscribe option in any message you receive, or by emailing privacy@mallincome.com.
7. Overseas disclosure
Our platform data is hosted in Australia. However, some of the service providers we use may handle your information overseas. In particular, our payment processor (Stripe) and our email provider may process information in the United States. Where we disclose information overseas, we take reasonable steps to ensure it is handled consistently with the APPs.
8. How we hold and protect it
We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access, including hosting in a secured Australian environment, encryption, access controls that limit each user to their own data, and authenticated email. No system is completely secure, but we work to protect your information and to respond quickly if a problem occurs.
9. How long we keep it
We keep your personal information for as long as it is needed to provide the service, which is generally for the duration of our agreement with the centre operator you deal with, because your booking records are needed to manage the ongoing relationship. Where our agreement with a centre operator ends, that operator's data (including related customer records) may be deleted within a period after termination. We may keep some information longer where the law requires it (for example, tax and financial records).
10. Accessing and correcting your information
You can ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing privacy@mallincome.com. We will respond within a reasonable time (usually within 30 days). There is no charge to ask, though a reasonable cost may apply to providing access in some cases. If we cannot give access or make a correction, we will explain why.
11. Complaints
If you have a concern about how we have handled your personal information, please email privacy@mallincome.com and we will work to resolve it. If you are not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
12. Dealing with us anonymously
Where it is lawful and practicable, you can deal with us without identifying yourself. In most cases, though, we need your identity to set up an account, form a licence agreement, and issue a valid tax invoice, so anonymous bookings are generally not possible.
13. Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with the date it was last updated shown at the top.
14. Contact us
National Corporate Services Pty Ltd trading as Mall Income
ABN 19 102 418 600
Email: privacy@mallincome.com