Citrus Media
Effective date: 2 November 2026
Last updated: 2 November 2026

1. Who we are

This policy explains how Citrus Media Digital Pty Ltd (ABN 44 140 352 254, ACN 140 352 254), trading as Citrus Media (“Citrus”, “we”, “us” or “our”), handles personal information.

It covers all our brands, websites, apps, newsletters, magazines, events and competitions, including:

  • OverSixty (oversixty.com.au)
  • Australian Motorcycle News – AMCN (amcn.com.au)
  • Cyclist Australia (cyclist.com.au)
  • The Sydney Guide, English edition (thesydneyguide.com.au) and Chinese edition (print and social media)
  • The Melbourne Guide (print and social media)
  • Market Magazine (marketmagazine.com.au)
  • Citrus Media (citrusmedia.com.au) and our subscription site (subscribe.citrusmedia.com.au)

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). When we send you marketing emails we also follow the Spam Act 2003 (Cth).

Contact our Privacy Officer
James Flynn, Privacy Officer, Citrus Media
PO Box 222, Earlwood NSW 2206
Email: privacy@citrusmedia.com.au

2. The short version

  • We collect what you give us (like your email when you sign up) and what our websites record automatically (like the pages you read).
  • We use it to send you what you asked for, run our sites and competitions, and fund our journalism through advertising.
  • We use cookies and tools from Meta, Google, HubSpot and Taboola. We tell you which ones below and how to switch them off.
  • We may match a scrambled (hashed) version of your email address with Meta and Google to show you relevant ads, or to stop showing you ads for things you already have. You can opt out.
  • We never sell your personal information.
  • Every email we send has an unsubscribe link that works.
  • You can ask to see or correct what we hold about you, and complain to us or to the regulator.

3. What we collect

Depending on how you deal with us, we may collect:

  • Contact details: name, email address, phone number and postal address.
  • Profile details: age range or date of birth, gender, postcode and interests you tell us about (for example travel, cruising, motoring, cycling or health).
  • Subscription and purchase details: what you subscribe to, delivery details and payment records. Card payments are handled by our payment provider and we do not store full card numbers.
  • Competition and survey answers: your entry, your answers and any opinions you share.
  • Comments and messages: what you post on our sites or social pages, and what you send us.
  • Business contact details: if you are an advertiser, agency or prospective client, your name, role, business, work email and phone, plus our records of bookings and campaigns.
  • Technical and usage information: IP address, device and browser type, approximate location (from your IP address), pages viewed, links clicked, time on page, how you arrived and, for our emails, whether you opened them and which links you clicked.

We only collect sensitive information (such as health information) if you choose to give it to us and consent, for example in a health-related survey. We do not need it for any of our core services.

4. How we collect it

From you directly, when you:

  • sign up to a newsletter on any of our sites or social pages
  • enter a competition or giveaway
  • answer a survey or poll
  • subscribe to a magazine or buy from us
  • comment on an article or message us
  • contact us about advertising or deal with our sales team.

Automatically, through cookies, pixels and similar tools on our websites and in our emails (see section 6).

From others, including:

  • advertising and social platforms such as Meta and Google, when you respond to one of our ads or fill in a sign-up form on their platform (for example a Facebook lead form)
  • gift subscriptions or event partners who pass on your details with your knowledge
  • for business contacts only, public sources such as company websites and business data providers.

You can read our websites without telling us who you are. If you choose not to give us information we ask for, we may not be able to send you a newsletter, enter you in a competition or provide a service.

5. How we use it

We use personal information to:

  • send you the newsletters, magazines and other services you have asked for
  • run competitions, including contacting winners and delivering prizes
  • run surveys and understand what our readers want
  • publish and moderate comments
  • respond to enquiries and manage advertiser relationships and bookings
  • understand how our sites and emails are used, and improve them
  • show advertising on our sites and on other platforms, and measure whether it works (see sections 6 and 7)
  • tell you about our other brands, products, offers and events (see section 8)
  • keep our sites secure and prevent fraud, spam and abuse
  • meet our legal obligations.

We do not use personal information to make automated decisions that could significantly affect your rights or interests.

6. Cookies and tracking

Cookies are small files stored by your browser. Pixels and tags are small pieces of code on a page or in an email that report back when they load. We and our partners use them for the purposes below.

Tool Provider What it does How to opt out
Meta Pixel and Conversions API Meta Platforms Records visits and actions on our sites (such as a newsletter sign-up) so we can measure our Facebook and Instagram ads, build audiences of our readers and show them relevant ads. Some of these events are also sent directly from our systems to Meta, with contact details hashed first Facebook or Instagram: Settings > Accounts Centre > Ad preferences. Also block third-party cookies in your browser
Google Analytics 4 Google Measures how many people visit, which pages they read and how they found us Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout
HubSpot tracking code HubSpot Links your visits to our sites with your newsletter subscription so we can send more relevant emails and measure what you read Clear or block cookies for our sites. Unsubscribing stops our emails
Google Ad Manager Google Serves and measures the ads on our sites, including ads from Google’s advertising partners, and may personalise them Google: myadcenter.google.com
Taboola Taboola Shows recommended articles and sponsored links from other sites, personalised to your reading taboola.com/policies/privacy-policy (user choices section)
Email tracking HubSpot Shows whether an email was opened and which links were clicked Block images in your email app, or unsubscribe

You can also:

  • block or delete cookies in your browser settings (some site features may stop working)
  • opt out of interest-based ads from many advertising companies at youronlinechoices.com.au
  • reset your phone’s advertising ID or limit ad tracking in its settings.

7. Using your contact details for advertising audiences

If you are on one of our lists, we may use your email address (and sometimes your phone number) to reach you on Meta (Facebook and Instagram) and Google (including YouTube).

How it works. Before anything is shared, your email address is hashed: converted on our side into a scrambled code that cannot practically be turned back into your address. Meta or Google compare that code with codes made from their own users’ details. Where there is a match, they can show our ads to that person, or confirm that one of our ads led to an action such as a sign-up. Codes that do not match are deleted by the platform. The platforms do not tell us who matched.

What we use it for:

  • showing our own content, newsletters and offers to people who already know us
  • excluding existing subscribers, so we do not pay to show you an ad asking you to sign up for a newsletter you already receive
  • measuring which of our ads lead to sign-ups (including through Meta’s Conversions API)
  • building lookalike audiences: the platform finds other people whose profiles are similar to our readers. We never see who those people are.

We do not give Meta or Google your name, address or other details for this purpose, and we do not sell our lists to anyone.

How to opt out. Email privacy@citrusmedia.com.au with “Ad matching opt-out” and the email address concerned. We will remove you from future uploads within 30 days. You can also manage ads in your Meta and Google settings (see section 6).

8. Direct marketing and newsletters

We send newsletters and marketing emails only to people who have signed up or otherwise agreed, as the Spam Act requires. When you sign up to any Citrus brand you agree to receive news, offers and partner content from Citrus Media brands, so we may tell you about our other titles, events and offers.

Our newsletters include our own journalism and may also include content, offers and advertising from our commercial partners, such as travel, cruise, insurance, motoring or retail brands. This is part of what you sign up for and is how we keep our newsletters free. We label paid content as sponsored or advertising. We do not give your details to those partners unless you tell us to (for example, the separate competition consent in section 9).

Every email we send identifies which brand sent it and has an unsubscribe link. Unsubscribing is free and we act on it within 5 business days. You can also ask us to stop at privacy@citrusmedia.com.au. Unsubscribing from one brand’s newsletter does not unsubscribe you from another brand; you can ask us to remove you from all of them.

We may still send you messages that are not marketing, such as a competition prize notice or a subscription renewal.

9. Competitions

When you enter a competition we collect your entry details to run the competition, pick and contact winners and deliver prizes.

Sharing with the promoter or sponsor. Many of our competitions are run with a partner brand, which is named on the entry form. We share your details with that named partner only if you tick a separate, optional consent box when you enter. That box is never pre-ticked and ticking it is not a condition of entry. If you tick it, the partner’s own privacy policy applies to its use of your details.

We may also pass a winner’s details to the partner or a delivery company where needed to deliver the prize.

Winners. Where the law or a permit requires it, we publish winners’ names (usually first name or initial, surname and suburb or state) in the publication or on the website named in the competition terms. Each competition’s terms and conditions explain the details specific to that competition.

Entering a competition signs you up to a Citrus newsletter only if the entry form says so clearly.

10. Who we share information with

We share personal information only as this policy describes or the law allows. We may share it with:

  • Service providers who work for us under contract, including HubSpot (our customer database and email system); Google (analytics, advertising, Google Workspace email and file storage, and cloud data processing); Meta (advertising, conversion measurement and social media lead forms); website hosting, technology and technical support providers; workflow automation, data and AI analysis providers; business contact data providers; printers, mailing houses, Australia Post and couriers for magazine and prize delivery; payment processors; and our accountants, auditors, lawyers and insurers.
  • Competition partners named on an entry form, only with your separate consent (section 9).
  • Advertising partners in aggregate or de-identified form, such as campaign reports showing how many people saw or clicked an ad. These reports do not identify you.
  • Anyone you ask us to share with.
  • Government, regulators, courts or police where the law requires or allows it.
  • A buyer of all or part of our business, who would be bound by this policy.

11. Overseas disclosure

Some of our service providers store or process information outside Australia. The countries most likely to be involved are:

  • the United States (including HubSpot, Google, Meta and Taboola)
  • Ireland and other European Union countries
  • Israel
  • other countries where these providers or their sub-processors operate, such as Singapore.

We take reasonable steps to make sure overseas recipients handle personal information consistently with the APPs, mainly through contracts and the providers’ published data protection terms. Large platforms such as Meta and Google set their own terms, and their privacy policies also apply to how they use information.

12. Security, retention and data breaches

Security. We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, change or disclosure. These include access controls and two-factor sign-in on our systems, limiting access to staff and contractors who need it, using reputable providers with strong security, and encrypted connections (https) on our websites.

Retention. We keep personal information for as long as we need it for any purpose described in this policy, or longer where the law requires. This includes:

  • newsletter subscribers: while you are subscribed, and afterwards for as long as we may reasonably want to invite you back. If you unsubscribe, we keep your email on a suppression list so we never email you again by mistake
  • competition entries: for as long as needed to run the competition, meet permit conditions and handle any queries, and longer if you also subscribed
  • comments: while the article is online, unless you ask us to remove them
  • advertiser, booking and financial records: at least 7 years, as tax and corporate law require.

When we no longer need information for any of these purposes, we delete it or remove anything that identifies you.

Data breaches. We are covered by the Notifiable Data Breaches scheme. If we suspect a data breach we act quickly to contain it and assess it within 30 days. If it is likely to cause serious harm to anyone, we will notify the people affected and the Office of the Australian Information Commissioner (OAIC), and tell you what you can do to protect yourself.

13. Access and correction

You can ask for a copy of the personal information we hold about you, or ask us to correct it if it is wrong, out of date or incomplete. Email privacy@citrusmedia.com.au or write to us at the address in section 1.

We may need to confirm who you are first. We will respond within 30 days. Asking is free; if a request is unusually large we may charge a reasonable fee for the cost of providing access, and we will tell you before we do. If we refuse a request we will tell you why in writing and how to complain.

14. Complaints

If you think we have mishandled your personal information, contact our Privacy Officer at privacy@citrusmedia.com.au or by post (section 1). Tell us what happened and what you would like us to do.

We will acknowledge your complaint within 7 days and give you a response within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):

  • website: www.oaic.gov.au
  • phone: 1300 363 992
  • post: GPO Box 5288, Sydney NSW 2001.

15. Children

Our websites, newsletters and competitions are not directed at people under 18. We do not knowingly collect personal information from anyone under 18, and our competitions are open to adults only unless the terms say otherwise. If you believe a child has given us their details, contact us and we will delete them.

16. Links to other sites

Our sites link to other websites, including advertisers and sponsored content providers. Their privacy policies, not ours, apply when you visit them.

17. Changes to this policy

We may update this policy when our practices or the law change. The current version is always on our websites, with the date it was last updated at the top. If we make a significant change to how we use your information, we will tell subscribers by email or with a notice on our sites.

This policy replaces all earlier privacy policies on our brand websites.

Effective date: 2 November 2026