Privacy Policy

JustPerk is operated by:

In this policy, "JustPerk", "we", "us" and "our" mean the entity above. "Merchant" means a business that holds a JustPerk account. "Customer" means an individual who joins a merchant's loyalty program.

This policy is intended to operate consistently with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles, where and to the extent they apply to us. It is a description of our practices and is not legal advice.

Depending on how the platform is used, we may collect and process:

• Merchant account information, such as account email, sign-in credentials managed by our authentication provider, plan and subscription status.
• Business contact details, such as business name, trading name, business address, business phone number and business email.
• Customer name (typically a first name).
• Customer mobile number.
• Customer email address, where provided.
• Loyalty membership details, including membership identifiers, membership QR tokens, stamp progress and program cycles.
• Purchase and transaction metadata obtained through connected point-of-sale integrations such as Square, including order and payment identifiers, item names, amounts, currency, location and timestamps.
• Loyalty activity, such as stamps awarded, scans, matching events and program changes.
• Reward history, including rewards earned, redeemed, expired or cancelled.
• Device and browser information, such as browser type, operating system, screen characteristics and general location inferred from network information.
• Technical logs and security information, such as IP addresses, request logs, error reports, webhook delivery records and audit information used to detect misuse.

We do not seek to collect sensitive information (as defined under the Privacy Act) and ask that you do not submit it to us.

• Directly from merchants when they create an account, configure a loyalty program or contact support.
• Directly from customers when they join a loyalty program, for example by scanning a merchant's QR code and completing a short sign-up form.
• Automatically from your device when you use the platform, through server logs and standard web technologies.
• From connected third-party services authorised by the merchant, such as Square, when transaction and catalogue information is synchronised.
• From merchants about their customers, where a merchant enters or imports customer details into the platform.

We use personal information for purposes including:

• Providing the loyalty services requested by merchants and customers.
• Matching customers with eligible purchases made at a merchant.
• Awarding, tracking, redeeming and expiring rewards.
• Providing merchants with analytics about their loyalty program and customer activity.
• Account administration, billing, trials and subscription management.
• Fraud prevention, abuse detection and platform security.
• Responding to customer and merchant support requests.
• Maintaining, troubleshooting and improving the service.
• Sending marketing communications where this is legally permitted and, where required, consent has been obtained.

JustPerk does not sell customer personal information.

Merchants remain responsible for their own customer communications and for their own legal obligations, including any privacy notices, consents and marketing rules that apply to the way they use customer information.

Where a merchant chooses to connect a point-of-sale system such as Square, the merchant authorises that connection and we receive information necessary to operate loyalty features. This typically includes catalogue items and prices, location details, and payment or order metadata used to determine whether a purchase is eligible for a stamp.

We use this information only to operate the loyalty service for that merchant. We do not process the merchant's underlying sale, and we do not take payment on the merchant's behalf, unless separately stated in writing. Information held by the point-of-sale provider is handled under that provider's own terms and privacy policy.

A merchant can disconnect the integration at any time from their JustPerk settings.

We may disclose personal information to:

• Service providers who host, store, secure, monitor or support the platform, including cloud hosting, database, authentication, email delivery and analytics providers.
• Payment and subscription providers who handle merchant billing.
• The merchant whose loyalty program a customer has joined, for information relating to that customer's membership with that merchant.
• Professional advisers such as lawyers and accountants, where reasonably required.
• Law enforcement, regulators or others where we are permitted or required to do so by law, or where necessary to protect our rights or the safety of any person.
• A purchaser or prospective purchaser in connection with a sale or restructure of our business, subject to appropriate confidentiality protections.

We require our service providers to handle personal information consistently with this policy and applicable privacy laws.

The platform relies on cloud infrastructure and service providers, which may store or process information outside Australia, including in the United States and the European Union. Where personal information is disclosed to an overseas recipient, we take steps that are reasonable in the circumstances to ensure it is handled in a manner consistent with the Australian Privacy Principles.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include encrypted connections, access controls that separate one business's data from another's, restricted administrative access, secure credential storage, signature verification on incoming point-of-sale webhooks, and logging of security relevant events.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of an eligible data breach, we will respond in accordance with our obligations under the Privacy Act.

We retain personal information for as long as it is needed for the purposes described in this policy, including to operate loyalty programs, maintain reward history, meet legal, tax and accounting obligations, resolve disputes and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it.

If a merchant closes their account, we may retain limited records for a reasonable period for legal, security and record-keeping purposes.

You may request access to the personal information we hold about you, and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Requests can be sent to support@justperk.com.au.

We may need to verify your identity before acting on a request. If we refuse a request, we will explain why, where we are required to do so. If your information sits within a merchant's loyalty program, we may direct your request to that merchant or work with them to resolve it.

We may send merchants service-related messages, which are necessary to operate an account and cannot be opted out of while the account is active. Where legally permitted, and where consent has been obtained if required, we may also send marketing communications about JustPerk.

You can opt out of marketing at any time by using the unsubscribe link in the message or by emailing support@justperk.com.au. Marketing sent by a merchant to its own customers is the merchant's responsibility, and opt-out requests for those messages should be directed to that merchant.

We use cookies and similar technologies to keep you signed in, remember preferences, secure the service and understand how the platform is used. Analytics information is generally used in aggregate to improve performance and usability.

Most browsers let you refuse or delete cookies. Blocking essential cookies may prevent parts of the platform, such as signing in, from working correctly.

The platform is designed for businesses and their adult customers. It is not directed at children, and we do not knowingly collect personal information from a person under 16 without the involvement of a parent or guardian. If you believe we hold such information, contact us and we will take reasonable steps to delete it.

We may update this policy from time to time to reflect changes in our practices, technology or legal obligations. The current version will always be available on this page with its "last updated" date. Material changes will be communicated where reasonably practicable.

If you have a question or wish to make a privacy complaint, contact us at support@justperk.com.au or by post at the address below. We will acknowledge your complaint and aim to respond within a reasonable time.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).