Privacy Policy

This draft describes our approach to the Australian Privacy Principles (APPs) under the Privacy Act 1988. Stamp Bros provides café loyalty services in Australia.

What we collect and why

We collect customer names, mobile numbers, consent records, stamp and reward history, referrals and activity to operate loyalty cards, verify phones, prevent abuse and support café owners. We collect owner email addresses and account and café details to provide the service and billing. Pilot waitlist information includes name, café, suburb/city, email, mobile, locations, current loyalty method, consent, advertising attribution, referrer and user agent to manage applications and understand advertising performance.

Marketing and your consent

Express consent for marketing SMS is captured at customer join, with a timestamp. Waitlist marketing requires separate express consent on its form. Under the Spam Act 2003, marketing messages must identify the sender, include contact details and a functional STOP unsubscribe. STOP requests must be honoured within 5 business days, without a fee. You can also withdraw consent in your profile or contact us. Verification messages are used only for verification. Sending is currently limited to configured test numbers; before broader sending, the provider must support inbound STOP requests.

Website analytics

When configured, Meta Pixel records page views and a Lead event after a successful waitlist submission to measure advertising. Meta may receive device and browsing data, including through cookies. Advertising attribution is kept in this browser’s session storage and submitted with your waitlist application. We do not send your form fields to Meta Pixel.

Storage, security and overseas disclosure (APP 8)

We store information on Google Cloud/Firebase and use service providers to operate the platform, payments and configured messaging. Information may be stored or processed overseas, for example in the USA. APP 8 concerns cross-border disclosure: we will take reasonable steps required by applicable law to protect information disclosed to overseas recipients. We use access controls, signed sessions and restricted administrative access; no service can guarantee absolute security.

Access, correction and deletion

Contact privacy@stampbros.com.au to request access or correction. Customers can correct their name and self-delete personal card data in their profile; café owners can request or perform customer deletion. Anonymous stamp totals and records required by law may be retained. We retain identifiable data only as needed for the stated purposes or legal obligations. Contact us to delete waitlist information.

Complaints and contact

Email privacy@stampbros.com.au with privacy questions, access/correction requests or a complaint. We will acknowledge complaints and aim to respond within 30 days. If unresolved, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au/privacy/privacy-complaints.

Draft references: ACMA spam guidance and OAIC Australian Privacy Principles.