Privacy Policy

SupplyR Pty Ltd (“SupplyR”, “we”, “us”, “our”) is committed to protecting the privacy of individuals who interact with our website, platform and services. This Privacy Policy explains how we collect, hold, use, disclose and protect personal information in accordance with the Privacy Act 1988 (Cth) (Privacy Act), the Australian Privacy Principles (APPs), the Spam Act 2003 (Cth), the Do Not Call Register Act 2006 (Cth), and, where relevant, the Notifiable Data Breaches (NDB) scheme.

By using our website or services you acknowledge that you have read and understood this Privacy Policy.

1. Who we are

SupplyR is an Australian business that provides a supply ordering and automation platform for hospitality and other businesses. Our registered address and contact details are provided in the “Contact us” section below.

2. What personal information we collect

“Personal information” has the meaning given in the Privacy Act. The types of personal information we may collect include:

• Identity and contact information: name, email address, phone number, position or role.
• Business information: business name, ABN or ACN, trading name, business address, delivery addresses, and supplier or buyer relationships.
• Account information: username, password, authentication tokens, security questions and account preferences.
• Transaction information: orders, invoices, payments, refunds and communications relating to orders.
• Technical information: IP address, device identifiers, browser type, operating system, log data, cookies and similar identifiers.
• Usage information: pages visited, features used, time spent and referring URLs.
• Marketing preferences: subscription status and communication preferences.
• Correspondence: information you provide when you contact us, including support requests and feedback.

We do not intentionally collect sensitive information (as defined in the Privacy Act). If you provide sensitive information to us, you consent to us handling it in accordance with this Privacy Policy.

3. How we collect personal information

We collect personal information:

• directly from you when you register, place an order, join our waitlist, complete a form, contact us or use the platform;
• automatically when you use our website or platform, through cookies, analytics tools and server logs;
• from third parties you authorise, such as identity or authentication providers (for example Google) and payment processors; and
• from publicly available sources, where reasonably necessary for our business functions.

Where it is lawful and practicable, you may deal with us anonymously or under a pseudonym. However, this may limit our ability to provide our services.

4. Why we collect, hold, use and disclose personal information

We use personal information for purposes including:

• providing, operating, maintaining and improving the SupplyR platform and services;
• processing orders, invoices, deliveries and payments;
• verifying identity and preventing fraud or misuse;
• communicating with you about accounts, transactions, service updates and support;
• sending marketing communications where you have consented or where otherwise permitted by law, in accordance with the Spam Act 2003 (Cth);
• conducting analytics, research and product development;
• complying with our legal, regulatory and contractual obligations; and
• any other purpose disclosed to you at the time of collection or otherwise permitted under the Privacy Act.

5. Disclosure of personal information

We do not sell personal information. We may disclose personal information to:

• our related bodies corporate and personnel on a need-to-know basis;
• third party service providers who help us operate our business, including hosting, database, email, authentication, analytics and customer support providers;
• payment processors and financial institutions to process transactions;
• suppliers, distributors and delivery partners where reasonably necessary to fulfil your orders;
• professional advisers, including lawyers, accountants and auditors;
• government agencies, regulators, courts and law enforcement bodies where required or authorised by law; and
• a purchaser or potential purchaser in connection with any actual or proposed sale, merger or restructure of our business.

6. Overseas disclosure

We aim to store personal information in Australia. Some of our service providers (including cloud infrastructure, analytics and communications providers) may store or process personal information outside Australia, including in countries such as the United States and members of the European Union. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles personal information in a manner consistent with the APPs.

7. Data quality and security

We take reasonable steps to ensure personal information we hold is accurate, up-to-date, complete, relevant and not misleading. We use a range of physical, technical and administrative safeguards to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. These include encrypted connections, access controls, role-based permissions and periodic security reviews. No method of transmission or storage is completely secure and we cannot guarantee absolute security.

8. Retention of personal information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, or as required by law (for example, tax, accounting and record-keeping obligations under Australian law). When personal information is no longer required, we take reasonable steps to destroy or de-identify it.

9. Cookies and analytics

We use cookies and similar technologies to operate the platform, remember your preferences and analyse usage. You can manage cookie preferences through your browser settings or through our cookie preferences. Disabling cookies may affect the functionality of our services.

10. Direct marketing

Where permitted by the Privacy Act and the Spam Act 2003 (Cth), we may send you marketing communications about our products and services. Every commercial electronic message we send will include a functional unsubscribe facility. You can opt out at any time by using that facility or by contacting us at privacy@supplyr.com.au.

11. Access and correction

You may request access to, or correction of, personal information we hold about you by contacting us using the details below. We will respond within a reasonable time. In some circumstances we may decline a request as permitted by the Privacy Act, in which case we will provide written reasons.

12. Complaints

If you believe we have breached the APPs or mishandled your personal information, please contact us at privacy@supplyr.com.au. We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5288, Sydney NSW 2001

13. Notifiable Data Breaches

If we experience a data breach that is likely to result in serious harm to any individual whose personal information is involved, we will notify affected individuals and the OAIC in accordance with the NDB scheme under Part IIIC of the Privacy Act.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available at supplyr.com.au/privacy. Material changes will be notified through the platform or by email where appropriate.

15. Contact us

For privacy questions, requests or complaints, please contact our Privacy Officer:

• Email: privacy@supplyr.com.au
• General enquiries: hello@supplyr.com.au