Privacy Policy

Part A: Introduction

1 About Slyp

1.1 At Slyp, we are committed to delivering innovative andelegant solutions that solve real problems for real people.

1.2 The Go Rewards App gives access to these innovative solutions.

1.3 The Go Rewards Loyalty Program aggregates merchant-specific loyalty programs, allowing you to accrue loyalty points at a range of merchants, retailers and service providers using the App. Customers can also register their payment card details within the Go Rewards Loyalty Program. When Go Rewards Loyalty Program members purchase items at participating Merchants using the stored payment card, the member will automatically receive loyalty points that can be accrued under the Go Rewards Loyalty Program, without having to present their Loyalty ID at the time of making the eligible purchase (PaymentLinked Loyalty or PLL or Linked Cards).

1.4 As part of the Go Rewards App, we have created a digital transaction record functionality. Our solution revolutionises paper receipts with a smarter, feature-rich, digital transaction record that may be delivered in a bank partner’s mobile application, Merchant partner’s mobile application, Go Rewards mobile application or via SMS (Smart Receipts).

2 Introduction

2.1 Slyp Pty Ltd (ABN 19 613 031 271) (we, usor our) recognises the importance of protecting the privacy and therights of individuals in relation to their personal information.

2.2 At Slyp, the protection of your data is of critical importance. We respect your rights to privacy under the Privacy Act1988 (Cth) (Act) and we comply with all of the requirements of theAct in respect of the collection, management and disclosure of your personal information.

2.3 The term ‘Personal Information’ has the meaning given to it in the Act. In general terms, personal information is any information that can be used to personally identify you.This may include your name, address, telephone number, email address and profession or occupation. If the information we collect personally identifies you, or you are reasonably identifiable from it, the information will be considered personal information.

2.4 By using and accessing the Slyp website at www.slyp.com.au (and any sites related to that domain) (Site), the Go Rewards App and/or using our services, you agree to the terms and conditions of this policy.

Part B: Go Rewards Loyalty Program

3 What personal information do we collect, hold, use and disclose?

3.1 We may collect the following types of personal information:

1. your name;
2. your contact information, such as your email address, telephone number or postal address;
3. your age or date of birth;
4. the merchant loyalty programs you have signed up for or enquired about as part of the Go Rewards Loyalty Program, together with any additional information necessary to sign up to specific merchant loyalty programs;
5. information garnered as a result of our use of cookies and other tracking technologies, including button clicks, screens viewed and App state changes;
6. (where you opt into the Payment Linked Loyalty program as part of the Go Rewards Loyalty Program) your relevant payment card details, including where you elect to link multiple payment cards, as well as the transaction information generated through those payment cards; and  
7. any additional information relating to you that you provide to us directly through the Go Rewards App or indirectly through the use of our Go Rewards App, the Site, social media or online presence, through our representatives or otherwise.

4 For what purposes do we collect, hold, use and disclose your personal information?

4.1 We collect personal information about you so that we can perform our business activities and provide the best possible quality of customer service. In particular, we collect, hold, use and disclose your personal information for the following purposes:

1. to provide services to you;
2. to send communications to you;
3. to answer enquiries and provide information or advice about our services;
4. to assess the performance of our Site and the Go Rewards App and to improve the operation of our Site and the Go Rewards App;
5. to conduct business administration and processing functions, including providing personal information to contractors, service providers or other third parties;
6. for marketing, planning, product or service development, quality control and research purposes;
7. to update our records and keep your contact details up to date;
8. to process and respond to any complaint made by you;
9. to enforce our legal rights and to protect the rights of third parties;
10. for the purposes of facilitating automated allocation of loyalty points with Merchant Loyalty Programs and/or the GoRewards Loyalty Program following an eligible purchase;
11. to improve the site and service performance and delivery of our services;
12. to deliver relevant advertising (such as that involving details of our or our merchants’ products, services, special offers, and rewards), either to our customers and members generally, or which we have identified may be of interest to you in particular, to deliver periodic newsletters to you with your prior consent or if otherwise permitted under local laws and regulations, or to promote benefits and offer rewards and promotions that you qualify for; and
13. to comply with any law, rule, regulation, lawful and binding determination, decision, or direction of a regulator, or in co-operation with any governmental authority.

5 Who will we disclose your personal information to?

5.1 We may disclose your personal information to:

1. merchant partners, where you have signed up for the merchant’s loyalty program;
2. other merchant partners participating in the Go Rewards Loyalty Program, as well as prospective merchant partners for the purposes of promoting the Go Rewards App and Go Rewards Loyalty Program, and for general sales and commercial insights;
3. our employees, contractors or service providers for the purposes of the operation of the Go Rewards App and our business activities;
4. suppliers, merchant partners and other third parties with whom we have commercial relationships, for business, marketing, analytics and related purposes;
5. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
6. accountants, auditors, lawyers and other professional advisors we engage who require access to information;
7. third party acquirers in the event that we sell or transfer all or any relevant portion of our business or assets;
8. Mastercard, Visa and EFTPOS, in connection with the PLL program (if you have opted in to this program);  
9. third party acquirers in the event that we sell or transfer all or any relevant portion of our business or assets; and
10. any organisation for any authorised purpose with your express consent.

6 Payment LinkedLoyalty Program (PLL Program or Linked Cards)?

6.1 Slyp does not have access to, and does not collect the details of the relevant payment cards when you elect to opt-in to the PLL Program.

6.2 The third party providers we engage:

1. are compliant with the relevant PCI Security Standards, including the PCI Data Security Standard;
2. will process your payment card details in accordance with their relevant card scheme terms and conditions; and
3. do not store your payment card details following your registration under the PLL Program.

6.3 You may elect to opt out of the PLL Program atany point in accordance with the process outlined in the Go Rewards Terms & Conditions.

6.4 Where you choose to opt out, the relevant payment card details will be subject to the retention, disposal and de-identification policies as outlined in cl 24.1(4) of this Privacy Policy.

6.5 We will cease using your payment card data if you opt-out of the PLL Program functionality in the Go Rewards Program App. We will continue to otherwise hold and use your personal information in accordance with this privacy policy

Part C: Slyp Smart Receipts

Slyp Smart Receipts delivered in Bank partners’ mobile application‍

We provide Smart Receipts to customers of partnering Banks directly to their mobile banking application (subject to this feature being activated). We do not collect personal information to deliver Smart Receipts in Bank partners’ mobile applications, in other words, the data we collect is not identifiable to you. The feature works by linking your anonymised Bank transaction details with your anonymised Merchant transaction details to render your Receipts inside your mobile banking application. Bank partners and Slyp exchange information using a randomly generated customer identifier meaning that Bank partners do not share your identity with Slyp.

Partnering Banks are financial institutions that issue credit cards or debit cards, or an entity providing other payment method, to customers and has entered into, and remains a party to, a services agreement with Slyp to provide Smart Receipts to its customers (Bank).

7 What personal information and/or data do we collect, hold, use and disclose?

7.1 As part of this service, we may collect the data outlined below:

7.2 At each stage, data is collected (either from Bank partners or Merchant partners) electronically using RESTful Application Programming Interface (API) technology.

8 How do we use the information collected to provide Smart Receipts in Bank partners’ mobile application?

8.1 We will only use the information collected where we have a legitimate business purpose to do so and in accordance with the contractual terms agreed with our relevantBank and Merchant partners. Below is an outline of the purposes for which we may use the information we collect:

1. to generate Smart Receipts and display those in Bank partners' mobile application;
2. to perform internal analysis, helping us improve and develop our services;
3. to provide Merchant and Bank partners with analytics products and insights using anonymised data;
4. to conduct general administration of the business (including preparing partners’ invoices, accounting, finance, answering enquiries from partners and their customers);
5. to monitor and conduct activities related to the security of our informatic systems and services;
6. to comply with our legal and regulatory obligations and exercise our legal rights; and
7. to provide any additional services you have consented to (including additional Smart Receipt integrations with third-party services such as expense and financial management tools).

9 Who will we disclose your personal information to?

9.1 We may disclose the information we collect to the following:

1. bank partners for the purpose of surfacing the Smart Receipts inside their mobile application;
2. third-parties you have consented to share information with (including third-parties who provide services integrated with Smart Receipts such as expense and finance management tools);
3. Merchants that you shop with to access Smart Receipts issued on their behalf and de-identified demographic information about customers who transacted with them;
4. accountants, auditors, lawyers and other professional advisors we engage who require access to information;
5. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
6. third-party service providers to whom we may outsource certain organisational functions; and
7. third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Slyp Smart Receipt - Smart Receipts delivered via SMS or Merchant mobile applications.

We provide Merchants with the ability to deliver Smart Receipts to their customers via SMS or mobile applications owned, operated, or controlled by a Merchant.

10 What personal information and/or data do we collect?

10.1 When providing this service, Slyp may collect the information outlined below:

11 How do we use the information collected to provide Smart Receipts in Merchant partners’ mobile applications or via SMS?

11.1 We will only use the information collected where we have a legitimate business purpose to do so and in accordance with our Merchants’ services agreements. Below outlines the purposes we may use the information we collect:

1. to generate Smart Receipts and deliver those via SMS or to Merchant to make available via their mobile application (Smart Receipts are hosted on our Site and Slyp provides a unique link to access them);
2. to perform internal analysis helping us improve and develop our services;
3. to provide Merchants with analytics products and insights using anonymised data;
4. to conduct general administration of the business (including partners’ invoice, accounting, finance, answering partners and their customers’ enquiries);
5. to monitor and conduct activities related to the security of our systems and services; and
6. to comply with our legal and regulatory obligations and exercise our legal rights.

12 Who will we disclose your information to?

12.1 We may disclose the information we collect to the following:

1. Merchants that you shop with to access Smart Receipts issued on their behalf;
2. accountants, auditors, lawyers and other professional advisors we engage who require access to information;
3. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
4. third-party service providers to whom we may outsource certain organisational functions; and
5. third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Slyp Smart Receipt - Smart Receipts delivered via Go Rewards App

We provide Merchants with the ability to deliver Smart Receipts to their customers via the Go Rewards App.

13 What personal information and/or data do we collect?

13.1 When providing this service, Slyp may collect the information outlined below:

13.2 Where information is collected from Merchant partners, this information is collected electronically through APIs.

14 How do we use the information collected to provide Smart Receipts in the Slyp App, Merchant partners’ application or via SMS?

14.1 We will only use the information collected where we have a legitimate business purpose to do so. Below outlines the purposes we may use the information we collect:

1. to generate Smart Receipts and deliver those via SMS, the Go Rewards App, or via any Merchants' application;
2. to perform internal analysis helping us improve and develop our services;
3. to provide Merchants with analytics products and insights using anonymised data;
4. to conduct general administration of the business (including accounting, finance, answering enquiries);
5. to monitor and conduct activities related to the security of our systems and services; and
6. to comply with our legal and regulatory obligations and exercise our legal rights.

15 Who will we disclose your information to?

15.1 We may disclose the information we collect to the following:

1. Merchants that you shop with to access Receipts issued on their behalf;
2. accountants, auditors, lawyers and other professional advisors we engage who require access to information;
3. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
4. third-party service providers to whom we may outsource certain services or functions;
5. third-party service providers who you connect or enable with Slyp; and
6. third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Slyp Smart Receipt – Users interacting with our Site or merchant portal (“My Slyp”)

We provide a range of services on our Site and our merchant portal which are accessible by a range of different users. For example, Merchants can create an account with Slyp, manage their account details and access their Smart Receipts. Users (whether they are retailers, Smart Receipt recipients or any other individual visiting our Site) can provide feedback or seek to get in touch with us. We also conduct business activities such as marketing, recruitment and corporate communications operations via our Site.

16 What personal information and/or data do we collect?

16.1 As part of these services, Slyp may collect the information outlined below:

17 How do we use the information collected when you use our Sites?

17.1 We will only use the information collected where we have a legitimate business purpose to do so. Below outlines the purposes we may use the information we collect:

1. to answer enquiries and feedback submitted via our Sites;
2. to perform internal analysis, helping us improve and develop our Sites and services;
3. to monitor and conduct activities related to the security of our systems and services;
4. to conduct general administration of the business (including management of Merchants’ accounts, partners’ invoice, accounting and finance);
5. to comply with our legal and regulatory obligations and exercise our legal rights;
6. to communicate with you about maintaining and updating your contact information where appropriate; and
7. to communicate with you on subject which may be of interest including:
   1. service updates and news about our services;
   2. news items and other information in which you may be interested;
   3. maintaining and updating your contact information where appropriate; and
   4. conducting surveys.

18 Who will we disclose your information to?

18.1 We may disclose the information we collect to the following:

1. accountants, auditors, lawyers and other professional advisors we engage who require access to information;
2. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
3. third-party service providers to whom we may outsource certain organisational functions (including direct marketing); and
4. third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Slyp Smart Receipt - General Business Operations

Slyp may collect information from any person who interacts with us in the course of conducting business, including employees, job applicants, clients (current and prospective) and other third-parties.

19 What personal information and/or data do we collect?

19.1 Slyp may collect the information outlined below:

20 How do we use the information collected from employees, job applicants, clients and third-parties we engage with?

20.1 We will only use the information collected where we have a legitimate business purpose to do so. Below outlines the purposes we may use the information we collect:

1. to consider the suitability of employment for prospective job applicants;
2. to conduct general administration of the business (employee payroll, organising networking events and managing employee performance);
3. to perform internal analysis helping us improve and develop our services;
4. to monitor and conduct activities related to the security of our systems and services;
5. to comply with our legal and regulatory obligations and exercise our legal rights; and
6. to communicate with you on subject which may be of interest including:
   1. Service updates and news about our services.
   2. News items and other information in which you may be interested.
   3. Open roles.
   4. Maintaining and updating your contact information where appropriate.
   5. Conducting surveys.

21 Who will we disclose your information to?

21.1 We may disclose the information we collect to the following:

1. accountants, auditors, lawyers and other professional advisors we engage who require access to information;
2. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
3. third-party service providers to whom we may outsource certain organisational functions (including direct marketing); and
4. third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Part D: General Terms

22 Do we disclose your personal information to anyone outside Australia?

21.1 Currently, we do not disclose your personal information to

1. third party suppliers and service providers; or
2. data hosting; and
3. other IT service providers

located outside Australia.

‍23 Direct marketing materials

23.1 We may send you direct marketing communications and information about our products or services that we consider may be of interest to you. These communications may be sent in various forms, including mail, SMS and email, or by push notifications within our Go Rewards App. These communications will be sent in accordance with applicable marketing laws, such as the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth).

23.2 You consent to us sending you direct marketing communications by any of the methods identified above.

23.3 At any time you can opt-out of receiving direct marketing communications from us by unsubscribing from the mailing list by clicking on the link in the marketing communication or contacting us using the details set out below.

23.4 We will provide your personal information to Go Rewards loyalty program and Smart Receipt merchant partners for the purpose of direct marketing. You consent to us providing your:

1. personal information to merchant partners for the purpose of direct marketing; and/or
2. where you also register for the PLL program, the payment card details to any third-party provider as engaged by us from time to time for the purposes of facilitating automated allocation of loyalty points on eligible purchases with merchants.

24 Security

24.1 We take reasonable steps to ensure your personal information is protected from misuse and loss and from unauthorised access, modification or disclosure, including:

1. ‍Staff education: we train and remind our staff of their obligations with regards to your personal information.
2. System security: when you transact with us on the internet via our Sites or via our partners’ APIs, we encrypt data sent to our systems.
3. Building security: we have protection in our buildings against unauthorised access such as cameras and access key controls.
4. Disposal of data which is no longer required: we have defined policies to ensure that we only keep personal information for as long as required (for example, to meet user needs, legal requirements or our internal needs). If we no longer need to hold your personal information for any reason or we are no longer required by law to keep it, we will take reasonable steps to de-identify or destroy that information. These steps may vary depending on the nature of the information, the way it was collected and how it was stored.

24.2 As our Site and the Go Rewards App are linked to the internet, and the internet is inherently insecure, we cannot provide any assurance regarding the security of transmission of information you communicate to us online. We also cannot guarantee that the information you supply will not be intercepted while being transmitted over the internet. Accordingly, any personal information or other information which you transmit to us online is transmitted at your own risk.

25 Links

25.1 Our Site and the Go Rewards App may contain links to other websites operated by third parties, including merchant partners. We make no representations or warranties in relation to the privacy practices of any third-party websites and we are not responsible for the privacy policies or the content of any third party website.

25.2 Third party websites are responsible for informing you about their own privacy practices.

26 Maintaining Data Accuracy

26.1 On an ongoing basis, we take reasonable steps to ensure that:

1. your personal information is accurate and has been kept up to date (where necessary); and
2. any of your personal information that we process that is inaccurate (having regard to the purposes for which it is processed) is erased or rectified if we become aware of the inaccuracy.

26.2 From time to time we may ask you to confirm the accuracy of your personal information.

27 Cookies

27.1 We may, in some cases, use cookies or other similar technologies to provide our services to you.

27.2 When you visit our Sites, we may use ‘cookies’ or other similar tracking technologies that help us track your website usage and remember your preferences. Cookies are small files that store information on your computer, mobile phone or other device. They enable the entity that put the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions. While we do not use browsing information to identify you personally, we may record certain information about your use of our Sites, such as which pages you visit, the time and date of your visit, search engine referrals and the internet protocol address assigned to your device.

27.3 You can change your cookie settings at any time and can disable cookies through your internet browser. How you do so depends on your browser and the type of cookie. Certain browsers can be set to reject all browser cookies. If you configure your device to block all cookies, you may disrupt certain features and limit the functionality we can provide when you visit or use our Sites. If you use our Sites without changing your settings, you consent to our use of cookies.

28 Web beacons

28.1 Our direct marketing communications may contain electronic images, known as web beacons. These electronic images enable us to know if a recipient has opened our communications or visited certain click through links(such as our Site). Web beacons are a tool we use to analyse the engagement with our communications and help us improve your experience.

29 Anonymity

29.1 Where possible and lawful, you may interact with us anonymously or using a pseudonym. For example, if you contact us with a general question, you are not required to give us your name unless we need it to adequately handle your question. .

29.2 Generally, we do not collect the names of customers from Merchants’ partners who receive Smart Receipts from us. However, for some of our functions and activities, we may need your name, contact information and other details to enable us to provide our services or products to you..

30 Accessing, updating and correcting your personal information

30.1 We will endeavour to ensure that the personal information collected from you is up to date, accurate and complete.

30.2 You may request access to, or correction of, the personal information we hold about you at any time by contacting us using the details provided below. We will need to verify your identity before responding to your request. Subject to any applicable exceptions or requirements, we will provide you with access to the personal information you request within a reasonable time and usually within 30 days.

30.3 There may be instances where we cannot grant you access to the personal information we hold. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality. If that happens, we will provide you with written reasons for our refusal.

31 Contacting us

31.1 If you have any questions regarding this Privacy Policy, our treatment of your personal information, complaints, or would like to access or amend your personal information, please contact us at info@slyp.com.au.

32 Complaints

32.1 If you contact us to raise a complaint, we will consider your complaint promptly and contact you to seek to resolve the matter. If we are unable to provide a final response within 45 days, we will contact you to explain why and discuss a timeframe to resolve the complaint.

32.2 Under the Act, if you are not satisfied with our response, you are also entitled to make a complaint to the Australian Privacy Commissioner. For more information about the Australian Privacy Principles, or if we are unable to satisfactorily resolve your concerns about our handling of your personal information, you can contact the Office of the Australian Information Commissioner via the OAIC website, www.oaic.gov.au, or by using the details provided below::

• GPO Box 5218, Sydney NSW 2001
• Email: enquiries@oaic.gov.au
• Tel: 1300 363 992

33 Changes to our Privacy Policy

33.1 We may change this Privacy Policy from time to time. Any updated versions of this Policy will be posted on our Site. Please review it regularly.

33.2 This privacy policy was last updated on 03/10/2024.