Privacy Policy

Privacy Collection Notice

This Privacy Collection Notice describes how Slyp Pty Ltd (ABN19 613 031 271) (we, us or our) collects and handles your personal information when you make an enquiry with us. We collect personal information from you so that we can respond to your enquiry and for related purposes setout in our Privacy Policy, available on our website (or on request).

We may disclose this personal information to third parties,including our personnel, related entities, any third parties engaged by us and acting on our behalf and as otherwise set out in our Privacy Policy.

We store personal information in Australia. Where we disclose your personal information to third parties, those third parties may store, transfer or access personal information outside of Australia.

If you do not provide your personal information to us, it may affect our ability to do business with you.

Please see our Privacy Policy for more information about how we collect, store, use and disclose your personal information, including details about overseas disclosure, access, correction, how you can make a privacy-related complaint and our complaint-handling process.

If you have questions about our privacy practices, please contact us by email at: info@gorewards.com.au. By providing your personal information to us, you agree to the collection, use, storage and disclosure of that information as described in this privacy collection notice.

‍

Part A: Introduction

1 About Slyp

1.1 At Slyp, we are committed to delivering innovative and elegant solutions that solve real problems for real people.

1.2 Our services include a consumer loyalty platform and digital transaction record (Smart Receipt) services, which we deliver to consumers through a range of channels and in partnership with banks, merchants and other partners. The Go Rewards App is one of the ways we make these services available.

1.3 The Go Rewards Loyalty Program aggregates merchant-specific loyalty programs, allowing you to accrue loyalty points at a range of merchants, retailers and service providers using the App. In this Privacy Policy, references to an App (or the Apps) mean the Go Rewards App and any other consumer or white-label applications we make available from time to time.

1.4 We have also created a digital transaction record functionality. Our solution revolutionises paper receipts with a smarter, feature-rich, digital transaction record that may be delivered in a bank partner’s mobile application, a Merchant or retailer partner’s mobile application, the Go Rewards App, via SMS, or through other applications or channels we may offer from time to time (Smart Receipts). In this Privacy Policy, references to a Merchant (or Merchants) mean a merchant, retailer or service provider partner that participates in ourservices.

2 Introduction

2.1 Slyp Pty Ltd (ABN 19 613 031 271) (we, us or our) recognises the importance of protecting the privacy and the rights of individuals in relation to their personal information. This policy explains how we collect, use and protect your personal information. It applies to all personal information we handle, whether we collect it through our website, our App, in person, or through other means.

2.2 At Slyp, the protection of your data is of critical importance. We respect your rights to privacy under the Privacy Act 1988 (Cth) (Act), including the Australian Privacy Principles (APPs) set out in Schedule 1 to the Act, and we comply with the requirements of the Act in respect of the collection, handling, use, storage, disclosure and destruction ofyour personal information.

2.3 The term ‘Personal Information’ has the meaning given to it in the Act. In general terms, personal information is any information that can be used to personally identify you. This may include your name, address, telephone number, email address and profession or occupation. If the information we collect personally identifies you, or you are reasonably identifiable from it, the informationwill be considered personal information.

Part B: Loyalty Program

This Part describes how we handle your personal informationin connection with the loyalty services we provide through our Apps. We currently provide these services through the Go Rewards App, and may provide equivalent loyalty services through other Apps (including white-label applications) we make available from time to time. Where a particular App handles your personal information differently from what is described in this Part, we will notify you of the additional or varying terms that apply.

3 What personal information do we collect, hold, use and disclose?

3.1 We may collect the following types of personal information:

1. your name;
2. your contact information, such as your email address, telephone number or postal address;
3. your age or date of birth;
4. the merchant loyalty programs you have signed up for or enquired about, together with any additional information necessary to sign up to specific merchant loyalty programs;
5. information garnered as a result of our use of cookies and other tracking technologies, including button clicks, screens viewed and App state changes;
6. payment card scheme data, including data we receive from card scheme partners (such as Mastercard or Visa) about your card-based transactions at participating merchants;
7. information about your shopping and transaction behaviour at participating merchants, including purchases made and loyalty points accrued, and insights we derive from that information;
8. search and browsing behaviour and App usage patterns; and
9. any additional information relating to you that you provide to us directly through an App or indirectly through the use of our Apps, the Site, social media or online presence, through our representatives or otherwise.

4 For what purposes do we collect, hold, use and disclose your personal information?

4.1 We collect personal information about you so that we can perform our business activities and provide the best possible quality of customer service. In particular, we collect, hold, use and disclose your personal information for the following purposes:

1. to provide services to you;
2. to send communications to you;
3. to answer enquiries and provide information or advice about our services;
4. to assess the performance of our Site and our Apps and to improve the operation of our Site and our Apps;
5. to conduct business administration and processing functions, including providing personal information to contractors, service providers or other third parties;
6. for marketing, planning, product or service development, quality control and research purposes;
7. to update our records and keep your contact details up to date;
8. to process and respond to any complaint made by you;
9. to enforce our legal rights and to protect the rights of third parties;
10. to comply with any law, rule, regulation, lawful and binding determination, decision, ordirection of a regulator, or in co-operation with any governmental authority
11. to detect, investigate and prevent fraud, security incidents and misuse of our services;
12. to provide Merchant partners with information about your shopping behaviour at their stores, so that Merchants can analyse the behaviour of their own customers and operate their own loyalty and marketing programs;
13. to generate de-identified and aggregated insights and analytics products, including cohort-level insights about shopping behaviour, which we make available to Merchant partners through our analytics tools; and
14. to comply with our legal obligations, to respond to court orders or legal business, to maintain required business records, to fulfill regulatory requirements or reporting obligations, and to protect our legal rights and interests or asauthorised by law.

5 Who will we disclose your personal information to?

5.1 We may disclose your personal information to:

1. Merchant partners, where you have signed up for the Merchant’s loyalty program;
2. our employees, contractors or service providers for the purposes of the operation of our Apps and our business activities;
3. suppliers and other third parties with whom we have commercial relationships, for business, marketing and related purposes, including our IT service providers, data storage providers, web hosting and server providers, payment processors, marketing and advertising providers, analytics providers and where relevant, identity verification and compliance screening service providers;
4. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
5. accountants, auditors, lawyers and other professional advisors we engage who require access to information;
6. third party acquirers in the event that we sell or transfer all or any relevant portion of our business or assets; and
7. any organisation for any authorised purpose with your express consent.

Part C: Slyp Smart Receipts

Smart Receipts may be delivered to you through a number of different channels, including a Bank partner’s mobile banking application, the Go Rewards App, a Merchant or retailer partner’s mobile application, or via SMS. The personal information we collect and how we handle it differs depending on the delivery channel. Where Smart Receipts are delivered in a Bank partner’s mobile application, we use anonymised data that is not identifiable to you (as described below). Where Smart Receipts are delivered through the Go Rewards App or via SMS, the information involved is identifiable personal information, because it is linked to your registered account or your mobile number. Each delivery channel is described in more detail below.

Slyp Smart Receipts delivered in Bank partners’ mobile application‍

We provide Smart Receipts to customers of partnering Banks directly to their mobile banking application (subject to this feature being activated by you). We do not collect personal information to deliver Smart Receipts in Bank partners’ mobile applications, in other words, the data we collect does not identify you. The feature works by linking your anonymised Bank transaction details with your anonymised Merchant transaction details to render your Receipts inside your mobile banking application. Bank partners and Slyp exchange information using a randomly generated customer identifier meaning that Bank partners do not share your identity with Slyp.

Partnering Banks are financial institutions that issue credit cards ordebit cards, or an entity providing other payment method, to customers and have entered into, and remains a party to, a services agreement with Slyp to provide Smart Receipts to its customers (Bank).

6 What personal information and/or data do we collect, hold, use and disclose?

6.1 As part of this service, we may collect the data outlined below:

6.2 At each stage, data is collected (either from Bank partners or Merchant partners) electronically using RESTful Application Programming Interface (API) technology.

7 How do we use the information collected to provide Smart Receipts in Bank partners’ mobile application?

7.1 We will only use the information collected where we have a legitimate business purpose to do so and in accordance with the contractual terms agreed with our relevant Bank and Merchant partners. Below is an outline of the purposes for which we may use the information we collect:

1. to generate Smart Receipts and display those in Bank partners mobile application;
2. to perform internal analysis, helping us improve and develop our services;
3. to provide Merchant and Bank partners with analytics products and insights using anonymised data;
4. to conduct general administration of the business (including preparing partners’ invoices, accounting, finance, answering enquiries from partners and their customers);
5. to monitor and conduct activities related to the security of our informatic systems and services;
6. to comply with our legal and regulatory obligations and exercise our legal rights; and
7. to provide any additional services you have consented to (including additional Smart Receipt integrations with third-party services such as expense and financial management tools).

8 Who will we disclose your personal information to?

8.1 We may disclose the information we collect to the following:

1. bank partners for the purpose of surfacing the Smart Receipts inside their mobile application;
2. third-parties you have consented to share information with (including third-parties who provide services integrated with Smart Receipts such as expense and finance management tools);
3. Merchants that you shop with to access Smart Receipts issued on their behalf and de-identified demographic information about customers who transacted with them;
4. IT service providers, data storage providers, web hosting and server providers, payment processors, marketing and advertising providers and analytics providers
5. accountants, auditors, lawyers and other professional advisors we engage who require access to information;
6. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
7. third-party service providers to whom we may outsource certain organisational functions; and
8. third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Slyp Smart Receipt - Smart Receipts delivered via SMS or Merchant mobile applications.

We provide Merchants with the ability to deliver Smart Receipts to their customers via SMS or mobile applications owned, operated, or controlled by a Merchant.

9 What personal information and/or data do we collect?

9.1 When providing this service, Slyp may collect the information outlined below:

10 How do we use the information collected to provide Smart Receipts in Merchant partners’ mobile applications or via SMS?

10.1 We will only use the information collected where we have a legitimate business purpose to do so and in accordance with our Merchants’ services agreements. Below outlines the purposes we may use the information we collect:

1. to generate Smart Receipts and deliver those via SMS or to Merchant to make available via their mobile application (Smart Receipts are hosted on our Site and Slyp provides a unique link to access them);
2. to perform internal analysis helping us improve and develop our services;
3. to provide Merchants with analytics products and insights in de-identified or aggregated form;
4. to conduct general administration of the business (including partners’ invoice, accounting, finance, answering partners and their customers’ enquiries);
5. to monitor and conduct activities related to the security of our systems and services; and
6. to comply with our legal and regulatory obligations and exercise our legal rights.

11 Who will we disclose your information to?

11.1 We may disclose the information we collect to the following:

1. Merchants that you shop with to access Smart Receipts issued on their behalf;
2. accountants, auditors, lawyers and other professional advisors we engage who require access to information;
3. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
4. third-party service providers to whom we may outsource certain organisational functions; and
5. third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Slyp Smart Receipt - Smart Receipts delivered via Go Rewards App

We provide Merchants with the ability to deliver Smart Receipts to their customers via the Go Rewards App.

12 What personal information and/or data do we collect?

12.1 When providing this service, Slyp may collect the information outlined below:

12.2 Where information is collected from Merchant partners, this information is collected electronically through APIs.

13 How do we use the information collected to provide Smart Receipts in the Slyp App, a Bank partner's application, a Merchant or retailer partner's application or via SMS?

13.1 We will only use the information collected where we have a legitimate business purpose to do so. Below outlines the purposes we may use the information we collect:

1. to generate Smart Receipts and deliver those via SMS, an App, a Bank partner’s mobile application, or any Merchant or retailer partner’s application;
2. to perform internal analysis helping us improve and develop our services;
3. to provide Merchants with analytics products and insights in de-identified or aggregated form;
4. to conduct general administration of the business (including accounting, finance, answering enquiries);
5. to monitor and conduct activities related to the security of our systems and services; and
6. to comply with our legal and regulatory obligations and exercise our legal rights.

14 Who will we disclose your information to?

14.1 We may disclose the information we collect to the following:

1. Merchants that you shop with to access Receipts issued on their behalf;
2. accountants, auditors, lawyers, insurers, insurance brokers and other professional advisors we engage who require access to information;
3. IT service providers, data storage providers, web hosting and server providers, payment processors, marketing and advertising providers and analytics providers;
4. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
5. third-party service providers to whom we may outsource certain services or functions;
6. third-party service providers who you connect or enable with Slyp; and
7. third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Slyp Smart Receipt – Users interacting with our Site or merchant portal (“My Slyp”)

We provide a range of services on our Site and our merchant portal which are accessible by a range of different users. For example, Merchants can create an account with Slyp, manage their account details and access their Smart Receipts. My Slyp is also available to Merchants who operate a loyalty program via an App. Users (whether they are retailers, Smart Receipt recipients or any other individual visiting our Site) can provide feedback or seek to get in touch with us. We also conduct business activities such as marketing, recruitment and corporate communications operations via our Site.

15 What personal information and/or data do we collect?

15.1 As part of these services, Slyp may collect the information outlined below:

16 How do we use the information collected when you use our Sites?

16.1 We will only use the information collected where we have a legitimate business purpose to do so. Below outlines the purposes we may use the information we collect:

1. to answer enquiries and feedback submitted via our Sites;
2. to perform internal analysis, helping us improve and develop our Sites and services;
3. to monitor and conduct activities related to the security of our systems and services;
4. to conduct general administration of the business (including management of Merchants’ accounts, partners’ invoice, accounting and finance);
5. to comply with our legal and regulatory obligations and exercise our legal rights;
6. to communicate with you about maintaining and updating your contact information where appropriate; and
7. to communicate with you on subject which may be of interest including:
   1. service updates and news about our services;
   2. news items and other information in which you may be interested;
   3. maintaining and updating your contact information where appropriate; and
   4. conducting surveys.

17 Who will we disclose your information to?

17.1 We may disclose the information we collect to the following:

1. accountants, auditors, lawyers, insurers, insurance brokers and other professional advisors we engage who require access to information;
2. IT service providers, data storage providers, web hosting and server providers, payment processors, marketing and advertising providers, analytics providers
3. government agencies, regulatory bodies and law enforcement agencies, or other similar entities, where required under or authorised by law;
4. third-party service providers to whom we may outsource certain organisational functions (including direct marketing); and
5. third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Slyp Smart Receipt - General Business Operations

Slyp may collect information from any person who interacts with us in the course of conducting business, including employees, job applicants, clients (current and prospective) and other third-parties.

18 What personal information and/or data do we collect?

18.1 Slyp may collect the information outlined below:

19 How do we use the information collected from employees, job applicants, clients and third-parties we engage with?

19.1 We will only use the information collected where we have a legitimate business purpose to do so. Below outlines the purposes we may use the information we collect:

1. to consider the suitability of employment for prospective job applicants;
2. to conduct general administration of the business (employee payroll, organising networking events and managing employee performance);
3. to perform internal analysis helping us improve and develop our services;
4. to monitor and conduct activities related to the security of our systems and services;
5. to comply with our legal and regulatory obligations and exercise our legal rights; and
6. to communicate with you on subject which may be of interest including:
   1. Service updates and news about our services.
   2. News items and other information in which you may be interested.
   3. Open roles.
   4. Maintaining and updating your contact information where appropriate.
   5. Conducting surveys.

20 Who will we disclose your information to?

20.1 We may disclose the information we collect to the following:

1. accountants, auditors,lawyers and other professional advisors we engage who require access to information;
2. IT service providers, data storage providers, web hosting and server providers, payment processors, marketing and advertising providers, analytics providers and where relevant, identity verification and compliance screening service providers
3. government agencies, regulatory bodies and law enforcement agencies, or other similar entities,where required under or authorised by law;
4. third-party service providers to whom we may outsource certain organisational functions (including direct marketing); and
5. third-party acquirer(s) in the event that we sell or transfer all or any relevant portion of our business or assets.

Part D: General Terms

21 Do we disclose your personal information to anyone outside Australia?

21.1 We store your personal information in Australia. However, your information may be accessed from or transferred to locations outside of Australia (including the United States of America, the United Kingdom, the European Union, Singapore and New Zealand) in these circumstances:

1. when our service providers are located overseas;
2. when we work with overseas business partners; and
3. when using cloud-based service or data storage solutions

Before disclosing your personal information overseas, we take reasonable steps to ensure that the recipient treats your information in accordance with applicable law by only sending what is necessary, requiring recipients to protect your information through contractual agreements which require the recipient to comply with the privacy standard in applicable law or through other mechanisms that provide comparable safeguards and by monitoring how recipients handle your personal information.

‍22 Direct marketing materials

22.1 We may send you direct marketing communications and information about our products or services that we consider may be of interest to you. These communications maybe sent in various forms, including mail, SMS and email, or by push notifications within our Apps. These communications will be sent in accordance with applicable marketing laws, such as the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth).

22.2 You can opt-out of receiving marketing communications at any time. Each marketing communication will include an unsubscribe option. You can change your marketing preferences by contacting us. We will process your request as soon aspracticable.

22.3 At partners may also send you direct marketing about their own products and services where you provide consent at the time of signing up for the relevant merchant loyalty program. You can withdraw that consent at any time by (i) contacting us directly or (ii) changing your settings in the App.

23 Security

23.1 We take such steps as are reasonable in the circumstances, including reasonable technical and organisational measures, to protect your personal information from misuse, interference and loss and from unauthorised access, modification or disclosure. These steps include:

1. ‍Staff education: we train and remind our staff of their obligations with regards to your personal information.
2. System security: when you transact with us on the internet via our Sites or via our partners’ APIs, we encrypt data sent to our systems.
3. Building security: we have protection in our buildings against unauthorised access such as cameras and access key controls..
4. Disposal of data which is no longer required: we have defined policies to ensure that we only keep personal information for as long as required (for example, to meet user needs, legal requirements or ourinternal needs). If we no longer need to hold your personal information for any reason or we are no longer required by law to keep it, we will take reasonable steps to de-identify or destroy that information. These steps may vary depending on the nature of the information, the way it was collected and how itwas stored.

23.2 As our Site and our Apps are linked to the internet, and the internet is inherently insecure, we cannot provide absolute assurance regarding the security of transmission of information you communicate to us online. We also cannot guarantee that the information you supply will not be intercepted while being transmitted over the internet. Accordingly, any personal information or other information which you transmit to us online is transmitted at your own risk.

23.3 Please note any information you choose to share publicly on online platforms (such as comments or reviews) can be accessed and used by others. We cannot control or protect information that you make publicly available

24 Children

24.1 The Apps are intended for users aged 18 and over. Users under the age of 18 are not permitted to sign up for or use an App.

24.2 We rely on user self-declaration of age at sign-up. If we become aware that a user is under 18, we will take reasonable steps to delete that user’s personal information and close the account.

25 Automated decision-making

25.1 We use computer programs to make, or substantially help to make, decisions that may affect you. The kinds of decisions made wholly or partly by automated means include:

1. selecting which Merchant offers, rewards and content to show you in the App, and/or the order in which they are shown;
2. determining your eligibility for personalised offers or bonuses, including bonuses based on your combined shopping behaviour at more than one participating Merchant;
3. detecting and preventing fraud, security incidents and misuse of our services; and
4. personalising marketing communications sent to you, subject to your marketing preferences andclause 22 of the Privacy Policy.

25.2 The kinds of personal information we use in making these decisions include your transaction history across one or more merchants, your engagement with offers and rewards in the App, App usage and device information, your loyalty IDs at participating merchants, and demographic information supplied by you or by our Bank or Merchant partners.

25.3 Where we make a decision wholly or substantially by automated means that materially affects you (for example, your eligibility for a reward, bonus or personalised offer), a Slyp staff member can review that decision on request. If you would like to know more about how a particular automated decision affecting you was made, or to request human review of such a decision, please contact us using the details set out below.

26 Artificial Intellignece (AI) Technologies

Overview

26.1 We use artificial intelligence and machine learning technologies in our business operations and services, including AI tools provided by third parties. We only use these technologies when legally permitted and necessary for our business.

How we use AI

26.2 We may use AI technologies to:

• Conduct analysis and data processing
• Generate and modify content and coding
• Improve and optimise our services and operations
• Automate routine tasks and communications
• Personalise your experience with our services
• Support quality assurance processes
• Assist with customer support and queries

Data protection and security

26.3 When we work with third-party AI providers, we ensure they handle your personal information in accordance with privacy laws through contractual requirements and appropriate safeguards.

Your rights and our commitments

26.4 Any information generated or inferred about you by AI technologies is treated as personal information, and you maintain all the rights outlined in this privacy policy. When using AI with your personal information, we commit to:

Transparency and control

• We’ll inform you when AI is used to make decisionsthat may significantly affect you
• We maintain human oversight and review ofsignificant AI-generated decisions
• Our staff are trained to understand AI limitationsand verify outputs before relying on them
• We implement processes to verify the accuracy ofAI-generated outputs

Security

• We use appropriate technical and organisationalmeasures to maintain the security and integrity of your personal information
• We regularly test and monitor AI outputs foraccuracy and reliability

Risk mitigation

• We regularly assess and document risks associatedwith using AI to process personal information
• We implement appropriate measures to address theserisks
• We continuously monitor AI performance andregularly review their impact

27 Links

27.1 Our Site and our Apps may contain links to other websites operated by third parties, including Merchant partners. We make no representations or warranties in relation to the privacy practices of any third-party websites and we are not responsible for the privacy policies or the content of any third party website.

27.2 Third party websites are responsible for informing you about their own privacy practices.

28 Maintaining Data Accuracy

28.1 On an ongoing basis, we take reasonable steps to ensure that.

1. your personal information is accurate and has been kept up to date (where necessary); and
2. any of your personal information that we process that is inaccurate (having regard to the purposes for which it is processed) is erased or rectified if we become aware of the inaccuracy.

28.2 From time to time we may ask you to confirm the accuracy of your personal information.

29 Cookies and Analytics

What We Use

29.1 We use cookies, tracking pixels, and similar technologies on our website and in our emails to improve your experience and our services.

Cookies

• Small text files stored on your device
• Help remember your preferences
• Enable certain website functions
• Make your interactions with our website more efficient

Tracking Pixels

• Tiny, invisible images in web pages and emails
• Help us understand how you interact with ourcontent
• Allow us to measure email engagement
• Enable more relevant content delivery

How we use these technologies

Essential Functions

• Remember your login status
• Maintain your session security
• Store your preferences
• Enable core website and App features

Analytics and Performance

• Understand how our website and App is used
• Measure page views and traffic
• Analyse user navigation patterns
• Identify areas for improvement

Personalisation

• Remember your preferences
• Tailor content to your interests
• Improve your browsing experience
• Provide relevant recommendations

Your control

29.2 You can manage these technologies by:

• Adjusting your browser settings to block ordelete cookies
• Using privacy-focused browser extensions
• Configuring your email client to block images
• Using our cookie preference settings

29.3 Note: Blocking all cookies may affect website functionality and your user experience

Google Analytics

29.4 We use Google Analytics to understand how people use our website. This involves cookies that collect information about your browsing activity. You can opt out of Google’s advertising features through your Google account settings, browser add-ons, or your device’s privacy settings. Google provides various tools and options to control how your data is used for advertising purposes. You can learn more about how Google uses your data and your available options on Google’s privacy pages.

Meta advertising tools  

29.5 We use Meta’s advertising tools (such as Meta Pixel) to understand how our ads performand to show you more relevant advertisements on Meta platforms like Facebook and Instagram when you visit our website or app. You can manage whether we connect information from our website with your Meta account for advertising purposes by adjusting your settings within your Meta account preferences

30 When you sign in with another account (like Facebook or Google) 

What we collect

30.1 When you use single sign-on to connect with us, we will receive personal information from that provider based on your privacy settings with them. This may include your name, username, profile picture, and other details you’ve chosen to share.

How we use it

30.2 We use this information to create your profile on our platform and give you access to our services.

Your rights

30.3 If you connected through Facebook, you can ask us to delete the personal information we received from Facebook. To do this, email us at our email below and tell us what information you would like deleted. If we can’t delete certain information, we will explain why.

31 Anonymity

31.1 Where possible and lawful, you may interact with us anonymously or using a pseudonym. For example, if you contact us with a general question, you are not required to give us your name unless we need it to adequately handle your question.

31.2 Generally, we do not collect the names of customers from Merchants’ partners who receive Smart Receipts from us. However, for some of our functions and activities, we may need your name, contact information and other details to enable us to provide our services or products to you.

32 Accessing, updating and correcting your personal information

32.1 We will endeavour to ensure that the personal information collected from you is up to date, accurate and complete.

32.2 You may request access to, or correction of, the personal information we hold about you at any time by contacting us using the details provided below. We will need to verify your identity before responding to your request. We may charge a reasonable administrative fee for providing access. Subject to any applicable exceptions or requirements, we will provide you with access to the personal information you request within a reasonable time and usually within 30 days.

32.3 There may be instances where we cannot grant you access to the personal information we hold. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality. If that happens, we will provide you with written reasons forour refusal.

32.4 If we are not able to correct your personal information as requested, you may ask us to associate a statement with that information noting that you have requested the correction. We will take reasonable steps to associate any such statement with the relevant information

33 How long we keep your information

33.1 We keep your personal information only as long as we need it for the purposes we collected it, or as required by law. When we no longer need it, we securely destroy or de-identify it.

34 How to contact us about your rights or to make a complaint and whathappens next

Step 1: Contact our privacy officer

• Email: info@slyp.com.au.
• Phone: 
• Post: 

What to include: 

Your full name, contact details, clear details about your request or complaint, and any relevant dates or reference numbers.

Step 2: Our response

We will: 

• Verify your identity before processing yourrequest
• Investigate thoroughly (for complaints) orprocess your request (for rights)
• Respond to you in writing within reasonabletimeframes and as required by law
• Explain what actions we will take and keep youupdated on progress
• Not charge you for making a request (except forreasonable access fees if applicable)
• Help you understand and exercise your rights

Step 3: If you're not satisfied (complaints only)

If you're not satisfied with our response to your complaint, you can: 

• Ask for a review by our senior management, or
• Contact external bodies. For Australianresidents, the Office of the Australian Information Commissioner (Phone: 1300363 992, Website: www.oaic.gov.au)

This is the same process whether you want to access your information, correct mistakes, change marketing preferences, or make a complaint about our privacy practices.

35 Changes to our Privacy Policy

35.1 We may change this Privacy Policy from time to time. Any updated versions of this Policy will be posted on our Site. Please review it regularly.

35.2 This privacy policy was last updated on 17 September 2026.