Privacy Policy

1. About this Privacy Policy

ScanNEarn respects your privacy. This Privacy Policy explains how SNE Technologies Pty Ltd (ABN 64 701 857 838), trading as ScanNEarn (ScanNEarn, we, us or our), handles personal information when you use:

• our website at scannearn.com.au;
• our mobile applications and mobile web applications;
• customer loyalty cards, QR-code and reward features;
• staff scanning tools and business administration portals; and
• our demo, support, sales and other communications.

We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles, where they apply.

This Privacy Policy does not govern the separate privacy practices of a participating business that uses ScanNEarn to operate its loyalty program. Participating businesses may have their own privacy policies and collection notices.

2. Roles of ScanNEarn and participating businesses

ScanNEarn supplies the technology used to operate digital loyalty programs. The participating business decides the loyalty offer it provides and may access information about members and activity connected with its own loyalty program.

Depending on the circumstances, ScanNEarn and the participating business may each have responsibilities for personal information. Questions about a participating business's own loyalty program, offers or marketing should be directed to that business. Questions about your ScanNEarn account, the ScanNEarn platform or this Privacy Policy should be directed to us.

A participating business should not receive information about your memberships or activity with unrelated participating businesses through its ordinary access to ScanNEarn.

3. Personal information we may collect

The information we collect depends on your relationship with us, the features you use and the permissions you grant.

3.1 Registration and contact information

• name, email address and mobile number;
• account credentials, verification information and communication preferences; and
• other details you provide when registering or contacting us.

3.2 Account and loyalty information

• account ID, QR-code identifiers and membership identifiers;
• participating business memberships, loyalty-card progress and stamps;
• qualifying scan records, reward eligibility, redemptions and reversals; and
• timestamps, store locations and the authorised staff account involved in an activity.

3.3 Staff and business information

• name, work contact details, role, employer or business name;
• authorised locations, account permissions, login and security information;
• subscription, support and billing-related information; and
• business administration activity.

3.4 Device, usage and diagnostic information

• IP address, device and browser type, operating system, app version, language and time zone;
• device or browser identifiers, session and authentication events;
• pages or screens viewed and interactions with features; and
• crash, performance and security logs.

3.5 Location information

We may infer approximate location from an IP address or record the store location associated with a loyalty activity. We collect precise device location only where a feature needs it, you have granted the relevant permission and an appropriate notice has been provided.

3.6 Communications and enquiries

We may collect information you provide in demo requests, support requests, complaints, surveys, security reports and communications by email, phone, web form or social media.

Website enquiries, including any preferred demo date, time window and time zone, are saved in our website database and sent through FormSubmit to sales@scannearn.com.au so our team can respond. Submitting an enquiry does not subscribe you to marketing. Please do not include passwords, payment details or sensitive information.

3.7 Cookies and similar technologies

We may use cookies, local storage and similar technologies that are necessary for authentication, security, preferences and operation of the service. If we use analytics, advertising or other non-essential technologies, we will provide any notice and choice required by law and explain them in an applicable cookie notice.

3.8 Sensitive information

ScanNEarn is not designed to collect sensitive information such as health information, biometric information, racial or ethnic origin, political opinions, religious beliefs or sexual orientation. Please do not provide sensitive information unless we request it for a lawful purpose and provide an appropriate notice. We will seek consent where required by law.

4. How we collect personal information

We may collect personal information:

• directly from you when you create an account, join a loyalty program, submit a form or contact us;
• from a participating business when it scans your QR code, adds a stamp, processes a reward or helps with your account;
• automatically from your device, browser and use of the service;
• from service providers involved in authentication, hosting, communications, analytics, security, payments or support; and
• from public or lawful business sources where relevant to a business enquiry.

If you provide personal information about another person, you must be authorised to do so and, where required, make them aware of this Privacy Policy.

5. Why we collect, use and disclose personal information

We may collect, use and disclose personal information to:

• create and administer accounts;
• issue and verify QR-code identifiers;
• record and display loyalty-card history, progress, rewards and redemptions;
• enable authorised staff scanning and business management functions;
• provide features, support, demonstrations and service communications;
• personalise and improve the service;
• monitor availability, diagnose faults and understand usage;
• prevent fraud, misuse and security incidents;
• maintain records, enforce terms, resolve disputes and comply with law;
• send service or marketing communications where permitted by law or consent; and
• aggregate or de-identify information for reporting, planning and service improvement.

We will not use personal information for an unrelated purpose unless you consent or the use is otherwise permitted or required by law.

6. Direct marketing and communications

We may send service, account, security and reward-related messages where needed to provide the service. We may send promotional communications where permitted by law. You can opt out of promotional communications by using an unsubscribe facility, changing available settings or contacting us.

A participating business is responsible for its own marketing communications and opt-out processes.

7. Who we disclose personal information to

We may disclose personal information to:

• a participating business whose loyalty program you have joined;
• authorised staff, contractors and related entities who need access to perform their duties;
• providers of hosting, databases, authentication, email, SMS, analytics, crash reporting, customer support, security and payments;
• app stores and platform operators where needed to distribute or support an app;
• professional advisers, auditors, insurers and financiers;
• government agencies, regulators, courts and law-enforcement bodies where required or permitted by law; and
• a buyer, investor or successor in connection with a proposed or completed business transaction, subject to appropriate safeguards.

We do not sell personal information. We may share aggregated or de-identified information where it no longer identifies an individual.

8. Overseas disclosure and storage

Some service providers or personnel may be located outside Australia. This means personal information may be stored in or accessed from other countries. Where required, we take reasonable steps to ensure overseas recipients handle personal information consistently with applicable Australian privacy requirements.

Countries likely to receive personal information include the United States of America. We will keep this information current as our service architecture and providers change.

9. Security

We use reasonable administrative, technical and physical safeguards designed to protect personal information. These may include:

• role-based access controls and authentication measures;
• encryption in transit and, where appropriate, at rest;
• logging, monitoring and secure development practices;
• backups and recovery measures;
• staff and contractor access restrictions; and
• service-provider due diligence.

No system is completely secure. You should use a strong password, protect your device and tell us promptly if you suspect unauthorised account access.

If an eligible data breach occurs, we will comply with applicable notification requirements, including notifications to affected individuals and the Office of the Australian Information Commissioner where required.

10. Retention and deletion

We retain personal information only for as long as reasonably needed for the purposes described in this Privacy Policy, including service delivery, security, dispute resolution, legal compliance and record keeping. When information is no longer required, we take reasonable steps to delete or de-identify it, subject to legal obligations and backup cycles.

You may request account deletion by contacting us using the details below. We may need to verify your identity. We may retain limited information where permitted or required by law. Deleting an app from your device does not delete your account.

11. Access and correction

You may request access to personal information we hold about you and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. Some information may be editable through your account.

To make a request, contact the Privacy Officer using the details below. We may verify your identity before acting. We will respond within a reasonable period. If we refuse a request where the law allows us to do so, we will generally explain why and tell you about available complaint options.

12. Your choices and consent

You may be able to manage communication preferences and device permissions through your account, browser or device settings. You can withdraw optional consent at any time. Withdrawal does not affect processing that was lawful before withdrawal, and a feature may stop working if it relies on that permission.

You may deal with us anonymously for a general enquiry where practical. We need identifying information to create and secure an account, operate QR-code and loyalty activity, investigate security issues and respond to account-specific requests.

13. Children and young people

ScanNEarn is not intended for a person who cannot lawfully consent to the handling of their personal information without a parent or guardian. If you are under 18, you should use ScanNEarn only with permission from a parent or guardian. Participating businesses may impose additional age rules for their loyalty programs.

If we learn that we collected personal information from a child contrary to applicable requirements, we will take reasonable steps to delete or otherwise address it.

14. Third-party sites and services

ScanNEarn may contain links to third-party sites, apps or services. We are not responsible for their privacy practices. You should review the privacy information provided by those third parties.

Our app demo uses YouTube’s privacy-enhanced player, which loads only after you choose to play the video. Playing it connects your browser to YouTube, which may process device and usage information under its own privacy policy. Website enquiry delivery uses FormSubmit.

15. Privacy complaints

If you have a privacy concern or complaint, contact our Privacy Officer and provide enough information for us to investigate, including the issue, relevant dates and the outcome you are seeking. We will acknowledge, investigate and respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner. The OAIC's privacy enquiry contact information is available online. We encourage you to give us an opportunity to resolve the issue first.

16. Changes to this Privacy Policy

We may update this Privacy Policy when our services, providers, practices or legal obligations change. We will publish the current version on our website and show its effective date. If a change is material, we will provide reasonable notice through the service or another appropriate channel.

17. Contact the Privacy Officer