BuzzPay Pty Ltd (ABN 79 690 067 924) (referred to in this policy as “BuzzPay”, “we”, “us”, or “our”) is committed to protecting the privacy of personal information we collect, hold, use, and disclose in accordance with the Privacy Act 1988 (Cth) (the “Privacy Act”) and the Australian Privacy Principles (“APPs”).
This Privacy Policy explains how we manage personal information, including the types of personal information we collect, the purposes for which we collect and use it, how we store and protect it, and how you can access, correct, or lodge a complaint about the handling of your personal information.
By using our services, website (buzzpay.co), applications, or engaging with BuzzPay in any capacity, you acknowledge that you have read and understood this Privacy Policy. We encourage you to read this policy carefully and contact us if you have any questions.
1. About BuzzPay
BuzzPay is an Australian payment solutions provider delivering EFTPOS and online payment services to businesses across Australia. Our services include in-store EFTPOS terminal solutions, online payment gateways, payment links, mobile payment solutions, hosted payment pages, and customised payment integrations.
This Privacy Policy applies to all personal information collected by BuzzPay through our website, payment platforms, EFTPOS terminals, customer service interactions, marketing activities, and any other interactions you have with us.
2. What Personal Information Do We Collect?
The types of personal information we collect depend on the nature of your interaction with BuzzPay. “Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether it is recorded in material form or not.
2.1 Information We Collect from Merchants and Business Customers
When you apply for or use BuzzPay’s payment services, we may collect the following personal information: your full name, date of birth, and residential address; business name, trading name, Australian Business Number (ABN), and Australian Company Number (ACN); business address, contact telephone number, and email address; bank account details for settlement of funds; identification documents such as driver’s licence, passport, or Medicare card for identity verification purposes; financial information relevant to your merchant application, including transaction history and processing volumes; information about your business type, industry, and point-of-sale systems; records of communications between you and BuzzPay, including phone calls, emails, and support tickets.
2.2 Information We Collect from Website Visitors
When you visit our website at buzzpay.co, we may collect: your IP address, browser type, operating system, and device information; pages visited, time spent on pages, and navigation patterns; referral source and search terms used to reach our website; information you provide through contact forms, enquiry forms, or quote request forms, including your name, email address, phone number, and business details.
2.3 Information We Collect from Transaction Processing
In the course of processing payment transactions on behalf of our merchants, we may collect or process: cardholder name, card number (encrypted), card expiry date, and card verification value (CVV); transaction amounts, dates, times, and merchant identifiers; device information related to the terminal or gateway used. BuzzPay processes cardholder data in accordance with PCI-DSS and does not store full card numbers or CVV data beyond the period required for transaction processing and authorisation.
2.4 Sensitive Information
BuzzPay does not generally collect sensitive information as defined under the Privacy Act. In the event that sensitive information is required — for example, as part of identity verification or fraud investigation — we will obtain your explicit consent before collecting it, unless an exception under the Privacy Act applies.
3. How Do We Collect Personal Information?
BuzzPay collects personal information through a variety of means, including: directly from you when you apply for our services, complete a form, or communicate with us; through your use of our website, payment gateway, EFTPOS terminals, and other platforms via cookies, analytics tools, and server logs; from third parties, including identity verification providers, credit reporting bodies, financial institutions, and referral partners; from publicly available sources, including business directories, ASIC records, and ABN registries.
Where it is reasonable and practicable, we collect personal information directly from you. If we receive personal information from a third party, we will take reasonable steps to notify you.
3.1 Unsolicited Personal Information
If we receive personal information that we have not solicited, we will determine within a reasonable period whether we could have collected the information under the APPs. If not, and the information is not contained in a Commonwealth record, we will destroy or de-identify it as soon as practicable.
4. Why Do We Collect, Use, and Disclose Personal Information?
4.1 Providing Our Services
To provide, manage, and administer our payment solutions; to process and settle payment transactions; to set up and configure terminals, gateways, and integrations; to provide technical support, troubleshooting, and hardware replacement services.
4.2 Account Management and Communication
To manage your merchant account, including billing, invoicing, and settlement; to communicate with you about your account, services, and support requests; to respond to enquiries, complaints, and feedback; to provide onboarding, training, and product guidance.
4.3 Identity Verification and Compliance
To verify your identity and business as required by applicable laws, including the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth); to comply with the Privacy Act, AML/CTF Act, Corporations Act 2001 (Cth), PCI-DSS, and other applicable laws; to detect, prevent, and investigate fraud, money laundering, and other illegal activities.
4.4 Improving Our Services
To analyse usage patterns and improve the functionality, performance, and security of our platforms; to conduct internal research and development; to monitor and improve customer support quality.
4.5 Marketing and Communications
To send you information about our products, services, promotions, and updates where you have consented or where we are otherwise permitted under the Privacy Act and the Spam Act 2003 (Cth). You may opt out at any time by contacting online@buzzpay.com.au or using the unsubscribe function in any marketing email.
4.6 Legal and Regulatory Purposes
To comply with legal obligations, respond to lawful requests from authorities, enforce our agreements, and protect the rights, property, or safety of BuzzPay, our merchants, their customers, and the public.
5. Who Do We Disclose Personal Information To?
5.1 Service Providers and Partners
Third-party providers who assist in delivering our services, including payment processors, acquiring banks, card scheme networks (Visa, Mastercard, eftpos, American Express), identity verification providers, fraud detection services, cloud hosting providers, IT support contractors, and CRM platform providers. We ensure these providers handle personal information in accordance with the Privacy Act.
5.2 Financial Institutions
Banks and financial institutions involved in the settlement of payment transactions.
5.3 Regulatory and Government Bodies
AUSTRAC, the OAIC, ASIC, the ATO, law enforcement agencies, and other government bodies as required or authorised by law.
5.4 Professional Advisers
Our legal, accounting, auditing, and insurance advisers as necessary for the provision of professional services.
5.5 Related Entities
Any related bodies corporate of BuzzPay Pty Ltd, where applicable. BuzzPay will not sell, rent, or trade your personal information to any third party for their independent marketing purposes.
6. Overseas Disclosure of Personal Information
BuzzPay may disclose personal information to overseas recipients, including cloud hosting providers and payment processing networks with operations outside Australia. We take reasonable steps to ensure overseas recipients handle information in accordance with the APPs through contractual arrangements and due diligence.
Countries in which overseas recipients are likely to be located include the United States, the United Kingdom, and countries within the European Economic Area. In accordance with APP 8, BuzzPay remains accountable for personal information disclosed to overseas recipients.
7. Cookies and Website Analytics
Our website uses cookies and similar technologies to improve your experience, analyse traffic, and understand visitor interaction.
7.1 Types of Cookies We Use
Essential cookies for website functionality; analytics cookies (including Google Analytics) for understanding usage patterns; functional cookies for remembering preferences; marketing cookies for relevant advertising.
7.2 Managing Cookies
You can manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality. For more information, visit www.allaboutcookies.org. You can opt out of Google Analytics via the Google Analytics Opt-out Browser Add-on.
8. Data Security
BuzzPay implements reasonable physical, technical, and administrative measures to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure.
8.1 Technical Measures
Encryption in transit and at rest (TLS/SSL, AES-256); PCI-DSS compliant infrastructure; firewalls and intrusion detection; regular vulnerability assessments and penetration testing; multi-factor authentication; role-based access controls.
8.2 Organisational Measures
Staff privacy and security training; confidentiality agreements; incident response procedures; regular policy review; vendor risk assessments.
8.3 Data Breach Notification
In the event of an eligible data breach, BuzzPay will comply with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act, notifying the OAIC and affected individuals as soon as practicable.
9. Data Retention
BuzzPay retains personal information only as long as needed for its purposes or as required by law. When no longer needed, we take reasonable steps to destroy or de-identify it. Transaction records may be retained for seven years under taxation and financial services legislation. Identity verification records are retained as required under the AML/CTF Act.
10. Your Rights — Access and Correction
10.1 Accessing Your Personal Information
You have the right to request access to personal information we hold about you. Contact us using the details in Section 15. We will respond within 30 days. We may refuse access in limited circumstances permitted by the APPs, and will provide written reasons and complaint mechanisms if we do.
10.2 Correcting Your Personal Information
If you believe information we hold is inaccurate, out of date, incomplete, irrelevant, or misleading, you may request correction. We will take reasonable steps to correct it. If we refuse, we will provide written reasons.
11. Anonymity and Pseudonymity
Where lawful and practicable, you may deal with BuzzPay without identifying yourself or by using a pseudonym. However, we cannot process merchant applications or provide payment services without verifying identity. General enquiries may be made anonymously.
12. Direct Marketing
BuzzPay may use your personal information for direct marketing where you have consented or where permitted by law. You may opt out at any time by contacting online@buzzpay.com.au, calling 1300 289 972, or using the unsubscribe link in any marketing communication. We will process opt-out requests promptly at no cost. Non-marketing service communications will continue.
13. Automated Decision-Making
BuzzPay may use automated processes for fraud detection, transaction monitoring, and risk assessment. Where automated decisions could significantly affect your rights or interests, we will provide meaningful information about the personal information used and the types of decisions made.
BuzzPay uses automated fraud detection tools that analyse transaction patterns. Transactions may be flagged, declined, or held for manual review. If you believe an automated decision was made in error, contact 1300 289 972 to request a manual review.
14. Complaints
14.1 How to Lodge a Complaint
Contact our Privacy Officer using the details in Section 15. Please include the nature of the issue, the personal information involved, and the outcome you are seeking.
14.2 How We Handle Complaints
We acknowledge receipt within five business days and aim to resolve complaints within 30 days. If we need more time, we will notify you. If unsatisfied, you may lodge a complaint with the OAIC: GPO Box 5218, Sydney NSW 2001; Phone: 1300 363 992; Email: enquiries@oaic.gov.au; Website: www.oaic.gov.au.
15. How to Contact Us
If you have questions about this Privacy Policy, wish to make an access or correction request, opt out of marketing, or lodge a complaint:
BuzzPay Pty Ltd — Privacy Officer
Address: 14 Lexington Drive, Bella Vista NSW 2153
Phone: 1300 289 972 (available 24/7)
Email: online@buzzpay.com.au
Website: buzzpay.co
16. Changes to This Privacy Policy
BuzzPay may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date and, where appropriate, notify you via email or a prominent notice on our website. We encourage you to review this policy periodically.
17. Applicable Law
This Privacy Policy is governed by Australian law, including the Privacy Act 1988 (Cth), the Australian Privacy Principles, the Notifiable Data Breaches scheme, the Spam Act 2003 (Cth), and the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).
