DigiPass ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our services, you agree to the terms of this Privacy Policy.

 

​

1. What Information We Collect

​

We may collect and process the following types of personal information:

• Personal Details: Name, email address, phone number, business details.

• Technical Data: IP addresses, device information, browser type, access logs.

• Usage Data: Interaction with our platform, login times, and preferences.

• Payment Information: When applicable, billing details and transaction history.

​

We do not collect sensitive personal information (e.g., health, racial, political, or religious data).

​

2. How We Collect Your Information

 

We collect personal information directly from you when you:

• Register for our services.

• Create or manage a digital pass via our platform.

• Contact our support team.

• Interact with our website or mobile services.

​

We may also collect technical data via cookies and analytics tools (e.g., Google Analytics).

​

3. How We Use Your Information

 

We use your information for the following purposes:

• To provide and manage our digital pass services.

• To communicate with you about updates and support requests.

• To enhance our platform’s security and performance.

• To comply with legal obligations.

 

We will not sell or share your personal information for marketing purposes.

 

4. Disclosure of Your Information

​

We may share your personal data with:

​

• Third-party service providers: Including, but not limited to, Apple, Google, Cloudflare, and HubSpot, for purposes such as analytics, security, and customer relationship management (CRM).

• Legal authorities: If required by law or to protect against fraud and misuse.

​

5. Cross-Border Data Transfers

​​

• DigiPass infrastructure is hosted on servers located in Germany, provided by Hetzner Online GmbH — a trusted European hosting provider. These data centres are ISO/IEC 27001 certified, ensuring a high standard of information security management.

​

• Under APP 8 (Cross-Border Disclosure of Personal Information), DigiPass takes reasonable steps to ensure that any overseas recipients handle your personal data in compliance with Australian privacy laws. We work with partners who implement the European Commission’s Standard Contractual Clauses (SCCs) under GDPR to safeguard international data transfers.

 

By using DigiPass, you consent to the transfer of your personal information to Germany.

 

6. How We Protect Your Information

​

We implement appropriate security measures to protect your personal information, including:

• Encryption of data in transit and at rest.

• Access controls to restrict unauthorised access.

• Regular security audits and vulnerability assessments.

 

7. Your Privacy Rights

​

You have the right to:

• Access your personal information held by us.

• Request correction of inaccurate or outdated data.

• Request deletion of your personal information, subject to legal obligations.

• Opt out of direct marketing communications.

​

To exercise these rights, contact us at support@digipass.com.au.

 

8. Data Breach Notification

​

In the event of a data breach that is likely to cause serious harm, we will notify:

 

1. The Office of the Australian Information Commissioner (OAIC), as required under the Notifiable Data Breaches (NDB) scheme).

​

2. Affected users, outlining the nature of the breach and steps to mitigate harm.

 

9. Retention & Deletion of Data

 

• We retain personal information only as long as necessary for operational and legal purposes.

• Upon termination of service, you may request data deletion, subject to compliance with legal record-keeping obligations.

 

10. Contact Us

​

For privacy-related questions or to make a request regarding your data, contact us at: support@digipass.com.au

​​

This Privacy Policy may be updated periodically. We will notify you of significant changes by posting an updated version on our website.

​

Updated: February 2025