Privacy Collection Notice

1. What we collect

The Website collects the following personal information:

• Register your interest form — your name, business or store name, email address, mobile phone number, state, and any free-text notes you choose to provide.
• Competition entry form (where available) — your name, email address, mobile phone number, Australian state, and postcode.
• Technical information— anonymous analytics events (page views, scroll depth, section visibility, CTA clicks, form field focus, form submissions), viewport size, referrer, UTM tags if present, and a pseudonymous session identifier stored in browser session storage. Your IP address is hashed with a daily-rotating salt before storage — we don't retain raw IPs.

We don't use persistent tracking cookies for marketing, we don't sell personal information, and the Website honours the Do-Not-Track browser header.

2. Why we collect it

We use personal information you submit to:

• contact you about the Tap Payments product if you registered your interest, and follow up on onboarding if you begin a merchant signup;
• run, draw, and administer any competition you choose to enter, and notify the winner; and
• improve the Website — analysing which sections get engagement, where forms drop off, and how we can make the signup path clearer.

Personal information collected through a competition entry form is used only for the purposes of running that competition. Competition entry details are not used for marketing or other promotions.

3. Disclosure

We don't disclose your personal information to any third party except where strictly necessary to:

• host the Website and the systems that receive your submissions (our cloud infrastructure providers, under contract and subject to confidentiality obligations); or
• comply with a legal obligation, court order, or request from a law enforcement or regulatory authority.

If we ever transfer personal information outside Australia, we take reasonable steps to ensure the overseas recipient handles it in a way consistent with the Australian Privacy Principles.

4. Retention

We keep your personal information only as long as we need it for the purpose it was collected. Competition entries are deleted after the competition has closed and any prize has been claimed. Waitlist submissions are kept until you ask us to delete them or until we've completed onboarding you as a merchant.

5. Your rights

You can ask us to:

• give you access to the personal information we hold about you;
• correct anything that's inaccurate or out of date; or
• delete your personal information where we are not required by law to keep it.

Email privacy@tappayments.com.au for any privacy request. We'll respond within 30 days.

6. Security

Personal information is held on systems protected by industry- standard encryption in transit and at rest, access controls, and routine security reviews. No system is perfectly secure; if we ever become aware of an eligible data breach affecting your information, we'll notify you as required by the Privacy Act 1988.

7. Complaints

If you think we've mishandled your personal information, email privacy@tappayments.com.au. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner.