Our privacy commitment

Privacy policy overview

In this Privacy Policy, 'us' 'we' or 'our' means PAWSSUM PTY LTD (ACN 610 705 096). We are committed to respecting your privacy. Our Privacy Policy sets out how we collect, use, store and disclose your personal information. We are bound by the Australian Privacy Principles contained in the Privacy Act.

Policy from time to time by publishing changes to it on our website. We encourage you to check our website periodically to ensure that you are aware of our current Privacy Policy.

Personal information includes information or an opinion about an individual that is reasonably identifiable. For example, this may include your name, address and contact details of yourself and your pets, and it may also include credit card information.

What personal information do we collect?

We may collect the following types of personal information:

name;
mailing and/or residential street address;
email address;
telephone number and other contact details;
age or date of birth;
credit card information;
any information about your pet, provided as a result of your interaction with the Pawssum system or with any of our service providers;
your device ID, device type, geo-location information, computer and connection information, statistics on page views, traffic to and from the sites, advertising data, IP address and standard web log information;
details of the products and services we have provided to you or that you have enquired about, including any additional information necessary to deliver those products and services and respond to your enquiries;
any additional information relating to you that you provide to us directly through our website or app or indirectly through your use of our website or app or online presence or through other websites or accounts from which you permit us to collect information;
information you provide to us through customer surveys;
customer feedback forms or any other personal information that may be required in order to facilitate your dealings with us;

We may collect these types of personal information either directly from you, or from third parties. We may collect this information when you:

register to use our website or app;
communicate with us through correspondence, chats, email, or when you share information with us from other social applications, services or websites;
interact with our sites, services, content and advertising; or
invest in our business or enquire as to a potential purchase in our business.
provide feedback to us
interact with us through social media

When will we collect, use and disclose personal information?

We may collect, hold, use and disclose your personal information for the following purposes:

to enable you to access and use our website, services and app;
to operate, protect, improve and optimise our website, services, app, business and our users' experience, such as to perform analytics, conduct research and for advertising and marketing;
to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you;
to send you marketing and promotional messages and other information that may be of interest to you;
to administer rewards, surveys, contests, or other promotional activities or events sponsored or managed by us;
to comply with our legal obligations, resolve any disputes that we may have with any of our users, and enforce our agreements with third parties; and
to consider your employment application.

We may also disclose your personal information to a trusted third party who also holds other information about you. This third party may combine that information in order to enable it and us to develop anonymised consumer insights so that we can better understand your preferences and interests, personalise your experience and enhance the products and services that you receive.

Do we use your personal information for direct marketing?

We may send you direct marketing communications and information about our services and products. This may take the form of emails, SMS, mail or other forms of communication, in accordance with the Spam Act and the Privacy Act. You may opt-out of receiving marketing materials from us by contacting us using the details set out below or by using the opt-out facilities provided (e.g. an unsubscribe link). Pawssum does not sell or share your personal information to third parties for third party direct marketing purposes.

To whom do we disclose your personal information?

We may disclose personal information for the purposes described in this Privacy Policy to:

our employees and related bodies corporate;
third party suppliers and service providers (including providers for the operation of our websites and/or our business or in connection with providing our products and services to you);
payment systems operators (e.g. merchants receiving card payments);
anyone to whom our assets or businesses (or any part of them) are transferred;
specific third parties authorised by you to receive information held by us; and/or
other persons, including government agencies, regulatory bodies and law enforcement agencies, or as required, authorised or permitted by law.

Disclosure of personal information outside Australia

We may disclose personal information outside of Australia to various cloud providers located in the United States of America.

When you provide your personal information to us, you consent to the disclosure of your information outside of Australia and acknowledge that we are not required to ensure that overseas recipients handle that personal information in compliance with Australian Privacy Law. We will, however, take reasonable steps to ensure that any overseas recipient will deal with such personal information in a way that is consistent with the Australian Privacy Principles.

Using our website and cookies

We may collect personal information about you when you use and access our website.

While we do not use browsing information to identify you personally, we may record certain information about your use of our website, such as which pages you visit, the time and date of your visit and the internet protocol address assigned to your computer.

We may also use 'cookies' or other similar tracking technologies on our website that help us track your website usage and remember your preferences. Cookies are small files that store information on your computer, TV, mobile phone or other device. They enable the entity that put the cookie on your device to recognise you across different websites, services, devices and/or browsing sessions. You can disable cookies through your internet browser but our websites may not work as intended for you if you do so.

We may also use cookies to enable us to collect data that may include personal information. For example, where a cookie is linked to your account, it will be considered personal information under the Privacy Act. We will handle any personal information collected by cookies in the same way that we handle all other personal information as described in this Privacy Policy.

Security

We may hold your personal information in either electronic or hard copy form. We take reasonable steps to protect your personal information from misuse, interference and loss, as well as unauthorised access, modification or disclosure and we use a number of physical, administrative, personnel and technical measures to protect your personal information. For example, we use TLS 1.2 encryption for our website and data is stored in secure data centres which comply with various standards such as PCI (DSS) Level 1, PCI (SAQ C 2.0), and SOC 2 Type II.

In accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), our organisation does not directly store, process, or transmit credit card information. All payment details are processed exclusively through our trusted payment processor, Stripe (a PCI-DSS Level 1 certified service provider). When you provide credit card information, it is transmitted directly to Stripe via secure connections utilising TLS/SSL encryption protocols.

Stripe tokenises and securely stores your payment information in accordance with the strictest industry standards and relevant Australian regulations, including requirements set by the Australian Prudential Regulation Authority (APRA) and the Reserve Bank of Australia (RBA). This approach ensures that your sensitive financial data remains protected through multiple security measures, including network segregation, encryption of data at rest and in transit, comprehensive monitoring systems, and regular security audits.

By outsourcing payment processing to Stripe, we comply with Australian data protection requirements while maintaining a high level of security for your financial information. We handle any personal information associated with payments in accordance with our obligations under the Privacy Act 1988 (Cth). For more information about how Stripe handles your payment data, please refer to Stripe's Privacy Policy and their specific Australian privacy practices.

Stripe may collect personal data, including transactional data and identifying information about devices that connect to their services, to operate and improve their services, including for fraud detection, loss prevention, authentication, and analytics related to the performance of their services. You can learn more about Stripe and read their privacy policy here.

Links

Our website may contain links to websites operated by third parties. Those links are provided for convenience and may not remain current or be maintained. Unless expressly stated otherwise, we are not responsible for the privacy practices of, or any content on, those linked websites, and have no control over or rights in those linked websites. The privacy policies that apply to those other websites may differ substantially from our Privacy Policy, so we encourage individuals to read them before using those websites.

Accessing or correcting your personal information

You can access the personal information we hold about you by contacting us using the form here. Sometimes, we may not be able to provide you with access to all of your personal information and, where this is the case, we will tell you why. We may also need to verify your identity when you request your personal information.

If you think that any personal information we hold about you is inaccurate, please contact us and we will take reasonable steps to ensure that it is corrected.

Making a complaint

If you think we have breached the Privacy Act, or you wish to make a complaint about the way we have handled your personal information, you can contact us using the Contact Us function on our website here. Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time. If you think that we have failed to resolve the complaint satisfactorily, we will provide you with information about the further steps you can take.

Contact us

For further information about our Privacy Policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the form on our website here.