Privacy Policy

BeaconTable Pty Ltd (ABN 90 696 057 119) ("BeaconTable", "we", "us", "our") respects your privacy. This Policy explains how we collect, use, hold and disclose personal information when you use our website, mobile application and related platform (the "Platform"), and applies to both Customers and Venue Owners.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and, where you are a New Zealand-based User, the Privacy Act 2020 (NZ) and its Information Privacy Principles (IPPs). Defined terms (Customer, Venue Owner, Venue, Beacon, Loyalty Program) have the same meaning as in our Terms of Service.

1. What Personal Information We Collect

1.1 Account information — name, email address, password, and (for Venue Owners) business name, business registration details, and contact details.

1.2 Location data — with your device permission, we use your precise GPS location in real time to find and rank nearby Venues (e.g. distance-based search and sorting). This location data is used only to process that search and is not stored or retained by us afterwards. Separately, a Venue Owner's business address is geocoded to a fixed location when their Venue is set up — this is the Venue's own public location, not a record of any Customer's location.

1.3 Beacon proximity data — when you use the Platform as a Customer with Bluetooth enabled, your device detects nearby Beacons broadcasting from registered Venues once you are physically at or near that Venue. We use this to confirm your visit and measure dwell time (e.g. for Venue Owner analytics) — Beacon detection is not how Venues are found or recommended to you in the first place (that's location data, above), and we do not use Beacon detection to track your movements once you are away from a Venue's Beacon range.

1.4 In-app usage analytics — we automatically collect aggregated usage activity to operate and improve the Platform, such as venue-search and menu-search activity, notifications sent, and Venue check-in/dwell-time statistics (see Beacon proximity data, above). This is recorded at the Venue level, not as an individual profile of your browsing or device activity.

1.5 Venue and Menu Content — for Venue Owners, the menu items, prices, dietary/allergen information, and images you upload.

1.6 Loyalty Program data — stamps earned, rewards redeemed, and participation history in a Venue's Loyalty Program.

1.7 Payment information — for Venue Owner Subscriptions, payment details are collected and processed by our payment processor, Stripe; we do not store full card numbers ourselves.

We only collect information necessary to provide the Services. If you don't provide certain information (e.g. an email address), we may not be able to create your Account or provide some features.

2. How We Use Your Personal Information

We use personal information to:

• create and manage your Account;
• provide the Services, including location-based Venue discovery, Beacon-based visit confirmation, digital menus, dietary/allergen filtering, and Loyalty Programs;
• process Venue Owner Subscription payments and communicate about billing;
• respond to support requests;
• detect and prevent fraud, abuse, or breaches of our Terms of Service;
• send you Beacon-triggered notifications when you're near a Venue, and, where you have not opted out, marketing communications; and
• improve and develop the Platform, including through aggregated or de-identified analytics.

3. How We Disclose Personal Information

3.1 Between Customers and Venue Owners. When you participate in a Venue's Loyalty Program, relevant information (e.g. your stamp/reward status) is shared with that Venue Owner so they can operate their Loyalty Program.

3.2 Service providers. We disclose information to third parties who help us operate the Platform, including our infrastructure, database and authentication provider Supabase (including hosting and sending account-related emails such as password resets), our payment processor Stripe (for Venue Owner Subscription payments), Cloudflare Turnstile (spam/bot protection on our contact form), and Resend (sending emails generated by our contact form). These providers are only permitted to use your information to provide services to us.

3.3 Legal and safety. We may disclose personal information where required by law, to enforce our Terms of Service, or to protect the rights, property or safety of BeaconTable, our Users, or the public.

3.4 Business transfers. If BeaconTable is involved in a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring party as part of that transaction, for the purpose of continuing to provide the Services.

3.5 We do not sell personal information to third parties for their own independent marketing purposes.

4. Overseas Disclosure

Some of our service providers (e.g. cloud hosting) may store or process personal information outside Australia and New Zealand. Before disclosing personal information overseas, we take reasonable steps to ensure the overseas recipient handles it consistently with the APPs (Australia) or the IPPs (New Zealand), including through contractual protections.

5. Data Security

We use reasonable technical and organisational measures to protect personal information from misuse, loss, and unauthorised access. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or stored on the Platform.

6. Data Retention

We retain personal information for as long as your Account is active, and for a reasonable period afterwards where needed to meet legal, accounting, or dispute-resolution obligations (for example, transaction and Loyalty Program records). You may request deletion of your information as described in section 7, subject to these retention requirements.

7. Your Rights

7.1 Access and correction. You may request access to, or correction of, the personal information we hold about you by emailing privacy@beacontable.com. We will respond within a reasonable time and, in most cases, at no cost.

7.2 Deletion. You may request that we delete your Account and associated personal information, subject to our retention obligations under section 6.

7.3 Marketing opt-out. You can opt out of marketing communications at any time using the unsubscribe link in our emails, or through your Account settings.

7.4 Complaints. If you believe we have handled your personal information in breach of applicable privacy law, please contact us first at privacy@beacontable.com so we can try to resolve it. If you are not satisfied with our response:

• Australian Users may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
• New Zealand Users may lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.

8. Cookies and Similar Technologies

On our website, Venue Owner portal sessions are held in your browser's local session storage rather than cookies. We and our service providers (see section 3.2) may still use cookies or similar technologies for functionality such as spam protection on our contact form. You can control cookies through your browser settings; disabling them may affect some Platform features.

9. Children's Privacy

The Platform is not directed at children. Customer Accounts require a minimum age of 16 (see our Terms of Service). We do not knowingly collect personal information from children under this age. If you believe a child has provided us with personal information, contact us at privacy@beacontable.com and we will take steps to delete it.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified through the Platform or by email, with at least 30 days' notice where reasonably practicable. Continued use of the Platform after a change takes effect constitutes acceptance of the updated Policy.

11. Contact Us

BeaconTable Privacy Officer Email: privacy@beacontable.com Greensborough VIC 3088, Australia