DigiPass Privacy Policy

Last Updated: 7 February 2025

 

DigiPass ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using our services, you agree to the terms of this Privacy Policy.

 

​

1. What Information We Collect

We may collect and process the following types of personal information:

- Personal Details: Name, email address, phone number, business details.

- Technical Data: IP addresses, device information, browser type, access logs.

- Usage Data: Interaction with our platform, login times, and preferences.

- Payment Information: When applicable, billing details and transaction history.

 

We do not collect sensitive personal information (e.g., health, racial, political, or religious data).

 

2. How We Collect Your Information

We collect personal information directly from you when you:

- Register for our services.

- Create or manage a digital pass via our platform.

- Contact our support team.

- Interact with our website or mobile services.

 

We may also collect technical data via cookies and analytics tools (e.g., Google Analytics).

 

3. How We Use Your Information

We use your information for the following purposes:

- To provide and manage our digital pass services.

- To communicate with you about updates and support requests.

- To enhance our platform’s security and performance.

- To comply with legal obligations.

 

We will not sell or share your personal information for marketing purposes without your consent.

 

4. Disclosure of Your Information

We may share your personal data with:

- Passcreator (Fobi AI Germany GmbH): Our service provider that hosts and processes DigiPass infrastructure.

- Third-party service providers: Including Google, Cloudflare, HubSpot (for analytics, security, and CRM).

- Legal authorities: If required by law or to protect against fraud and misuse.

 

5. Cross-Border Data Transfers

DigiPass operates using Passcreator’s infrastructure, which is hosted in the European Union (EU) and may process data in other countries, including the United States and Canada.

 

Under APP 8 (Cross-Border Disclosure of Personal Information), we take reasonable steps to ensure that overseas recipients handle your data in compliance with Australian privacy laws. Passcreator uses Standard Contractual Clauses (SCCs) under GDPR for secure data transfers.

 

By using DigiPass, you consent to the transfer of your personal information to these international locations.

 

6. How We Protect Your Information

We implement appropriate security measures to protect your personal information, including:

- Encryption of data in transit and at rest.

- Access controls to restrict unauthorised access.

- Regular security audits and vulnerability assessments.

 

7. Your Privacy Rights

You have the right to:

- Access your personal information held by us.

- Request correction of inaccurate or outdated data.

- Request deletion of your personal information, subject to legal obligations.

- Opt out of direct marketing communications.

 

To exercise these rights, contact us at privacy@digipass.com.au.

 

8. Data Breach Notification

In the event of a data breach that is likely to cause serious harm, we will notify:

1. The Office of the Australian Information Commissioner (OAIC), as required under the Notifiable Data Breaches (NDB) scheme).

2. Affected users, outlining the nature of the breach and steps to mitigate harm.

 

9. Retention & Deletion of Data

We retain personal information only as long as necessary for operational and legal purposes. Upon termination of service, you may request data deletion, subject to compliance with legal record-keeping obligations.

 

10. Contact Us

For privacy-related questions or to make a request regarding your data, contact us at: privacy@digipass.com.au

​

This Privacy Policy may be updated periodically. We will notify you of significant changes by posting an updated version on our website.