Privacy Policy

We collect only what we need to take, deliver and support your orders:

• Account information — your name, email address, password (stored only as an encrypted hash by our authentication provider), business/company name and account role (customer, driver or administrator).
• Contact details — email address and mobile/phone number, used to confirm orders and coordinate delivery.
• Delivery addresses — street address, suburb, postcode, access notes and the approximate map coordinates of that address.
• Order details — products and quantities ordered, prices, GST, delivery fees, delivery date, order status history, delivery notes and proof-of-delivery records.
• Payment information — payment method (cash on delivery or card), payment status and a Stripe transaction reference. See “Payments” below.
• Device information — device and browser type, operating system version, app version, language, IP address, and diagnostic or crash logs used to keep the service secure and working.
• Location / GPS data — for driver accounts only, as described below.

Driver accounts share device location so that we can track deliveries, show customers live progress, and plan efficient delivery routes. We collect latitude and longitude, GPS accuracy, heading and speed, together with the time of each reading.

• Location is collected only while a driver is signed in and has started a shift, and stops as soon as the shift ends or the driver signs out.
• Background location is used only when it is required for active delivery work — so tracking keeps working while the phone is locked or the app is not on screen during a delivery run. A persistent notification is shown on Android while background location is active.
• Location is used for delivery tracking, estimated arrival times, route optimisation and delivery record-keeping. It is never used for advertising or sold to anyone.
• Customers see only the approximate position of the driver assigned to their own active order, and only while that delivery is in progress.
• Drivers can withdraw location permission at any time in the device settings; delivery tracking features will then stop working.

We do not collect location data from customer or administrator accounts, other than the delivery addresses you choose to save.

• Create and manage your account and keep you signed in securely.
• Process, deliver and invoice your orders, including cash-on-delivery collection.
• Send order confirmations, delivery updates and service messages.
• Plan delivery routes and provide live delivery tracking.
• Provide customer support and resolve delivery or payment issues.
• Detect and prevent fraud, abuse and security incidents.
• Meet our tax, accounting and other legal obligations.

Card payments are processed securely by Stripe. Your full card number, expiry date and security code are entered on Stripe’s systems and are never stored by us and never pass through our own servers. We retain only the payment status, amount and Stripe reference so we can match a payment to your order. Stripe handles that data as an independent controller under its own privacy policy at stripe.com/au/privacy. For cash-on-delivery orders we record only that cash was collected and the amount.

We do not sell your personal information. We share it only with:

• Our drivers — the delivery address, contact name, phone number and order contents needed to complete your delivery.
• Stripe — to process card payments.
• Hosting, database and authentication providers — to store and run the service on our behalf under confidentiality obligations.
• Mapping and routing services (Google Maps Platform / OpenStreetMap) — delivery addresses and coordinates are sent to calculate and optimise delivery routes.
• Authorities — where we are required to by law.

Some of these providers may store or process data outside Australia. We take reasonable steps to ensure they protect your information to a comparable standard.

Data is transmitted over encrypted connections (HTTPS/TLS) and stored in access- controlled databases with row-level security so that each account can only reach its own records. On mobile devices, sign-in tokens are held in the platform’s secure storage (iOS Keychain / Android encrypted storage).

We keep order and payment records for as long as required by Australian tax and business law (generally seven years). Driver location history is kept only as long as needed for delivery verification and route reporting, and is then deleted or aggregated. Account details are kept until you ask us to delete them.

You can view and update your name, contact details and delivery addresses at any time in your account settings. You may also ask us to:

• give you a copy of the personal information we hold about you;
• correct anything that is inaccurate or out of date;
• delete your account and personal information (we may need to keep order and payment records required by law);
• withdraw consent for location collection or notifications.

Email privacy@samerantibeadingtoday.com.au with the subject “Privacy request”. We respond within 30 days. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Our service is intended for business and trade customers. We do not knowingly collect personal information from children under 16.

If you allow notifications, we store an anonymous device token so we can send order and delivery updates. You can turn notifications off at any time in your device settings.

We may update this policy as the service changes. The latest version is always available at this page, and material changes will be highlighted in the app.

S.A. Meranti Beading Today (Meranti Beading SA)
12 Deacon Avenue, Richmond SA 5033, Australia
Email: support@samerantibeadingtoday.com.au
Mobile: 0430 299 377