Privacy policy

Qrisp ("we", "us") is committed to protecting personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What we collect

Waitlist: your email, business name, business type and postcode.
Merchants: account details, business name, ABN, contact details, identity verification information, and the bank account payments are sent to.
Customers who pay by QR: the payment amount, the time, your bank's name and a payment reference. Your bank handles your login and account details, and we don't receive them.
Technical data: IP address, device and browser information, used for security and fraud prevention.

Why we collect it

To provide the service: creating QR codes, processing payments through our payments partner, and showing merchants their transactions.
To meet legal obligations, including the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).
To prevent fraud and keep accounts secure.
To contact waitlist members about Qrisp. You can unsubscribe at any time.

Who we share it with

We share information only as needed to run the service: our licensed payments partner, identity verification and hosting providers, and regulators or law enforcement where the law requires. We do not sell personal information.

Storage and security

We store data in Australia wherever our providers allow it, encrypt data in transit, and limit staff access to what each role needs. If an eligible data breach occurs, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.

Your choices

You can ask to see or correct your personal information, or ask us to delete it, subject to the record-keeping periods the law requires (for example, seven years for certain AML/CTF records). Email privacy@qrisp.com.au.

Complaints

Contact privacy@qrisp.com.au first, and we'll respond within 30 days. If you're not satisfied, you can complain to the OAIC at oaic.gov.au.