Privacy Collection Notice

Draft for legal review. This notice is given under Australian Privacy Principle 5. It must be reviewed with the full Privacy Policy before launch.

What we collect

When you open and verify a Qrisp account, we collect:

• your name, email address and mobile number
• your business details, including its ABN, address and what it sells
• details of the business's directors and beneficial owners: names, dates of birth, roles, ownership, and identity documents
• the bank account your payments are paid to
• technical details when you use Qrisp, such as your IP address and device

Why we collect it

• to open and run your account and process your payments
• to verify your identity and your business, as the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) requires
• to prevent fraud and scams
• to contact you about your account

If you don't provide this information, we can't open your account.

Who we share it with

• our licensed payments partner, to process payments and verify your account
• identity verification providers, which may check your details against government records, such as the Document Verification Service
• the Australian Business Register, to confirm your ABN
• an AI service provider (Anthropic), which helps our team review applications. We send business details, the names and roles of the people listed, their ages (not full dates of birth) and check results. We don't send ID numbers or bank account numbers. A person makes every decision to decline an application.
• hosting and email providers that help us run Qrisp
• regulators and law enforcement, including AUSTRAC, where the law requires

We store information in Australia wherever our providers allow it. Some providers may store information overseas. We'll name the countries involved in the final Privacy Policy.

Your rights

You can ask to see or correct your information, or complain about how we've handled it. Email privacy@qrisp.com.au. Our full Privacy Policy is at qrisp.com.au/legal/privacy.