Privacy Policy

This privacy policy was last updated 08/04/24

1. About our Privacy Policy

   1. The privacy of your Personal Information is important to Grineo. We respect your rights to privacy and rights under the Privacy Act and are committed to complying with the requirements of the Privacy Act in the collection and handling of your Personal Information.
   2. This policy explains how we collect, retain, process, share, transfer and handle your Personal Information and describes the kinds of Personal Information we collect, use, and disclose and our purposes for doing so.
   3. When we undertake activities in Australia, or if you are located in Australia, we are regulated by the Privacy Act, the Australian Privacy Principles and other applicable laws and codes in relation to your personal information.
   4. We use some defined terms in this policy. You can find the meaning of each defined term at section 2 of this policy.
   5. Personal Information is information which may be used to reasonably identify you. For example, your name, address, date of birth, gender, email address, telephone number is generally considered to be Personal Information. Personal Information may also include information we collect about your individual preferences. We do not collect Sensitive Information from you.
   6. This policy applies to your Personal Information when you use our Website or App, and interact generally with us but does not apply to Third Party Sites. We are not responsible for the privacy policies or content of Third Party Sites.
   7. For the avoidance of doubt, unless stated otherwise, this policy will govern our collection of your Personal Information irrespective of the forum.
   8. This policy may be updated from time to time and the most up to date version will be published on our Website. We encourage you to check our Website periodically to ensure that you are aware of our current policy.
   9. Your continued usage of our Website, App, and/or services will be taken to indicate your acceptance of the terms of this privacy policy insofar as it relates to our Website, App, and the services.

2. Definitions used in this policy

   1. Analytics Services means any third party website analytics provider.
   2. App means the mobile application that operates and supports the services we provide to you.
   3. Australian Privacy Principles or APPs means the principles set out in Schedule 1 to the Privacy Act.
   4. IP Address means a number automatically assigned to your computer which is required when you are using the internet and which may be able to be used to identify you.
   5. Grineo means Grineo Pty Ltd (ACN 663 984 629).
   6. Hay means Hay Limited (ABN 34 629 037 403), holder of Australian Financial Services Licence 515459.
   7. Overseas means any place or country other than Australia, and includes without limitation the United States and United Kingdom.
   8. Personal Information has the meaning as set out in section 6(1) of the Privacy Act.
   9. Privacy Act means the Privacy Act 1988 (Cth) as amended from time to time.
   10. Privacy Policy means this privacy policy as amended from time to time, available at Privacy policy.
   11. Sensitive Information has the meaning as set out in section 6(1) of the Privacy Act;
   12. Third Party Sites means online websites or services that we do not own or control, including websites of our partners
   13. Website means https://grineopay.com and/or any other website as we may operate from time to time.
   14. we, our, us and similar terms means Grineo Pty Ltd ACN 663 984 629 and our related entities.
   15. you, your and similar terms means, as the context requires (1) you, when you use our Website and/or App; and/or (2) you, during your dealings with us as a customer; and/or (3) any agent providing your Personal information to us; and/or (4) any agent dealing with us on your behalf.

3. Why we collect Personal Information

   1. When you visit our Website or use our App, we collect Personal Information so that we can provide you with products and services and improve and customise your experience with us. We only collect Personal Information if it is reasonably necessary for us to carry out our functions and activities. If you do not wish to provide us with some or all of the information that we ask for, we may not be able to verify your identity and as such you may not be able to use the services.
   2. The purposes for which we collect and hold your Personal Information include:
      1. to deliver our products and services to you;
      2. to confirm your identity and process your transactions;
      3. to improve our products and services, including the services provided to you and the performance and functionality of our Website and App;
      4. to manage our relationship with you, evaluate our business performance and build our customer database;
      5. to provide you with information about our products, services and activities;
      6. to respond to your requests and seek your feedback;
      7. to provide and improve technical support and customer service;
      8. to conduct research, compare information for accuracy and verification purposes, compile or analyse statistics relevant to the operations of our business;
      9. to facilitate our internal business operations, including fulfilment of any legal and regulatory requirements and monitoring, and investigating breaches of or enforcement of any legal terms applicable to our services, the Website and the App;
      10. to protect our property, the Website, the App, or our legal rights including to create backups of our business records;
      11. to manage risk and protect our Website and App from fraud by verifying your identity and helping to detect and prevent fraudulent use of our Website and App;
      12. for the direct marketing and promotional purposes as set out below; and
      13. to manage our business, including analysing data collected from our Website or App concerning visits and activities of users on our Website or App including the Analytics Services. This analysis helps us run our Website and App more efficiently and improve and personalise your experience online.

4. What Personal Information do we collect?

   1. The kinds of Personal Information we collect will depend on the type of interaction you have with us. Generally, the kinds of Personal Information we collect may include:
      1. your name, address (postal and residential), email address, telephone number(s), date of birth, photo or likeness, and gender when you register with us;
      2. information from third party sources such as data providers and credit organisations, where permitted by law, including public blockchain data such as your nominated public key for a digital asset wallet;
      3. details of the device you have used to access any part of our Website or App, including carrier/operating system, connection type, IP address, browser type and referring URLs and other information may be collected and used by us automatically if you use our Website or App, through the browser on your device or otherwise;
      4. information recorded on identity documents and copies of such identity documents when you register with us;
      5. location data;
      6. your connections with others whose personal information we may collect or hold; and
      7. transaction details relating to your use of our products, services or rewards including data regarding your feature usage patterns, interactions on our Website or App, and interactions with us.
   2. Telephone calls to us may also be recorded for training and quality assurance purposes.

5. With whom do we share Personal Information?

   1. We may disclose Personal Information collected from you:
      1. to our related entities, employees, officers, agents, contractors, other companies that provide services to us or with whom we partner to provide services to you (including Hay), sponsors, government agencies or other third parties to satisfy the purposes for which the information was collected (as outlined in clause 3.2 of this policy) or for another purpose if that other purpose is closely related to the primary purpose of collection and an individual would reasonably expect us to disclose the information for that secondary purpose;
      2. to third parties who help us to verify the identity of our clients and customers, and other software service providers who assist us to provide the services we provide to you;
      3. to third parties who help us analyse the information we collect so that we can administer, support, improve or develop our business and the services we provide to you including off-site back ups and customer support;
      4. to law enforcement or government agency, in our discretion or if required by a law, or legal process, such as a subpoena, court or other legal process with which we are required to comply, including in relation to our obligations under the Anti-Money Laundering and Counter Terrorism Financing Act 2006 (Cth);
      5. if disclosure is required to enforce the terms of this policy or to enforce any of our terms and conditions with you;
      6. to our professional advisers such as consultants and auditors so that we can meet our regulatory obligations, and administer, support, improve or develop our business;
      7. to any other person, with your consent (express or implied);
      8. to facilitate the sale of all or a substantial part of our assets or business or to companies with which we propose to merge or who propose to acquire us and their advisers;
      9. to protect the interests of our users, clients, customers and third parties from cyber security risks or incidents and other risks or incidents; and
      10. to maintain the integrity of our Website and App and to protect our rights, interests and property and those of third parties.
   2. In addition to the above recipients, we will disclose your Personal Information if we are required to do so under law or if the disclosure is made in connection with either the normal operation of our business in a way that you might reasonably expect, for example, if such disclosure is incidental to IT services being provided to our business or for the resolution of any dispute that arises between you and us. This disclosure may involve your Personal Information being transmitted Overseas.
   3. In the event of a proposed restructure or sale of our business (or part of our business) or where a company proposes to acquire or merge with us, we may disclose Personal Information to the buyer and their advisers without your consent subject to compliance with the Privacy Act. If we sell the business and the sale is structured as a share sale, you acknowledge that this transaction will not constitute the “transfer” of Personal Information.
   4. We may disclose de-identified, aggregated data with third parties for marketing, advertising, and analytics purposes. We do not sell or trade your personal information to third parties.

6. How we collect and store data and transmit Personal Information

   1. We usually collect and store information including in paper, physical and electronic form provided by you when you communicate with us by telephone, email, web-based form, letter, facsimile or other means, including when:
      1. we provide you with our services via telephone, email or our Website or App;
      2. we provide you with assistance or support for our products or services;
      3. you participate in our functions, events or activities or on our Website, App and social media pages;
      4. you request that we provide you with information concerning our products or services;
      5. you upload or submit information to us or our Website or App; or
      6. you complete any forms requesting information from you, including on registration with us, complete any survey or provide feedback to us concerning our products or services.
   2. Where practicable we will collect information from you personally. However, we may also collect your Personal Information through our partners and third parties who supply services to us.
   3. Please note that we use our own and third party computer servers including our Website or App hosts, data backups and payment gateway(s), which may be located Overseas and your Personal Information may be stored and transmitted Overseas as part of the normal operation of our business.
   4. We do not accept responsibility for Personal Information being released to public blockchains through the use of our Website or App, whether it be through public smart contracts or metadata matching.
   5. We also collect information from your computer or mobile device automatically when you browse our Website or App. This information may include:
      1. the date and time of your visit;
      2. your domain;
      3. locality;
      4. operating system;
      5. the server your computer or mobile is using to access our Website or App;
      6. your browser and version number;
      7. search terms you have entered to find our Website or App or to access our Website or App;
      8. pages and links you have accessed both on our Website and on other websites;
      9. the last website you visited;
      10. the pages of our Website or App that you access;
      11. the device you use to access our Website or App; and
      12. your IP Address.
   6. While we do not use some of this information to identify you personally, we may record certain information about your use of our Website or App such as which pages you visit and the time and date of your visit and that information could potentially be used to identify you.
   7. It may be possible for us to identify you from information collected automatically from your visit(s) to our Website or App. If you have registered an account with us, we will be able to identify you through your user name and passkey when you log into our Website or App. Further, if you access our Website or App via links in an email we have sent you, we will be able to identify you.
   8. The device you use to access our Website or App may collect information about you including your location using longitude and latitude co-ordinates obtained through GPS, Wi-Fi or cell site triangulation. For information about your ability to restrict the collection and use of such information, please use the settings available on your device.
   9. We may use statistical analytics software tools and software known as cookies which transmit data to third party servers located Overseas. To our knowledge, our analytic providers do not identify individual users or associate your IP Address with any other data held by them.
   10. We will retain your Personal Information for any time period we consider necessary to provide our products and services to you and to comply with our legal obligations. The period may vary depending on the type of Personal Information we hold. If we no longer need your Personal Information for these purposes we will take steps to destroy the information or ensure it is de-identified.

7. How we protect your Personal Information

   1. We will endeavour to take all reasonable steps to keep secure and protect any Personal Information which we hold about you, including:
      1. securing our physical premises and digital storage media;
      2. using computer safeguards such as Secure Socket Layer (SSL) technology to ensure that your information is encrypted and sent across the Internet securely;
      3. placing password protection and access control over our information technology systems and databases to limit access and protect electronic information from unauthorised interference, access, modification and disclosure; and
      4. taking regular back-ups of our electronic systems.
   2. Notwithstanding that we will take all reasonable steps to keep your Personal Information secure, data transmission over the internet is never guaranteed to be completely secure. We do not and cannot warrant the security of any information you transmit to us or from any online services.

8. Use of Cookies

   1. When you visit our Website or App or the website of any of our partners, we and our partners may use cookies and other tracking technology (Cookies) to recognise you and customise your online experience. Cookies are small files that store information on your computer, mobile phone or other device. They enable us to recognise you across different websites, services, devices and/or browsing sessions. Cookies also assist us to customise online content and advertising, save your preferences for future visits to the Website or App, measure the effectiveness of our promotions, prevent potential fraud and analyse your and other users’ interactions with the Website or App.
   2. If you do not wish to grant us the right to use Cookies to gather information about you while you are using our Website or App, then you may set your browser settings to delete, disable or block certain Cookies. The following browsers have publicly available information about how to adjust cookie preferences: Microsoft Edge, Mozilla Firefox, Google Chrome and Apple Safari.
   3. You may be requested to consent to use of Cookies when you access certain parts of our Website or App, for example, when you are asked if you want the Website to “remember” certain things about you.
   4. Certain aspects and features of the Website or App are only available through use of Cookies. If you disable Cookies, your use of the Website may be limited or not possible or parts of our Website may not function properly when you use them.
   5. Upon your first visit to our Website or App (or the first visit after you delete your Cookies), you may be prompted by a banner to accept our use of Cookies and other tracking technology (Cookies policy). Unless you have adjusted your browser setting so that it will refuse cookies and or decline to accept our Cookies policy, our system will issue Cookies when you access our Website or App.
   6. Our Website or App may contain web beacons (also called single-pixel gifs) or similar technologies (Web Beacons) which are electronic images that we use:
      1. (a) to help deliver Cookies;
      2. (b) to count users who have visited our Website; and
      3. (c) in our promotional materials, to determine whether and when you open and act on them.
   7. We may also work with third-parties:
      1. to place Web Beacons on their websites or in their promotional materials as part of our business development and data analysis; and
      2. to allow Web Beacons to be placed on our Website or App from Analytics Services to help us compile aggregated statistics about the effectiveness of our promotional campaigns or other operations.
   8. The Web Beacons of Analytics Services may enable such providers to place Cookies or other identifiers on your device, through which they may collect information about your online activities across applications, websites or other products.

9. Minors

   1. To access our services, you must be over the age of eighteen (18). We do not knowingly collect Personal Information from children under the age of eighteen (18) and do not wish to do so.
   2. We reserve the right to request proof of age at any stage so that we can verify that minors under the age of eighteen (18) are not using our services. In the event that it comes to our knowledge that a person under the age of eighteen (18) is using our services, we will prohibit and block such user from accessing the services and will take appropriate measures to prevent that user from making use of our services.

10. How we use Personal Information for communicating with you and direct marketing

    1. We may communicate with you by email, SMS or push notification, to inform you about existing and new products and services that may be of interest to you including administering contests, promotions, surveys or other site features.
    2. We will ensure that any email we send as direct marketing complies with the SPAM Act 2003 (Cth) and contains an “unsubscribe” option so that you can remove yourself from any further marketing communications. You may decline marketing messages sent by push notifications by refusing the relevant permission in your phone or tablet settings, however this setting will prevent you from receiving other messages from us via push notification. You may also opt-out of receiving marketing materials from us by adjusting your preferences on our Website or App.
    3. You can also write to us to request that your details be removed from any direct marketing list which we maintain. We will endeavour to remove your details from our direct marketing list within a reasonable time (ordinarily 5 working days).
    4. Our direct marketing list may be operated by software and servers located Overseas and your Personal Information may be sent Overseas as part of our marketing.
    5. We will also send communications that are required or necessary to send to users of our Website or App that contain information about important changes or developments to or the operation of the Website and App or as well as other communications you request from us. You may not opt out of receiving these communications but you may be able to adjust the media and format through which you receive these notices.

11. Not identifying yourself

    1. We cannot provide services to you on an anonymous basis or using a pseudonym.
    2. We may be able to provide you with limited information about our services in the absence of your identifying yourself but generally we will be unable to provide you with any information, goods and/or services unless you have identified yourself.

12. How to access or correct your Personal Information or make an enquiry or complaint

    1. You can access or correct some Personal Information we hold about you by accessing the App. You can also contact us in writing, if you have any queries in relation to this policy, wish to access or correct the Personal Information we hold about you, or make a complaint, at:
       Email: privacy@grineopay.com; or
       Mail: Privacy Officer
       Grineo Pty Ltd
       Level 14, 5 Martin Place, Sydney NSW 2000
    2. We aim to acknowledge receipt of all privacy complaints from you within 5 working days and resolve all complaints within 30 business days. Where we cannot resolve a complaint within that period, we will notify you of the reason for the delay as well as advising the time by which we expect to resolve the complaint.
    3. If, for any reason you do not wish to complain to us initially or if you are unsatisfied with our response to your complaint, you are free to file a complaint with the competent data protection authority. In Australia, you may file a complaint with the Office of the Australian Information Commissioner.
    4. In order to disclose information to you in response to a request for access we may require you to provide us with certain information to verify your identity. There are exceptions under the Privacy Act which may affect your right to access your Personal Information – these exceptions include where (amongst other things):
       1. access would pose a serious threat to the life, health or safety of any individual;
       2. access would have an unreasonable impact on the privacy of others;
       3. the request for access is frivolous or vexatious;
       4. the information relates to existing or anticipated legal proceedings between you and us and the information would not otherwise be accessible by the process of discovery;
       5. the information relates to existing or anticipated legal proceedings between you and us and the information would not otherwise be accessible by the process of discovery;
       6. giving access would be unlawful;
       7. denying access is required or authorised by or under an Australia law or a court/tribunal;
       8. the information relates to a commercially sensitive decision making process; or
       9. giving access would prejudice enforcement related action.
    5. We may (depending on the request) charge you a fee to access the Personal Information. We will inform you of any fees payable in respect of accessing your Personal Information prior to actioning your request. All requests for Personal Information will be handled in a reasonable period of time (within 30 calendar days after the request is made).
    6. If you wish to have your Personal Information deleted, please contact us using the details above and we will take reasonable steps to delete the information (unless we are obliged to keep it for legal or auditing purposes). To the extent that any Personal Information is stored on a blockchain it may be impracticable, unfeasible or impossible to delete.
    7. In the event that you believe that there has been a breach of the Privacy Act, we invite you to contact us as soon as possible.
    8. If you are not satisfied with our handling of a complaint or the outcome of a complaint you may make an application to:
       1. (a) the Office of the Australian Information Commissioner by visiting www.oaic.gov.au and completing an online enquiry; or writing to GPO Box 5288 Sydney NSW 2001; or
       2. access would pose a serious threat to the life, health or safety of any individual;

13. Notifiable Data Breach

    1. We are bound by the Privacy Act and are committed to complying with the Notifiable Data Breaches Scheme (NDB) established by the Privacy Amendment (Notifiable Data Breaches) Act 2017.
    2. The NDB requires that where a data breach is likely to result in serious harm to any individuals to whom the information relates, we are required to notify those individuals and the Office of the Australian Information Commissioner.
    3. The NDB provides greater protection to the Personal Information of consumers, greater transparency in the way organisations like us respond to data breaches and give you the opportunity to minimise the damage caused by any unauthorised use of your Personal Information.

14. Changes to this Privacy Policy

    1. We may amend this privacy policy from time to time at our sole discretion, particularly where we need to take into account and cater for any:
       1. business developments; or
       2. legal or regulatory developments.
    2. If we make changes, we will notify you by revising the date at the top of the Privacy Policy and, where we make material changes to this policy, provide you with additional notice (such as adding a statement to the Website or App homepage or sending you a notification). If you do not agree to the terms of this Privacy Policy, or any material changes, you should cease using our services. We recommend you review the Privacy Policy whenever you access the services or otherwise interact with us to stay informed about our information practices and the ways you can help us to protect your privacy.