This policy explains how PayIT Pty Ltd ("Payit", "we", "us") collects, uses, discloses and protects personal information when you use the Payit app, our website and related services. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Payit provides credit to businesses for business purposes only; we do not provide consumer credit.
Our customers are businesses, but to provide our services we collect personal information about the individuals who use Payit or are connected with a business customer (for example directors, beneficial owners, partners, trustees and people authorised to act for the business).
We do not ask for sensitive information (such as health or religious information). Screening required by law (for example politically exposed person and sanctions checks) may reveal information about political roles; we collect it only where required or permitted by law.
If you do not provide the information we ask for, we may be unable to verify your business, provide credit or process payments.
We will only send you marketing with your consent, and you can opt out at any time.
We do not sell personal information.
We store our customer data in Australia (Sydney). Some service providers may process information outside Australia – for example, text messages containing verification codes are delivered through a provider based in the United States. Where information is disclosed overseas we take reasonable steps under APP 8 to ensure it is handled in line with the APPs.
We do not currently obtain consumer credit reports about individuals from credit reporting bodies or disclose information to them. If this changes we will update this policy and ask for any consent the law requires before doing so.
We use encryption in transit and encryption of sensitive fields at rest, access controls and multi-factor authentication for our staff, audit logging, and passcode and biometric locks in the app. If a data breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
We keep personal information for as long as we need it for the purposes above and as required by law. Under anti-money laundering laws we generally keep identification and transaction records for 7 years after the relevant transaction or the end of our relationship with the business. When information is no longer needed we destroy or de-identify it. Closing your account does not delete records we are required to keep.
You can ask to access or correct the personal information we hold about you by contacting us (see below). You can also update many of your details in the app. We will respond within a reasonable period, usually within 30 days. If we refuse a request we will tell you why, as permitted by law.
If you have a concern about how we handle your personal information, please contact us first. We will acknowledge your complaint and aim to resolve it within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au or 1300 363 992.
Payit is intended for people aged 18 and over who act for a business. We do not knowingly collect information from children.
We may update this policy from time to time. The current version is always available in the Payit app and at our privacy policy link. If we make significant changes we will let you know in the app.
Privacy Officer, PayIT Pty Ltd, Sydney NSW
Email: privacy@payit.au