Privacy Policy

UrPay Technologies Pty Ltd, trading as UrPay (ACN 654 788 575) ("UrPay", "we", "our", "us"), is an Australian registered company. We take the privacy of everyone who deals with us seriously, and we are committed to handling personal information responsibly and in accordance with the law.

This Privacy Policy (Policy) sets out how we collect, hold, use and disclose personal information about individuals who interact with us — whether through our website, our platform, or otherwise.

We handle all personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If there is any inconsistency between this Policy and the Privacy Act, the Privacy Act prevails.

1. Anonymity

Due to the nature of the payment services we provide, it is generally impractical for us to deal with you without knowing your name and contact details. However, where it is practical to do so, we will provide you with the option to interact with us anonymously or using a pseudonym.

2. Collecting personal information

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not it is true and whether or not it is recorded in material form.

We collect personal information through a range of sources, including:

• through our website at www.urpay.com.au (the Site);
• through our UrPay platform and applications;
• from you when you conduct business with us, or inquire about doing so;
• through contact with us by mail, phone, email, or online; and
• through our other business activities.

Personal information we may collect includes:

• your name and age;
• your contact details, including phone number and email address;
• your physical or business address;
• payment and banking information relevant to your use of our services; and
• technical data such as your IP address, browser type, browser version, pages visited, time on page, referring URLs, and other log data relating to your use of the Site or platform.

We only collect personal information where it is reasonably necessary for our functions and activities.

3. Use of personal information

We use personal information to operate our business and deliver our services. Specifically, we use personal information for the following purposes:

• establishing and maintaining your relationship with UrPay;
• providing, managing, and administering the products and services you have requested;
• responding to your enquiries and providing support;
• improving and developing our platform, website, and services;
• internal research and statistical analysis;
• marketing our services to you, where you have provided consent or where permitted by law (you may opt out at any time); and
• meeting our legal and regulatory obligations.

Much of the technical data we collect automatically is aggregated and is effectively anonymous — it helps us understand how the Site is being used and how we can improve it.

4. Direct marketing

We may use your personal information to send you information about our products and services. We will only do so where you have provided consent, or where we have an existing relationship with you and it is permitted by law.

If you do not wish to receive marketing communications from us, you can opt out at any time by following the unsubscribe instructions in any communication we send, or by contacting us directly at support@urpay.com.au.

5. Disclosure of personal information

We do not sell your personal information. We will only disclose personal information to third parties in the following circumstances:

• to third-party service providers who assist us in operating our business (for example, IT providers, analytics tools, and platform infrastructure) — these parties are bound by confidentiality obligations and may only use information for the purpose for which it was provided;
• where we are required to do so by law, court order, or a lawful request from a government or regulatory authority; or
• with your consent.

6. Analytics and third-party tools

We use the following third-party tools on our Site. Each involves the collection or processing of certain information about visitors. We have set out the relevant details below.

Website analytics and session recording

AI chat assistant

Cookies and web beacons

We use cookies — small data files stored on your device — to enable certain website features and to collect usage information. We also use web beacons (sometimes called clear gifs or pixel tags), which are small invisible graphics embedded in web pages that help us understand page views and usage patterns.

You can configure your browser to refuse cookies or to notify you when a cookie is sent. However, disabling cookies may affect the functionality of some features of our platform.

Location map

7. Overseas disclosure

We store the personal information we collect on servers located in Australia. However, some of the third-party tools we use — specifically Microsoft Clarity and Anthropic (as described in Section 6 above) — may process certain data on servers outside Australia, including in the United States.

Where personal information is disclosed to an overseas recipient, we take reasonable steps to ensure the recipient handles the information in a manner consistent with the Australian Privacy Principles, or that the recipient is subject to laws substantially similar to the APPs.

Other than as described in this Policy, we will only disclose your personal information to an overseas recipient if:

• you have consented to the transfer; or
• the disclosure is required or authorised by Australian law or a court or tribunal order.

8. Third-party websites

Our Site and platform may contain links to websites operated by third parties. Clicking those links will direct you to the third party's website. We strongly encourage you to review the privacy policy of any site you visit.

We have no control over, and accept no responsibility for, the content, privacy practices, or conduct of any third-party website, product, or service.

9. Protecting your personal information

We take reasonable steps to protect personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include:

• technical measures to protect the systems and networks we use to store and transmit personal information;
• procedural controls limiting staff and third-party access to personal information; and
• regular review of our information collection, storage, and processing practices.

UrPay is PCI DSS v4.0.1 compliant as a certified service provider — the most current version of the Payment Card Industry Data Security Standard. This means we operate to the highest industry standards for the security of payment data.

When personal information is no longer required, we take reasonable steps to destroy or permanently de-identify it.

10. Accessing and correcting your personal information

Access

You may request access to the personal information we hold about you by contacting us in writing at support@urpay.com.au. We will respond to your request within a reasonable time and either provide the information you have requested or explain why access is not available in the circumstances.

We may decline access where providing it would be unlawful or where we are required to deny access under the Privacy Act or another applicable law.

Correction

If you believe personal information we hold about you is inaccurate, incomplete, or out of date, please contact us at support@urpay.com.au and we will take reasonable steps to correct it. If we decide not to correct the information, we will advise you of our reasons and the avenues available to you to make a complaint.

Deletion

If you wish to have your personal information deleted, please contact us and we will take reasonable steps to do so, unless we are required to retain it for legal or regulatory purposes.

International users

If you are located outside Australia and choose to provide personal information to us, your information will be transferred to and processed in Australia in accordance with this Policy.

11. Data breaches

If we suspect that a data breach has occurred, we will undertake an assessment within 30 days of becoming aware of the suspected breach. Where it is confirmed that a notifiable data breach has occurred, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required under the Privacy Act 1988 (Cth).

12. Complaints

If you have a complaint about the way we have handled your personal information, or believe we have breached the Privacy Act or this Policy, please contact us at support@urpay.com.au. All complaints will be handled in confidence and we will endeavour to respond within 30 days with a resolution or proposed resolution.

You also have the right to make a complaint to the Office of the Australian Information Commissioner (OAIC):

13. Variations to this Policy

We reserve the right to update this Policy from time to time. Any changes will be published on this page with an updated effective date. We encourage you to review this Policy periodically. Continued use of our website or services after any update constitutes acceptance of the revised Policy.