Policy last updated: 10 June 2020
1. Purpose and nature
Vault Payment Solutions Group Pty Ltd (ACN 632 373 105) (‘Vault’, ‘We’ ‘Us’ and ‘Our’) hosts a digital platform that facilitates users to securely and efficiently issue and manage prepaid cards and other loyalty, rewards and gift cards (Vault Platform). Following issue of these cards, transactions can be made in-store, online or via an app, that allow the secure exchange of financial data between customers, merchants, and EML Payment Solutions Limited (EML), a certified payments processor.
We collect your personal information so We can offer you the best possible service.
We do not make any representations, guarantees, warranties or promises as to the way in which We will or may use, store, collect, dispose, protect or otherwise handle your personal information.
2. Personal Information
Personal information is information or an opinion about someone, including things like name, address, email, address, date of birth or driver’s licence number where the person it is about is identified or reasonably identifiable.
3. Vault’s collection of your personal information
Your personal data is collected for the primary purpose of Us facilitating the issue and management of prepaid financial products, digital gift-cards and reward codes/coupons via the Vault Platform. When you use the Vault Platform to register for prepaid financial products, digital gift-cards and reward codes/coupons the information relating to the cards including your encoded gift card information is sent to the certified payments processor EML. This data is then processed by EML and utilised to facilitate payment to a merchant for goods and services when authorised.
Your personal information may also be used by Us for authenticating users, administering, improving and personalising the Vault Platform, technological development, marketing, fraud detection and prevention and supporting Our business functions.
We may also hold, use or disclose your personal information to:
a) Inform and address any complaint that you raise with Us and any subsequent legal action;
b) prevent and investigate any actual or suspected fraud, unlawful activity or misconduct; or
c) comply with any relevant laws, regulations, codes of practice, requirements of regulatory authorities and court orders.
If you do not agree to allow Us to collect your personal information We may not be able to provide you goods or services.
4. Collecting and retaining your information
a) The types of personal information collected by Us include: Your name, address telephone number, email or other contact information;
b) prepaid card information;
c) rewards, loyalty and gift card information;
d) Vault Platform account information, including usernames and passwords;
e) your device data (E.g. IP addresses, phone numbers and mobile network operators);
f) location data;
g) transaction data.
No prepaid card numbers are retained on the Vault Platform. Only a portion of a unique identifier number is stored on the Vault Platform for the purpose of authentication by the payment processor.
Collection of sensitive information
We do not collect, use or disclose sensitive information. Sensitive information is characterised by law as an opinion as to an individual’s racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, criminal record or health information.
Provided is it practical to do so We will collect personal information directly from you.
Online data collection
Whenever anyone uses Our website We collect data about their visit. We use that data for various purposes, including improving and maintaining Our site’s usability and security. We may also collect information based on how you use Our website, by using ‘cookies’, web beacons and other similar technologies.
In the event that We receive information from you that We have not asked for and which is not necessary for Our provision of goods and services to you We will de-identify and destroy such information in a lawful manner (this includes any information received from a minor).
We continue to develop new products and services, and we may use your personal information to offer you products and services that we think you might be interested in.
5. Storing Personal Information
We take the security of your personal information very seriously. In order to keep your personal information safe We take reasonable steps to protect your personal information from misuse, loss and unauthorised access, modification or disclosure.
Whenever We store your personal information, We will always takes proper steps to protect it, as detailed in Australia’s privacy legislation. When We no longer need your information, it will be destroyed, deleted or de-identified.
Although We will do Our best to keep your information safe, there always remains a risk of that information being compromised (e.g. by third party malicious or criminal attacks). You should always make sure to keep any personal and login details safe, and educate yourself on the best ways to safeguard your information, e.g. protect your card and banking details avoid sharing passwords and PINs and keep up to date with any security material provided to you.
6. Disclosure of your personal information
We will only disclose your personal information to third parties in the following circumstances:
a) to sub-contractors that provide services to Us to facilitate the services We provide to you;
b) to a card issuer, for purposes that may include authentication and fraud prevention;
c) to payments processors, such as EML Payment Solutions Limited, for the purpose of processing of your transactions utilising a prepaid card; and
d) as otherwise may be required by Us to facilitate the completion and settlement of transactions using cards issued from the Vault Platform.
Merchants will not have access to your prepaid card details during a transaction.
We will not disclose your personal information to third parties who are overseas.
7. Accessing and correcting your information
You can access or correct the personal information that We hold about you by calling or writing to Us by using the contact details set out below in clause 9. We will do Our best to respond to you within a reasonable time. In order to access or correct your information We will need to identify you.
There are some situations where We might refuse or limit, or be unable, to correct or provide you with access to information, such as when the information is commercially sensitive. If that happens, We will write to you and let you know why.
We will do Our best to keep your personal information accurate and up-to-date. If any of your details change, such as your name, address or phone number – please let Us know by using the contact details at clause 9.
8. Privacy issues and complaint resolution
If you have a complaint regarding Our use of your personal information, please contact Us by using the contact details set out in clause 9. We may ask you to address your complaint in writing to assist Our investigation.
We will do Our best to resolve the complaint as quickly as We can and We will provide you with an estimated response timeframe in relation to your complaint. We will endeavour to respond to your complaint within 7 days.
If a complaint remains unresolved, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
9. How to contact us
Tel: (03) 9000 0012
Email: [email protected]
Mail: Level 3, 367 Collins street Melbourne 3004