Privacy Policy
Last Updated: April 2026
Crewstake Pty Ltd (ABN 54671816087), operating as Drip Rewards ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital loyalty card platform.
Business Address:
Level 1/57 Berwick St
Fortitude Valley QLD 4006
1. Information We Collect
1.1 Information from Business Users
When you register as a Business, we collect:
- Business name and contact information
- Email address and login credentials
- Business address and phone number
- Payment and billing information (processed securely via Stripe)
- Business logo and branding preferences
- Loyalty program configuration
1.2 Information from Customers
When you use a loyalty card, we collect:
- Phone number (used as your unique identifier)
- First name (optional, when provided by staff)
- Loyalty activity (visits, stamps collected, rewards redeemed)
- Timestamp of interactions
1.3 Automatically Collected Information
We automatically collect:
- Device information (browser type, operating system)
- IP address and approximate location
- Usage data (pages visited, features used)
- Cookies and similar tracking technologies
2. How We Use Your Information
2.1 Business Users
We use your information to:
- Provide and maintain your account
- Process payments and subscriptions
- Send transactional emails (receipts, account updates)
- Provide customer support
- Improve our services
- Send marketing communications (with your consent)
2.2 Customers
We use your information to:
- Track your loyalty stamps and rewards
- Send SMS notifications about your loyalty status
- Send promotional messages from Businesses (with consent)
- Generate anonymous analytics for Businesses
- Prevent fraud and abuse
3. SMS Communications
3.1 Types of SMS Messages
- Transactional: Reward notifications, redemption confirmations
- Promotional: Special offers and promotions from participating Businesses
3.2 Opting Out
You may opt out of promotional SMS messages at any time by:
- Replying STOP to any message
- Contacting the Business directly
- Contacting us at team@driprewards.com.au
Note: Opting out of promotional messages does not affect transactional notifications related to your loyalty activity.
4. Information Sharing
4.1 With Businesses
We share relevant customer data with participating Businesses, including:
- Phone number (masked for privacy where appropriate)
- Visit history and loyalty status
- Redemption activity
4.2 Third-Party Service Providers
We share data with trusted providers who assist in operating our Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Business payment information |
| Neon | Database hosting | All application data (encrypted) |
| Vercel | Web hosting | Usage logs, IP addresses |
| Resend | Email delivery | Email addresses, message content |
4.3 Legal Requirements
We may disclose information when required by law, court order, or to protect our rights and safety.
5. Data Security
We implement industry-standard security measures including:
- Encryption of data in transit (TLS/SSL)
- Encryption of data at rest
- Secure password hashing
- Regular security audits
- Access controls and authentication
Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
6.1 Business Data
We retain Business account data for the duration of the subscription plus 7 years for legal and tax purposes.
6.2 Customer Data
We retain Customer loyalty data for as long as the associated Business account is active. After a Business terminates, Customer data is deleted within 90 days unless required for legal purposes.
6.3 Deletion Requests
You may request deletion of your data by contacting us. We will process requests within 30 days, subject to legal retention requirements.
7. Your Rights
Under Australian privacy law, you have the right to:
- Access your personal information
- Correct inaccurate information
- Delete your personal information (subject to legal requirements)
- Opt out of marketing communications
- Complain to the Office of the Australian Information Commissioner
To exercise these rights, contact us at team@driprewards.com.au.
8. Cookies and Tracking
We use cookies and similar technologies to:
- Remember your preferences
- Analyze usage patterns
- Improve our Service
You can control cookies through your browser settings, but disabling cookies may affect functionality.
9. Children's Privacy
Our Service is not intended for children under 16. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.
10. International Data Transfers
Your data may be processed on servers located outside Australia. We ensure appropriate safeguards are in place for any international transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website
- Sending an email to registered Business users
- Updating the "Last Updated" date
12. Contact Us
For privacy-related questions or concerns, please contact us:
Crewstake Pty Ltd
ABN 54671816087
Level 1/57 Berwick St
Fortitude Valley QLD 4006
Email: team@driprewards.com.au
For complaints that we cannot resolve, you may contact the Office of the Australian Information Commissioner.