Version 1.4 · 3 October 2026 · Nearphyld Technologies Pty Ltd
(a) Nearphyld Technologies Pty Ltd (ABN 52 697 272 343) (“Nearphyld”, “we”, “us” or “our”) is an Australian company based in Melbourne, Victoria. We operate a service that lets a customer follow a food or drink order on their phone after paying at a connected venue (the “service”), together with this website at nearphyld.com (“our website”) and the Nearphyld App Clip and mobile application (“our app”).
(b) This policy sets out how we handle personal information in connection with the service, our website and our app. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles, whether or not the Act requires us to. Where we operate outside Australia we will also comply with the local law that applies.
(c) Our website, our app and the service are also governed by our Terms of use. By using them you agree to the handling of information described in this policy.
(d) We may update this policy from time to time by publishing a new version on our website with a new version number and date. Material changes will also be noted on our Announcements page.
(a) The service is built to work without knowing who you are. There is no account, no sign-up and no password. We never ask a customer for a name, email address or phone number. What we hold about a customer is built around two tokens issued by other organisations: a reference for the card used, issued by the payment network, and an address for the phone, issued by Apple or Google. Neither can be turned back into a person by us. If you use rewards, we also keep a record of the visits that card makes to connected venues (section 3.1).
(b) Consistent with Australian Privacy Principle 2, customers use the service without telling us who they are. We never ask for or hold a customer's name, email address, phone number or home address. We do hold a card reference and a push address (below), which together link a card to a phone, and we treat them as personal information and protect them accordingly.
When you use the service at a connected venue we handle:
We do not ask customers for names, email addresses, phone numbers, dates of birth or home addresses, and we do not receive full card numbers, order contents or location history. The visit record is used only for your rewards and, if you switch them on, offers from places you have paid at. We do not build profiles for anyone else, and we never sell or share it.
(a) If you contact us, or a venue asks to join Nearphyld through our website, we receive what you send us: typically a name, a work email address, a venue name and a few details about the venue. We use it to reply and to set the venue up, and we keep it as ordinary business correspondence.
(b) Venue staff who use the venue dashboard have a login. We hold the username and a protected form of the password for that login, and records of the orders and devices at that venue. This information is about venues and their staff, not about customers.
(a) Our website sets no cookies and runs no analytics.
(b) Our hosting provider keeps standard server logs, including the address your device connects from, the pages requested and the browser used, for security and to keep the site running.
(c) Our website loads its typefaces from Google Fonts. When a page loads, Google receives the same standard request information a browser sends to any server. Google’s handling of that information is governed by Google’s privacy policy.
(d) We do not combine website information with information from the service.
Our website and our app may link to services operated by others, including Apple and Google. We are not responsible for the privacy practices of those services and recommend that you review their privacy policies.
The service is not directed at children, and we do not knowingly collect personal information about them. Because we hold no names, contact details or dates of birth, we cannot tell a customer’s age from what we hold. A parent or guardian who believes a child’s information has reached us can contact us under section 10 and we will delete it.
We use the information described above only for the following purposes:
We do not use any of it for advertising, and we do not sell or share it with anyone for marketing. The only marketing message we ever send is an offer you have switched on, and you can switch offers off at any time in our app. Rewards are on by default and can also be switched off in our app; tracking your order never depends on either.
(a) An order and its status are deleted within minutes of the order being collected. If an order is never claimed it expires on its own and is deleted the same way.
(b) A session key is used once and discarded.
(c) The card reference and push address are kept so the service keeps working for you at connected venues. You can ask us to remove them at any time under section 9.
(d) Payment notification logs are kept on a rolling basis and older entries are overwritten.
(e) Visit records are deleted automatically 12 months after the visit. An earned reward lasts six months and an offer seven days; records of used and expired rewards and offers are kept for up to 12 months so a venue’s counts stay accurate, then deleted. If you switch rewards and offers off, we stop keeping new visit records straight away.
(f) Venue and enquiry correspondence is kept for as long as we work with the venue and for a reasonable period afterwards, as any business would.
(g) When information is no longer needed we take reasonable steps to delete it or render it inaccessible.
(a) Venues see the status of orders at their own counters and, if they run rewards or offers, totals such as how many customers are members and how many rewards were used. They never see who you are, your card or your visits, and they cannot contact you.
(b) Payment processors and point-of-sale providers supply the order and card reference to us under agreement and receive nothing back except status.
(c) Apple and Google carry notifications to your phone, as they do for every app, under their own terms.
(d) Infrastructure providers host the service and store its data on our instructions. They cannot use it for their own purposes.
(e) Successors. If Nearphyld or its business is sold, merged or restructured, information may be transferred to the successor, who must handle it under this policy.
(f) The law. We will disclose information where the law requires us to.
(g) We do not sell, rent or trade any of it, and we never share it with advertisers or data brokers.
(a) The service runs on infrastructure in Australia wherever our providers offer it. Some providers may hold copies or backups on servers outside Australia, including in the United States.
(b) Where that happens we take reasonable steps to ensure the information is protected to the standard this policy describes. Because we hold no customer names or contact details, the risk from any overseas storage is limited by design.
(a) Data is encrypted in transit and at rest. Access is limited to the people who need it to run the service.
(b) Because the service holds tokens rather than personal details, the consequence of any breach is limited by design. We cannot guarantee security, but if a breach ever did put anyone at risk we would notify the people affected and the Office of the Australian Information Commissioner as the law requires.
(c) Our current position on certifications is on our Security page.
(a) You can ask what we hold that relates to your card or phone and ask for it to be deleted. Because we do not hold your name, we will ask you to make the request from the phone the service is connected to so we can find the right record.
(b) You can also stop the service at any time without contacting us: turn off notifications for Nearphyld in your phone’s settings, or delete our app or App Clip, and nothing further will reach that phone. Rewards and offers each have their own switch on the You page of our app.
(c) Venues and enquirers can ask to see, correct or delete what we hold about them.
(d) Requests go to hello@nearphyld.com. We respond within 30 days. If you are not satisfied with our response you may complain to the Office of the Australian Information Commissioner at oaic.gov.au, by phone on 1300 363 992, or by email at enquiries@oaic.gov.au.
Questions or complaints about this policy or our handling of information: hello@nearphyld.com. Nearphyld Technologies Pty Ltd (ABN 52 697 272 343), Melbourne, Victoria, Australia.
Nearphyld Technologies Pty Ltd · ACN 697 272 343 · ABN 52 697 272 343 · Melbourne, Australia · hello@nearphyld.com