Privacy Policy

LEVELMAX Privacy Policy — Levelmax Store app This policy explains how Level Flow Pty Ltd (ABN 75 680 434 128), trading as LEVELMAX (“LEVELMAX”, “we”, “us”), handles personal information in the Levelmax Store app and the ordering service behind it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). 1. What we collect • Your account: your name, email address, Australian mobile number and password. We store the password only in a form that can’t be read back (a secure hash). We also record when you accepted our terms, your last sign-in and failed sign-in attempts, to keep your account secure. • Your business details: business name, ABN (if you give one), the type of business and your usual pickup warehouse. • Verification codes: the codes we send to your email address and mobile number to confirm they are yours. They expire within 15 minutes. • Orders: the products and quantities, the pickup warehouse and date, the name and mobile number of the person collecting, any note, the pickup code, what was handed over, and the order’s status and refunds. • Payments: payments are taken by Stripe. We receive the amount, whether the payment or refund succeeded, and Stripe’s reference numbers. We never receive or store your card number. Stripe’s payment screen collects what it needs to process the payment and prevent fraud, under Stripe’s own privacy policy. • Tax invoices and adjustment notes: your name, business name, ABN and email address, as printed on the documents we issue for your orders and refunds. • Messages: the emails, text messages and in-app messages we send you. • Technical information: our server uses your IP address to protect the service (for example, to limit repeated sign-in attempts) and logs errors so we can fix problems. If you allow notifications, we store your device’s notification token and whether it is an iPhone or an Android device. We don’t collect your location, contacts or photos, and the app contains no advertising or tracking tools. 2. How we use it • to run your account and check it’s you when you register and sign in; • to take your orders and payments and make refunds; • to issue tax invoices and adjustment notes; • to prepare your order at the pickup warehouse and hand it over to the right person; • to send verification codes, order updates and pickup reminders; • to answer your questions and support you; • to keep the service secure, prevent fraud and misuse, and fix problems; • to meet our legal obligations, such as tax and accounting records. We don’t sell personal information or use it for advertising. 3. Who can see it • LEVELMAX: our staff who handle orders, refunds, stock and accounts, through our back office and our business systems. • The pickup warehouse: our warehouses are operated by third-party logistics providers. Their staff see what they need to prepare and hand over your order: the order number, pickup code, items, business name, the name and mobile number of the person collecting, and any note. • Service providers that process information for us: Amazon Web Services (our server and database, in Sydney, and text messages), Stripe (payments and refunds), Xero (tax invoices and adjustment notes), Lark Technologies (our internal business system: order alerts to our staff and a copy of orders), Google (business email through Google Workspace), and Apple and Google (push notifications, if you allow them). They may use it only to provide their services to us, except that Stripe also uses payment information under its own privacy policy, for example to prevent fraud. • Your bank or card issuer: if you dispute a payment, we may give Stripe and your bank the order records needed to respond. • Others: when the law requires it, or to protect someone’s safety or our legal rights. 4. Overseas Our app server and database are in Australia (Sydney). Some of the service providers above store or process information in other countries, for example the United States (Stripe, Xero, Google and Apple), India (Stripe) and Singapore (Lark). We use providers with strong privacy and security commitments. 5. How we protect it • Connections to the app are encrypted (HTTPS). • Passwords and verification codes are stored only as secure hashes. • Card details go straight from your phone to Stripe and never reach our server. • Warehouse staff sign in with their own logins and see only the pickup orders of their own warehouse. • Changing your password signs you out on your other devices. • We back up the database every night. 6. How long we keep it • We keep your details while your account is open. • If you delete your account, it is closed straight away and your account details are deleted 30 days later; within those 30 days we can restore the account if you ask. • Orders, tax invoices and adjustment notes are kept as business and tax records for as long as the law requires (generally five years). They keep the name, business name, ABN and contact details that applied to the order. • A registration that isn’t completed is deleted after 7 days. • Our copies of the emails and text messages we send, and of order alerts to our staff, are deleted after 30 days, and in-app messages after 90 days. Deleted information can stay in our backups for up to 30 days, until they are replaced. Server logs are kept for a short time and then overwritten. 7. Your choices and rights • See and correct: your details are in the app under Account, where you can change your business details, email address and mobile number. For a copy of your personal information, or to correct something you can’t change yourself, email info@levelmax.com.au. We reply within 30 days. • Delete: Account → Delete account in the app, or see store.levelmax.com.au/account-deletion. • Notifications: you can turn off push notifications in your phone’s settings. Verification codes, order updates and pickup reminders are part of the service. • Complaints: contact us first at info@levelmax.com.au and we will reply within 30 days. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992). 8. Children The app is for trade customers and is not intended for anyone under 18. 9. Changes to this policy We may update this policy. The app shows the new version and asks you to accept it before you place another order; the current version is always at store.levelmax.com.au/privacy. 10. Contact Privacy questions: LEVELMAX (Level Flow Pty Ltd, ABN 75 680 434 128), Unit L / 61-65 Roberts Rd, Greenacre NSW 2190. Email info@levelmax.com.au.