Last updated: 20 September 2026
Kokipay (ABN 20 669 515 940) (“Kokipay”, “we”, “us”, “our”) provides EFTPOS, point-of-sale, online ordering and related services to Australian businesses. This Privacy Policy explains how we collect, hold, use and disclose personal information, and how you can access or correct it or make a complaint. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
By using our website, apps or services, or by giving us your personal information, you agree to it being handled as described in this policy.
1. Who this policy applies to
This policy applies to:
- visitors to kokipay.com and shop.kokipay.com;
- people who enquire about, apply for or use our products and services (“merchants”) and their staff; and
- customers of our merchants, to the extent we handle their information when providing our services.
When a merchant uses Kokipay to take orders, run a loyalty program, manage bookings or send marketing, the merchant decides what customer information is collected and how it is used. In those cases we handle that information on the merchant’s behalf and under their instructions, and the merchant’s own privacy policy also applies. If you have a question about information a business holds about you, please contact that business first.
2. What we collect
Depending on how you deal with us, we may collect:
- Contact and identity details such as your name, business name, role, email address, phone number and postal or delivery address.
- Business and onboarding information such as your ABN, industry, trading details, bank account details for settlement, and identity documents where we or our payment partners are required to verify who you are.
- Transaction and order information such as the amount, time, terminal and type of a payment or order, delivery details, and the last digits and type of a payment card. Full card numbers are handled by our payment partners, not stored in our marketing or support systems.
- Customer records created by merchants such as a customer’s name, contact details, order history, bookings, loyalty points, stored credit and marketing preferences.
- Communications such as emails, enquiry forms, chat messages, support tickets, call notes and reviews or feedback.
- Technical and usage information such as your IP address, device and browser type, pages viewed, referring site, and information collected by cookies and similar technologies.
We do not seek to collect sensitive information (such as health information). Please do not send it to us unless we ask for it and you agree to provide it.
3. How we collect it
We collect personal information directly from you when you complete a form on our website, sign up, place an order in our shop, contact support, or use our apps and services. We also collect it from merchants who use our services, from our payment, delivery and technology partners, from publicly available sources such as business registers, and automatically through cookies and analytics when you use our website.
You can deal with us anonymously or under a pseudonym for general enquiries. If you choose not to give us certain information, we may not be able to provide you with our products or services.
4. Why we collect, hold, use and disclose it
We use personal information to:
- respond to enquiries and provide quotes, demonstrations and onboarding;
- set up and provide our services, including processing payments, orders, deliveries, bookings and loyalty programs;
- verify identity and meet legal, regulatory and card scheme obligations, including fraud prevention;
- provide customer support, warranty, returns and delivery services;
- send service messages such as receipts, order updates and security notices;
- send marketing about our products and services, where permitted (see section 6);
- operate, secure, analyse and improve our website, apps and services; and
- comply with the law and enforce our terms.
5. Who we share it with
We do not sell personal information. We may disclose it to:
- our payment, acquiring and card scheme partners, and online payment providers such as Stripe;
- delivery and ordering partners that a merchant chooses to use, such as DoorDash and Uber Eats;
- technology providers that host or support our services, including our website, customer relationship, email, SMS, analytics, cloud hosting and support tools (for example HubSpot and Google);
- the merchant you are dealing with, where you are their customer;
- professional advisers, insurers and, if our business or assets are sold or restructured, the other parties involved; and
- regulators, law enforcement and others where required or authorised by law.
Overseas disclosure
Some of these providers store or process information outside Australia, including in the United States and other countries where they or their data centres are located. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.
6. Marketing
We may send you marketing by email, SMS or phone about our products and services. You can opt out at any time by using the unsubscribe link in any marketing email, replying STOP to an SMS, or contacting us using the details below. We will still send you messages that are necessary to provide our services.
Marketing sent by a merchant through our platform is sent on that merchant’s behalf. You can unsubscribe using the link or instructions in that message.
7. Cookies and analytics
Our website uses cookies and similar technologies to remember your preferences, understand how the site is used, measure advertising and, where you submit a form, connect your enquiry with your visit. You can block or delete cookies in your browser settings, although some parts of the site may not work as intended. Our website may also link to third-party sites and app stores, which have their own privacy policies.
8. How we hold and protect information
We hold personal information electronically with reputable service providers and take reasonable steps to protect it from misuse, interference and loss, and from unauthorised access, modification or disclosure. These steps include access controls, encryption of data in transit, staff confidentiality obligations and using payment partners that comply with the Payment Card Industry Data Security Standard.
We keep personal information only for as long as we need it for the purposes described in this policy or as required by law, and then take reasonable steps to destroy or de-identify it. No method of transmission or storage is completely secure. If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.
9. Accessing and correcting your information
You may ask us for access to the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within a reasonable time, usually 30 days. We may need to verify your identity first. If we refuse your request, we will tell you why in writing, where we are able to, and how you can complain.
10. Complaints
If you believe we have breached the Australian Privacy Principles or mishandled your personal information, please contact us in writing with the details. We will acknowledge your complaint, investigate it and respond within a reasonable time, usually 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.
11. Contact us
Privacy Officer, Kokipay
Email: hello@kokipay.com
Post: Suite 5, Unit 4/7 Curban St, Underwood QLD 4119
12. Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with the date it was last updated shown at the top. Your continued use of our website or services after a change means you accept the updated policy.
Our End User Licence Agreement sets out the separate data processing terms that apply between Kokipay and its business customers.