Privacy policy

Last updated: 26 July 2026

Who we are

Flooze is a payments and point-of-sale service for Australian businesses (“Flooze”, “we”, “us”). This policy explains how we handle personal information across the Flooze service — this website, the Flooze app, the merchant dashboard, quotes and bills, and the payment page — in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using Flooze you agree to the handling of personal information as described here. If you don’t agree, please don’t use the service.

Two kinds of people, two roles

Flooze is used by two groups, and our role differs for each:

Businesses (merchants and their staff) — the businesses that take payment through Flooze. For their information, Flooze is the entity that decides how the information is handled.
Clients (the people a business serves) — the people who pay a Flooze merchant. For most of a client’s information we handle it on behalf of the merchant so they can take the payment, recognise a returning client, and keep their records. If you’re a client, the merchant you paid is also responsible for your information under their own privacy practices.

The important part: we don’t hold your money

Money moves directly from your bank to the merchant’s bank. On the bank rails (PayTo^® and PayID^®, over Australia’s New Payments Platform, provided by our payments partner), you approve or send each payment in your own banking app, and it is final the moment you approve — it never passes through a Flooze account. Where a card is used as a fallback, it’s processed by a third-party card provider; we never see or store full card numbers, which are tokenised by that provider. Your bank, not Flooze, authenticates you on the bank rail.

What we collect

From businesses and their staff

Business details — trading name, ABN, contact details.
The people who log in — names and email addresses, and the sign-in identity managed through our single sign-on (we don’t hold merchant passwords for the dashboard; sign-in is handled by our identity provider).
Payout destination — the bank account (BSB and account number, or PayID) money is paid into.
Records of bills, payments, refunds, and settings you create in Flooze.

From clients

Your payment identifier — a PayID (a phone number, email, ABN, or organisation ID) or a BSB and account number. This is how a merchant recognises a returning client, so they need not type it again.
The name on your account — when a payment is made, the banking network’s Confirmation of Payee returns the name registered to the account, which we record against your payment identifier so the merchant can confirm they’re paying/charging the right person.
Payment and bill records — what was paid, when, to which merchant, and for what.
Optional account — if you choose to keep a history, you can enable a passwordless account via an email magic link. An account is never required to pay; a one-off payment is anonymous.

From visitors to this website

Standard technical information our servers log for security and reliability (such as IP address, browser type, and pages requested).
This marketing site sets no advertising or third-party tracking cookies. The Flooze application uses a single functional session cookie (secure, not readable by JavaScript) to keep you signed in — nothing more.

How we use information

To take payments, send bills and reminders, and move money to the merchant’s bank.
To recognise a returning client so paying again is faster.
To produce tax invoices and mark each payment against its bill.
To provide, secure, and support the service, and to detect and prevent fraud and abuse.
To bill merchants for their plan and fees.
To meet our legal, tax, and record-keeping obligations.

We do not sell personal information, and we don’t use it for third-party advertising.

Who we share information with

We share personal information only where it’s needed to run the service:

The merchant you paid (for client information) — Flooze exists to give the merchant the record of their bill.
Payments partners that move the money — our bank-rail provider and, for card fallback, the card provider, together with the banks involved in a payment.
Services a merchant chooses to connect — for example accounting software such as Xero or MYOB, where Flooze acts as a connector at the merchant’s direction.
Infrastructure and support providers — hosting, communications, and similar vendors who process information on our behalf under confidentiality obligations.
Where the law requires it — to comply with a legal obligation, court order, or lawful request, or to protect our rights and safety.

Overseas disclosure

We aim to store personal information in Australia. Some of our providers (for example a card processor) may store or process information overseas. Where that happens, we take reasonable steps to ensure it’s handled consistently with the Australian Privacy Principles.

How we protect information

We take security seriously and build for it. Among other measures: all traffic is encrypted in transit; the bank rail keeps us out of the money flow and out of scope for card data; sensitive changes such as a payout destination and any movement of money out are protected by additional verification; and access to systems is scoped and controlled. No system can be guaranteed perfectly secure, but we work to protect information against loss, misuse, and unauthorised access, and to delete or de-identify it when it’s no longer needed.

How long we keep it

We keep personal information for as long as needed to provide the service and to meet our legal and tax obligations (transaction and bill records are typically kept for at least seven years to satisfy Australian record-keeping requirements). Some short-lived data is removed sooner — for example, the temporary link that lets a client watch a payment at a counter is swept about 30 days after the bill is paid.

Your rights

You can ask us to access or correct the personal information we hold about you. If you’re a client, some of your information sits with the merchant you paid — we’ll help you reach the right place. To make a request, contact us using the details below. We’ll respond within a reasonable time, and there’s no charge to ask.

Complaints

If you think we’ve mishandled your personal information, please contact us first so we can put it right. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. The current version always lives here, with the “last updated” date at the top. If we make a significant change, we’ll take reasonable steps to let affected users know.

Contact us

Questions, requests, or complaints about privacy:

Email: hello@flooze.com.au