Privacy Policy

CommunityShopper Pty Ltd (ABN 68 636 646 387) (“CommunityShopper”, “we”, “us”, or “our”) operates the CommunityShopper platform, including our marketing website, buyer app, community organiser tools, vendor portal, and related services (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who we are

CommunityShopper is a community-led group buying marketplace based in Melbourne, Australia. We connect buyers, community organisers, and verified vendors so communities can pool orders and unlock tiered discounts on everyday essentials.

For privacy enquiries, contact us at privacy@mycommunityshopper.com.

2. Information we collect

Account and profile information

• Name, email address, and password (or social sign-in identifiers)
• Community memberships and organiser or vendor roles
• Delivery or pickup preferences you provide when placing orders

Order and payment information

• Order history, pledges, savings, and delivery status
• Payment card details are collected and processed by Stripe. We do not store full card numbers on our servers.
• Vendor payout and identity verification data required for Stripe Connect compliance

Communications and support

• Messages you send to us, dispute submissions, and support correspondence
• Invite codes you create or redeem, and related audit logs

Technical and usage information

• Device type, browser, IP address, and approximate location derived from IP
• Log data, session identifiers, and error diagnostics
• Analytics and monitoring data where enabled (for example, to improve reliability and security)

3. How we use your information

We use personal information to:

• Provide, operate, and improve the Services
• Create and manage accounts, communities, orders, and payouts
• Process payments, hold funds in escrow until delivery is confirmed, and issue refunds
• Send transactional emails such as verification codes, receipts, and order updates
• Respond to support requests, disputes, and legal obligations
• Detect, prevent, and investigate fraud, abuse, or security incidents
• Comply with applicable laws, tax, and regulatory requirements

4. How we share information

We may share personal information with:

• Service providers that help us run the platform, including Supabase (authentication and database hosting), Stripe (payments), email delivery providers, and cloud infrastructure hosts
• Community organisers and vendors where necessary to fulfil orders (for example, your name and delivery details for a vendor fulfilling your community order)
• Other buyers in your community only to the extent needed for pooled ordering (for example, aggregate order progress), not your payment details
• Regulators, courts, or law enforcement when required by law or to protect rights, safety, and security
• Professional advisers such as lawyers or accountants under confidentiality obligations

We do not sell your personal information.

5. Overseas disclosure

Some of our service providers may store or process data outside Australia (for example, in the United States or the European Union). Where we disclose personal information overseas, we take reasonable steps to ensure recipients handle it in a manner consistent with the APPs, including through contractual safeguards where appropriate.

6. Cookies and similar technologies

Our websites and web apps use cookies and local storage to keep you signed in, remember preferences, and protect against abuse. You can control cookies through your browser settings, but some features may not work correctly if cookies are disabled.

7. Data retention

We retain personal information for as long as needed to provide the Services, resolve disputes, enforce our agreements, and meet legal, accounting, and tax obligations. When information is no longer required, we take reasonable steps to delete or de-identify it.

8. Security

We use administrative, technical, and organisational measures designed to protect personal information, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Under the Privacy Act 1988, you may have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate, out-of-date, incomplete, or misleading information
• Request deletion of certain information, subject to legal and operational requirements (for example, open orders or payout obligations)
• Make a complaint about how we handle your personal information

To exercise these rights, email privacy@mycommunityshopper.com. We will respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

10. Children

The Services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when changes take effect. Material changes will be communicated through the Services or by email where appropriate.

12. Contact

CommunityShopper Pty Ltd
Melbourne, Victoria, Australia
Email: privacy@mycommunityshopper.com
Website: mycommunityshopper.com