Privacy Policy

Last Updated: December 2024

1. Introduction

Avocado Pty Ltd (ACN 652 199 687) ("we", "us", "our") operates mobile applications designed to help small businesses manage their operations. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile applications.

We are committed to protecting your privacy and complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our apps:

• Account Information: Name, email address, phone number, and password when you create an account
• Profile Information: Business name, business type, and other details you add to your profile
• Communications: Information you provide when contacting our support team

2.2 Information Collected Automatically

When you use our apps, we automatically collect certain information:

• Usage Data: How you interact with our apps, features used, actions taken, and time spent
• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Log Data: IP address, access times, app crashes, and system activity
• Analytics Data: Aggregated data about app performance and user behaviour patterns

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our mobile applications
• Create and manage your account
• Process transactions and send related information
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyse trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalise and improve your experience
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services to you
• Legitimate Interests: Processing for our legitimate business interests, such as improving our services, provided these interests do not override your rights
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Processing necessary to comply with applicable laws

5. Third-Party Analytics Services

We use third-party analytics services to help us understand how our apps are used. These services may collect information about your use of our apps, including:

• Firebase Analytics (Google): App usage patterns, user engagement, and crash reporting
• App performance monitoring tools: Technical performance data to identify and fix issues

These third-party services have their own privacy policies. We encourage you to review their privacy practices. We do not share personally identifiable information with these analytics providers beyond what is necessary for the service to function.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, customer support)
• Legal Requirements: When required by law, court order, or government request
• Protection of Rights: To protect the rights, property, or safety of Avocado Pty Ltd, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete or anonymise your personal information within 30 days, unless retention is required by law.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the details provided below.

9. Rights for EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the GDPR:

• The right to lodge a complaint with your local data protection authority
• The right not to be subject to automated decision-making, including profiling
• The right to be informed about cross-border data transfers and the safeguards in place

For cross-border transfers of personal data outside the EEA, we use Standard Contractual Clauses approved by the European Commission or other appropriate safeguards.

10. Rights for California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of your personal information (note: we do not sell personal information)
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights

To exercise these rights, contact us at the email address below. We will respond to verifiable requests within 45 days.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Regular security assessments and updates
• Access controls limiting who can access personal information
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

12. Children's Privacy

Our apps are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that a child under 16 has provided us with personal information, we will delete such information from our systems.

13. International Data Transfers

Your information may be transferred to and processed in countries other than Australia. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy and applicable laws.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification for significant changes

We encourage you to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a complaint about our handling of your personal information, please contact us:

Avocado Pty Ltd
Email: hello@avocadodigital.com.au
Website: avocadodigital.com.au

For Australian residents, if you are not satisfied with our response to your complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.