Privacy Policy

We want you to feel confident when using our services—whether you're sharing information, communicating with others, or creating content. This policy explains how we collect and use your information, and the steps you can take to protect your privacy.

If the General Data Protection Regulation 2016/679 ("GDPR") applies to you, refer to Appendix 1 for additional details.

What This Policy Covers

• What information we collect and why
• How we use your information
• Your choices for managing, accessing, and updating your information

If you're unfamiliar with terms like cookies, IP addresses, and browsers, we recommend reviewing these key terms. Whether you're new to ChekRite or have been with us for a while, please take time to understand our practices. Feel free to contact us with any questions.

Transparency and choice

We understand that people have different privacy concerns. Our goal is to be clear about the information we collect so that you can make informed choices.

By providing us with personal information, you agree to us collecting, holding, using, and sharing your personal information according to this policy. You don’t have to provide personal information, but it may affect your use of our services.

You can block all cookies by adjusting your browser settings, though this may prevent you from accessing certain features, such as logging into ChekRite.

Information we collect

We collect information to improve our services. This includes:

• Information you give us: For example, when you sign up for an account, we collect details like your name, email address, and phone number.
• Information from your use of our services: We gather details about how you interact with our content, including device information (e.g., hardware model, operating system) and location data (e.g., GPS signals).

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Communicate updates, promotions, or other information we think is useful to you
• Analyze data to improve our services and offer insights to third parties (in anonymized form)
• Monitor trends and detect security issues or fraud
• Ensure compliance with our policies and legal obligations
• We may use anonymized and aggregated data (which does not include personal information) to improve our services, including developing and training AI models to enhance functionality and user experience.

Information Sharing

We do not share personal information outside of ChekRite unless one of the following applies:

• With your consent: We will share information when you give us permission.
• With account administrators: If your account is managed by an administrator (e.g., through your company), they may have access to your information.
• For legal reasons: We may share data if required by law or as part of legal proceedings.

We may also share anonymized data (e.g., usage statistics) with third parties like partners.

Retaining and Deleting Your Data

We retain your personal information as long as necessary to provide our services or as required by law. When no longer needed, we securely destroy or de-identify the data.

You can request that we stop processing or delete your personal information at any time.

Data Processing Outside Australia

While ChekRite’s servers are located in Australia, we may process your information on servers in other countries. If we share your data with third-party providers outside Australia, we take steps to ensure they follow the same privacy standards.

Security

We use strong security measures, including encryption and real-time monitoring, to protect your data. However, transmitting information over the internet can never be 100% secure. Any transmission is at your own risk.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Delete your personal data
• Restrict or object to certain uses of your information
• Transfer your data to another service provider

For more information on exercising these rights, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we’ll notify you (e.g., via email or an in-app message). The latest version will always be posted on our website.

Contact Us

If you have any questions or concerns about this Privacy Policy, you can contact us at:

Jordan Millar
Email: privacy@ChekRite.com
Telephone: +61 1300 11 71 22

Address:
ChekRite
4/303 Coronation Dr
Milton QLD 4064
AustraliaI 

Appendix 1 – GDPR Appendix

For the purpose of this Privacy Policy the controller of personal data is ChekRite Holdings Pty Ltd or one of its subsidiaries (“ChekRite”) and our contact details are set out in the Contact section above.

The Legal Basis for Processing your Information

Under GDPR, the main grounds that we rely upon in order to process personal data collected via our websites and services are the following:

• (a) Necessary for entering into, or performing, a contract – in order to perform obligations that we undertake in providing a service to you, or in order to take steps at your request to enter into a contract with us, it will be necessary for us to process your personal data;
• (b) Necessary for compliance with a legal obligation – we are subject to certain legal requirements which may require us to process your personal data.   We may also be obliged by law to disclose your personal data to a regulatory body or law enforcement agency;
• (c) Necessary for the purposes of legitimate interests –  either we, or a third party, will need to process your personal data for the purposes of our (or a third party’s) legitimate interests, provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your personal data protected.  Our legitimate interests include responding to requests and enquiries from you or a third party, optimising our website, applications and customer experience, informing you about our products and services and ensuring that our operations are conducted in an appropriate and efficient manner;
• (d) Consent – in some circumstances, we may ask for your consent to process your personal data in a particular way.

The Legal Basis for Processing your Information

As mentioned above, we will share your personal information with trusted third parties where we have retained them to provide services that you or our clients have requested, and to perform maintenance or respond to technical incidents affecting our services. Our current third-party service providers are listed in Appendix 2.

Where we disclose personal information to third parties, we require minimum standards of confidentiality and data protection from such third parties.

Processing Outside of the European Economic Area ("EEA")

To the extent that any personal information is provided to third parties outside the EEA, or who will access the information from outside the EEA, we will ensure that approved safeguards are in place to ensure that we comply with GDPR, such as the standard contractual clauses approved by the European Commission or the EU/US Privacy Shield.

ChekRite processes personal information on our servers in Australia. We may process your personal information on a server located outside the country where you live, including outside the EEA. The primary location of user data and data uploaded to ChekRite is a data centre in Australia operated by our third-party cloud hosting provider, Amazon Web Services (“AWS”). AWS is a participant in the EU/US Privacy Shield, under which transfers of personal data to the U.S. are authorised.

Retention of Personal Data

We will retain your personal information for the time necessary to provide the services we perform for you, or to achieve other purposes outlined in this Privacy Policy, and you can always request that we stop processing or delete your personal information (see the section below regarding your rights).

Your rights in respect of information we hold about you

You have certain rights in relation to personal information we hold about you. Details of these rights and how to exercise them are set out below.  We will require evidence of your identity before we are able to act on your request.

Right of Access

You have the right at any time to ask us for a copy of the personal information about you that we hold.  Where we have good reason, and if the GDPR permits, we can refuse your request for a copy of your personal information, or certain elements of the request. If we refuse your request or any element of it, we will provide you with our reasons for doing so.

Right of Correction or Completion

If personal information we hold about you is not accurate, out of date or incomplete, you have a right to have the data rectified, updated or completed.  You can let us know by contacting us at privacy@ChekRite.com

Right of Erasure

In certain circumstances, you have the right to request that personal information we hold about you is erased e.g. if the information is no longer necessary for the purposes for which it was collected or processed or our processing of the information is based on your consent and there are no other legal grounds on which we may process the information.

Right to object to or restrict processing

In certain circumstances, you have the right to object to our processing of your personal information by contacting us at privacy@ChekRite.com. For example, if we are processing your information on the basis of our legitimate interests and there are no compelling legitimate grounds for our processing which override your rights and interests. You also have the right to object to use of your personal information for direct marketing purposes.

You may also have the right to restrict our use of your personal information, such as in circumstances where you have challenged the accuracy of the information and during the period where we are verifying its accuracy

Right of Data Portability

In certain instances, you have a right to receive any personal information that we hold about you in a structured, commonly used and machine-readable format.  You can ask us to transmit that information to you or directly to a third party organisation.

The above right exists only in respect of personal information that:

• you have provided to us previously; and
• is processed by us using automated means.

While we are happy for such requests to be made, we are not able to guarantee technical compatibility with a third party organisation’s systems. We are also unable to comply with requests that relate to personal information of others without their consent.

You can exercise any of the above rights by contacting us using any of the methods in the Contact section above.

Most of the above rights are subject to limitations and exceptions.  We will provide reasons if we are unable to comply with any request for the exercise of your rights.

To the extent that we are processing your personal information based on your consent, you have the right to withdraw your consent at any time. You can do this by contacting us using the details in the Contact section above.

Automated decision-making

Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. It is specifically regulated under GDPR where such decisions are taken which have legal or other significant effects on individuals.  It is permitted in the following circumstances:

1. Where it is necessary to enter into or perform our contract with you and appropriate measures are in place to safeguard your rights.
2. In limited circumstances, with your explicit written consent and where appropriate measures are in place to safeguard your rights.

You will not be subject to decisions that will have a significant impact on you based solely on automated processing, unless we have a lawful basis for doing so, we have notified you and given you a right to challenge the decision or to require that the decision be taken by a person.

Complaints

If you are unhappy about our use of your personal information, you can contact us using the details in the Contact section below. You are also entitled to lodge a complaint with the UK Information Commissioner’s Office using any of the below contact methods:

Telephone: 0303 123 11113

Website: https://ico.org.uk/concerns/

Post:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

If you live or work outside the UK or you have a complaint concerning our activities outside the UK, you may prefer to lodge a complaint with a different supervisory authority.  A list of relevant authorities in the EEA and the European Free Trade Area can be accessed here

Appendix 2 - Third Party Service Providers (as updated from time to time)

‍