nyburbs - Privacy Policy for Businesses

1. Who We Are

This Privacy Policy explains how Ansow Pendurthi Pty Ltd ('Nyburbs', 'we', 'us', 'our') collects, uses, holds, and discloses your personal information when you register and use the Nyburbs Business Mobile Application ('Vendor App'). We are bound by the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs) set out in Schedule 1 of that Act. By using the Vendor App, you consent to the collection and handling of your personal information as described in this Privacy Policy.

Ansow Pendurthi Pty Ltd is an Australian company (ABN: 64 690 470 805) operating a digital two sided marketplace that connects community-based Vendors with local Customers. Our registered contact for privacy matters is:

Privacy Contact	Privacy Officer, Ansow Pendurthi Pty Ltd
Email	Support@nyburbs.com.au
ABN	64 690 470 805
Jurisdiction	Victoria, Australia

2. What Personal Information We Collect

We collect personal information that is reasonably necessary for our functions as a marketplace operator. The categories of personal information we collect from Vendors are:

2.1 Identity & Contact Information

First name and last name;
Business name;
Registered email address;
Contact phone number (with country code);
Business address (including street address, suburb, postcode, and State);
Profile photograph ('chef image') and gallery images.

2.2 Business & Compliance Information

Australian Business Number (ABN);
Business type and service category (e.g., Local Kitchen - Home Cook, Restaurant, Private Chef);
Business licence number (optional, if provided);
Council registration number (optional, if provided);
NDIS registration status and business type (if applicable, completely optional);
Business description and services offered;
Years of experience;
Cuisine type and dietary classification information;
Self-declared confirmation of licence and compliance obligations.

2.3 Operational & Commercial Information

Availability schedule (days, hours, breaks);
Service locations (suburbs and regions);
Service method preferences (delivery, takeaway, or both);
Menu items, categories, pricing, allergen information, and stock levels;
Pre-order notice preferences;
Promotional offers and discount settings;
Order history, booking records, and order status data;
Customer ratings given and received;
Cancellation history and Strike records;
Revenue and earnings data (including transaction history, commission records, and payout status).

2.4 Financial Information

Bank account details (BSB and account number), collected and stored by Stripe on our behalf; Nyburbs does not hold raw bank account numbers;
Stripe Connected Account ID and payout status (payouts_enabled, charges_enabled);
Transaction records (order totals, commission amounts, net payouts, Stripe payout IDs);
Payout status and failure information (if applicable).

2.5 Device & Technical Information

Device type, operating system, and app version;
IP address and approximate location at the time of app usage;
App usage data, session data, and in-app navigation patterns;
Push notification tokens;
Crash reports and diagnostic data.

2.6 Support & Communication Data

Support queries and messages submitted via the in-app Support screen;
Email correspondence with Nyburbs;
Dispute records and associated evidence submitted.

2.7 Sensitive Information

In limited circumstances, we may collect sensitive information (as defined under the Privacy Act 1988 (Cth)) where it is reasonably necessary for our operations, including:

NDIS registration status (which may imply information about health-related service provision), collected only where the Vendor selects this designation;
Halal or Kosher certification status, disclosed voluntarily by the Vendor as part of menu listing.

We handle sensitive information with a higher degree of care and will not collect sensitive information without your consent or unless otherwise permitted by law.

3. How We Collect Personal Information

We collect personal information:

Directly from you when you register, complete onboarding, update your profile, add menu items, or contact Support;
Automatically through the Vendor App (device data, usage analytics, session data);
From Stripe, when you complete Stripe Connect onboarding (account status, payout status, excluding raw bank details);
From Customers, in the form of ratings, reviews, and Order-related communications shared via the Platform;
From regulatory and public sources, where required to verify compliance (future versions only; see Section 11).

4. Why We Collect & How We Use Your Personal Information

We collect and use your personal information to:

Purpose	Legal Basis / Necessity
Verify your identity and eligibility to register as a Vendor	Contract performance; legitimate business interest
Create and manage your Vendor profile and listings	Contract performance
Display your profile, menu, and ratings to Customers	Contract performance; consent (profile photo)
Process and manage Orders, payments, and payouts	Contract performance; financial and legal obligations
Calculate and disburse Commission and Net Payouts	Contract performance; financial compliance
Enforce Platform policies, including Strike system and cancellation rules	Legitimate business interest; contract performance
Provide performance analytics and insights to Vendors	Legitimate business interest; consent
Send transactional notifications (new orders, cancellations, payout updates)	Contract performance; consent (push notifications)
Handle disputes, refunds, and chargeback proceedings	Legal obligation; legitimate business interest
Comply with legal and regulatory obligations (ATO, NDIS, AML/KYC via Stripe)	Legal obligation
Improve and develop the Platform and services	Legitimate business interest
Market the Platform and promote Vendor profiles (with consent where required)	Consent; legitimate business interest

5. Disclosure of Personal Information

5.1 Disclosure to Customers

To facilitate Orders, Nyburbs discloses certain Vendor information to Customers, including:

Business name, profile photo, and gallery images;
Business address (for the purposes of customer pickup);
Contact phone number (disclosed within active Order details to enable delivery coordination);
Service descriptions, menu items, allergen information, and dietary classifications;
Star rating collected from customers after successful completion of an order.

We take care to disclose only the minimum personal information necessary for Order fulfilment.

5.2 Disclosure to Third-Party Service Providers

We disclose personal information to third-party service providers who assist us in operating the Platform, subject to confidentiality and data processing obligations:

Business Category	Purpose
Stripe Payments Australia Pty Ltd	Payment processing, Stripe Connect onboarding, payout disbursement, KYC/AML verification, bank account collection
Cloud infrastructure provider (e.g., AWS, Google Cloud)	Hosting & storage, Secure hosting of Vendor data, application infrastructure
Analytics providers	Platform analytics, App usage analytics, crash reporting, performance monitoring
Push notification services (e.g., Firebase Cloud Messaging)	Notifications, Delivery of Order and payout notifications to Vendor devices
Google (if Business Profile linked)	Business listings, Display of Google Business rating and review data on Vendor profile
Customer support tools	Support, Management of Vendor support queries and dispute records

We require all third-party providers to handle personal information in accordance with applicable privacy laws and our data processing requirements.

5.3 Disclosure for Legal & Regulatory Purposes

To the Australian Taxation Office (ATO) or other regulatory bodies where required by law (including Taxable Payments Reporting System obligations);
To law enforcement agencies where required by a valid court order, subpoena, or lawful request;
In connection with legal proceedings, to the extent necessary and permitted by law.

5.4 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring, your personal information may be disclosed to the acquirer or successor entity. We will notify you of any such transfer via the Vendor App or registered email.

5.5 Overseas Disclosure

Some of our third-party service providers may process or store data outside Australia (e.g., cloud infrastructure in the United States or European Union). Before disclosing personal information to overseas recipients, we take reasonable steps to ensure the recipient is subject to a privacy law that is at least substantially similar to the APPs, or you consent to the disclosure. By using the Vendor (Nyburbs Business) App, you acknowledge that such overseas disclosure may occur.

6. Direct Marketing

We may use your contact information (name and email address) to send you information about new Platform features, subscription plan updates, or promotional offers relevant to your Vendor account. This constitutes 'direct marketing' under the Privacy Act 1988 (Cth) and the Spam Act 2003 (Cth).

You may opt out of direct marketing communications at any time by:

Clicking the 'unsubscribe' link in any marketing email;
Adjusting your notification preferences in the Vendor App (Profile > Settings > Notifications);
Contacting us at Support@nyburbs.com.au.

Opting out of marketing does not affect transactional communications (e.g., Order notifications, payout alerts), which are necessary for your use of the Platform.

7. Cookies & In-App Tracking

The Vendor App is a mobile application and does not use traditional browser cookies. We use the following tracking technologies within the app:

Session tokens: used to authenticate your account session securely;
Analytics SDKs (e.g., Firebase Analytics): to collect anonymised app usage data, screen navigation patterns, and crash reports;
Push notification tokens: to deliver Order and payout notifications to your device.

You can manage push notification permissions via your device settings. Revoking push notification permissions may affect your ability to receive timely Order alerts. We do not use tracking technology for targeted advertising within the Vendor App.

8. Data Security

We take reasonable technical and organisational steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Our security measures include:

HTTPS/TLS encryption for all data transmitted between the Vendor App and Nyburbs servers;
Encrypted storage of Vendor data on cloud infrastructure;
One-time password (OTP) email authentication for account access;
Stripe's PCI DSS-compliant infrastructure for all payment and bank account data, meaning Nyburbs does not store raw bank account numbers or card details on its own servers;
Access controls restricting internal access to personal information on a need-to-know basis;
Regular security assessments and vulnerability management practices.

Despite these measures, no electronic transmission or storage system is completely secure. If you believe a data breach affecting your account has occurred, please notify us immediately at Support@nyburbs.com.au.

8.1 Notifiable Data Breaches

Nyburbs complies with the Notifiable Data Breaches (NDB) Scheme under Part IIIC of the Privacy Act 1988 (Cth). If we determine that a data breach is likely to result in serious harm to any individual, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as required by law.

9. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by law. Specific retention periods:

Data Category	Retention Period	Reason
Account registration data (name, email, ABN)	7 years post account closure	ATO record-keeping; legal compliance
Transaction and financial records	7 years from transaction date	Tax Act 1953 (Cth); ATO compliance
Order history and booking records	7 years	Dispute resolution; legal compliance
Profile photos and gallery images	Until deletion by Vendor or account closure + 90 days	Operational necessity; CDN caching
Strike and cancellation records	Duration of account + 3 years	Platform integrity; dispute resolution
Support query records	3 years from query date	Dispute resolution; quality improvement
Device and technical data (logs)	12 months rolling	Security; debugging
Marketing consent records	Until opt-out + 5 years	Spam Act 2003 (Cth) compliance

After the applicable retention period, personal information is securely deleted or de-identified in accordance with our data disposal procedures.

10. Your Privacy Rights (Australian Privacy Principles)

Under the Privacy Act 1988 (Cth) and the APPs, you have the following rights regarding your personal information:

10.1 Right of Access (APP 12)

You may request access to the personal information we hold about you by contacting Support@nyburbs.com.au. We will provide access within 30 days unless an exception under the Privacy Act applies (e.g., the request would unreasonably affect another person's privacy). We may charge a reasonable fee to cover administrative costs of providing access.

10.2 Right to Correction (APP 13)

If you believe personal information we hold about you is inaccurate, incomplete, out of date, irrelevant, or misleading, you may request correction by:

Updating your details directly via the Vendor App (Profile > Personal Information or Edit Profile); or
Contacting us at Support@nyburbs.com.au with the correction requested.

We will action correction requests within 30 days. If we decline to make the correction, we will give you written reasons and inform you of the mechanisms to complain.

10.3 Right to Complain (APP 1)

If you believe we have breached your privacy rights, you may:

First contact us at Support@nyburbs.com.au to raise your concern; we will investigate and respond within 30 days;
If unsatisfied with our response, lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

10.4 Right to Anonymity (APP 2)

In general, you are not able to use the Vendor App anonymously, as your identity is required to create a legally compliant Vendor profile and to facilitate Orders and payouts. However, you may contact us via Support@nyburbs.com.au using a pseudonym for general enquiries where practicable.

10.5 Withdrawal of Consent

Where our use of your personal information is based on consent (e.g., marketing emails, push notifications), you may withdraw that consent at any time. Withdrawal of consent does not affect our right to use personal information for contract performance or legal compliance purposes.

11. Children's Privacy

The Vendor App is intended for individuals aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information to us, please contact Support@nyburbs.com.au and we will take steps to delete that information.

12. Future Features & Third-Party Integrations

In future versions of the Platform, we may introduce:

Integration with the Australian Business Register (ABR) for ABN verification, which will involve disclosing your ABN to the ABR API;
Integration with NDIS Commission Register for business verification;
In-app chat functionality, where messages may be stored and reviewed for dispute resolution and safety purposes;
Delivery driver integration, where order and delivery address data will be shared with any driver assigned to your Order.

We will update this Privacy Policy and notify you before introducing any material changes to the way we collect or use your personal information.

13. Stripe & Financial Data Handling

Bank account and identity verification data collected during Stripe Connect onboarding is processed and stored by Stripe Payments Australia Pty Ltd, not by Nyburbs. Stripe is subject to the Payment Card Industry Data Security Standard (PCI DSS) and its own privacy policy (available at stripe.com/au/privacy). We receive only account status information (payouts_enabled, charges_enabled) and payout-related data from Stripe; we do not have access to raw bank account numbers or identity documents submitted to Stripe. By completing Stripe onboarding, you also agree to Stripe's Privacy Policy and Terms of Service. You acknowledge that Stripe may share information with Nyburbs as necessary to operate the payout function.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Where we make material changes, we will notify you via the Vendor App and/or registered email address at least 14 days before the change takes effect. Continued use of the Vendor App after the effective date constitutes acceptance of the updated Privacy Policy. The current version is always available within the Vendor App under Profile > About & Legal > Privacy Policy.

15. AI-Generated Content Clause

Nyburbs may use artificial intelligence (“AI”) technologies, including third-party AI services, to assist businesses and service providers in generating or improving content such as menus, food descriptions, service listings, promotional text, pricing suggestions, tags, and other business-related information.

AI-generated content is provided as a support tool only. Providers remain fully responsible for reviewing, verifying, editing, and approving all content before publishing it on the platform.

Nyburbs does not guarantee the accuracy, completeness, legality, originality, dietary suitability, allergen information, or regulatory compliance of AI-generated outputs. Providers must ensure all published information complies with applicable Australian laws, food safety regulations, council requirements, and consumer protection obligations.

By using AI-assisted features on Nyburbs, providers acknowledge and agree that:

AI outputs may contain errors, omissions, or unintended content;
multiple providers may access similar AI-powered features and shared underlying AI infrastructure;
generated content should not be considered professional, legal, nutritional, or regulatory advice; and
Nyburbs may improve and refine AI-assisted features over time.

Nyburbs reserves the right to remove or modify AI-generated content that violates platform policies, applicable laws, or community standards.

16. Contact Us

For all privacy enquiries, access requests, correction requests, or complaints:

Privacy Officer	Ansow Pendurthi Pty Ltd
Email	Support@nyburbs.com.au
Response Time	30 days for access/correction requests; 14 days for general enquiries
Regulator	Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au

© 2026 Ansow Pendurthi Pty Ltd. All rights reserved. This Privacy Policy is effective from June 2026 and applies to all Vendors registered on the Nyburbs Platform. Ansow Pendurthi Pty Ltd is bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Privacy Policy for Businesses (Vendor App)