Privacy Policy
Last updated: April 18, 2026
1. Legal Framework
ReferSuite respects your privacy and handles your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APP). This policy explains how we collect, use, store, and protect your personal information when you use our platform.
2. Your Data is Your Data
Complete Data Privacy
Only you can see your business data. Your referrals, leads, campaigns, and member information are completely private. Not even ReferSuite administrators can view your individual customer data. We believe your business information belongs to you and you alone.
3. Information We Collect
We collect information that you provide directly to us:
- Account Information: Name, email address, password, and business name when you register
- Business Data: Campaigns, referrals, leads, and settings you create within the platform
- Payment Information: Processed securely through Stripe - we never store your card details
- Usage Data: How you interact with our platform to improve our services
4. How We Use Your Information
- To provide and maintain the ReferSuite service
- To send you important service notifications
- To process your subscription payments
- To improve and personalise your experience
- To respond to your support requests
5. Data Security
We implement industry-standard security measures to protect your data:
- All data is encrypted in transit using TLS/SSL
- Passwords are hashed using secure algorithms
- Regular security audits and monitoring
- Access controls limiting who can access system infrastructure
6. Notifiable Data Breaches
If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act 1988).
7. Data Sharing
We do not sell, rent, or share your personal or business data with third parties for marketing purposes. We only share data with:
- Service Providers: Essential services like payment processing (Stripe), email delivery (Resend), SMS delivery (Twilio), and hosting
- Connected Platforms: If you connect RewardSuite or StreamifyBox, limited member data is shared as described in your Connected Platforms settings
- Legal Requirements: When required by law or to protect our rights
8. Children's Privacy
ReferSuite is intended for users aged 16 and over for members, and 18 and over for business administrators. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.
9. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data
- Export your data
- Opt out of marketing communications
- Lodge a complaint with the OAIC if you believe your privacy has been breached
10. Cookies
We use essential cookies to keep you logged in and maintain your session. We do not use third-party tracking cookies for advertising purposes.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at legal@refersuite.com