OnePass Privacy Policy

When we refer to ‘personal information’ we mean information, or an opinion, about an individual who is reasonably identifiable, whether the information or opinion is true or not – this is basically how personal information is defined in the Australian Privacy Act.

We may share your personal information for the purposes set out in this Privacy Policy with:

• Participating Brands and Partners as set out in “How Participating Brands and Partners use your personal information” below

• Related Companies for the purposes outlined in “How Related Companies use your personal information” below

• Related Companies and trusted third parties for them to help us operate the OnePass program and provide OnePass benefits. These include:

  • Payment systems operators (such as merchants receiving card payments or payment processors such as Stripe)
    
  • Services providers and our Related Companies for application and product development and operations (including through AI), technical support, and processing, storing, hosting, and performing data analysis and matching
  • Social media, advertising and third-party platforms, such as Bing, Google Marketing Platforms, Meta (including Facebook and Instagram), Pinterest, Snapchat and Reddit to enable member acquisition, engagement and support, and marketing and advertising, and service providers that help us manage our social media presence
    
  • Our professional advisers, including those that assist with communicating our offers and promotions to you, product development and market research, or provide specialist advice such as lawyers or accountants.
    

Other third parties we share personal information with may include:

• Your representatives

• Government agencies, regulatory bodies, and law enforcement agencies, or as required or permitted by law

• Parties involved in business transfer transactions (and prospective transactions).

As mentioned in this Privacy Policy, we share and combine personal information with our Related Companies to enable us and them to undertake a range of important functions. The personal information that we share and combine with our Related Companies includes:
‍

• Information about your purchases, transaction history, and product and service preferences with OnePass, Participating Brands, Partners, and Related Companies

• Interactions with OnePass, Participating Brands, Partners, and Related Companies, including your activity on websites and apps (such as the products you have viewed, added to your shopping cart and purchased), your communications with them, your interactions with them on social media or with their advertising and your device ID

• We receive this information from the Participating Brands, Partners, and Related Companies through using cookies, tags, and pixels.

We may use this personal information (and disclose it to our Related Companies) to:

• Perform data analysis and matching to help us and them to better understand what you like and for insights and strategic and operational decision making

• Enable us and them to provide you with offers, experiences, and direct marketing that interest you (where you have consented to receive direct marketing), display advertising on or from third-party platforms, and personalise your experiences including on websites and apps

• Develop aggregated insights about customer preferences and research to improve our service offerings, advertising, and offers based on shopping and browsing habits

• For other purposes where you have provided consent to us

• For other purposes described in this Privacy Policy.

Our Related Companies may use it for the similar purposes relating to their operations.

Some of our trusted third-party service providers, including data storage and technology service providers, may be located or operate outside of Australia.

Where we share personal information overseas, we take steps to ensure that our service providers are obliged to protect this personal information in accordance with Australian legal requirements and that they are only permitted to use personal information for the purpose for which it is shared.

At times, our service providers may hold your personal information in a number of countries, including Canada, EU member states (including Belgium, Denmark, Finland, Germany, Ireland, Italy, Lithuania, Netherlands), Israel, Japan, the Philippines, Singapore, the United Kingdom, and the United States of America.

When you join OnePass, based on the relationship between you and us, we will send direct marketing to you (unless you opt out of receiving it from us, or we are limited by law).

Participating Brands and Partners who you’ve engaged with as a OnePass member may also send direct marketing to you (unless you opt out of receiving it from them, or they are limited by law). Engaging as a OnePass member includes when you link your OnePass account to them or scan your OnePass card at a Participating Brand, your linked Flybuys card at a Participating Brand (excluding InstantScripts and Priceline) or your linked Sister Club card at Priceline.

The direct marketing may be sent by email, push notification via app or device, telephone, SMS, and other permitted means.
‍
You can stop receiving direct marketing from us through any of the following:

• Using the unsubscribe link or process in a direct marketing communication from us

• Changing your preference within your OnePass account

• Contacting customer support on the details below.

If you want to stop receiving direct marketing from Participating Brands or Partners you will need to contact them directly with your request, for example by clicking an unsubscribe link in a marketing email from them.

Subject to compliance with applicable law, we also:

• use the personal information we collect from, or about you, to personalise the appearance of our website and apps to you

• advertise OnePass, Participating Brands, Partners, Related Companies, and selected suppliers, which may involve your personal information being shared with them or social media and other third-party platforms or data providers like those listed in ‘Digital Service Technologies’. The advertisements may be tailored through the creation of audiences based on your use of OnePass or your involvement with Participating Brands, Partners, Related Companies or suppliers, or your use of social media and other third-party platforms

• you may be able to limit personalisation of our website and app, and the advertisements you see (although you will still receive non-personalised ads) by:

• • blocking the use of cookies (see the ‘Digital Service Technologies’ section below)

  • using opt-out functionality provided by industry bodies such as optout.networkadvertising.org, optout.aboutads.info and youradchoices.com/appchoices

  • opting out of Google Ads Personalisation: www.google.com/settings/ads

  • changing your account settings on the third-party site or social media account
    

  • using features provided by your device or browser, such as notification or push settings or incognito browsing.
    

We may collect personal information about you when you use and access our digital services (i.e., website, apps, or any of our chat functionalities), including the digital services of our Participating Brands, Partners, Related Companies, and trusted third parties (such as social media platforms and other third-party platforms). Like many website and app operators, we use digital service technologies like cookies (which are small data files transferred onto devices when a website or app is accessed), tags, pixels (which ‘tag’ devices), or other digital identifiers including those associated with tracking and advertising identifiers across these digital services that help us:

• Authenticate you

• Maintain your browsing session and remember you and your preferences when you return

• Monitor how you use our websites and apps, including the parts you visit and actions you take

• Combine information with the Participating Brands, Partners, Related Companies and selected suppliers

• With advertising, offers, and experiences that may interest you from OnePass, Participating Brands, Partners, Related Companies and selected suppliers, both on the OnePass website and apps, and when you visit other websites and apps (such as social media and other third-party platforms)

• Protect the security of our website, apps, and members and manage our network usage

• Allow you to interact with social media platforms, for example by ‘liking’ and sharing our content.

We use cookies to help us collect data, which may include personal information. We will handle that personal information in the ways set out in this Privacy Policy. The cookies we use include ‘session’ cookies (which are retained only during a current browsing session) and ‘persistent’ cookies (which are retained by your device or browser between sessions).

Some of the digital service technologies used on our website and apps are created or set for third parties who provide content or services to us. These third parties include social media and online platforms such as Bing, Google Marketing Platforms, Meta (including Facebook and Instagram), Pinterest, Snapchat and Reddit, and digital marketing services, advertising networks, analytics providers and content providers. See below for further description of how we work with Google. We may use other third-party services in similar ways.

You can change your cookies settings on your web browser to block some cookies but, if you do, our website or app may not work as well for you. See www.allaboutcookies.org for more information on how to change your cookie settings for many common browsers, and to learn more about cookies generally.

If you are signed into your Google account when you use OnePass, then Google may also combine data from your Google account with data about your use of OnePass, to help identify you to be shown relevant OnePass advertising online, across your devices, and across the internet. For example, you may see advertising for OnePass, Participating Brands, and Partners on other websites and third-party platforms you visit based on the fact that you have visited this website. We use a range of Google services that help us monitor and more effectively display our advertising so that we can provide a better customer experience.

Google Analytics helps website owners measure how users interact with website content.
For more information:

• About Google advertising cookies and Google Analytics cookies

• About Google’s Privacy Policy

• About how Google uses data when you use sites and apps that use Google technologies

• On how to opt out of Google Analytics

We work hard to keep your personal information safe and secure. This includes building our systems with your privacy and security in mind and implementing a range of security measures including:

• Maintaining an ongoing cyber security program and team

• Controlling access to personal information through access and identity management systems

• Implementing information security, privacy, and confidentiality related policies and processes

• Regularly reviewing our security program and controls to protect your personal information appropriately.

You can contact us here if you:

• Want to request access to the personal information we hold about you

• Think any personal information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading and you want it corrected.

Please select “My Data & Privacy” and follow the prompts. You will need to include your name, contact details, and details of the personal information you want access to or would like corrected. We will then consider your request, and we may need to verify your identity.

You can also contact us using the email address set out in the “Contact us” section below.

If you wish to make a complaint about how we have handled your personal information, you can contact us here. Please select “My Data & Privacy” and follow the prompts. You will need to include your name, contact details and details of your complaint.

We will respond to your complaint in a reasonable period of time. If you disagree with our response, we will provide you with information about what action you can take, including making a complaint to the Office of the Australian Information Commissioner (whose details are set out below).