Bagzo.
Privacy Policy
Bagzo Technologies Pty Ltd (ABN 40 700 052 900), trading as Bagzo
Effective from: 5 June 2026 · Version: 1.2 · Last updated: 7 September 2026
This policy explains what information Bagzo collects, why, who sees it, and what you can do about it. It covers our website and our customer and merchant apps. We're bound by Australia's Privacy Act 1988 and the Australian Privacy Principles.
If you sell on Bagzo as a grocer, we also collect business and verification details from you (such as your ABN, photo ID and the bank account we pay you into). What we collect and why is set out in your Merchant Agreement, and you can ask us for a copy at any time at support@bagzo.com.au.
1. Who we are
Bagzo Technologies Pty Ltd (ABN 40 700 052 900)
Suite 31, Level 3, 10 Bridge Street, Granville NSW 2142
We run a grocery delivery platform connecting independent grocers, butchers and bakeries with local customers.
2. What we collect
Information you give us
- Your name, email address and phone number
- Your delivery addresses and any delivery notes
- Your orders, cart, order history and substitution preferences
- Reviews and ratings you leave, and tips you add
- Chat messages between you and the grocer during an order, and emails you send to support
- Whether you've opted in to marketing emails
Payment
- A token from Stripe that lets us charge or refund the right card. We never see or store your card number, expiry or security code.
From your device
- Device type, operating system, app version and language
- A push token from Apple or Google, so we can send you order updates
- Your IP address, which appears in our server logs
- Crash reports, with personal details removed
- Your location, only if you allow it, to find shops near you and show delivery progress. You can turn this off in your phone's settings at any time and enter addresses by hand.
3. How we collect it
- From you, when you sign up, place an order, message a grocer or contact support
- Automatically, when you use the app (device information, IP address, crash reports)
- From Google or Apple, if you choose to sign in with them (your name and email, or Apple's hidden-email alias)
- From Stripe, after you pay (a confirmation and a payment token)
4. What we use it for
| Purpose | Example |
|---|---|
| Running the service | Process your order, pay the grocer, send a driver, send you a receipt |
| Talking to you | Order confirmations, delivery updates, support replies, account security alerts |
| Verifying you | Email codes at sign-up |
| Fixing problems | Crash reports |
| Marketing | Only if you've opted in; you can opt out at any time |
| Keeping the platform safe | Preventing fraud and misuse |
| Meeting legal duties | Tax records, lawful requests from authorities |
5. Who we share it with
We don't sell your personal information. We share only what each party needs:
- The grocer filling your order sees your first name, the items, your delivery address, your delivery notes and substitution preferences, and a chat thread with you. They don't see your email, phone number, card details or other orders.
- The Bagzo driver bringing it to you sees your name, a phone number to call you on arrival, the pickup address and your delivery address and notes. Delivery is done by our own drivers, not a courier company.
- Stripe processes every payment and receives your card details directly from the secure card form. Their policy: https://stripe.com/au/privacy
- Google or Apple, only if you sign in with them.
- The services we run Bagzo on: hosting in Sydney, Australia; email for order confirmations and sign-in codes; Apple and Google for push notifications and maps. None of them sell your data, and each is bound by its own privacy terms.
- Regulators and the law, if a court, regulator or other authority legally requires it. We share only what we have to.
- A buyer of the business, if Bagzo Technologies Pty Ltd is ever acquired or merged. Your data may move with the business, and we'll tell you before that happens.
6. Where your data lives
Your data is stored on servers in Sydney, Australia. Three things leave the country because that's where those partners operate: payments go to Stripe in the United States, push notifications go through Apple's and Google's networks, and address lookups on the Android app go to Google. When data leaves Australia, we make sure the recipient is held to standards equivalent to the Australian Privacy Principles.
7. How long we keep it
| What | How long |
|---|---|
| Your account and personal details | While you're using Bagzo, then deleted within 30 days of closing your account |
| Order and payment records | 7 years, as Australian tax law requires. Once your account is closed they no longer identify you. |
8. Your rights
See what we have on you. Email support@bagzo.com.au and we'll send you a copy of the personal information we hold about you within 30 days.
Fix anything that's wrong. Your name, email, phone and addresses can be changed in the app. For anything else, email us.
Delete your account. Profile → Settings → Delete account. You're signed out straight away, and your personal details are deleted within 30 days. Order records are kept for 7 years for tax purposes but no longer point to you. If you have an order in progress or a refund open, deletion waits until it's settled.
Merchants: delete your account. In the Bagzo merchant portal, Settings → Delete Account, or email support@bagzo.com.au from your merchant address. The same timings apply — your personal details go within 30 days, and sales records are kept for 7 years for tax purposes without identifying you. Deletion waits until any order you are still fulfilling is finished and you have been paid out. The merchant app itself is sign-in only, so there is nothing to delete if you never had an account with us.
Stop marketing. Turn off marketing emails in the app's settings, or email us. Order confirmations, refund notices and security alerts still arrive, because they're part of the service.
Make a complaint. Email support@bagzo.com.au first and we'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC): https://www.oaic.gov.au · 1300 363 992 · GPO Box 5288, Sydney NSW 2001.
9. How we protect it
Every connection to Bagzo is encrypted (HTTPS). Your data is encrypted at rest on our servers. Passwords are stored hashed, never in plain text. Staff only see the data they need to do their job, and we have a written data-breach response plan.
If a breach is ever likely to cause you serious harm, we'll notify you and the OAIC as required by Australia's Notifiable Data Breaches scheme.
10. Cookies and tracking
Our website stores only what it needs to work — your sign-in and your cart — in your browser. The apps use a session token, your device's push token and a local cache. We don't use advertising or marketing cookies, ad trackers, or third-party analytics, and we don't share data with advertising networks.
11. People under 18
Bagzo is for adults. You must be 18 or over to create an account or place an order. We don't market to anyone under 18 and we don't knowingly collect personal information from anyone under 18. If you think we've ended up with data about a child by mistake, email support@bagzo.com.au and we'll delete it.
12. Automated decisions
We don't make important decisions about you with computers alone. Anything that meaningfully affects you — suspending an account, cancelling an order, withholding a refund — is reviewed by a person.
13. Changes to this policy
We'll tell you about material changes, by email or in the app, before they take effect. Minor changes update the "Last updated" date at the top. Previous versions are available on request.
14. Contact
Privacy questions and requests: support@bagzo.com.au
Bagzo Technologies Pty Ltd, Suite 31, Level 3, 10 Bridge Street, Granville NSW 2142