Privacy Policy

1. Information we collect

We collect personal information necessary to provide the Platform. Depending on your role, this may include:

• Account and contact details — name, mobile number, email, and login identifiers.
• Business details — for logistics companies and fleets: entity name, ABN, contact person, and billing details.
• Driver onboarding information — name, date of birth, residential and contact details, ABN, emergency contact, and vehicle details.
• Identity documents — images and details of documents such as a driver licence, photo card, or passport, including document numbers, issuing state, and expiry.
• Work-rights information — for non-citizens, visa status and work entitlement details obtained from the Department of Home Affairs Visa Entitlement Verification Online (VEVO) service, including any conditions such as limits on working hours.
• Police check information — where a check is required for a particular engagement, the outcome of a Nationally Coordinated Criminal History Check obtained through an ACIC-accredited provider.
• Delivery and location information — order details, delivery status and timestamps, and location data associated with performing a delivery.
• Payment-related information — the details needed to administer settlement. Bank account details are collected directly by our payment provider (see clause 5).

We collect this information directly from you, from the fleet that registers a driver, and from our service providers and verification sources.

2. Sensitive information and consent

Some of the information above is sensitive information under the Privacy Act, including criminal record information. We collect sensitive information only with your consent and only where it is reasonably necessary for our functions, or where the law otherwise permits.

Work-rights checks. Verifying work rights through VEVO requires your consent. We ask for that consent during onboarding and keep a record of it. We are required to verify work rights: under the Migration Act 1958 (Cth) it is an offence to engage a person — including as a contractor — who does not hold the right to work in Australia. If you do not provide consent, we cannot engage you through the Platform.

Police checks. Where a police check applies to your engagement, we obtain your separate express consent before a check is requested, including your consent to the provider disclosing the outcome to us. Police check outcomes are used only to assess suitability for the engagement they were obtained for.

3. How we use information

We use personal information to operate and improve the Platform, verify identity, work rights, and eligibility, dispatch and manage deliveries, process payments and settlement, resolve disputes about deliveries and settlement, communicate with you, maintain security and prevent fraud, and comply with our legal obligations.

We do not use identity, work-rights, or police check information for marketing, and we do not sell personal information.

4. Disclosure to third parties

We disclose personal information to service providers who help us run the Platform, including banks and payment providers used to make payments, authentication, communications, mapping, cloud hosting and storage providers, and background screening providers.

We disclose information between Platform participants only as needed to complete a delivery or administer settlement — for example, providing pickup and drop-off details to an assigned driver, or providing a fleet with volume and commission details for its drivers. We may disclose information where required or authorised by law.

5. Payment information

For Phase 1 bank-transfer payouts, we collect your BSB, account number, and account name. The full account number and account name are encrypted at rest; routine product screens show only the BSB and the final four account digits. Access to full payment instructions is restricted to authorised payout operations. We share those instructions with our bank or payment provider only as needed to make and reconcile a payment.

A valid BSB format does not confirm that an account exists or belongs to you. You must check the details you submit and tell us promptly if they change. We may introduce a separate bank or account verification service before enabling additional payout methods.

6. Overseas disclosure

Some of our service providers may store or process information outside Australia. Our payment, authentication, communications, and cloud infrastructure providers may hold data in or access it from overseas locations, including the United States and the European Union.

Where this occurs, we take reasonable steps to ensure your information is handled consistently with the APPs. Verification of work rights is carried out against Australian Government systems, and police checks are conducted by ACIC-accredited providers in Australia.

7. Security and retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Identity documents, bank payment instructions, and screening outcomes are held with access restricted to staff who need them for verification, payout operations, compliance, audit, or dispute resolution.

We retain personal information for as long as needed to provide the Platform and to meet our legal, tax, and record-keeping obligations, after which we take reasonable steps to de-identify or securely destroy it. Because we must be able to demonstrate that we took reasonable steps to verify work rights, verification records are kept for the period required to evidence compliance. Police check outcomes are retained only for as long as needed for the engagement and any applicable record-keeping obligation, and are then destroyed.

8. Access, correction, and complaints

You may request access to, or correction of, the personal information we hold about you. You may also raise a privacy concern or complaint with us. We will respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

Some information we hold originates from a third party — for example, a visa record held by the Department of Home Affairs, or a police check outcome issued by an ACIC-accredited provider. Where you believe such a record is inaccurate, corrections generally need to be made with that body, and we will assist you to direct the request appropriately.

9. Cookies and analytics

The Platform uses cookies and similar technologies for authentication, preferences, and analytics to operate and improve the service. You can manage cookies through your browser settings, though some features may not function correctly without them.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on the Platform, with the “last updated” date shown above.

11. Contact

This Privacy Policy is issued by CBT INNOVATION PTY LTD (ABN 79 699 301 061). You can reach us about privacy matters through the support channels available within the Platform.