Privacy Policy

About this policy

This policy explains how Recycled AF collects, uses, shares and protects personal information. It covers the Recycled AF app, the website at recycled-af.com, the Verify Register and the verify pages for Verified Collector cards.

The Privacy Act 1988 (Cth) applies to Recycled AF to the extent the law says it does. Whether or not the Act requires it, we follow the Australian Privacy Principles as our own policy.

This policy sits alongside the terms that apply to you. For a Household, those are the Terms of Service. For a Collector, those are the Terms of Service and the safety and equipment agreements you accept at sign-up. When we issue a collector agreement, it governs Collectors from the date it is issued. For a Venue, those are the Commercial Venue Services Terms. For an Organiser, those are the terms of your engagement with us.

Your terms set out your agreement with us. This policy explains how we handle personal information under them. If this policy and your terms differ, your terms apply.

1. Who this policy covers

We hold information about these people:

• Households: a person who books a Pickup at a home address.
• Collectors and applicants: a person who applies for or holds an Accreditation to accept Pickups through the Platform. Collectors are independent contractors. They are responsible for their own cover.
• Venues and Organisers: a business or event organiser that engages us, and the people who act for it.
• Organisation administrators: the person who runs an Organisation account for a club, group or other body.
• Website visitors and people who contact us.

We hold no personal information about a Helper, with the one exception in section 12.

2. Information we collect

We collect only what the Platform needs to list, offer, accept, perform and record Pickups, and to run our accounts. This section lists what we collect, by the part you play.

2.1 Households

• Your name, email address and phone number.
• The address of the Premises and the Collection Point.
• Any notes or instructions you add to a Pickup.
• Your booking reference and the record of each Pickup.
• The version and date of the Terms of Service you accepted, recorded when you sign up.

2.2 Collectors

• Identity and contact details: your name, email address and phone number.
• Your home address, and the suburbs or postcodes you choose to collect in. We use these to show you the closest Pickups first.
• Vehicle details: the type and registration plate of the vehicle you use.
• We hold no driver licence number, passport number or other government identity document. If the Accreditation process ever asks for an identity document, this policy is updated before that starts.
• Your declarations, each stored with the version of the words, the date and the time. They are:
  • the Commercial Induction declarations; and
  • your Insurance Declaration, where we ask for it. It is a YES or NO answer about public liability insurance for your collection work. You may also give the insurer name and policy number if you choose.
• The consent to a background check you give at sign-up. We run no check today. We will tell you first, and update this policy, before any check starts.
• Your Reliability Record: the number of Pickups you have completed, the number you missed or released late, and any suspension or removal of your Accreditation.
• Your Evidence Records: the photographs you take in the Platform for each Pickup, with the time of each photograph and, where your device gives it, the location. They also hold the booking reference, the Docket photograph, the docket number and the Depot Count. See section 3.
• Payment details for Platform Fees: see section 2.6.
• Your Verified Collector card details: first name and last initial, Accreditation status, Commercial Induction status, vehicle type and the month you joined.

2.3 Venues and Organisers

• Your Venue Data: the business name and ABN. We also hold any other business details you give us, such as a trading name, ACN or a trust name.
• The street address of the Premises or the Site, the Collection Point and your Site Requirements.
• The name, email address and phone number of your contact person.
• Your Plan Details or Event Schedule, and the record of each Pickup.
• Payment details: see section 2.6.

Your Site Requirements may describe people at the Premises, for example a sign-in contact. Give us only what a Collector needs to attend safely.

2.4 Organisations

• The name of the Organisation and the name and contact details of its administrator.
• The list of its members. Each member is an individual Collector in their own right.
• The Organisation's Pickup totals and statements.
• The Organisation subscription: a payment reference and the tax invoices. See section 2.6.

2.5 Helpers

Nothing. A Helper has no account. We record no name, age or other detail about a Helper. Section 12 gives the one exception: an image of a Helper caught in a photograph by accident.

2.6 Payments

Platform Fees, Plan Fees, Event Fees and Organisation subscription fees are charged to a payment method you nominate. Our payment processor (Stripe) holds your card details. We hold a Stripe customer reference, a subscription reference where you have a plan, a membership or an Organisation subscription, and the tax invoices. We never see or store your full card number.

The Refund on a container is paid by the Scheme at the Refund Point. It is never paid through Recycled AF. We hold no bank account details for any Refund.

2.7 Account, device and security information

• Your email address and a scrambled (hashed) form of your password, which we cannot read.
• The version and date of the terms you accepted, with the date and time of acceptance.
• A record of actions taken in the app, kept as a security log. Our hosting providers keep short-term technical logs of website requests.
• A push notification token for your device, if you allow notifications.
• Basic technical information our servers receive when your device connects, such as the app version and your device's internet address.
• Messages you send us by email, including from the support page or the app, and our replies.

We do not record how you move through the app, which features you tap or how long you use it.

3. Photographs, people in frame and location

3.1 What the photographs show

A Collector photographs the containers at the Collection Point before taking them, using the Platform's camera. For a Venue Pickup the Collector is also asked to photograph the Docket at the Refund Point and enter the Depot Count. For a Household Pickup the Docket photograph is optional.

The photographs must show containers, bins, bags, Dockets and the Collection Point only. A Collector must not photograph people. The camera screen reminds the Collector to keep people out of frame. A Collector must take reasonable care to keep staff, customers, a Helper and anyone else out of frame.

3.2 If a person appears in a photograph

Sometimes a person appears in a photograph by accident. If that happens:

• We do not use the image to identify anyone.
• We do not publish the image. A Verified Statement and its verify page carry counts and a statement number, not photographs.
• Where a person appears, we crop or blur the person out of the image used for display and reports. We do that where we notice it and when anyone asks. We keep the unaltered original as evidence, with restricted access.
• Venues and Organisers must tell their staff that Pickups are photographed, and must keep people out of frame.

3.3 Location

We record location at single moments only:

• when a Collector takes the container photograph at the Collection Point;
• when a Collector takes the Docket photograph at the Refund Point;
• when a Collector searches for nearby Pickups or Refund Points.

We do not track anyone's location in the background. The app has no background location permission. A Collector chooses their own route, and we do not record it. A Household gives us an address only.

You can turn off location in your device settings. If your device does not give a location, the photograph carries its time only and the Pickup can still be completed. A Household does not need to share device location to book.

4. How we use your information

We use personal information to:

• list, offer, accept, perform and record Pickups, and show a Collector the Premises address once they accept;
• confirm that a Collector attended the right Collection Point and what was collected;
• decide which Collectors a Pickup is shown to first, or held for, and in what order. We may take account of your Reliability Record and your Priority Membership;
• review Evidence Records by automated and human means, to check they are genuine;
• produce Collection Records, Verified Statements, Organisation statements and Event Reports, and run the Verify Register;
• show the verify page for a Verified Collector card;
• bill Platform Fees, Plan Fees, Event Fees and Organisation subscription fees, and issue tax invoices;
• run the Accreditation process, the Commercial Induction and the Verified Collector card;
• handle complaints, suspensions, reviews and disputes;
• keep the Platform safe and investigate misuse;
• send the messages described in section 7;
• improve the Platform, using aggregated or de-identified data where we can; and
• meet our legal obligations.

Images and entries a Collector captures in the Platform may be altered, cropped, annotated and analysed by automated means. We do this for the Platform, Collection Records, Verified Statements, the Verify Register, review and dispute resolution.

An automated check can flag an Evidence Record. A person reviews the complete evidence before a Verified Statement is refused. A person decides every suspension or removal of an Accreditation. A Collector can ask us for a fresh review of the complete evidence.

5. Who sees your information

5.1 Between Households and Collectors

Every Pickup is offered to Collectors. It is confirmed only when a Collector accepts it. Before acceptance the Collector's screen shows a Pickup with its suburb, Pickup Window, type and the number of containers you entered. Your name and exact address are unlocked on the Collector's screen when the Collector accepts. When a Collector accepts your Pickup, the Collector sees your name and full address. The Collector's app also receives your phone number and notes for that Pickup, and may use them for that Pickup only. The Collector does not see your email address. The one exception: if you gave no name, the app shows your email address in its place.

The Collector may use your details only to perform that Pickup. Section 6 says what else a Collector must do.

You see the Collector's name. You can scan their Verified Collector card to see their Accreditation status, Commercial Induction status, vehicle type and the month they joined.

5.2 Venues and Organisers

A Venue sees a Collection Record for each Pickup. It shows the date and time, the Collector's first name and last initial, the container images and the information recorded from the Docket. An Organiser sees an Event Report after the Event.

If a Venue or Organiser wants to make a claim against a Collector, we may give it the Collector's full name. If the Collector gave it to us, we may also give the name of the Collector's public liability insurer. We do this only where the Collector has consented and the law permits. We do not give a Venue or Organiser a Collector's policy number, address or other contact details without the Collector's further consent. The exception is where the law requires it.

A Venue or Organiser may use information about a Collector only for the Pickups under its terms with us.

5.3 Organisations

The Organisation administrator sees the member list, the Organisation's Pickup totals and statements. A Household's name and address are unlocked on screen only for the Collector who accepts the Pickup, as for any Collector.

An Organisation's name is shown to its members and on its statements with the administrator's consent. Either side may withdraw that consent at any time by notice.

An Organisation administrator may use member information only to run the Organisation's part in the Platform.

5.4 Public pages: the verify page and the Verify Register

The verify page for a Verified Collector card is public. It shows the Collector's first name and last initial, Accreditation status, Commercial Induction status, vehicle type and the month they joined. If an Accreditation is suspended or removed, the page shows only that the Accreditation is not current. It never shows the reason.

The Verify Register is public. Each Verified Statement resolves at its own verify URL with a status of current, superseded or withdrawn. A status is never changed by deletion. A Verified Statement is corrected by issuing a new one that supersedes it. The earlier statement stays on the Verify Register and records that it has been superseded. A Verified Statement names the Venue or Organiser it was issued to. The Verify Register does not show the Collector.

We do not otherwise identify a Collector, a Venue or an Organiser in public, or in our marketing, without consent.

5.5 Service providers

Providers host and operate parts of the Platform for us. They may use your information only to provide that service to us. They are:

• Supabase, for the database, file storage, login and server functions;
• Expo, Apple and Google, which deliver push notifications to your device (Google's Firebase service carries them on Android);
• Twilio, for SMS;
• Resend, for the email we send you, with SendGrid as a backup;
• Google, which turns an address you type into map coordinates;
• Google Cloud Vision, which checks each photograph automatically when it is taken, to confirm it shows containers and not people. When we turn on the docket reader, it will also read the Docket;
• Stripe, for payments; and
• Vercel, for hosting the website.

5.6 Overseas

Some of these providers store or process information outside Australia. Where that happens, we take reasonable steps to make sure the provider handles your information in a way that is consistent with this policy.

5.7 The law

We disclose personal information where the law requires it, for example to a court, a regulator or a Scheme administrator acting under law. We may also disclose it where that is reasonably needed to establish, exercise or defend a legal claim.

5.8 Aggregated and de-identified data

We may use data derived from Pickups in aggregated or de-identified form for benchmarking, methodology development, product improvement, research and public reporting. We do this only where no Household, Collector, Venue, Organiser or Event is identified or reasonably identifiable.

5.9 What we never do

We do not sell personal information. We do not share it with advertisers, data brokers or analytics companies. We do not trade in personal information.

6. Collectors' duties with your information

If you are a Household, Venue or Organiser, the Collector who accepts your Pickup receives your address. They also receive the details you gave for that Pickup. We require every Collector to:

• use them only to perform the Pickup they accepted;
• not record them elsewhere, keep them after the Pickup, or use them to contact you for any other purpose;
• share them with their Helper only for that Pickup, and with no other person;
• comply with the Privacy Act to the extent it applies to them; and
• delete all Customer information they hold when they leave the Platform.

A Collector accepts these duties when they sign up. The collector agreement, when it is issued, governs them from that date.

A Collector may keep copies of their own Evidence Records for their own records, tax and insurance purposes. Those copies may include a photograph of your Collection Point. A breach of these duties is a ground for removing the Collector's Accreditation. Tell us if you believe a Collector has misused your details.

7. Messages we send

• Service messages: we send messages about your account, your Pickups, your declarations, changes to the terms or this policy, and safety. These are part of the service and have no opt-out while you hold an account. We send them by push notification, email or SMS.
• Pickup offers: we may send a Collector an offer of a Pickup by push notification or SMS. If we run an Event, we may offer Event shifts the same way. A Priority Member may receive these by SMS as part of Priority Membership.
• Priority Membership offers: if you are a Collector who is not a Priority Member, we may offer you Priority Membership by text or email. We do that when you tap a Pickup that is held for Priority Members, or when you ask us for the joining link. We send no more than one such message a day unless you ask for another.
• Stopping offers: you can stop Pickup offers and Priority Membership offers at any time. Email admin@recycled-af.com, or email us from the support page, and we stop. You can also reply STOP to a text from us, or reply unsubscribe to an email from us, and we stop.
• Other marketing: we send no other marketing email or SMS. If we start, we will ask you first. Each message will say it is from Recycled AF and will carry a way to unsubscribe.

8. Security and data breaches

We protect personal information with encryption in transit and at rest, access controls, row-level security in the database, and secure servers. Only the people who need access to run the Platform have it. No method of transmission over the internet is completely secure, and we cannot promise that.

You must keep your login details secure. You are responsible for activity carried out using them. Tell us straight away if you think someone else has used your account.

We may become aware of actual or suspected unauthorised access to, or disclosure of, personal information. If so, we will assess it promptly. Where the breach is likely to cause serious harm, or the law requires it, we will tell the people affected. We will also tell the Office of the Australian Information Commissioner. We will tell a Venue, Organiser or Collector as their terms require.

A Collector, Venue or Organiser may become aware of a breach involving information from the Platform. A Venue's terms require it to tell us as soon as practicable and to cooperate in responding to it. We ask every Collector and Organiser to do the same, and their terms will require it when issued.

9. How long we keep information

This section sets out how long we keep each kind of record.

• Verified Statements: kept on the Verify Register for not less than 7 years after issue, as the Commercial Venue Services Terms promise. A Verified Statement is never deleted, and its contents are never edited after issue. It can only be superseded or withdrawn.
• Evidence Records, Collection Records, Organisation statements and Event Reports: kept for 7 years after the Pickup. This means a Verified Statement can always be traced back to its evidence.
• Reliability Record: kept while you hold an Accreditation and for 7 years after it ends.
• Declarations and acceptance records: kept for 7 years after the account closes, as the record of the agreement.
• Tax invoices and payment records: kept for 7 years, which covers the period tax law requires.
• Security log: kept for as long as it is needed to investigate misuse, and no longer than 7 years.
• Identity and contact details: kept while your account is open, then removed as section 11 describes.
• A refused or withdrawn application for Accreditation: we remove the application details within 12 months after the decision.
• A Household's address in a Collector's hands: the Collector must not keep it after the Pickup. See section 6.

Where we keep a record after your account closes, we remove or replace your name and contact details in it. For a Pickup you booked, the street address is reduced to the suburb and state, and the coordinates and notes are removed. We do this where it can be done without breaking the record. A Collection Record or statement that has already been issued is not changed.

10. Your rights

Whether or not the Privacy Act requires it, we give you these rights as a matter of policy.

• Access: you can ask for a copy of the personal information we hold about you. Most of it is in the app: your profile, your Pickups and your declarations. A Collector sees their completed Pickups there. Ask us for your Reliability Record and copies of your Evidence Records.
• Correction: you can correct your details in the app at any time. Ask us to correct anything else that is wrong or out of date.
• Deletion: you can delete your account in the app. Section 11 says what is removed and what is kept.
• Anonymity: you can read the website and the Verify Register without telling us who you are. You need an account to book or accept a Pickup. A Collector must know where to go, and a Household must know who is coming.
• Opt out: you can turn off push notifications in your device settings and stop SMS and email offers as section 7 describes.
• Complain: see section 15.

We respond to a request within 10 Business Days. If we need longer, we will tell you why. We do not charge for a request. If we refuse a request, we will tell you why in writing, to the extent the law permits.

11. Deleting your account

You can delete your account from the Profile screen in the app, or by email to admin@recycled-af.com or support@recycled-af.com. We de-identify your account and keep the records, as this section explains. Deleting your account:

• closes your login and ends any Accreditation. A Verified Collector card is not valid once the Accreditation ends;
• removes your name, email address, phone number, address, vehicle details and push token from your profile. Your name shows as "Deleted user" on any kept record;
• removes the street address, map location, notes and contact details from each Pickup you booked. The suburb and state stay on the record;
• cancels any Pickup you have booked that has not been performed; and
• releases any Pickup you have accepted but not yet performed, so it can be offered to another Collector.

Deleting your account does not cancel a Priority Membership, a plan or an Organisation subscription. Cancel it first, or ask us to cancel it, so you are not billed again.

Deleting your account does not delete:

• Verified Statements, which stay on the Verify Register as section 9 describes;
• Evidence Records, Collection Records, statements and reports already issued, which are kept de-identified for the periods in section 9;
• your declarations and the record of the terms you accepted, which are the record of the agreement; or
• tax invoices and payment records.

12. Children and Helpers

Our services are for people aged 18 and over. By creating an account you confirm that you are 18 or over. We do not check it. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.

A Collector may be assisted by their own child, of whom they are the parent, step-parent or guardian, under the Collector's direct supervision. We do not engage, direct, supervise or pay a Helper, and we hold no personal information about a Helper. A Helper must stay out of every photograph. The one exception is an image of a Helper that appears in a photograph by accident. We handle it under section 3.2 and remove it from the image used for display on request.

13. The website

The website at recycled-af.com sets no cookies and runs no advertising or analytics code. If you sign in on the website, for example to manage an Organisation, your login token is kept in your browser's session storage. It is cleared when you close the tab. You can read the public pages, the Verify Register and the verify pages without an account.

If you email us from the support page or from the app, we keep your message and our reply. That lets us help you and keep a record of what was said.

14. Changes to this policy

We may change this policy. We will give you notice not less than 30 days before the change takes effect. We give it by email where we hold your address, in the Platform, and on the website. The notice will include a copy of the changed policy identifying what has changed. Some changes may take effect on shorter notice. Those are changes the law requires, and changes needed urgently to protect the safety of any person or the integrity of the Platform. We will tell you why.

Each version of this policy carries its date. The current version applies to all information we hold. We will not treat information we already hold in a way that is materially less protective than when we collected it. If we ever need to, we will tell you first.

15. Complaints

If you are unhappy with how we have handled your personal information, tell us first. Email admin@recycled-af.com, or email us from the support page. Say what happened and what you would like us to do. We will acknowledge your complaint, look into it, and respond within 10 Business Days. If we need longer, we will tell you why and when to expect our answer.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au. Nothing in this policy limits your right to complain to a regulator.

16. Contact us

Recycled AF Pty Ltd

ABN 67 701 725 368

Email: admin@recycled-af.com

Support page: recycled-af.com/support

17. Words with a special meaning

• Accreditation: the revocable credential we issue that lets a Collector accept Pickups. An Accredited Collector holds a current Accreditation.
• Business Day: a day that is not a Saturday, Sunday or public holiday in Brisbane, Queensland.
• Collection Point: the place at the Premises where containers are presented for a Pickup.
• Collection Record: the record of a Pickup we make available to a Venue in the Platform. It is an operational record, not a Verified Statement.
• Collector: a person who holds an account to collect through the Platform and has accepted the terms that apply to Collectors. For a Pickup, the Accredited Collector who accepts that Pickup.
• Collector agreement: the agreement for Collectors that we will issue. Until it is issued, a Collector is governed by the Terms of Service and the safety and equipment agreements accepted at sign-up.
• Commercial Induction: the induction in the Platform a Collector completes before accepting a Venue or Event Pickup. It ends in a set of declarations.
• Commercial Venue Services Terms: our terms for Venues, shown in the app before a Venue accepts and published at recycled-af.com/legal/venue-terms.
• Customer: the Household, Venue or Organiser whose Pickup a Collector accepts.
• Depot Count: has the meaning given in the RAF Verification Standard.
• Docket: the receipt a Refund Point issues for the containers lodged in a single drop, showing the count and a docket number.
• Event, Organiser: an event for which an Organiser has engaged us, and the person who engaged us.
• Event Report: the report we give an Organiser after an Event. It is an operational record, not a Verified Statement.
• Evidence Record: the images, timestamps, any geolocation data, booking reference, Docket image, docket number, Depot Count and related data captured for a Pickup.
• Helper: a child of whom the Collector is the parent, step-parent or guardian. A Helper assists only under the Collector's direct supervision and with them at all times.
• Household: a person who books a Pickup at a residential address through the Platform.
• Insurance Declaration: the YES or NO declaration about public liability insurance a Collector makes in the Platform, where we ask for it. Where we ask for it, it is made before accepting a Venue or Event Pickup.
• Organisation: a community group or other body we record in the Platform as an administrative grouping of Accredited Collectors.
• Organisation subscription fee: the fee an Organisation pays for its plan. It is published on our website and shown to the Organisation before it subscribes.
• Pickup: a single attendance at a Collection Point by a Collector to collect containers, including at an Event.
• Pickup Window: the time window for a Pickup shown in the Platform.
• Plan Details, Event Schedule: the particulars of a Venue's plan or an Organiser's Event under its terms with us.
• Platform: our software platform, applications, website, portal and interfaces through which Pickups are listed, offered, accepted and recorded.
• Platform Fees, Plan Fees, Event Fees: the fees we charge Collectors, Venues and Organisers under their terms. They are never deducted from a Refund.
• Premises: the address at which a Pickup is to be performed.
• Priority Member, Priority Membership: a Collector whose optional Priority Membership is current, and that membership.
• RAF Verification Standard: the document of that name we publish at recycled-af.com/standard.
• Refund: the refund paid under a Scheme when an eligible container is returned.
• Refund Point: a depot, reverse vending machine, bag drop or other return point at which eligible containers are returned under a Scheme.
• Reliability Record: the record we keep of the number of Pickups a Collector has completed and the number missed or released late. It also records any suspension or removal of their Accreditation.
• Scheme: the container deposit scheme established under the law of the State or Territory in which the Premises are located.
• Site Requirements: a Customer's reasonable requirements for attendance at the Premises. Examples are sign-in, access times, the containers to be collected and parking.
• Terms of Service: the terms of use for the app and the website, accepted at sign-up.
• Venue: a business that has accepted the Commercial Venue Services Terms.
• Venue Data: data about a Venue or Organiser and its Premises or Site, including contact details and Site Requirements.
• Verified Collector card: the digital card a Collector carries, which a Customer can scan.
• Verified Statement: a statement we issue under the RAF Verification Standard, bearing a statement number and resolving on the Verify Register.
• Verify Register: the public register we operate at which Verified Statements resolve and their status is recorded, at recycled-af.com/statement/[statement number].