Privacy policy
Overview
This policy explains how Me&u AU Trading Pty Ltd ACN 631 694 132, Meandu Australia Pty Limited ACN 626 480 788 and Meandu NZ Trading Pty Ltd Co. Number 7964237 and their affiliates and subsidiaries (together “me&u”) collect, use, store and disclose your personal information when using its Spots website and Spots web or mobile discovery applications (“Spots App”), social media pages, marketing activities whether branded me&u or “Spots” to search for, recommend, rank or attend hospitality venues (collectively, the “Services”). We will update this policy if our information handling practices change. Any revised privacy policy will take effect when it is published on either our website through the Services. Any third party websites or services that may be linked to our Service/s are subject to their own privacy policy.
General Collection statement (Website)
This section contains a high level description of how we collect and use your personal information. We collect personal information when you use our Services, register for an account, or contact us. What we collect depends on how you use our Services.
We only disclose your personal information as described in this privacy policy, and as otherwise permitted by law. Personal information, and sensitive information voluntarily provided to us, may be shared with our integration partners, including loyalty, CRM, reservation, POS and trusted venues, and other third party service providers. See the General Disclosure section below.
You don’t have to give us all the information we ask you to provide, but it may limit our ability to provide you with the Services if you do not (for instance, we need your location details to recommend nearby venues).
You have a right to ask us to update or correct your personal information. To contact us with any questions or privacy related queries please email hello@meandu.com.au.
Personal information we collect from you
Information you provide to us or that we may generate about you. Personal information you may provide to us through the Service or otherwise or that we may generate about you includes: Contact data, such as your first and last name, salutation, email address, and phone number; Account data, such as your username and password that you may set to establish an online account through the Services; Profile data, such as your biographical details, profile photograph, links to your profiles on social networks, accounts you follow on the Services, your position on the leaderboard, your city of reisidence, cuisine preferences, dietary restrictions, those restaurants you have visited and those you want to visit, your age, labels you have applied to certain restaurants, your favorite dishes at a restaurant, calendar information (where you have granted us access), information about your participation in our contests, promotions, or surveys, and any other information that you add to your account profile; Communications data based on our exchanges with you, including when you contact us through the Service, social media, or otherwise; Derived data, such as information we derive from personal information about you based on your activities in interacting with the Service which could include your profile data, preferences, interests, and other information used to personalize your experience including your use of other me&u products and services; Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them; User-generated content data, such as photos, images, videos, comments, questions, messages, reviews of restaurants, chats, your likes of other users’ user-generated content, and other content or information that you generate, transmit, or otherwise make available on the Service, as well as associated metadata. Metadata includes information on how, when, where and by whom a piece of content was collected and how that content has been formatted or edited. Metadata also includes information that users can add or can have added to their content, such as keywords, geographical or location information, and other similar data; Promotion data, including information you share when you enter a competition, promotion or complete a survey. Please note that if you participate in a sweepstakes, contest or giveaway through the Service, we may ask you for your Contact Data to notify you if you win or not, to verify your identity, determine your eligibility, and/or to send you prizes. In some situations, we may need additional information as a part of the entry process, such as a prize selection choice. These sweepstakes and contests are voluntary. We recommend that you read the rules and other relevant information for each sweepstakes and contest that you enter; and/or Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
Other personal information we may collect
Third-party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as: Other users of the Services who may tag or post information about you; Public sources, such as government agencies, public records, social media platforms, and other publicly available sources; Private sources, such as data providers and social media platforms; Our affiliate partners, such as our affiliate network provider and publishers, influencers, and promoters who participate in our paid affiliate programs; Marketing partners, such as joint marketing partners and event co-sponsors; Third-party services, such as social media services that you may link to your account on the Service. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.
Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as: Device data, such as your computer or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g. phone, tablet), device height, device width, IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area; Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Services, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them; Precise geolocation data when you authorise the Services to access your device’s location; Communication interaction data such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.
Cookies and similar technologies. Some of our automatic data collection is facilitated by cookies and similar technologies. For more information, see our [Cookie Policy]. We will also store a record of your preferences in respect of the use of these technologies in connection with the Services.
Data about others. We may offer features that help users invite their friends or contacts to use the Services, and we may collect contact details about these invitees so we can deliver their invitations. Please do not refer someone to us or share their contact details with us unless you have their permission to do so.
Google user data. If you connect the Services to a Google account, this Privacy Policy will apply to the Google user data that we collect from Google. Notwithstanding anything else in this Privacy Policy, if you provide us access Google User Data (as defined below), our use of that data will be subject to these additional restrictions: The Services will only access information that we need to provide you with the Services, including calendar event titles and descriptions, email addresses of invitees on those events, locations of events, and other calendar metadata (“Google User Data”); The Services will not use Google User Data for serving advertisements; and The Services will not allow humans to read Google User Data unless we have your affirmative agreement, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for the Service’s internal operations and, even then, only when your Google User Data has been aggregated and anonymized.
Use of your personal information
We may use your personal information for the following purposes or as otherwise described at the time of collection:
Service delivery and operations. We may use your personal information to: provide and operate the Services and our business; personalizing the Services, including remembering the devices from which you have previously logged in and remembering your selections and preferences as you navigate the Services; establish and maintain your user profile on the Services; facilitate your invitations to or from friends who you want to invite to join the Services; facilitate social features of the Services, such as by identifying and suggesting connections with other users of the Services and providing chat or messaging functionality; enable security features of the Services, such as by remembering devices from which you have previously logged in; communicate with you about the Services, including by sending Service-related announcements, updates, security alerts, and support and administrative messages; communicate with you about events or contests in which you participate; understand your needs and interests, and personalize your experience with the Services and our communications; and provide support for the Services, and respond to your requests, questions and feedback.
Research and development. We may use your personal information for research and development purposes, including to analyse and improve the Services and our business and to develop new products and services. As part of these activities, we may create aggregated, de-identified and/or anonymised data from personal information we collect. We make personal information into de-identified or anonymised data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymised data and share it with third parties for our lawful business purposes, including to analyse and improve the Services and promote our business.
We may also use your personal information for related purposes that you would reasonably expect, and as otherwise permitted by applicable law.
Direct marketing
With your consent, we may send communications to you about the Services and/or our other activities and services, and other promotional and marketing material.
If you have registered for an account with us, and are a frequent user of our services, we consider that we have an ongoing relationship with you and in accordance with applicable law may infer your consent to receive marketing materials from us that are directly related to that ongoing relationship.
If we use your personal information for direct marketing purposes, we will give you the opportunity to opt out of receiving any further marketing material by using our unsubscribe facilities. If you choose to opt out of marketing communications or do not provide your consent to receiving marketing communications (if applicable), please note that we may still contact you for other reasonable non-marketing purposes, including for example to provide information about your account or your use of the Services.
We may also give you the option to receive further communications from one or more of our venue or other partners (including the option to join venue or other partner loyalty and reward programs). If you consent to receive communications from that third-party venue or to join their loyalty program, we may disclose your personal information to that third party.
General Disclosure
We share your personal information with our trusted service providers and partners in Australia and overseas for the purposes set out above, and as permitted by law.
Where we do share your personal information to venues, we require that any information disclosed to that venue will be dealt with in accordance with that party’s privacy policy and in accordance with applicable privacy and spam laws. We may also disclose your personal information to third parties such as our contractors, agents and service providers who help us deliver, administer and support our activities including for example: to assist us with customer support, to provide features of the Services (e.g. inbuilt maps); deliver marketing and digital marketing services; to conduct market research and analysis; to host and back up our servers, data and website; to process payments; to conduct data analysis and data matching services; and when required by law.
Social media integrations
Our Services from time to time may include social media integrations, that enable richer use of our Services with other social media platforms. We may disclose or receive personal information about you with those social media platforms to enable those integrations to work (for instance, so that you link directly to your own account on the other platform). The social media platforms handle your personal information in accordance with their respective privacy policies, and provide their services in accordance with their respective terms of use. Refer to our Terms of Use for more information on third party social media integrations.
Security
We place great importance on protecting us and our users from unauthorised access to, or the unauthorised alteration, disclosure or destruction of, the information we collect. We review our information collection, storage and processing practices, including physical security measures, technical measures and organisational measures, to guard against unauthorised access to systems. Personal information that is maintained on our systems (or the systems of those who provide service to us or on our behalf) is protected using industry standard security measures. However, no security measures are perfect or impenetrable, and we cannot guarantee that your personal information will be completely secure. We have an internal data breach policy in place to deal with any actual or suspected data breach in accordance with applicable law. We require that our service providers adopt appropriate data and security standards.
Storage of your personal information and disclosure of your personal information outside of Australia
We store your personal information primarily in Australia. We may disclose your personal information to third parties outside of Australia. Presently, the countries we are likely to disclose your personal information to are the United Kingdom, the United States and the Philippines. If we do disclose personal information to other overseas persons or entities, we will take reasonable steps to ensure that the overseas recipients of your personal information do not breach any data protection law relating to your personal information.
Data retention
We hold your personal information for as long as we need it to provide our Services including to provide a unique personalised experience for you. We will destroy or de-identify it once the purpose of our collection has ended.
Your personal information will be retained for as long as is reasonably necessary for the purpose for which it was collected, or as required by law. When we no longer need your personal information, we have procedures in place to either destroy or to permanently de-identify the information.
Access and Correction
If you wish to enquire about the personal information that we hold about you, please contact our Privacy Officer at helpme@meandu.com.au.
If you wish to access the personal information that we hold about you, if your personal information changes, or if you no longer wish to receive non-account specific information from us, you can access, correct, update or ask us to remove personal information about you that we have collected (if any) directly through the Services or by contacting us using the details below. When updating your personal information, we may ask you to verify your identity before we act on your request. Where we can provide information access and correction, we will do so for free, except where it would require a disproportionate effort.
Complaints
If you are concerned that there may have been some inappropriate use or disclosure or any other breach relating to your personal information, we would like to know. Please contact our Privacy Officer using the details below:
By email to the me&u Privacy Officer, helpme@meandu.com.au or by post to Level 4, 108-112 Langridge Street, Collingwood, Melbourne, Victoria 3066, Attention Privacy Officer.
We will consider your complaint and respond within a reasonable time. If we cannot resolve your complaint to a satisfactory standard, you are entitled to lodge your complaint with the Office of the Australian Information Commissioner at www.oaic.gov.au if you are in Australia, or the Office of the Privacy Commissioner at www.privacy.org.nz if you are in New Zealand.