This Privacy Policy (“Policy”) is issued by Nousattva Pty Ltd (“Nousattva”, “we”, “us”, or “our”), an Australian proprietary limited company operating the ResQBox Food platform (“Platform”). This Policy outlines how Nousattva collects, uses, discloses, and protects personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (“APPs”).
1. Scope
1.1 This Policy applies to all individuals who access or use the Platform, including Consumers and Vendors.
1.2 By using the Platform, you consent to the collection, use, and disclosure of your personal information in accordance with this Policy.
2. Types of Information Collected
2.1 Nousattva may collect the following categories of personal information:
- Identity and contact details, including name, email address, and mobile number;
- Location data, if location services are enabled;
- Transaction data, such as order history, transaction IDs, payment status, and order value;
- Vendor business information, including ABN and Food Safety Certificate;
- Order history, ratings, feedback, and communications;
- Technical data, including IP address, browser type, device information, and usage patterns.
2.2 Financial Data Exclusion: Nousattva does not collect, store, or process sensitive financial information such as full credit card numbers, bank account numbers, or CVC codes. All financial data is handled directly by our third-party payment processor, Stripe.
3. Methods of Collection
3.1 Personal information may be collected through:
- Account registration and onboarding forms;
- Order placement and payment processing integrations;
- Location services and device permissions;
- Communications with Nousattva support or administrative teams;
- Cookies and similar tracking technologies (refer to Clause 7).
4. Purpose of Collection
4.1 Nousattva collects and uses personal information for the following purposes:
- To operate and maintain the Platform;
- To process orders and facilitate payment status updates;
- To verify Vendor eligibility and regulatory compliance;
- To personalise user experience and display relevant listings;
- To respond to inquiries, complaints, and support requests;
- To improve Platform functionality, performance, and security;
- To comply with legal obligations and regulatory requirements.
5. Disclosure of Information
5.1 Nousattva may disclose personal information to:
- Payment processors (specifically Stripe) and financial institutions for the purpose of facilitating transactions;
- Vendors, for the purpose of fulfilling orders and coordinating pickups;
- IT service providers and infrastructure partners;
- Legal, regulatory, or government authorities, where required by law;
- Third parties with your express consent.
- Cloud infrastructure and platform providers including Google LLC (Firebase, Google Sign-In, Google Maps Platform) and Amazon Web Services, some of whom may store data outside Australia, primarily in the United States;
- Authentication providers, including Meta Platforms Inc. (where users elect to sign in via Facebook), Apple Inc. (Sign in with Apple), and Google LLC (Google Sign-In), who receive limited profile and authentication data necessary to verify identity;
- Communication providers (push notification delivery, transactional email and SMS) acting on our instructions.
5.2 Advertising, Marketing and Analytics
We work with third-party advertising and analytics providers to measure the effectiveness of our marketing, deliver relevant advertisements about our services, and understand how users interact with our apps. Where you use our mobile applications, certain device identifiers (including advertising identifiers where available), app events, and conversion signals may be shared with the following providers:
- Meta Platforms Inc. (Facebook, Instagram)
- TikTok Pte. Ltd.
- Google LLC (Google Ads, Google Analytics)
These providers may use this information to deliver advertisements and measure campaign performance on our behalf and, where permitted, on their own behalf in accordance with their privacy policies.
We do not sell your personal information.
Your choices regarding advertising and direct marketing:
- You can opt out of personalised advertising by adjusting your device settings (iOS: Settings → Privacy & Security → Apple Advertising; Android: Settings → Privacy → Ads → Reset advertising ID / Opt out of Ads Personalization).
- You can opt out of receiving marketing communications from us by adjusting your notification preferences in the app, or by emailing team@nousattva.com with “Unsubscribe” in the subject line.
- Opting out of marketing communications does not affect transactional communications related to your orders.
This complies with Australian Privacy Principle 7 (Direct Marketing).
6. Data Security
6.1 Nousattva implements reasonable technical and organisational measures to protect personal information from unauthorised access, misuse, loss, or disclosure.
6.2 Security measures include:
- Secure servers and encrypted data transmission;
- Access controls and authentication protocols;
- Regular monitoring and security audits.
6.3 Despite these measures, no system is completely secure. You acknowledge and accept the inherent risks associated with digital data transmission and storage.
6.4 Payment Security: All financial transactions are processed through Stripe's secure encryption infrastructure. By using the Platform, you acknowledge that the processing of your financial data is subject to Stripe's Privacy Policy.
7. Cookies and Tracking Technologies
7.1 The Platform may use cookies and similar technologies to:
- Maintain session state and user preferences;
- Analyse usage patterns and improve performance;
- Deliver relevant content and listings.
7.2 You may disable cookies via your browser settings; however, doing so may affect Platform functionality.
8. Location Data
8.1 If you enable location services, Nousattva may use your device's location to:
- Display nearby Vendors and food listings;
- Provide accurate pickup instructions and travel estimates;
- Improve search relevance and user experience.
8.2 Location Data Retention
We handle location data in two distinct ways:
- Real-time location used during in-app search (for example, to show restaurants near your current location) is processed in the session and not stored against your account once the session ends.
- Saved address coordinates, including the latitude and longitude associated with delivery addresses, restaurant pickup addresses, and account locations, are retained for as long as the address remains active on your account. These coordinates are stored to enable accurate distance calculations, pickup window estimates, and the location-based features of the platform.
Coordinates linked to a saved address are deleted when you remove the address or close your account, subject to any legal retention requirements as set out in Section 11.
Address coordinates derived from third-party mapping services (such as Google Places) are stored only after you have confirmed the address as your own. We do not cache or persist coordinates from search-time autocomplete suggestions you do not select.
9. Access and Correction
9.1 You may request access to the personal information Nousattva holds about you and request corrections to ensure accuracy and completeness.
9.2 Requests must be submitted in writing to the contact details provided in Clause 11.
9.3 Nousattva will respond to access and correction requests within a reasonable timeframe and in accordance with the Privacy Act 1988 (Cth).
10. Third-Party Links
10.1 The Platform may contain links to third-party websites or services.
10.2 Nousattva is not responsible for the privacy practices or content of external sites.
10.3 Users are encouraged to review the privacy policies of third-party services before providing personal information.
11. Contact Information
Questions about this Policy?
Nousattva Pty Ltd
Email: team@nousattva.com
12. Changes to This Policy
12.1 Nousattva may amend this Privacy Policy from time to time.
12.2 Material changes will be communicated via the Platform.
12.3 Continued use of the Platform following any amendments constitutes acceptance of the revised Policy.
13. Communications and Notifications
With your permission, we send two categories of push notifications to your device:
- Transactional notifications relating to your orders, including order confirmation, restaurant acceptance, ready-for-pickup alerts, and pickup window reminders. These are essential to the service.
- Marketing notifications including promotional offers, new restaurant launches, and feature updates. These are optional.
You can manage notification permissions at the operating-system level (iOS: Settings → Notifications → ResQBox; Android: Settings → Apps → ResQBox → Notifications). You can also opt out of marketing notifications specifically through the in-app notification preferences without losing transactional notifications.
Opting out of marketing notifications takes effect within a reasonable period of receipt of your request, consistent with Australian Privacy Principle 7.