Prezzee Group ("Prezzee" or "our" or "we") is in the business of providing the online platform enabling the purchase, redemption, management and storage of a variety of non-reloadable digital gift cards and codes and associated services (the "Services"). The Services include, and may be provided through, our website (the "Prezzee Site") or mobile application (the "Prezzee App").  Prezzee also partner with third-party organisations to provide incentives to their employees and other individuals. The Prezzee Group consists of:

• Prezzee Pty Limited, in Australia;
• Prezzee Limited, in New Zealand;
• Prezzee Canada Corporation, in Canada;
• Prezzee UK Ltd, in the United Kingdom;
• Prezzee Inc, in the United States of America; and
• Prezzee Europe Limited, in Ireland.

This Privacy Notice ("Notice") makes disclosures concerning our collection of personal information, purposes of collection, sources of collection, and measures we use to protect your personal information. In this Notice, personal information means any information that identifies, relates to, describes, is reasonably capable of being associated with or could reasonably be linked, directly or indirectly, with a particular consumer or household ("Personal Information").

This Notice applies to Personal Information collected by Prezzee in connection with our provision of the Services, including Personal Information collected through the Prezzee Site, Prezzee App, our social media accounts, and all other technological means. Prezzee uses third-parties (sub processors) located both locally and outside of your jurisdiction of residence in addition to its own resources to provide the Services.

This Notice does not apply to information collected on any website operated by us that does not link to this Notice, any website or mobile application operated by a third party, or through any third-party application or content that may link to or be accessible from the Services.

Please read this Notice carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, do not use our Services. By accessing or using our Services, you agree to this Notice. This Notice may change from time to time, and the most recent update will appear here. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the notice periodically for updates.

1. Scope of this Privacy Notice

We understand that when accessing our Services, the privacy and confidentiality of Personal Information is important to you. That's why we fully respect your rights to privacy and are committed to protecting the personal and financial details you provide us in line with this Privacy Notice. This Notice applies to our Services and all individuals who use our Services or whose Personal Information is processed by Prezzee in connection with the Services.

We are committed to protecting the privacy of everyone who uses our Services, for them to understand what Personal Information we collect and store, and why we do so, how we receive and/or obtain that information, the rights an individual has with respect to their Personal Information in our possession, and with complying with the requirements of applicable privacy laws ("Privacy Laws").

2. Children

Children under the age of 13 are not permitted to use the Services, Prezzee Site, or Prezzee Apps. No one under age thirteen (13) may provide any Personal Information to, or on the Prezzee Apps. We do not knowingly collect personal information from children under thirteen (13). If you are under thirteen (13), do not use or provide any information on our Prezzee Site or Apps or through any of its features, register on our Prezzee Site or Apps, make any purchases through the Prezzee Site or Apps, use any of the interactive or public comment features of this Prezzee Site or Apps, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under thirteen (13) without verification of parental consent, we will remove and delete that information. If you believe we might have any information from or about a child under thirteen (13), please contact us at privacy@prezzee.com.

California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see Section 23 for more information.

3. The Information We Collect

The type of Personal Information we may collect includes:

(a) Personal Details - We may collect personal details such as an individual's name, location, date of birth and nationality allowing us to identify who the individual is;

(b) Contact Information - We collect information such as an individual's email address, Internet Protocol (IP) address, unique device identifiers, mobile number, device model and name, operating system, browser type, third-party usernames, residential, business and postal address and other information that allows us to contact the individual. We also collect other contact information (where you choose to import or upload that information) such as the names and phone numbers of your contacts from your address book or contact list, which we only use to help you quickly send gift cards to people you may know.

(c) Financial Information - We collect financial information such as any bank or credit card details used to transact with us and other information that allows us to transact with the individual and/or provide them with our Services.

(d) Statistical Information - We collect behavioural and statistical information about an individual and businesses in connection with the Services and/or the Prezzee App.

(e) Geo-location information - We collect geo-location information to send servicing messages and/or special offers from select retailers based on the proximity of the customer to that retailer.

(f) Call Recording -- We may record any calls that you make to us. This information may be used for staff training and dispute resolution.

Prezzee operates as a Data Controller in respect of your personal data, but in specific contractual circumstances where we are required to do so, Prezzee operates as a Data Processor.

For users of the Prezzee Buzz service

The Prezzee Buzz service requires the processing of the following data elements, all of which we are required to collect for us to provide you with the service:

1. Email address
2. Name
3. Employer/organization
4. Location/region
5. Gift card name, denomination, region
6. Slack user IDs
7. Slack workspace ID
8. Slack token to call slack APIs
9. Text content of recognition messages sent between employees
10. Microsoft tenant ID
11. Microsoft Teams ID
12. Microsoft graph API access token to interact with Graph API

4. Why we collect Personal Information

We collect Personal Information so that we can carry out the following actions:

(a) to enable you to use our Prezzee App;

(b) to provide and enable you to use our Services;

(c) to communicate with you, including about our Services and offers which might interest you;

(d) to provide information or advice;

(e) to help process payments by or to you in connection with our Services;

(f) to create accounts, tax invoices or receipts;

(g) to provide your personal information to third parties (sub processors and retailers) in order for them to supply the Services to you;

(h) to consider and respond to complaints made by you.

(i) to communicate with you about research opportunities relating to our products and Services;

(j) to evaluate, operate, analyze and improve our business, including developing new products and services, managing our communications, conducting market research, performing data analytics, and undertaking auditing, accounting, and other internal functions.

We may disclose additional purposes for collection of your Personal Information in collection statements at the point and time of collection.

5. How information is collected

Information is collected directly from you in association with your use of the Services, when you make an inquiry about Prezzee or generally deal with us directly or via our Services. If you are a Gift Card recipient and do not have an account with Prezzee, but are claiming or redeeming a Gift Card through the Services, we will collect information about you, such as your name and email address, from the Gift Card purchaser and sender, or any third-party which has access to your name and email address.

Where you access the Services through third-party platforms, such as Workplace by Meta, Microsoft Teams and Slack, we collect information about you from those platforms for the purpose of providing you with our Services.

When you access our Prezzee Site or Apps or use our Services, we automatically collect certain information such as device and usage information.  For example, we automatically collect your IP address, browser type, language, locale and device settings, unique device identifier, operating system, access times, details of your use of the Services, geo-location information, and other metadata. When you access the Services through the Prezzee App, we may collect information about the functionality, advertising and performance of the app so we can analyze the information and develop and improve the features and technology of the app. We may use any information collected from your use of the app to conduct analytics, send you targeted advertising based on your preferences, contact you directly through the app, and develop new offers and features on the app.

We may share Personal Information with our related entities.

6. Use of cookies, data analytics tools and other similar technologies

We use cookies and other identification technologies on our Prezzee Site for several reasons, including to verify accounts and identify user profiles or their use of our Prezzee Site in order to customise the Prezzee Site to make your experience as seamless as possible.

We may use a variety of technologies that automatically or passively collect information about how you use the Prezzee Site or Apps or our Services (''Usage Information''). Usage Information may include the browser that you are using, the URL that referred you to our Prezzee Site, all of the areas within our Prezzee Site that you visit (including information about any ads you may view or interact with), and the time of day and dates of your access or use, among other information. We may use Usage Information for a variety of purposes, including to improve our Prezzee Site and make it more responsive to the needs of our users.

A ''cookie'' is a text file that our Prezzee Site may place on the hard drive of your computer the first time you access our Prezzee Site. Cookies are not used to run programs or deliver viruses to your computer. Rather, cookies are uniquely assigned to your computer and can only be read by a web server in the domain that issued the cookie to you. One of the primary purposes of cookies is to provide a convenience feature to save you time. For example, if you personalize a web page or navigate within the Prezzee Site, a cookie helps the Prezzee Site to recall your preferences or purchase selections on subsequent visits. This simplifies the process of delivering relevant content, eases site navigation, and so on. When you return to our Prezzee Site, the information you previously provided can be retrieved, so you can easily use the features that you customized.

You have the ability to accept or decline cookies in your browser settings. However, please note that if you decline cookies, you may not be able to sign in or use other features of our Prezzee Site or Services that depend on cookies. If you wish to disable cookies, refer to your browser help menu to learn how to disable cookies. If you disable browser cookies or flash cookies, please note that some features of the Prezzee Site or Services may not function properly.

We may also use web beacons (also called gifs, pixel tags and web bugs), which are small pieces of data that are embedded in images on the pages of our Prezzee Sites or Apps. Web beacons may involve the transmission of information directly to us, to another party on our behalf, or to another party in accordance with its privacy policy. We may use web beacons to bring together information we collect about you.

We may use third-party data analytics and advertising tools to collect information about traffic to the Prezzee Site or Apps and how users use the Prezzee Site or Apps. All data that is collected and analysed is aggregated and does not identify individual users. This information is used to analyze and improve the user experience, assist with future business and product development and for targeted advertising and marketing.

We may link information gathered through cookies, web beacons and third-party analytics to other Personal Information we maintain about you. The combined use of such information is subject to the terms of this Notice.

If you would like to opt out of third-party use of this type of information to help serve targeted advertising, please visit https://optout.aboutads.info/. Please note this does not opt you out of being served advertising. You will continue to receive generic ads.

7. Your Personal Information and third parties

We may share or disclose your Personal Information to enable any third party to perform services or functions for us or on our behalf, including but not limited to sub-processors, third party software providers, identity verification organisations, financial institutions, legal advisors, accountants, auditors, and contractors for data entry and other business operations, web and social media hosting and IT systems and services (including the Prezzee Group companies). Some of the sub processors are listed at the Prezzee website where there is a link to our current sub processor schedule.

We may also disclose your information to government authorities, where we are required or authorised by law to do so, or where we reasonably believe it is necessary to protect the rights, property or personal safety of any person (including our customers, employees, or agents).

You should also note that Prezzee Site or Apps may contain links to other websites or apps operated by third parties over whom we have no control. Once you leave our website or App, we suggest that you carefully read the relevant privacy policies of any website or app you visit.

We do not sell your Personal Information to third parties.

Third parties may be located inside and outside your country of residence. By using the Prezzee Site or Apps, you consent to the collection, use, storage and disclosure of your information in accordance with this Notice. Such use, storage and disclosure will be subject to our terms and conditions and/or third-party terms and conditions, security and privacy policies.

By using our Services, you acknowledge that we may transfer Personal Information outside of the European Economic Area to countries such as Australia, New Zealand, United States of America and other countries in which we or our service providers operate. We only make such transfers in accordance with applicable Privacy Laws including the GDPR if you are in the European Economic Area.

8. Marketing

When you sign up to use our Services, we may use your Personal Information to send you communications and information about our Services and products and our related entities, companies and businesses, unless you opt-out from receiving such communications. We will only send you information about third party products where you've provided your prior consent for us to do so in circumstances where our Privacy Laws require such consent.

You may, at any time, opt-out of receiving marketing communications by using the opt-out facility provided within or on the communication, or by contacting us.

We may conduct research and market testing by mail, phone and electronic messaging, including text and e-mail. We may ask for feedback about our Services and we may also provide you with a customised service experience as well as tailor communications to you. You may opt out of participation in our research at any time.

We may use automated decision-making and/or profiling to send personalised offers to customers based on their behaviour and interactions with Prezzee.

9. How we hold and protect your Personal Information

Personal Information collected or held by us is kept in a secure environment. We hold information in a combination of secure computer storage facilities and paper-based files and other records, both at our own premises and with the assistance of our service providers. We take a range of reasonable steps to protect your Personal Information from misuse and loss and from unauthorised access, modification or disclosure.

Our site and data are secured using a number of security measures to ensure the integrity of your Personal Information. Prezzee uses secure socket layer (SSL) technology, a standard security technology that creates an encrypted link between our Services and your browser. This technology helps to ensure that any information sent and received over the web from Prezzee is private and cannot be intercepted or read by anyone else. Prezzee also has various fraud detection programmes. Prezzee is PCI DSS certified and abides by the requirements of Payment Card Industry Data Security Standard (PCI DSS), taking measures to ensure the security of credit card information entered on the Prezzee Site.

We use third-party PCI compliant secure payment gateway systems in relation to processing of some credit card transactions. The payment gateway provider uses industry standard encryption technology (Secure Socket Layer or SSL for short) to ensure that credit card information when transmitted over the Internet is secure.

The secure payment gateway uses industry standard 128-bit SSL (Secure Socket Layer) technology to protect your credit card information. Your credit card information is encrypted as it travels over the Internet. This makes it very difficult for your information to be intercepted. Please note that while Prezzee uses the payment gateway provider secure payment processing system, we do not have direct access to your credit card information in that system and any such information provided to us by the payment gateway provider is securely held and destroyed as soon as it is no longer required. We undertake to never transmit credit card information over email; therefore we ask that you also refrain from doing so, given the security risks of email communication.

Our personnel are generally authorised to access Personal Information only to the extent necessary for them to do their jobs and carry out their responsibilities. We require our contractors and advisers to observe the same level of privacy compliance as our own personnel. However, no transaction over the internet can ever be guaranteed to be completely secure, and we do not accept liability for unauthorised disclosure or interference of Personal Information by third parties. We cannot guarantee that your Personal Information is safe when you access or use third-party websites or apps linked to or from our Prezzee Site or Apps. You access such sites or apps at your own risk.

We maintain in confidence all information supplied and collected about you and we do not disclose your Personal Information to other parties, except as permitted by this Notice. Any communication from Prezzee requesting credit card information or passwords to any user account should be considered suspicious and should be reported to us immediately via the contact information set out below in this Notice at Section 18.

10. Security storage of your Personal Information

We only keep your information for as long as we need it to provide you with the Services and for related business and audit purposes such as record keeping, processing transactions, facilitating customer requests, resolving customer disputes, and compliance with applicable laws, requirements of regulators or government agencies and to provide and improve our Services and develop our business. Retention periods may also be determined having regard to legal obligations.

If you close your account with us, or if we determine that your account is inactive as determined under the applicable law, we will continue to adhere to the policies and practices as described in this Notice until such time as your Personal Information is destroyed or de-identified. In some cases, we have a legal obligation to keep information such as accounting records, and this information may be kept for long periods, either as required by law or to assist with legal or regulatory requirements.

We may use de-identified information for research and internal business purposes. De-identified information is no longer considered Personal Information and may be used for any reason and retained indefinitely.

11. How you can access and seek correction of your Personal Information

You may contact us at any time using the contact details set out below to request access to the information we hold about you and/or to make a correction to that Personal Information. We will use all reasonable efforts to give you access to your Personal Information within 30 days, except where an exception under the Privacy Laws applies.

If we do not give you access to your Personal Information, in whole or in part, or do not make a correction that you request in respect of your Personal Information, we will explain why, and you have the right to request that we provide you with a statement regarding our reasoning.

To request access to or to correct your Personal Information, please contact us using the contact information set out at Section 18.

Under certain Privacy Laws you have the following rights with respect to Personal Information collected about you (where applicable):

(a) the right to request and be informed of what Personal Information we collect, use and disclose about you;

(b) the right to access Personal Information about you;

(c) the right to correct Personal Information about you;

(d) the right, in certain circumstances, to require the erasure of Personal Information about you;

(e) the right to request and obtain a copy of Personal Information held about you;

(f) the right, in certain circumstances, to object to the processing of Personal Information about you;

(g) the right to withdraw consent, where you have given us consent to process Personal Information about you;

(h) the right to know whether your Personal Information has been sold or disclosed and to whom;

(i) the right to opt-out of the sale or sharing of your personal information or the use of sensitive personal information;

(j) the right to limit our use and disclosure of your sensitive personal information; and

(k) the right not to be discriminated against for exercising your privacy rights.

If you wish to exercise any of the above rights, please contact us using the details provided in Section 18.

12. Sharing of your Personal Information

We will not share your Personal Information with any other entity within or outside the Prezzee Group for their own marketing purposes without your consent. We will not sell or provide your Personal Information to a third party (or third parties) for their own marketing purposes. The only exception is if we sell our business or business assets, in which case we will provide purchasers the same privacy protections that we do.

If you have shared your Personal Information with a third party, (e.g. a retailer or service provider), then the use of your Personal Information is subject to that third party's privacy policy and/or terms and conditions, which you should carefully review.

13. Changes to our Privacy Notice

We may make changes to this Notice from time to time. We may notify you by email of any important changes. The Notice as displayed on the Prezzee Site will always be the current version.

14. Communication Opt-in/ Opt-out

You may at any time opt-in or opt-out of receiving communications from Prezzee by contacting us as outlined at Section 18.

15. Right to revoke the use of your personal information

You have the right to revoke our use of your Personal Information. If you wish to revoke our use of your Personal Information, please contact us using the information in Section 18, and we will arrange this on your behalf. However, if you make this request, we may not be able to provide you with our Services.

16. Right to data portability

You have the right to obtain a copy of certain Personal Information we hold about you, in electronic form, that you initially provided to us or generated through your use of the Services. You also may be entitled to obtain a copy of this Personal Information in a structured, commonly used, machine-readable format and transmit such Personal Information to another entity without hindrance. If you wish to exercise your right to data portability, please contact us using the information in Section 18.

17. Right to restrict processing and right to object to the use of your Personal Information

Under certain circumstances, you may have the right to ask us to stop or limit the processing of your Personal Information or object to the use of your Personal Information altogether. If you wish to exercise these rights, please contact us using the information in Section 18.

18. Complaints and Disputes

If you wish to complain about our treatment of your Personal Information or believe that we have breached your privacy, you can contact our Privacy Contact using the information set out below:

Privacy Contact: privacy@prezzee.com

Address: Level 3, 9 Castlereagh Street, Sydney NSW 2000 Australia

Email: privacy@prezzee.com

Phone No.: 1800 940 868

If we have a dispute regarding an individual's Personal Information, we both must first attempt to resolve the issue directly between us.

If we become aware of any unauthorized access to an individual's Personal Information, we will inform them and any supervisory authority as required, at the earliest practical opportunity once we have established what was accessed and how it was accessed.

If you are not satisfied with the response that you receive, you are entitled to escalate your complaint to the relevant supervisory authority. Please see Section 25 for a list of the relevant supervisory authorities.

19. Location-based Data

Prezzee provides a geo-push notification feature to customers using its mobile app to send them servicing messages and/or special offers from select retailers based on the proximity of the customer to that retailer. The app requires access to the location services on the mobile device to utilize this feature and must be manually enabled by the customer firstly. Prezzee does not retain real time location data of the customer and does not use location services and data for any other purpose.

To the extent that Prezzee provides location-based features as part of the Services, it may collect, use, and share precise location data, including the real-time geographic location of your computer or device. Where available, location-based services may use GPS, Bluetooth, and your IP Address, along with crowd-sourced Wi-Fi hotspot and cell tower locations, and other technologies to determine your devices' approximate location. Unless you provide consent, this location data is collected in an anonymized form that does not personally identify you.

20. GDPR

If you are:

(a) A resident of the UK or European Economic Area; or

(b) accessing our Prezzee Apps or receiving our Services from within the UK or European Economic Area,

then in addition to our obligations under the privacy laws, Prezzee is required to comply with the General Data Protection Regulation (EU) 2016.679 (GDPR) with respect to your Personal Information.

Any reference to Personal Information in this Privacy Notice is also a reference to Personal Data (as defined under the GDPR).

Prezzee takes the security and privacy of your Personal Information seriously and has prepared this Notice and taken measures to collect, process and hold all Personal Information in compliance with United States privacy laws and GDPR regardless of the user. Therefore, no additional terms for GDPR users are required.

21. Transfer of Personal Information

Prezzee employs sub processors to process your personal data. The sub processors may be located outside of the jurisdiction where your information was collected. Prezzee may also transfer you information to another Prezzee Group company located in a different jurisdiction. Where your information is transferred to another jurisdiction, Prezzee will ensure that your information is lawfully transferred in accordance with the Privacy Legislation of the collecting jurisdiction.

22. Additions to this Notice

We reserve the right to amend this Notice at our discretion and at any time. When we make changes to this Notice, we will post the updated notice on the Website and update the notice's effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

23. California Residents

If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/ccpa.

California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our App that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us via the information shown in Section 18.

The California Consumer Privacy Act provides California consumers with the right to obtain Prezzee information about the Personal Information that we collect, use, and disclose. You can exercise your right by contacting Prezzee in any manner set forth in Section 18.

We do not discriminate against a consumer because of the exercise by the consumer of any of their privacy rights such as right to access, deletion or opt-out from sale or sharing of your personal information. This means that we will not, because of the exercise of consumer privacy rights granted by the CPRA:

(a) Deny you goods or services.

(b) Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.

(c) Provide you a different level or quality of goods or services.

(d) Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

24. Nevada Residents

You have the right to opt-out of the sale of your personal information. Prezzee does not sell your Personal Information, other than in de-identified form.

25. Canadian Residents

We limit internal access to Personal Information to our personnel who require access for the purposes described in this Privacy Notice, including personnel in our customer service, marketing, technology, finance, security, audit and legal departments. We also have policies and procedures regarding our handling of Personal Information that are designed to facilitate our compliance with this Privacy Notice and applicable laws, including policies and procedures regarding access to Personal Information, retention of Personal Information, and handling of complaints.

In addition to the rights described above, you have the right to withdraw your consent to our processing of your Personal Information at any time, subject to contractual and legal restrictions. To exercise this right, please contact us as described in section 18 above.

26. Supervisory Authorities

In this Privacy Notice, Supervisory Authorities are organisations established within each jurisdiction to protect the privacy of the individuals residing in or accessing our systems from that jurisdiction. The following is a list of relevant Supervisory Authorities:

Australia

The Office of the Australian Information Commissioner, GPO Box 5218, Sydney NSW 2001

Email enquiries@oaic.gov.au

Tel +61 1300 363 992

Web www.oaic.gov.au

Eire

Office of the Information Commissioner, 6 Earlsfort Terrace, Dublin 2, D02 W773

Email info@oic.ie

Tel +353 1 639 5689

Web www.oic.ie

United Kingdom

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Email icocasework@ico.org.uk

Tel +44 0303 123 1113

Web www.ico.org.uk

Canada

Information Commissioner of Canada, 30 Victoria Street, Gatineau, QC, K1A 1H3

Email general@oic-ci.gc.ca

Tel +1 800 267 0441

Web www.oic-ci.gc.ca

New Zealand

The Office of the Privacy Commissioner, PO Box 10 094, Wellington 6143

Email enquiries@privacy.org.nz

Tel +64 0800 803 909

Web www.privacy.org.nz

United States

Department of State Privacy Office (privacy@state.gov) or local state Privacy Office

Updated: 4 November 2025

‍