Privacy policy
About This Policy This Privacy Policy explains how Zappy (operated by Zappy Pty Ltd, Level 26, 1 Bligh Street, Sydney NSW 2000, Australia) collects, uses, stores, and shares personal information. It applies to all users of our platform, website, and services, including business owners, their staff, and the end-customers whose shipping information is processed through our system. Zappy is an APP entity bound by the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Privacy and Other Legislation Amendment Act 2024 (POLA). We are also subject to the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act. If you have any questions about this policy, please contact us at customerservice@shipzappy.com or 1800 292 779.
1. What Information We Collect We collect personal information in two ways: Directly from you: When you register for a Zappy account, we collect your name, business name, email address, phone number, billing address, and payment details. Indirectly through your integrations: When you connect Zappy to an ecommerce platform such as Shopify, WooCommerce, eBay, or Amazon, we access order and fulfilment data from your store. This includes the personal information of your customers: their name, delivery address, email address, phone number, and product details necessary to create a shipping booking. We also collect technical information automatically when you use our website and platform, including IP address, browser type, referring pages, and date/time stamps. We use log files, web beacons, and tracking pixels to collect this information (see Section 5).
2. Notification Regarding Indirect Collection (APP 5) When a merchant's customer places an order and their personal information is transmitted to Zappy to fulfil a shipment, that information is collected indirectly. We require merchants using Zappy to inform their customers, at or before the point of order, that: Their name, delivery address, email address, and phone number will be shared with Zappy Pty Ltd (Level 26, 1 Bligh Street, Sydney NSW 2000) for the purpose of booking and completing courier delivery. Zappy will pass this information to the relevant courier provider (such as Australia Post, Startrack, Aramex, CouriersPlease, or TNT Express) to fulfil the shipment. Customers may contact Zappy at customerservice@shipzappy.com to request access to, correction of, or deletion of their personal information held by Zappy. Zappy provides template disclosure language to merchants on request.
3. How We Use Your Information We use the personal information we collect to: Create and manage your Zappy account Process shipping bookings and fulfilment on your behalf Transmit necessary delivery information to courier providers Generate shipping labels, booking confirmations, and tracking updates Communicate with you about your account, service updates, and support queries Send marketing communications where you have consented (you may opt out at any time) Improve and develop our platform Comply with our legal obligations
4. Sharing Your Information We share personal information only as necessary to deliver our services: Courier providers: We share shipment recipient details (name, address, phone, email) with the courier selected for each booking. Current courier partners include Australia Post, Startrack, Aramex, CouriersPlease, and TNT Express. Note: Australia Post and Startrack services require your own Australia Post account; your account credentials govern their use of your data under their own privacy policy. Email and communications platforms: We use third-party platforms such as Mailchimp (United States) to send transactional and marketing emails. These services are bound by their own privacy policies and applicable data protection standards. Analytics tools: We use website analytics tools that may process IP addresses and browsing behaviour for the purpose of improving our service. Legal requirements: We may disclose information if required by law, in response to a court order or official request, or to protect our legal rights. We do not sell or rent personal information to third parties.
5. Tracking Technologies We use the following technologies on our website and platform: Log files: Records of server activity including IP address, browser type, pages visited, and timestamps, used for security, debugging, and service improvement. Web beacons and tracking pixels: Small electronic files embedded in pages and emails that record whether an email was opened, which pages were visited, and for how long. Used to measure the effectiveness of our communications and improve our service. In accordance with the Australian Information Commissioner's November 2024 guidance on Tracking Pixels and Privacy Obligations, our use of tracking pixels is governed by the Privacy Act 1988. We use this data only for internal service improvement and do not sell tracking data to third parties. If you wish to opt out of tracking in emails, you can adjust your email client settings.
6. Cross-Border Disclosure of Personal Information Some of our service providers are based overseas, meaning your personal information may be transferred outside Australia. Overseas recipients include: United States: Email marketing platforms (including Mailchimp) and website analytics tools. New Zealand: Zappy's NZ operations, with which our platform is developed and supported across both jurisdictions. China (Shanghai): Zappy has development and support staff based in Shanghai. Some data may be accessed by staff in this location for platform development and technical support purposes. Destination countries: Where international shipments are booked, relevant delivery information is transmitted to courier and logistics providers in the destination country. Before transferring personal information overseas, we take reasonable steps to ensure that overseas recipients handle your personal information in a manner consistent with the Australian Privacy Principles, in accordance with APP 8.
7. Data Retention We retain personal information for the following periods: Order and shipment data: Retained for 7 years from the date of shipment, in accordance with Australian tax and accounting legislation. Account data: Retained while your account is active. If you request account closure, your account data will be deleted within 30 days, subject to the retention requirement above. Marketing contact data: Retained until you unsubscribe or request removal. You may request deletion of your personal information at any time by contacting customerservice@shipzappy.com. We will action requests within 30 days, subject to any legal obligations requiring us to retain certain information.
8. Your Rights Under the Privacy Act 1988 and the Privacy and Other Legislation Amendment Act 2024, you have the right to: Request access to the personal information we hold about you Request correction of any personal information that is inaccurate, out of date, or incomplete Request deletion of your personal information (right to erasure), subject to legal retention obligations Make a complaint to the Office of the Australian Information Commissioner (oaic.gov.au) if you believe we have breached the Australian Privacy Principles To exercise any of these rights, please contact us at customerservice@shipzappy.com. We will respond within 30 days.
9. Notifiable Data Breaches Zappy is subject to the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988. In the event of an eligible data breach likely to result in serious harm to affected individuals, we will notify the Office of the Australian Information Commissioner and affected individuals as soon as practicable. Where a breach involves merchant customer data, we will also notify the relevant merchant. We take reasonable technical and organisational measures to protect personal information from unauthorised access, modification, or disclosure.
10. Serious Invasion of Privacy Under the Privacy and Other Legislation Amendment Act 2024, individuals may bring a claim for serious invasion of privacy. Zappy is committed to handling all personal information responsibly and in accordance with the Australian Privacy Principles. If you believe your privacy has been seriously affected by our actions, you may contact us directly to raise a complaint or contact the OAIC.
11. Marketing Communications When you provide your email address or begin registration for our services, we may contact you to help complete your registration, provide service updates, and share relevant offers or credits. We comply with the Spam Act 2003 (Cth) and will not send commercial electronic messages without your consent. You may unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.
12. Changes to This Policy We may update this policy from time to time to reflect changes to our practices or legal requirements. We will post the updated policy on this page with a revised last updated date. Where changes are significant, we will notify registered users by email.
13. Contact Us and Complaints Zappy Pty Ltd Level 26, 1 Bligh Street, Sydney NSW 2000, Australia Email: customerservice@shipzappy.com Phone: 1800 292 779 (1800 2 ZAPPY) If you are not satisfied with our response to a complaint, you may contact the Office of the Australian Information Commissioner at oaic.gov.au or by calling 1300 363 992