Privacy Policy
Last updated: 1 June 2026
Regularly is operated by rankONE Pty Ltd (ABN 99059027388) (“Regularly”, “we”, “us” or “our”), based in Melbourne, Australia. This policy explains how we collect, use, store and disclose personal information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Who this policy applies to
Regularly has two types of users:
- Venues — businesses that create and run a loyalty program using Regularly.
- Customers — the patrons of those venues who join a loyalty program.
Where a venue collects customer information through Regularly, the venue is responsible for its own handling of that information. Regularly processes that information on the venue's behalf as well as for the purposes described below.
Information we collect
From venues, when an account is created:
- Name and email address (used for sign-in, via our authentication provider).
- Business details, such as venue name, type, address and contact details.
- Billing information. Payments are processed by Stripe; we do not see or store full card numbers.
From customers, when they join a venue's loyalty program:
- First name and mobile number.
- Optionally, an email address and date of birth, where provided.
- Loyalty activity, such as stamps, points, visits and rewards.
We deliberately keep customer data minimal. We do not collect surnames, and we do not build marketing profiles.
How we use information
- To provide, operate and improve the Regularly service.
- To run loyalty programs, including tracking balances and issuing rewards.
- To send service messages and, where permitted, loyalty notifications (see below).
- To process payments and manage subscriptions.
- To provide support and respond to enquiries.
- To meet our legal obligations.
Notifications and messages
A venue may send loyalty-related notifications to its customers (for example, a reminder that a reward is ready) through Apple Wallet, Google Wallet, SMS or email. These are sent in connection with the loyalty program the customer joined. Customers can opt out at any time, and we and our venues handle electronic messages consistently with the Spam Act 2003 (Cth).
Who we share information with
We use trusted service providers to run Regularly. They may process information only to provide their services to us:
- Stripe — payments and subscriptions.
- Clerk — account authentication for venues.
- Supabase — database hosting (Sydney, Australia).
- Vercel — application hosting.
- Cloudinary — image hosting (for example, venue logos).
- Apple and Google — wallet pass delivery.
We do not sell personal information. We may disclose information where required by law.
Overseas disclosure
Customer loyalty data is stored in Australia (Sydney). Some of our service providers above are located overseas, including in the United States, which means some information may be processed outside Australia. We take reasonable steps to ensure these providers handle information consistently with the APPs.
Security and retention
We take reasonable steps to protect information from misuse, loss and unauthorised access, including encryption in transit and access controls. We keep information for as long as needed to provide the service and to meet legal obligations, after which we delete or de-identify it.
Your rights
You may request access to, or correction of, the personal information we hold about you. Customers should generally contact the venue whose program they joined; you may also contact us and we will help direct the request. To make a request, contact us using the details below.
Cookies
We use only the cookies necessary to run the service, such as keeping you signed in. We do not use advertising cookies.
Children
Regularly is intended for businesses and adult customers. We do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the “last updated” date above.
Contact and complaints
For privacy questions or complaints, contact us at privacy@regularly.com.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.