Privacy Policy

Last updated: 11 October 2026

CloudPOS ("CloudPOS", "we", "us" or "our") provides a cloud-based point of sale service for retail and repair businesses through gocloudpos.com and the CloudPOS application (together, the "Service"). We respect your privacy and handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices you have.

1. Who this policy covers

This policy applies to:

• visitors to gocloudpos.com;
• businesses that subscribe to CloudPOS ("Subscribers") and their staff who use the Service ("Users"); and
• people whose details a Subscriber records in the Service, such as the Subscriber's own customers.

2. Information we collect

Information you give us. When you contact us, request a demo or subscribe, we may collect your name, business name, ABN, email address, phone number, business address and the content of your messages.

Account information. When a User account is created we collect the person's name, work email address, phone number, role (for example administrator or employee) and the sites they can access. Sign-in credentials are managed by our authentication provider; we do not store passwords in readable form.

Business data entered into the Service. Subscribers enter information to run their business, such as products, inventory, sales, invoices, quotations, payments and customer records. Customer records may include names, phone numbers, email addresses and postal addresses.

Payment information. Subscription payments are handled by a third-party payment provider. We do not store full card numbers. CloudPOS may record limited details of in-store payments (such as payment method, amount and the last four digits of a card) where a Subscriber enters them.

Technical information. When you use the website or Service we automatically collect information such as IP address, browser type, device information, pages viewed and the date and time of access, together with logs needed to operate and secure the Service.

3. How we use information

We use personal information to:

• provide, operate and maintain the Service, including signing Users in and enforcing their access permissions;
• set up and manage subscriptions, billing and accounts;
• respond to enquiries and provide support;
• send service messages, such as security notices, changes to the Service and billing reminders;
• send documents on a Subscriber's instructions, such as emailing a quotation to the Subscriber's customer;
• monitor, troubleshoot and improve the Service, and protect it against fraud, abuse and security threats; and
• comply with our legal obligations.

We do not sell personal information.

4. Our customers' customers

When a Subscriber records information about its own customers in CloudPOS, the Subscriber decides what is collected and how it is used. We process that information on the Subscriber's behalf and only to provide the Service. If you are a customer of a business that uses CloudPOS and have a question about your information, please contact that business first. We will help them respond where we can.

5. Disclosure to others

We share personal information only where needed to run the Service, for example with:

• cloud hosting and infrastructure providers (including Amazon Web Services) that store and process data for us;
• providers of authentication, email delivery, payment processing and customer support tools;
• professional advisers such as lawyers, accountants and auditors; and
• government authorities or others where required or authorised by law.

These providers may only use the information to provide services to us and must protect it appropriately. If CloudPOS is involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.

6. Storage and security

CloudPOS stores Service data in Australian data centres. Some of our service providers (for example email delivery or support tools) may process limited information outside Australia. Where that happens we take reasonable steps to ensure the information is handled in a way consistent with the APPs.

We protect information with measures including encryption in transit and at rest, access controls that limit staff and Users to the data they need, separation of each Subscriber's data, and monitoring of our systems. No method of transmission or storage is completely secure, but we work to protect information from misuse, interference, loss and unauthorised access, modification or disclosure.

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

7. Retention

We keep personal information for as long as it is needed for the purposes above, including to meet legal, tax and accounting requirements. Business records such as invoices may need to be kept for several years. Generated documents such as emailed quotation PDFs are kept for a limited period and then deleted. When information is no longer needed we delete or de-identify it.

When a subscription ends, the Subscriber may ask us to export or delete its data, subject to any legal requirement to retain it.

8. Cookies and analytics

Our website and Service use cookies and similar technologies that are needed to keep you signed in and to make the Service work. We may also use analytics to understand how the website is used. You can control cookies through your browser settings, but blocking essential cookies may stop the Service from working.

9. Access and correction

You can ask to access the personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete or misleading. Users can update much of their own account information within the Service. For other requests, contact us using the details below. We may need to verify your identity, and we will respond within a reasonable time, usually 30 days. If we refuse a request, we will tell you why.

10. Marketing

We may send you information about CloudPOS if you have asked for it or where the law allows. Every marketing email includes a way to unsubscribe. We will still send service messages related to your account.

11. Children

The Service is designed for businesses and is not directed at children. We do not knowingly collect personal information from children under 16 except where a Subscriber records it as part of its own customer records.

12. Complaints

If you have a concern about how we have handled your personal information, please contact us first so we can try to resolve it. We will acknowledge your complaint and aim to respond within 30 days. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with its "last updated" date. If we make significant changes we will let Subscribers know through the Service or by email.

14. Contact us

For privacy questions or requests, email . For anything else, see the Contact Us section.