Privacy Policy

Last updated: 16 July 2026

Get Chatty Pty Ltd ACN 652 357 349 trading as ClubApp, and its associated entities (collectively Get Chatty, ClubApp, we, us, or our), is committed to protecting the privacy of your personal information. In accordance with the Privacy Act 1988 (Cth) (Privacy Act), this Privacy Policy sets out the ways in which we may collect, disclose, manage, store and use your personal information.

This Privacy Policy covers all of our services, including our ClubApp platform — a sports club management application used by clubs to manage members, communications, events, memberships, ticketing, merchandise and fundraising — as well as our chatbot and related services.

What is personal information?

"Personal information" is information or an opinion about you, or information from which you could reasonably be identified.

We do not collect "sensitive information" without your consent, except in circumstances where the law allows us to do so. By "sensitive information", we mean information about your criminal records, health, genetic or biometric information or templates, memberships of political, professional or trade associations, philosophical beliefs, political opinions, racial or ethnic origin, religious beliefs or affiliations, sexual orientation or practices.

Collection of personal information

From whom do we collect your personal information?

We may collect your personal information:

• directly from you (for example, when you create an account in ClubApp, submit content, make purchases, execute contracts or arrangements with us, attend events arranged or sponsored by us, or enter any of our competitions or rewards programs);
• from third parties who you have authorised to provide us with personal information — for example, from clubs of which you are a member;
• from publicly available sources and databases (where it is unreasonable or impractical to collect it directly from you);
• through governmental, legal and other regulatory processes.

What types of personal information do we collect?

Depending on how you interact with us, we may collect:

• Contact details – your name, street or postal address, email address and telephone number.
• Account & identifiers – your ClubApp account identifier and device push-notification token, used to authenticate you and deliver notifications.
• Location information – with your permission, precise device location (GPS), collected while the relevant feature is in use, to support location-based features such as venue check-in and event and facility mapping. You can grant or revoke this permission at any time in your device settings.
• Payment information – when you purchase memberships, event tickets, merchandise or charity auction items, your card details are collected and processed directly by our payment processor, Stripe. We do not store your full card details; we receive transaction confirmations and limited metadata such as amount, date, status and the last four digits.
• User content, including images – content you submit through the app, including messages, posts, availability/RSVP responses, your profile image, and any images or photos you upload. Images you upload are stored on our servers as part of providing the app's features.
• Customer sales information – where you purchase goods and services from businesses and sponsors of your club and upload those details, we may collect what you purchased, where, and how much you spent.
• Member surveys – details about your spending patterns and the frequency at which you attend particular businesses.

Unsolicited personal information

If we receive unsolicited personal information, we will assess whether we would have been entitled to collect it. If not, we will destroy or de-identify it as soon as practicable (provided it is lawful and reasonable to do so).

Website, app and third party references

We collect personal information when you communicate with us through our website or app. When you access our website, we may receive information about you via a 'cookie' — a piece of information our web server may send to your computer when you visit. A cookie is stored on your machine but does not identify you. Through the use of sessional cookies we collect information such as IP addresses, device IDs, browser information, installed software, hardware type, access date and time, number of visitors, pages viewed, types of transactions conducted, time spent and documents downloaded, which we use to evaluate the performance and effectiveness of our website.

This Privacy Policy does not apply to any third parties referred to in our software application. We are not responsible for their privacy practices and you should contact them directly.

Storage, security & deletion of personal information

How do we secure your personal information?

We take reasonable steps to protect your personal information from interference, loss, misuse, unauthorised access, modification or disclosure, using electronic, physical and procedural security measures. For example:

• where appropriate, specifying the confidentiality of your personal information in contracts with parties with whom we exchange information;
• having data backup, disaster recovery and emergency mode operations; and
• imposing information access controls, including password protection for access to our systems.

Where your data is stored

Your data is securely stored using Google Firestore, with encryption. Some data is stored on servers located in Sydney, Australia. Some of our service providers (including Google and Stripe) may also store or process data on servers located outside Australia (see "Storage in the Cloud" below).

Service providers we use

• Google Firebase (Firestore, Cloud Functions, Cloud Messaging) – backend database, hosting, authentication and push notifications.
• Stripe – payment processing. See Stripe's Privacy Policy.
• Brevo – transactional and club email delivery.

Where we share user data with third parties such as those listed above, we require that they provide the same or equivalent protection of your personal information as set out in this Privacy Policy and as required by applicable law. We do not share your personal information with third parties for their own advertising or marketing purposes, and we do not permit them to use it to track you across other apps or websites.

Storage of personal information in the Cloud

Personal information may be stored in the Cloud (computer servers connected via the Internet). To assist us in storing and accessing your personal information, we may store it with, or allow it to be accessed by, overseas third parties who provide software and maintenance services for the Cloud and infrastructure/hardware used to access the Cloud. As those third parties may be situated, and store content, offshore, your personal information may be transmitted, disclosed, stored or accessed to/from overseas jurisdictions. For example, Google has data centres located in Asia, Europe, North America and South America.

If you continue to submit your personal information to us, you are consenting to the access, disclosure, storage and transmission of your personal information by third parties in overseas jurisdictions. In that respect, Australian Privacy Principle 8, which ordinarily obliges us to take reasonable steps to ensure that overseas recipients of your information do not breach the Australian Privacy Principles (except Principle 1), will not apply. If any overseas recipient handles your personal information inconsistently with the Australian Privacy Principles:

• to the maximum extent permitted by law, we will not be accountable under the Privacy Act for any resulting loss or damage you may suffer;
• to the maximum extent permitted by law, you will not be able to seek redress against us under the Privacy Act;
• the overseas recipient may not be subject to any privacy obligations at all, or to principles similar to the Australian Privacy Principles;
• you may not be able to seek redress against the overseas recipient in their jurisdiction; and
• the overseas recipient may be subject to foreign laws which compel disclosure of your personal information to other parties, such as overseas government authorities.

How we process your data

• Collection on interaction: data is collected when you create an account, submit content, make purchases, or interact with our chatbots.
• Purposes: to create and manage user accounts; to enhance and personalise your experience; and, where applicable, information you supply may form part of a consolidated report supplied to the club you entered it on behalf of, and to a business you have interacted with.

Account and data deletion

You have the right to request deletion of your account and associated personal information at any time. You can do this in either of the following ways:

• In the app: go to Profile → Delete Account. This initiates deletion of your account and associated data from within ClubApp.
• By web/email request: email info@clubapp.com.au, addressed to "Attention: Data Manager – Get Chatty Pty Ltd", subject "Data Deletion Request", including the name and email address associated with your account.

When you delete your account, we delete the personal information associated with it — we do not merely deactivate or freeze the account. Once a deletion request is received and verified, we securely delete or de-identify your data from our systems, subject to any records we are legally required or permitted to retain for legitimate reasons such as financial record-keeping, security, fraud prevention or regulatory compliance. Where deletion takes time to fully process across our systems and backups, we complete it within a reasonable period. We retain your data until a deletion request is made or the data is no longer required for the purposes described in this policy.

How to revoke your consent

Where we rely on your consent to collect or use your personal information, you can withdraw that consent at any time:

• Location: turn off location permission for ClubApp in your device settings at any time. The app will continue to work; location-based features will be unavailable while the permission is off.
• Notifications: turn off push notifications for ClubApp in your device settings, or adjust notification preferences in the app.
• All data: to withdraw consent entirely, delete your account using the methods above.

Withdrawing consent may mean we can no longer provide some features or services to you.

Disclosure of personal information

Your personal information may be disclosed to:

• your club, to participate in club activities, to understand your financial spend with sponsor businesses, and to administer any loyalty program and rewards;
• businesses that sponsor your club, so they can understand financial spend and make informed sponsorship decisions;
• our third party service providers, including data entry providers, IT providers, payment processors and our professional advisers such as solicitors and accountants;
• other members/entities within our group of companies; and
• governmental authorities or other statutory bodies where expressly permitted under the Privacy Act — for example, with your consent or where legally required, such as under a court order or warrant.

Use of personal information

We may use your personal information to:

• administer our services and your membership account, including verifying your identity, providing customer support, training our staff and testing our systems;
• facilitate your participation in events, activities, rewards and loyalty programs offered by your club or its sponsors;
• deliver club communications, notifications and messages to you through the app, and communications relating to your account, purchases and club activity;
• enable you to access information regarding events, offers, promotions and the products or services of your club's sponsors;
• conduct market and other research analysis to improve products, services and marketing activities of your club's sponsors;
• conduct quality audits and risk management generally; and
• maintain records and comply with our legal obligations.

Direct marketing

We do not use your personal information to conduct direct marketing and we do not authorise other parties to do so, whether on our behalf or for their own purposes. Notifications and emails you receive through ClubApp relate to your account, your purchases, and the operation and activities of your club.

Access to, and correction of, personal information

You may request access to your personal information by sending a written request to our Privacy Officer (details below). We may seek further details to verify your identity, and reserve the right to refuse access if we cannot reasonably verify it. Access will generally be provided in an appropriate form within a reasonable time. We may charge a fee for providing access if it requires significant time to locate, collate or present your personal information; this fee will be explained before it is incurred. In limited circumstances permitted under the Privacy Act, we may refuse access — for example, where it would unreasonably impact the privacy of others, or where we believe the request is frivolous or vexatious.

We take reasonable steps to ensure the personal information we collect and use is accurate, up-to-date and complete. Where it is out-of-date or incorrect, you may inform us and we will correct it accordingly.

Miscellaneous

Dealing with us anonymously or using a pseudonym

You can deal with us anonymously or by using a pseudonym if you choose. However, if you do so we may be unable to provide accurate or useful information and you may not be able to access our full range of services — for example, you may not be able to participate in your club's rewards program or make purchases.

This Privacy Policy may change

We may amend this Privacy Policy from time to time to reflect changes to our information handling practices or business circumstances. Any updated Privacy Policy will be published on our software application, and changes come into effect from the time they are brought to your attention, or when you next log on, whichever is earlier. Please review this Privacy Policy each time you visit to keep up to date.

Contacting us regarding privacy matters

If you have any concerns or complaints regarding how we handle personal information, please contact our Privacy Officer:

We take all complaints seriously and will respond within a reasonable period of time, unless we consider your complaint to be frivolous or vexatious. If a privacy concern or complaint is not resolved to your satisfaction, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.