Privacy Policy

1. Who this policy covers

• Our customers: businesses that subscribe to RushTill, and their owners, managers and staff who use it.
• Visitors to rushtill.com and to the websites we host for our customers (for example bbqwalla.rushtill.com).
• Our customers' customers, where a business records their details in RushTill. In that case the business decides what it collects and is responsible for it; we handle that information only to provide RushTill to that business.

2. What we collect

• Contact and account details: names, business names, email addresses, phone numbers, business address and ABN.
• Sign-in details: your email address and a unique identifier from our sign-in provider. We do not store your password; sign-in is handled by our identity provider.
• Business data you enter: menus, prices, photos, logos, orders, payment records (amount, method and time, but never full card numbers), printer settings and reports.
• Activity and security records: which staff account made changes and when (audit log), sign-in events, and technical information such as IP address, browser and device type, kept to protect accounts and investigate problems.
• Messages you send us, such as demo requests and support emails.

You can browse our websites without telling us who you are. If you don't give us information we need (for example a valid email to sign in), we may not be able to provide the service.

3. How we collect it

Directly from you (when you contact us, sign up or use RushTill), from the business you work for (when it creates your staff account), from our sign-in provider when you sign in, and automatically from your device when you use our websites and apps.

4. Why we use it

• To provide, set up, support and improve RushTill.
• To keep accounts secure, prevent misuse and keep an audit trail of changes.
• To bill for subscriptions and keep business records.
• To reply to enquiries and send service messages (for example about changes to the service).
• To send marketing only where you have agreed or the law allows; you can unsubscribe at any time, as required by the Spam Act 2003 (Cth).
• To meet our legal obligations.

We do not sell personal information.

5. Cookies and similar technologies

Our public websites do not use advertising or analytics cookies, and we do not track you across other websites. When staff sign in, RushTill sets cookies that are strictly necessary to keep you signed in and to protect the sign-in process. The Counter app may store unfinished orders on the device so they are not lost if the connection drops.

6. Who we share it with

We use trusted service providers to run RushTill, who handle personal information on our behalf and only as needed to provide their service:

• Vercel: website and application hosting.
• Neon: database hosting. Our production database is located in Sydney, Australia.
• Auth0 (Okta): staff sign-in, using an Australian region tenant.
• Cloudflare: domain name and email routing.

We may also disclose information to our professional advisers, to a business that acquires our business (with this policy continuing to apply), or where required or authorised by law. We may disclose a business's own data to its owner or authorised managers.

7. Overseas disclosure

Our core data is stored in Australia, but some of our service providers are based overseas (including in the United States) and may access or process information outside Australia, for example for content delivery, support or security. We take reasonable steps to ensure they protect personal information consistently with the APPs.

8. Security

We protect information with encryption in transit, role-based access for staff, separation of each business's data at database level, audit logging and restricted administrative access. No system is perfectly secure; if we become aware of an eligible data breach, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

9. How long we keep it

We keep account and business records while you are a customer and for a reasonable period afterwards (generally up to seven years) to meet tax, accounting and legal obligations and to resolve disputes. When we no longer need information, we take reasonable steps to delete or de-identify it. A business can ask us to export or delete its data at the end of its subscription, subject to those obligations.

10. Access and correction

You can ask for access to the personal information we hold about you, or ask us to correct it, by contacting us below. We will respond within a reasonable time (usually 30 days). If your information is held on behalf of a business that uses RushTill, we may refer your request to that business.

11. Complaints

If you have a privacy concern, please contact us first and we will try to resolve it. If you are not satisfied with our response, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.

12. Contact us

Ablecare Solutions Pty Ltd (ABN 92 669 634 502)
Suite 3, Level 1, 21-27 Memorial Avenue, Liverpool NSW 2170
Phone: 0426 812 110
Email: hello@rushtill.com

13. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated. See also our Terms of Service.