Efpoz Privacy Policy

Who we are and scope

Efpoz is operated by the Efpoz team at Vritul. You can contact us about privacy at privacy@efpoz.com.

This policy applies to Efpoz websites, apps, provider workspaces, admin tools, service links, booking flows, checkout flows, support channels, and related communications used in Australia and New Zealand.

Information we collect and hold

Efpoz may collect identity and contact details, account login information, country or region, provider profile details, service descriptions, pricing, availability, cancellation terms, booking details, customer messages, support requests, marketing preferences, device information, app usage events, and security logs.

Providers may add business details, ABN/GST settings where relevant, proof or verification information, qualifications, insurance notes, client records, invoices, payout onboarding status, and payment reconciliation details. Customers may provide contact details, booking preferences, messages, payment link activity, and information needed to buy or receive a provider service.

We try to avoid collecting sensitive information unless it is needed for a specific service, verification, support, safety, legal, or payment reason, or a user chooses to include it in messages, documents, or support requests.

How we collect information

We collect information directly from users when they create accounts, publish services, send links, make bookings, pay invoices, upload content, request support, or communicate with us.

We may also receive information from providers, customers, administrators, payment providers, authentication providers, hosting and analytics tools, app stores, device platforms, communication providers, and public or official sources used for provider verification.

Why we collect, use, and disclose information

We use information to create and secure accounts, publish provider services, send service links, process bookings, support checkout, manage reminders, show finance and payout readiness, reconcile payments and refunds, prevent fraud and misuse, respond to support requests, improve Efpoz, and comply with legal, tax, accounting, payment, safety, and regulatory obligations.

If required information is not provided, we may be unable to create an account, publish a profile, process a booking or payment, onboard a provider, deliver support, investigate a dispute, or meet legal and payment obligations.

Efpoz may contact users by email, SMS, push notification, or in-app message for account, booking, payment, support, security, product, and service updates. Users can opt out of marketing messages, but we may still send transactional or legally required messages.

Payments, providers, and third parties

Services sold through Efpoz are delivered by independent providers outside the app. We may share booking, customer, payment, refund, rescheduling, and support information with the provider where needed to deliver or support the service.

Payments, connected account onboarding, card processing, subscriptions, refunds, payouts, fraud checks, and payment disputes may be handled by Stripe and other payment infrastructure partners. Efpoz does not store full card numbers on its own servers.

We may share information with staff, contractors, hosting providers, analytics tools, payment providers, messaging and notification services, app stores, professional advisers, insurers, law enforcement, regulators, courts, and authorities where reasonably required to operate Efpoz, protect users, enforce our terms, or comply with law.

Overseas storage and disclosure

Information may be stored, processed, accessed, or disclosed in Australia, New Zealand, the United States, and other countries where our service providers operate.

Where personal information is disclosed outside Australia or New Zealand, we take reasonable steps to use appropriate safeguards, contracts, platform controls, consent, or another lawful basis for that disclosure. Some overseas recipients may be subject to different privacy laws from those in Australia or New Zealand.

Security and retention

We use reasonable technical and organisational safeguards to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure.

No internet service can guarantee absolute security. We retain information for as long as needed to operate Efpoz, provide support, meet legal, tax, accounting, payment, audit, dispute, and fraud-prevention obligations, and support legitimate business records. When information is no longer needed, we take reasonable steps to delete, de-identify, or securely archive it where lawful.

Access, correction, deletion, and complaints

You may request access to, correction of, or deletion of personal information by contacting privacy@efpoz.com. We may need to verify your identity before acting on a request. Some information may need to be retained where required for legal, payment, tax, accounting, dispute, safety, or security reasons.

You can complain about how we handle personal information by contacting privacy@efpoz.com. We will review the complaint and aim to respond within a reasonable time. If you are not satisfied, you may contact the Office of the Australian Information Commissioner or the New Zealand Office of the Privacy Commissioner, depending on where you are located and the nature of the issue.

You can stop app-based collection by uninstalling the app. You may also disable notifications through your device settings and unsubscribe from marketing where an unsubscribe option is provided.

Cookies, analytics, and automated assistance

Efpoz may use cookies, analytics, device identifiers, and similar technologies to keep users signed in, secure the service, understand usage, improve product performance, and measure marketing or support effectiveness.

We may use automated tools to help detect misuse, prioritise support, draft operational suggestions, or surface payment and onboarding signals. We do not intend to make solely automated decisions that have a significant legal or similarly significant effect on users without appropriate human review. If this changes, we will update this policy.

Children and provider records

Efpoz is not directed to children. Providers must have the right authority and lawful basis before adding information about clients, customers, students, children, guardians, or other third parties to Efpoz.

Providers are responsible for using Efpoz in a way that matches their own privacy, consent, professional, and record-keeping obligations.

Changes

We may update this policy as Efpoz changes or as legal requirements change. Updates take effect when published on this website unless a later effective date is stated.