RewardsMate legal

Privacy Policy

Last updated: 1 August 2026

This Privacy Policy explains how RewardsMate (powered by Shopper's Mate) collects, uses and shares personal information. Version 2026-08-01.

1. Who we are

RewardsMate is the customer rewards network powered by Shopper's Mate. The RewardsMate operator is responsible for the RewardsMate platform. Participating retailers operate their own stores and receive limited information connected to activity at their business.

2. Information we collect

Depending on how you use RewardsMate, we may collect:

  • Name
  • Email address
  • Mobile number
  • Authentication details
  • Postcode or approximate location
  • Precise location, only where permission is given
  • RewardsMate account identifier
  • QR membership identifier
  • Participating-store transactions
  • Basket items
  • Points earned
  • Points redeemed
  • Offers activated
  • Digital receipts
  • Favourite stores
  • Searches
  • Clicks and app interactions
  • Notification preferences
  • Device and technical information
  • Support enquiries
  • Fraud-prevention signals

3. Why we collect information

We collect information to operate membership accounts, calculate and record points, support redemption at participating stores, show relevant offers, provide digital receipts, prevent fraud, respond to support requests, improve the product, and communicate with you where permitted.

4. How transactions connect to your account

When you present your RewardsMate membership (for example by scanning your QR card) at a participating store, the transaction can be linked to your account so points, receipts and offer activity can be recorded against your universal balance.

5. What the platform operator can access

The RewardsMate operator can access account, membership, points-ledger, offer-activity, support and technical information needed to operate the network, administer standard rewards, investigate issues and meet legal obligations.

6. What each retailer can access

Participating retailers can access identifiable customer activity connected to their own business. Retailers should not receive identifiable purchase histories from other stores through RewardsMate unless appropriate consent applies.

Cross-store reporting should be aggregated or de-identified unless the customer has provided appropriate consent.

7. Aggregated and de-identified insights

RewardsMate and Shopper's Mate may use aggregated or de-identified information to understand network performance, improve products and support participating businesses without revealing identifiable cross-store purchase histories.

8. Service providers

We may use service providers to host infrastructure, send communications, analyse product usage, process support requests or help prevent fraud. Those providers process information only as needed to provide their services to us.

9. Overseas processing

Some service providers may process information outside Australia. Overseas processing locations will be disclosed once providers are finalised for production use. Until then, production customer data collection should not proceed on unresolved overseas processing arrangements.

10. Data retention

We retain personal information for as long as needed to operate the program, meet legal, accounting, fraud-prevention and dispute-resolution obligations, and then delete or de-identify it when retention is no longer required.

11. Account deletion

You can request account deletion through support. Some transaction and loyalty-ledger information may need to be retained for legal, fraud-prevention, accounting or dispute-resolution purposes.

12. Access and correction

You may request access to, or correction of, personal information we hold about you by contacting the privacy team. We will respond in line with applicable Australian privacy law.

13. Marketing choices

Marketing communications are optional. You can unsubscribe at any time using the link in a message or by contacting support. Essential service messages about your account or points activity may still be sent.

14. Location permissions

Approximate location or postcode may be used to show nearby stores. Precise location is collected only where you grant permission, and you can change that permission in your device settings.

15. Push notifications

If you enable push notifications, we may send updates about points, offers, receipts or account activity. You can disable notifications in your device or account settings.

16. Sale of identifiable purchase data

RewardsMate is not designed to sell identifiable customer purchase histories to unrelated advertisers.

17. Security safeguards

We use reasonable administrative, technical and organisational safeguards appropriate to the information we handle. No method of transmission or storage is completely secure. See the Security page for more detail. Security

18. Data-breach handling

If an eligible data breach occurs, we will assess the incident and notify affected individuals and the Office of the Australian Information Commissioner where required by Australian law.

19. Privacy complaints

Contact the privacy team first. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

20. Changes to this policy

We may update this Privacy Policy from time to time. The last-updated date will change when we do. Material changes will be communicated in a reasonable manner where practicable.