Privacy Policy

The Ordering Service is for existing business customers of Metrapak. There is no public sign-up: we create accounts for approved customers and their staff. It is not directed at children, and we do not knowingly collect personal information from anyone under 18.

• Account details — your name, work email address, phone number, and the business you order on behalf of. Your password is stored only as a secure hash.
• Order and account history — the orders you place, delivery addresses and delivery notes, invoices, statements, credit notes, payments, favourites and reorder lists.
• Credit applications — if you apply for a trading account, the business, trade reference and signatory details you provide in the application.
• Payment details — when you pay an invoice by card, your card is processed by Stripe. We never see or store your full card number; we keep only a reference, the card brand and last four digits.
• Device and notification data — if you use the mobile app, a device identifier and, if you allow notifications, a push notification token. We do not access your contacts, photos, location or other device data.
• Technical data — IP address, app or browser version, and timestamps of sign-ins and actions, kept for security and troubleshooting.
• Communications — messages you send us through the Ordering Service or in reply to its emails and notifications.

• Fulfilling your orders — pricing, picking, delivering and invoicing what you order, and arranging supply from our suppliers;
• Running your account — sign-in, trading terms, credit limits, statements and payment reminders;
• Keeping you informed — order confirmations, dispatch and delivery updates, invoice and payment notices, and product news or specials from Metrapak. You can turn marketing messages off at any time;
• Security — protecting accounts, detecting unauthorised access and preventing fraud;
• Legal obligations — tax, accounting and record-keeping requirements under Australian law.

We do not sell your personal information, and we do not use it for third-party advertising or profiling.

We share personal information only as needed to run the Ordering Service:

• GoLifto Pty Ltd — the platform provider that builds and hosts the Ordering Service and processes data on our behalf. GoLifto's own privacy policy is at golifto.com/privacy.
• Our suppliers and delivery partners — the delivery name, address and notes needed to get your order to you.
• Stripe — card payment processing.
• Our accounting provider — invoices and payments are synchronised to our accounting system (for example Xero) for bookkeeping.
• Infrastructure providers used by GoLifto — database hosting (Supabase), application hosting (Vercel), email delivery (Resend) and push notification delivery (Expo, with Apple and Google's notification services).
• When the law requires it — to regulators, courts or law enforcement where we are legally obliged to.

Data is stored in databases operated by GoLifto's hosting providers, which may be located outside Australia, including in the United States. All data is encrypted in transit (HTTPS) and passwords are hashed. Access is restricted to Metrapak staff who need it to serve your account and to GoLifto personnel who support the platform.

If a data breach is likely to result in serious harm, we will notify affected people and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

• Notifications — optional. The app asks only after you sign in, and you can turn notifications off in the app or in your phone settings at any time.
• Network access — to load your catalogue and place orders.

The app contains no advertising or third-party analytics SDKs and does not track you across other apps or websites.

We keep your account information while your business trades with us and for a reasonable period afterwards. Orders, invoices and payment records are kept for at least five years as required by Australian tax law. Technical logs are kept for up to 12 months. Push notification tokens are removed when you sign out or uninstall the app.

• Access and correction — you can view and update your details in the Account section, or ask us to.
• Marketing — unsubscribe from any marketing email or turn off marketing notifications in the app.
• Account deletion — request deletion from the Account section of the app (Account → Delete account) or by contacting us. We will close your login and remove your personal details, keeping only the transaction records we are legally required to retain.
• Complaints — contact us first using the details below. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner.

We may update this policy from time to time. The current version is always available at this address, and we will let you know in the Ordering Service if the changes are significant.

Metrapak
ABN 71910506143
Email: sales@metrapak.com.au
Phone: +61 (02) 871 7200
Web: metrapak.com.au