Privacy Policy

Privacy Policy

Last updated: 16 July 2026

Hike POS Pty Ltd (ABN 44 168 261 274), referred to as “Hike”, “we”, “us” or “our”, is committed to protecting personal information and handling it responsibly.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you:

1. visit a Hike website;
2. create or use a Hike Account;
3. access Hike’s point-of-sale software, applications, APIs or related services;
4. communicate with our sales, support or other teams;
5. attend an event or participate in a survey or promotion;
6. apply to become a partner, reseller or employee;
7. purchase hardware or services from us; or
8. otherwise interact with Hike.

Together, these are referred to as the “Services”.

This Policy applies to Hike POS products and Services. HikePay is operated by NadaPay Pty Ltd and is subject to a separate HikePay Privacy Policy. Where personal information relates specifically to HikePay, the HikePay Privacy Policy will apply.

Third-party websites, payment providers, integrations and applications have their own privacy practices. This Policy does not govern information processed independently by those third parties.

1. Who This Policy Applies To

This Policy applies to:

Website Visitors: People who visit our websites or interact with our online content.

Customers and Account Owners: Businesses and organisations that subscribe to or purchase Hike products and Services.

Authorised Users: Employees, contractors and other individuals who access the Services through a Customer’s Account.

Customer Contacts: Customers, suppliers, staff and other people whose personal information is entered into the Services by a Hike Customer.

Partners: Resellers, integration providers, consultants and other business partners.

Job Applicants: Individuals who apply for employment or contractor opportunities with Hike.

In this Policy, “you” may refer to any of these individuals, depending on the context.

2. Hike’s Role When Processing Information

Hike may process personal information in different capacities.

When Hike acts as a controller or responsible organisation

Hike generally determines how and why personal information is processed when the information relates to:

1. Account registration;
2. subscriptions and billing;
3. sales and marketing;
4. website use and cookies;
5. service usage and product analytics;
6. security and fraud prevention;
7. support and communications;
8. partners and suppliers;
9. job applicants; and
10. compliance with legal obligations.

For this information, Hike generally acts as the controller, business or responsible organisation under applicable privacy laws.

When Hike acts as a processor or service provider

Hike Customers may enter personal information about their own customers, staff, suppliers and other contacts into the Services.

The Customer normally decides:

1. what information is collected;
2. why it is collected;
3. how it will be used;
4. who may access it; and
5. how long it should be retained.

For this Customer Personal Data, the Customer generally acts as the controller or responsible organisation and Hike acts as its processor or service provider.

Hike processes Customer Personal Data in accordance with:

1. the Customer’s lawful instructions;
2. the Hike Terms of Use;
3. the applicable Data Processing Addendum; and
4. applicable privacy and data protection laws.

Individuals seeking to exercise rights concerning information entered by a Hike Customer should normally contact that Customer first. Where appropriate, Hike will assist the Customer with the request.

3. Personal Information We Collect

The information we collect depends on how you interact with us.

3.1 Identity and Contact Information

We may collect:

1. name;
2. business name;
3. job title;
4. postal or business address;
5. email address;
6. telephone number;
7. username or account identifier;
8. profile photograph;
9. signature; and
10. preferred language and region.

3.2 Account and Business Information

We may collect:

1. business type and industry;
2. store, outlet and register information;
3. business registration or tax information;
4. account permissions and user roles;
5. selected products, plans and features;
6. onboarding and configuration information;
7. subscription status;
8. Account preferences; and
9. records of administrative actions.

3.3 Billing and Subscription Information

We may collect:

1. billing address;
2. invoice information;
3. subscription and transaction history;
4. payment status;
5. applicable taxes;
6. the last four digits or token associated with a payment method;
7. payment provider references; and
8. records relating to refunds, credits or billing disputes.

Payment card information used to pay Hike subscription Fees is generally processed by our payment providers. Unless expressly stated for a specific Service, Hike does not intentionally store complete payment card numbers or card security codes.

3.4 Customer and Commerce Data

Customers may enter or generate information through the Services, including:

1. customer names and contact details;
2. delivery and billing addresses;
3. purchase and return history;
4. loyalty balances and rewards;
5. gift card information;
6. customer preferences or notes;
7. product, stock and inventory information;
8. supplier information;
9. sales, refunds and transaction information;
10. tax and receipt information;
11. staff names, roles and sales activity;
12. ecommerce and order information; and
13. information imported through an integration.

This information is normally processed by Hike on behalf of the Customer.

3.5 Technical and Device Information

We may automatically collect:

1. IP address;
2. browser and operating system;
3. device type and identifier;
4. application version;
5. language and time zone;
6. approximate location derived from an IP address;
7. login times;
8. pages and features accessed;
9. error, diagnostic and crash information;
10. network and connection information;
11. cookie and advertising identifiers; and
12. security and authentication records.

3.6 Usage and Product Information

We may collect information about:

1. how the Services are configured;
2. features used;
3. actions completed;
4. session duration;
5. API and integration activity;
6. performance and reliability;
7. support interactions;
8. feature adoption;
9. search and navigation activity; and
10. feedback and survey responses.

3.7 Communications and Support Information

When you communicate with Hike, we may collect:

1. emails and chat messages;
2. support tickets;
3. call recordings, where permitted by law;
4. meeting notes;
5. screen-sharing and troubleshooting information;
6. files and screenshots you provide;
7. feedback and complaints; and
8. marketing preferences.

Where calls or meetings are recorded, we will provide notice where required.

3.8 Marketing and Website Information

We may collect:

1. pages viewed;
2. forms submitted;
3. campaigns and advertisements viewed;
4. referral source;
5. interactions with emails;
6. event registrations;
7. demo requests;
8. cookie preferences; and
9. social media interactions.

3.9 Partner and Professional Information

For partners, resellers, developers and suppliers, we may collect:

1. business contact information;
2. organisation and role;
3. contractual and payment information;
4. technical credentials;
5. partner performance information;
6. referral and commission records; and
7. communications and meeting notes.

3.10 Recruitment Information

If you apply to work with Hike, we may collect:

1. employment and education history;
2. qualifications and skills;
3. curriculum vitae or resume;
4. references;
5. interview notes;
6. work eligibility information;
7. salary expectations;
8. background-check information where lawful; and
9. other information provided during recruitment.

3.11 Sensitive Information

Hike does not generally require sensitive personal information for the ordinary use of the Services.

You should not provide health information, biometric information, government identifiers, information about race, religion, political opinions, sexual orientation or other sensitive information unless:

1. it is genuinely necessary;
2. the relevant Service is intended to process it;
3. you have a lawful basis to provide it; and
4. appropriate protections are in place.

4. How We Collect Personal Information

We may collect personal information:

1. directly from you;
2. from the Account Owner or another Authorised User;
3. when you enter or generate information through the Services;
4. through cookies, pixels, logs and similar technology;
5. from a Customer that has a relationship with you;
6. from payment and billing providers;
7. from integration partners and Third-Party Services you connect;
8. from resellers, referral partners and consultants;
9. from publicly available business directories, websites and registers;
10. from social media platforms;
11. from event organisers and marketing partners;
12. from security, fraud prevention and identity verification providers; and
13. during recruitment or reference-check processes.

If you provide personal information about another person, you must have the right to provide it and, where required, inform that person about this Policy.

5. Why We Use Personal Information

We may use personal information to:

Provide and Manage the Services

1. create and administer Accounts;
2. authenticate users;
3. process subscriptions and billing;
4. configure and operate the Services;
5. synchronise integrations;
6. process Customer instructions;
7. provide updates and notifications; and
8. deliver hardware or professional services.

Provide Support

1. respond to questions;
2. troubleshoot problems;
3. investigate errors;
4. manage complaints;
5. provide onboarding and training; and
6. improve support quality.

Secure the Services

1. prevent unauthorised access;
2. detect fraud and misuse;
3. investigate security incidents;
4. protect users and systems;
5. enforce our agreements; and
6. maintain logs and audit records.

Improve and Develop Products

1. understand how features are used;
2. identify performance issues;
3. test and improve functionality;
4. develop new products and features;
5. conduct analytics and research;
6. create aggregated or de-identified insights; and
7. improve automated and artificial-intelligence features.

Where possible, product analytics and research use aggregated or de-identified information.

Hike will not use identifiable Customer Personal Data to train a third-party general-purpose artificial intelligence model unless this is performed at the Customer’s direction or is covered by separate notice, agreement and lawful authority.

Communicate and Market

1. provide information you request;
2. arrange demonstrations;
3. communicate about products, events and offers;
4. personalise website content;
5. measure marketing effectiveness;
6. manage preferences; and
7. conduct customer surveys.

Operate Our Business

1. manage suppliers and partners;
2. maintain financial and corporate records;
3. conduct audits;
4. manage recruitment;
5. protect legal rights;
6. evaluate or complete a business transaction; and
7. comply with laws and regulatory requirements.

6. Legal Bases for Processing

Where the laws of the European Economic Area, United Kingdom or another jurisdiction require a legal basis, we rely on one or more of the following:

Contract

Processing is necessary to enter into or perform a contract with you, including creating an Account, providing the Services, billing and support.

Legitimate Interests

Processing is necessary for Hike’s legitimate interests or those of another party, including:

1. operating and improving the Services;
2. securing systems;
3. preventing fraud;
4. communicating with business customers;
5. managing partners and suppliers;
6. conducting analytics; and
7. protecting legal rights.

We consider the impact on individuals before relying on legitimate interests.

Legal Obligation

Processing is necessary to comply with taxation, accounting, employment, regulatory, court, law-enforcement or other legal requirements.

Consent

We rely on consent where required, including for certain cookies, marketing communications, recordings or sensitive information.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

Other Lawful Bases

Where applicable, we may process information to establish or defend legal claims, protect vital interests, or carry out another activity authorised by law.

7. Customer Personal Data

Customers may use Hike to process personal information relating to their own customers, employees, suppliers and other individuals.

The Customer is responsible for:

1. determining whether it has a lawful basis to collect and use the information;
2. providing legally required notices;
3. obtaining consents where necessary;
4. configuring appropriate access permissions;
5. responding to individual rights requests;
6. ensuring its instructions to Hike are lawful;
7. selecting appropriate retention periods; and
8. complying with laws applicable to its business.

Hike will process Customer Personal Data only:

1. to provide and secure the Services;
2. in accordance with the Customer’s documented instructions;
3. as described in the Agreement and Data Processing Addendum; or
4. where required by law.

Hike may use subprocessors to provide infrastructure, support, communications, security, analytics and other functions. Hike requires subprocessors that handle Customer Personal Data to provide appropriate privacy and security protections.

8. When We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

Hike Affiliates and Personnel

Information may be shared with Hike group companies, employees and contractors who need it to perform their responsibilities.

Service Providers and Subprocessors

We may engage providers for:

1. cloud hosting and data storage;
2. security and fraud prevention;
3. customer support;
4. email and communications;
5. analytics;
6. customer relationship management;
7. billing and subscription management;
8. hardware delivery;
9. professional services;
10. recruitment; and
11. business administration.

These providers may process information only for authorised purposes and subject to appropriate contractual obligations.

Third-Party Integrations

Where a Customer activates an integration, Hike may share information with that integration provider as directed by the Customer.

Once information is received by the third party, the third party’s privacy policy applies to its independent processing.

Payment and Billing Providers

We may disclose billing and transaction information to providers that process subscription payments, invoices or refunds.

Payment services used by a Customer to accept payments from shoppers may be governed by separate terms and privacy policies.

Resellers and Business Partners

Where you interact with Hike through a reseller, referral partner, implementation consultant or other partner, we may share information reasonably necessary to manage that relationship and provide the Services.

Professional Advisers

Information may be disclosed to lawyers, accountants, insurers, auditors and other professional advisers.

Authorities and Legal Disclosures

We may disclose information where reasonably necessary to:

1. comply with law, regulation, legal process or court order;
2. respond to a lawful government request;
3. protect the rights, safety and property of Hike or another person;
4. investigate fraud, abuse or security incidents; or
5. enforce the Agreement.

Where legally permitted, we will seek to notify the affected Customer before disclosing Customer Personal Data in response to a compulsory request.

Business Transactions

Information may be disclosed in connection with a proposed or completed merger, acquisition, financing, restructuring, sale of assets or similar business transaction.

The recipient will be required to handle the information consistently with applicable law.

With Your Consent or Direction

We may disclose information where you request or consent to the disclosure.

9. Sale and Sharing of Personal Information

Hike does not sell personal information in exchange for money.

We may use analytics and advertising providers to understand website activity, measure campaigns and display relevant advertising.

Under some United States state privacy laws, the use of certain advertising cookies or pixels may be considered a “sale”, “sharing” or use for “targeted advertising”, even where no money is exchanged.

Where applicable, you may opt out through:

1. the cookie preference tool on our website;
2. browser privacy settings;
3. a recognised opt-out preference signal such as Global Privacy Control, where supported; or
4. a privacy request submitted to Hike.

We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising.

10. Cookies and Similar Technologies

Hike uses cookies, pixels, local storage, software development kits and similar technologies.

These technologies may be used to:

1. keep you signed in;
2. remember preferences;
3. provide essential website functionality;
4. maintain security;
5. analyse website and product usage;
6. diagnose performance issues;
7. measure marketing campaigns; and
8. provide relevant advertising.

Cookies may be:

Strictly Necessary Cookies: Required for security and website functionality.

Preference Cookies: Used to remember settings and choices.

Analytics Cookies: Used to understand website and Service usage.

Advertising Cookies: Used to measure advertising and provide relevant content.

Where required by law, non-essential cookies will be used only after consent.

You may manage cookies through our cookie preference tool and your browser settings. Blocking certain cookies may affect functionality.

More information may be provided in a separate Cookie Notice.

11. Marketing Communications

We may send marketing communications where:

1. you have provided consent;
2. you have requested information;
3. you have an existing business relationship with Hike; or
4. applicable law otherwise permits the communication.

You may unsubscribe from marketing emails by using the unsubscribe link or contacting us.

You may opt out of marketing text messages by following the instructions in the message.

Opting out of marketing will not prevent Hike from sending necessary account, billing, support, security or service communications.

12. International Data Transfers

Hike operates internationally and uses service providers located in multiple countries.

Personal information may be processed in Australia and in other countries where Hike, its affiliates or service providers operate.

These countries may have privacy laws that differ from those in your location.

Where required by law, Hike uses appropriate safeguards for international transfers. These may include:

1. transferring information to a country recognised as providing adequate protection;
2. contractual protections;
3. the European Commission’s Standard Contractual Clauses;
4. the United Kingdom International Data Transfer Agreement or UK Addendum;
5. legally recognised certification or transfer frameworks;
6. obtaining consent where appropriate; or
7. another lawful transfer mechanism.

Hike also requires relevant service providers to implement appropriate security and confidentiality measures.

13. Data Retention

Hike retains personal information only for as long as reasonably necessary for the purposes described in this Policy.

Retention periods depend on:

1. the type of information;
2. whether an Account remains active;
3. the Customer’s configuration and instructions;
4. contractual requirements;
5. taxation and accounting obligations;
6. security and fraud-prevention needs;
7. dispute and limitation periods;
8. backup cycles; and
9. applicable law.

Account, subscription and billing records may be retained after an Account closes where necessary for legal, accounting, audit and dispute purposes.

Customer Personal Data is retained in accordance with the Terms of Use, Data Processing Addendum and Customer instructions.

After termination, Customer Personal Data may remain available for a limited export period and may then be deleted or de-identified.

Information may remain temporarily in secure backups until overwritten through ordinary backup cycles.

Where information is no longer required, we take reasonable steps to delete, destroy or de-identify it.

14. Data Security

Hike uses reasonable technical and organisational measures designed to protect personal information against:

1. unauthorised access;
2. misuse;
3. interference;
4. loss;
5. alteration;
6. destruction; and
7. unauthorised disclosure.

Measures may include:

1. encryption in transit and, where appropriate, at rest;
2. authentication and access controls;
3. role-based permissions;
4. logging and monitoring;
5. vulnerability management;
6. backup and recovery processes;
7. staff confidentiality and training;
8. incident response procedures; and
9. security requirements for service providers.

No system or transmission method is completely secure. Hike cannot guarantee absolute security.

If we become aware of a data breach, we will investigate and take action in accordance with applicable law. This may include notifying affected Customers, individuals and regulators where legally required.

15. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

1. request confirmation that we process your personal information;
2. access personal information;
3. correct inaccurate or incomplete information;
4. request deletion;
5. request restriction of processing;
6. object to certain processing;
7. receive information in a portable format;
8. withdraw consent;
9. opt out of direct marketing;
10. opt out of sale, sharing or targeted advertising;
11. limit certain uses of sensitive personal information;
12. appeal a decision concerning a privacy request; and
13. complain to a privacy or data protection regulator.

These rights may be subject to legal exceptions.

Submitting a Request

Requests may be submitted by contacting Hike using the details in Section 24.

Please use the subject line “Privacy Request”.

We may request information reasonably necessary to:

1. verify your identity;
2. confirm your authority to act for another person;
3. identify the relevant Account or information; and
4. protect personal information against unauthorised disclosure.

We will respond within the period required by applicable law.

Where we process information on behalf of a Hike Customer, we may refer the request to that Customer.

Hike will not discriminate against you for exercising a privacy right.

16. Account Information

Authorised Users may be able to view and update certain Account information through the Services.

The Account Owner is responsible for maintaining accurate user details and access permissions.

To request correction of information that cannot be changed through your Account, contact Hike support.

17. Artificial Intelligence Features

Where a Hike feature uses artificial intelligence or automated technology, we may process:

1. prompts and instructions;
2. information provided to the feature;
3. generated responses or outputs;
4. feedback;
5. usage and diagnostic information; and
6. relevant Customer Content needed to provide the requested function.

This information may be processed by approved technology providers acting as Hike subprocessors.

You should not submit sensitive or confidential information to an AI feature unless the feature is intended to process it and you have lawful authority to do so.

Hike may use aggregated or de-identified information to improve automated features.

Unless separately disclosed, Hike does not use solely automated processing to make decisions about individuals that produce legal or similarly significant effects.

18. Children’s Information

The Services are intended for businesses and are not directed to children.

Hike does not knowingly collect personal information directly from children under 16 through its websites for the purpose of creating a Hike Account.

A Hike Customer may use the Services to process information relating to younger individuals. In that situation, the Customer is responsible for ensuring that the collection and processing are lawful.

If you believe a child has provided personal information directly to Hike without appropriate authorisation, please contact us.

19. Third-Party Websites and Services

Our websites and Services may contain links to third-party websites, social media platforms or applications.

Hike is not responsible for the privacy, security or content of those third parties.

You should review their privacy policies before providing personal information.

20. Regional Privacy Information

20.1 Australia

Hike handles personal information in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles where they apply.

You may request access to or correction of personal information held by Hike.

If you make a privacy complaint, we will investigate and aim to respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

20.2 European Economic Area, United Kingdom and Switzerland

If you are located in the European Economic Area, United Kingdom or Switzerland:

1. Hike POS Pty Ltd is generally the controller for personal information described in Section 2 under “When Hike acts as a controller”;
2. Hike generally acts as processor for Customer Personal Data;
3. our legal bases are described in Section 6;
4. you may have rights of access, correction, deletion, restriction, objection and portability;
5. you may withdraw consent at any time;
6. you may object to direct marketing at any time; and
7. you may complain to the data protection authority in your country.

Where information is transferred outside the EEA, United Kingdom or Switzerland, Hike will use an applicable lawful transfer mechanism.

20.3 United States

Depending on your state, you may have rights to:

1. know the categories and specific pieces of personal information collected;
2. know the sources and purposes of collection;
3. know the categories of recipients;
4. request access, correction or deletion;
5. obtain a portable copy;
6. opt out of sale, sharing or targeted advertising;
7. limit certain uses of sensitive personal information;
8. appeal a decision; and
9. receive equal service when exercising your rights.

During the preceding 12 months, Hike may have collected the following categories of information:

1. identifiers;
2. customer and business records;
3. commercial information;
4. internet and network activity;
5. approximate geolocation;
6. professional and employment information;
7. audio, electronic or visual information;
8. account credentials and other sensitive information; and
9. inferences drawn from usage and marketing information.

These categories are described more fully in Section 3.

Hike may disclose relevant categories to service providers, affiliates, integration partners and professional advisers for the purposes described in this Policy.

Hike does not sell personal information for money. Advertising and analytics activities may be treated as sharing or targeted advertising under certain state laws, as explained in Section 9.

You may appoint an authorised agent to submit a request. We may require evidence of the agent’s authority and may verify your identity directly.

20.4 Canada

Where Canadian privacy law applies, Hike handles personal information in accordance with applicable federal and provincial privacy requirements.

You may request access to and correction of personal information and may challenge Hike’s compliance through the contact process in this Policy.

Hike may process information outside Canada, where it may be accessible to courts, law-enforcement or government authorities under local law.

20.5 New Zealand

Where New Zealand’s Privacy Act applies, you may request access to or correction of personal information.

You may complain to the New Zealand Office of the Privacy Commissioner if your concern is not resolved.

20.6 Singapore

Where Singapore’s Personal Data Protection Act applies, Hike will collect, use and disclose personal data for notified or otherwise lawful purposes.

You may request access or correction and may withdraw consent, subject to legal and contractual limitations.

20.7 Hong Kong

Where Hong Kong’s Personal Data (Privacy) Ordinance applies, personal data will be collected for lawful purposes and will not be excessive in relation to those purposes.

You may request access to or correction of personal data.

20.8 South Africa

Where the Protection of Personal Information Act applies, you may request access, correction or deletion and may object to certain processing.

You may submit a complaint to South Africa’s Information Regulator.

20.9 Nigeria

Where Nigerian data protection law applies, you may have rights relating to access, correction, deletion, restriction, objection and portability.

You may submit a complaint to the Nigeria Data Protection Commission.

20.10 India, Thailand, Japan, Bahrain and Other Locations

Where local privacy laws apply, Hike will respect mandatory rights and requirements under those laws.

Depending on your location, you may have rights to:

1. receive information about processing;
2. access and correct information;
3. request deletion;
4. withdraw consent;
5. object to certain uses;
6. request transfer or portability; and
7. complain to the relevant authority.

Additional notices or consent may be provided where required for a specific location or Service.

20.11 Mainland China

Where the Personal Information Protection Law of the People’s Republic of China applies, additional notices, consent and cross-border transfer requirements may apply.

Individuals may have rights relating to access, correction, deletion, restriction, explanation and withdrawal of consent, subject to applicable law.

21. Complaints

If you have a concern about how Hike handles personal information, contact us using the details in Section 24.

Please provide:

1. your name and contact information;
2. the Account or business involved;
3. a description of the concern;
4. relevant dates or correspondence; and
5. the outcome you are seeking.

We will investigate and respond within the timeframe required by applicable law.

You may also complain to the privacy or data protection regulator in your location.

22. Changes to This Policy

Hike may update this Policy to reflect changes in:

1. our Services;
2. our processing activities;
3. technology;
4. legal requirements; or
5. our service providers and business operations.

The updated Policy will be posted on the Hike website with a revised “Last updated” date.

Where a change is material, we will provide reasonable notice through email, your Account, the Services or our website.

23. Language

Translations of this Policy may be provided for convenience.

Unless applicable law requires otherwise, the English version is the controlling version if there is an inconsistency between translations.

24. Contact Us

For privacy questions, requests or complaints, contact:
Hike POS Pty Ltd
ABN 44 168 261 274
Level 15, 28 Freshwater Place
Southbank VIC 3006
Australia
Email: hello@hikeup.com
Subject line: Privacy Request
Support: Through your Hike Account or the Hike support portal