Your Privacy Matters

Effective date: 1 May 2026 This Privacy Policy explains how SpenVest Pty Ltd ("SpenVest", "we", "our") collects, uses, stores, and discloses personal information when you use the SpenVest Driver platform.

We collect the following categories of personal information:

• Identity & contact — Full name, email address, phone number, and profile photo.
• Driver credentials — Driving licence number, vehicle registration, vehicle type, and compliance documents (insurance, roadworthy certificates).
• Financial — Bank account name, BSB, and account number used solely for payout processing.
• Location — Real-time GPS coordinates during active delivery sessions to enable route management, proof-of-delivery, and customer ETA updates.
• Performance — Delivery records, customer ratings, on-time rates, acceptance and completion statistics.
• Device & usage — App version, device identifiers, and usage logs used for security, debugging, and analytics.

• To match you with delivery assignments and manage your active route.
• To calculate and process earnings and payouts to your nominated bank account.
• To verify your identity and ensure ongoing compliance with regulatory requirements.
• To provide customer support, resolve disputes, and investigate complaints.
• To send operational notifications (new assignments, payout confirmations, document expiry alerts).
• To improve platform safety and product quality through aggregate analytics.

We do not sell your personal information. We share it only in these circumstances:

• Merchants — Order-level information (name, estimated arrival) is shared with the assigning merchant to coordinate pickup.
• Customers — Your first name and real-time ETA may be shared with customers awaiting their delivery.
• Service providers — Trusted third-party providers (payment processors, cloud hosting, analytics) acting under data-processing agreements.
• Legal obligations — Where required by law, court order, or to protect the rights and safety of others.

Location tracking is active only while you are online and during an active delivery session. You may go offline at any time to pause location sharing. Location data is used for route optimisation, proof-of-delivery confirmation, and dispute resolution. Historical location logs are retained for 90 days.

Account and identity data is retained for the duration of your driver agreement plus 7 years, as required by Australian financial and tax regulations. Operational records (delivery logs, earnings) are retained for 7 years. Location history is retained for 90 days. You may request deletion of non-statutory data by contacting us.

Under applicable privacy law you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your data (subject to legal retention obligations).
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@spenvest.com.

We implement industry-standard technical and organisational safeguards including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. No system is completely secure; please notify us immediately at security@spenvest.com if you suspect unauthorised access.

For privacy enquiries, contact privacy@spenvest.com. For general enquiries, contact support@spenvest.com. We aim to respond to all privacy requests within 30 days.