Privacy Policy

Identity Data including your name, date of birth or age range, profession, profile name, profile image, photographic identification and account verification information.

Driver Data including driver or other relevant transport insurance details, licence number, accreditation or registration details, commercial passenger vehicle details where applicable, vehicle information, and address.

Contact Data including your telephone number, address and email.

Business Account and CRM Data including business name, trading name, ABN or other business registration details, business address, billing details, account owner details, user and delegate names, email addresses, phone numbers, login details, permissions, account roles, campaign or account settings, and other information submitted to or generated within our business CRM or related business-facing platform features.

Financial Data including bank account and payment card details (through our third party payment processor, who stores such information and we do not have access to that information).

Transaction Data including details about payments to you from us and from you to us and other details of products and services you have purchased from us or we have purchased from you.

Reimbursement and Rebate Data including trip receipts, public transport ticket or fare information, uploaded supporting documents, reimbursement claims, rebate eligibility information, validation records, refund status information, and related communications or records.

Technical and Usage Data when you access any of our websites or platforms, details about your internet protocol (IP) address, login data, browser session and geo-location data, statistics on page views and sessions, device and network information, acquisition sources, search queries and/or browsing behaviour, access and use of our website (including through the use of Internet cookies or analytics), and communications with our website.

Location and Movement Data including precise or approximate geolocation, route data, trip start and end points, pick-up and drop-off points, movement patterns, direction of travel, speed, dwell time, destination information, stop information, nearby venue or hotspot interactions, public transport journey details, and other information about how, when and where you move when using our apps, services or related features.

Profile Data including your username and password for our Booma platform, profile picture, purchases or orders you have made with us, content you send, receive and share through our platform, information you have shared with our social media platforms, and support requests you have made.

Discovery and Preference Data including your saved offers, favourite venues, preferred categories, subscriptions, endpoint preferences, destination interests, cart or saved-item activity, information about your interests and preferences that you provide to us, and other information about your interests, preferences and interactions with discovery or recommendation features.

Interaction Data including information you provide to us when you participate in any interactive features, including surveys, contests, promotions, activities or events.

Offer and Engagement Data including advertisements viewed, offers opened, icons clicked, banners interacted with, notifications opened, prompts responded to, venues selected, deals saved, deals redeemed, route suggestions accepted or ignored, and other engagement with advertising, discovery, routing or movement-related content.

Marketing and Communications Data including your preferences in receiving marketing from us and our third parties and your communication preferences.

Inference and Personalisation Data including inferences drawn from your activity, movement patterns, preferences, engagement history, likely interests, likely destinations, preferred transport or venue categories, and other predictions or segments used to personalise content, offers, recommendations or platform experiences.

Professional data including where you are a worker of ours or applying for a role with us, your professional history such as your previous positions and professional experience, or whether you hold required authorisations or licences.

Sensitive information is a sub-set of personal information that is given a higher level of protection. Sensitive information means information relating to your racial or ethnic origin, political opinions, religion, trade union or other professional associations or memberships, philosophical beliefs, sexual orientation or practices, criminal records, health information or biometric information. In the course of doing business with you, we may collect, or come across, such sensitive information in different situations, including when reviewing your CV, where you contact emergency services or health service providers using our platform, where identity verification features involve biometric information such as face verification, or where you voluntarily provide health, accessibility or assistance-related information to support the services.

when you provide it directly to us, including face-to-face, over the phone, over email, or online;

when you create, administer or use a business account, CRM account or other business- facing account with us, including where account owners add authorised users, delegates or other account contacts;

when you complete a form, such as registering for any events or newsletters, or responding to surveys;

when you use any website we operate (including from any analytics and cookie providers or marketing providers. See the “Cookies” section below for more detail on the use of cookies); when you use our mobile applications, movement, discovery, routing, reimbursement, offer, transport or related platform features;

when you enable location permissions, notifications, background activity permissions, camera access, microphone access, single sign-on tools or similar device permissions;

when you upload receipts, trip records, supporting documents, images or other content to our platform;

when personal information is generated through your use of our platform, including through movement activity, platform interactions, saved preferences, engagement with offers or inferred personalisation signals;

where you choose to connect third-party accounts, platforms or services with our services, we may collect personal information, account information or activity information made available through those integrations; and

from transport providers, payment processors, verification providers, analytics providers, marketing partners, or other third parties connected with the services. Why we collect, hold, use and disclose personal information Personal information: We collect, hold, use and disclose your personal information for the following purposes:

to enable you to access and use our software, websites, apps, CRM and related business- facing systems, including to create and administer logins, users, delegates, permissions and account access;

where you choose to connect third-party accounts or services, to collect and use information made available through those integrations to operate, personalise, support and improve platform features and your user experience;

to work or do business with you or provide our services to you, including to provide transport, movement, discovery, routing, reimbursement, rebate, advertising, support, account, payment or related platform services, and where applicable to connect you with drivers, transport providers, venues, businesses or other third parties relevant to those services;

to contact and communicate with you about our business, including in response to any support requests you lodge with us or other enquiries you make with us;

to contact and communicate with you about any enquiries you make with us via any website we operate;

for internal record keeping, administrative, invoicing and billing purposes;

for analytics, attribution, market research, profiling, service development and business development, including to operate, personalise, measure, optimise and improve our business, associated applications, associated social media platforms, discovery systems, reimbursement and rebate features, routing logic, advertising systems and related services;

for advertising, marketing, recommendations and personalisation, including to send you promotional information about our events, experiences, venues, products, services and offers, to surface contextual content and recommendations we think may be relevant to you, and use interest and preference information provided by you or lawfully made available to us by third parties to better tailor the user experience, and to measure the effectiveness of those communications and recommendations;

to verify identity, authenticate users, protect the integrity of the platform, detect and prevent fraud, monitor misuse, investigate suspicious or unsafe activity, support safety features and enforce our terms, policies and eligibility rules;

to assess eligibility for, validate, administer and process rebates, reimbursements, discounts, incentives, rewards, saved offers, promotional entitlements or similar platform benefits;

to use automated tools, scoring systems, AI-assisted features or other data processing methods to personalise content, rank or recommend offers or destinations, optimise routes or discovery results, assess likely relevance, improve campaign delivery, and enhance the overall platform experience;

to run promotions, competitions and/or offer additional benefits to you;

if you have applied for employment with us, to consider your employment application; and

to comply with our legal obligations or if otherwise required or authorised by law. Sensitive information: We only collect, hold, use and disclose sensitive information for the following purposes:

any purposes you consent to;

the primary purpose for which it is collected;

secondary purposes that are directly related to the primary purpose for which it was collected, including disclosure to the below listed third parties as reasonably necessary to do business with you;

to verify identity or eligibility where biometric or other sensitive verification information is reasonably necessary for fraud prevention, account security or service integrity, where permitted by law;

to contact emergency services, or to speak with your family, partner or support person where we reasonably believe there is a serious risk to the life, health or safety of you or another person and it is impracticable for us to obtain your consent; and

if otherwise required or authorised by law.

our employees, contractors and/or related entities;

IT service providers, data storage, web-hosting and server providers;

CRM, customer support, account administration and communications service providers involved in hosting, maintaining or supporting our business-facing systems;

marketing or advertising providers;

delivery providers and drivers;

professional advisors, bankers, auditors, our insurers and insurance brokers;

payment systems operators or processors;

our existing or potential agents or business partners;

if we merge with, or are acquired by, another company, or sell all or a portion of our assets, your personal information may be disclosed to our advisers and any prospective purchaser’s advisers and may be among the assets transferred;

courts, tribunals and regulatory authorities, in the event you fail to pay for goods or services we have provided to you;

courts, tribunals, regulatory authorities and law enforcement officers, as required or authorised by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights;

transport providers, drivers, fleet operators, booking service providers, mobility providers or related service providers;

advertisers, merchants, venues, business partners or offer partners where reasonably necessary to deliver, validate, honour or measure platform offers, promotions, rebates, reimbursements or discovery features;

verification providers, fraud prevention providers and customer support providers;

mapping, routing, geolocation, analytics, attribution, artificial intelligence, optimisation or cloud service providers;

payment processors, reimbursement processors, banking partners or financial institutions involved in validating or settling payments, rebates, reimbursements or other benefits;

third parties to collect and process data, such as analytics providers and cookies; and

any other third parties as required or permitted by law, such as where we receive a subpoena. Sensitive information: We will only disclose sensitive information with your consent or where permitted by law. This means that we may disclose sensitive information to:

our employees, contractors and/or related entities;

IT service providers, data storage, web-hosting and server providers;

professional advisors;

if we merge with, or are acquired by, another company, or sell all or a portion of our assets, your personal information may be disclosed to our advisers and any prospective purchaser’s advisers and may be among the assets transferred;

courts, tribunals, regulatory authorities and law enforcement officers, as required or authorised by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights;

identity verification, fraud prevention, security or technology service providers where reasonably necessary for authentication, security or account integrity and permitted by law;

third parties to collect and process data, such as analytics providers and cookies; and

any other third parties as required or permitted by law, such as where we receive a subpoena.

to generate,monitor, validate and improve routes, journeys, endpoint logic, hotspot logic and related movement features;

to allow you to monitor vehicle, driver, transport or trip location and, where relevant, to allow drivers or transport providers to locate users;

to support discovery, contextual offers, nearby recommendations, route-aware suggestions, saved offers, destination prompts and other movement-related platform features;

to validate, administer and improve rebates, reimbursements, discounts, incentives, promotional entitlements, fare-related features and attribution models;

for safety, fraud prevention, service integrity and security;

for analytics, attribution, personalisation, platform optimisation and service improvement; and

as permitted by law.