Gong Cha Australia Pty Ltd – Privacy Policy

Last Updated: 4 May 2026

This Privacy Policy describes how Gong Cha Australia Pty Ltd ABN 56 155 164 864
(“we”, “us”, or “our”) collects, uses,
discloses, and retains information about you when you use our website and the
Gong cha Australia Membership mobile application (the
“App”). We are committed to protecting your privacy and handling your
personal information in an open and transparent manner in compliance with the
Privacy Act 1988 (Cth) of Australia (“Privacy Act”) and the
Australian Privacy Principles (APPs).

Our commitment under the APPs includes:

• Collecting personal information fairly, lawfully, and transparently.
• Using and disclosing personal information only for the purposes for which it was collected, unless you consent otherwise.
• Taking reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.
• Giving you access to your personal information upon request, and allowing you to request correction of incorrect or out-of-date information.

1. Information We Collect

We collect the following categories of information:

a. Personal Information

Information you provide when you create an account, make a purchase, or participate in our
promotions: your name, email address, phone number, date of birth, shipping address, and
payment information. Payment card details are processed by our third-party payment
processors and are not stored on our servers.

b. Membership & Loyalty Data

Your membership tier, reward points balance, transaction history, stamp records,
redeemed rewards, and in-store visit history associated with your membership account.

c. Usage Data

Information about how you interact with the App, including pages or screens viewed,
features used, search queries, purchase history, app session duration, and crash logs.

d. Device Information

Information about the device you use to access the App, including IP address, device
model, operating system and version, unique device identifiers, browser type, and
mobile network information.

e. Location Information

With your permission, we collect precise geolocation data from your device to provide
the store finder feature and to display nearby Gong cha locations. You may disable
location access at any time through your device settings. We may also derive
approximate location from your IP address.

f. Analytics & Tracking Data

We use third-party analytics providers (such as Google Analytics for Firebase) to
collect information about App usage, including interaction events, user engagement
metrics, and advertising identifiers (IDFA / AAID). These providers may use cookies,
device identifiers, and similar technologies.

g. Push Notification Tokens

If you opt in to receive push notifications, we collect and store a device token issued
by Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) to deliver
notifications to your device.

2. How We Use Your Information

We use your information for the following purposes:

• Account & Membership: To create and manage your membership account, track loyalty points, stamps, and rewards, and authenticate your identity.
• Order Processing: To process, fulfil, and deliver your orders, and to communicate with you about them.
• Customer Support: To respond to your enquiries, feedback, and support requests.
• Marketing & Promotions: To send you marketing communications and promotional offers, with your consent where required by law. You may opt out at any time (see Section 4).
• Push Notifications: To send you order updates, reward reminders, and promotional messages if you have opted in.
• Store Finder: To show you nearby Gong cha locations based on your location (with your permission).
• Personalisation: To personalise your in-app experience and recommend products you may like.
• Analytics & Improvement: To analyse App usage, diagnose technical issues, improve our services, and enhance our marketing strategies.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. Sharing Your Information

We may share your information with:

• Service Providers: Third parties who perform services on our behalf, including our app developer and technology partners who build, test, and maintain the App; payment processors; cloud hosting providers; analytics providers (e.g. Google Firebase); email and push notification delivery services; and marketing platforms.
• Professional Advisers: Our lawyers, accountants, auditors, and insurers where reasonably required.
• Legal & Regulatory Authorities: When required by law, such as in response to a subpoena, court order, or similar legal process, or to protect our rights, property, or safety.
• Business Transfers: In connection with a merger, acquisition, reorganisation, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

We do not sell your personal information to third parties.

4. Your Choices & Rights

• Access & Correction: You can access and update your personal information through your account settings in the App. You may also request a copy of the personal information we hold about you by contacting us (see Section 10).
• Marketing Opt-Out: You may opt out of receiving promotional emails by using the unsubscribe link in those emails. You may opt out of push notifications at any time through your device settings or the App settings.
• Location Services: You can disable location access for the App at any time through your device’s privacy settings. Disabling location may limit the functionality of the store finder feature.
• Tracking & Analytics Opt-Out: You can reset your mobile advertising identifier or enable “Limit Ad Tracking” (iOS) / “Opt out of Ads Personalisation” (Android) in your device settings to limit tracking for advertising purposes.
• Account Deletion: You may request deletion of your account and associated personal information by contacting our support team at info@gongchatea.com.au. We will process your request within a reasonable timeframe, subject to any legal obligations requiring us to retain certain information (see Section 5). We also reserve the right to suspend or delete your account if we reasonably believe you have breached our terms of service, engaged in fraudulent or abusive activity, or if your account has remained inactive for an extended period, in which case we will make reasonable efforts to notify you in advance.

5. Data Retention

We retain your personal information for as long as your account remains active. When
you request deletion of your account, we will delete or anonymise your personal
information within a reasonable period, except where we are required to retain certain
records by law (for example, financial transaction records may be retained for up to
7 years to comply with Australian tax and corporations law). Usage data and analytics
data may be retained in aggregated or de-identified form after account deletion.

6. Data Security

We implement reasonable technical and organisational measures to protect your personal
information from unauthorised access, alteration, disclosure, or destruction. These
measures include encryption of data in transit (TLS), access controls, and secure
server infrastructure. However, no method of electronic transmission or storage is
100% secure, and we cannot guarantee absolute security.

7. Third-Party Links & Services

The App may contain links to third-party websites or services (including payment
gateways and social media platforms). This Privacy Policy does not apply to those
third parties. We encourage you to read the privacy policies of any third-party
services you interact with.

8. Children’s Privacy

Our App is not directed to children under the age of 16, and we do not knowingly
collect personal information from children under 16. If we become aware that a child
under 16 has provided us with personal information, we will take steps to delete
such information.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices
or for legal, operational, or regulatory reasons. We will notify you of any material
changes by posting the updated policy within the App and on our website, and by updating
the “Last Updated” date. Your continued use of the App after any changes constitutes
your acceptance of the revised policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our
privacy practices, or if you wish to make a complaint about a breach of the Australian
Privacy Principles, please contact us:

Gong Cha Australia Pty Ltd
Email: info@gongchatea.com.au
Website: gongchatea.com.au

We will investigate and respond to your complaint within a reasonable timeframe. If you
are not satisfied with our response, you may contact the Office of the Australian
Information Commissioner (OAIC) at www.oaic.gov.au.