Afterpay Privacy Policy

LAST UPDATED: 20 January 2021

This privacy policy (‘the Privacy Policy’) applies to Afterpay Pty Ltd ACN 169 342 947, Afterpay NZ Limited (Company number: 6340314), Afterpay US, Inc., Afterpay US Services, LLC, and their affiliates and related companies, (together, ‘Afterpay’, ‘we’, ‘us’ or ‘our’), and details how we collect, manage and use Personal Information, including but not limited to Personal Information collected on our websites, mobile applications, via email, cloud-based services, or controlled widgets embedded in communication platforms with a link to this Privacy Policy (“Websites”).  By “Personal Information” we mean information that is associated with a specific person and can be used to reasonably identify that person.  Personal information does not include information that has been made anonymous and cannot reasonably identify a specific person.  It covers how we collect, use, and share that Personal Information as of the date that this Privacy Policy is posted.

Afterpay is committed to respecting the privacy of your Personal Information. We appreciate that individuals are concerned about the security of their Personal Information and we are committed to protecting any Personal Information in our custody or control.

Afterpay’s retailers (which may include online market places) and commercial partners (together, ‘our Partners’) are independent of Afterpay and may have privacy policies which differ from ours. Our Partners are responsible for their own privacy policies and privacy practices. Please contact our Partners directly for further information on their privacy policies.

The Websites may also contain links to third party websites. These linked sites are not under our control and we are not responsible for content on these sites, nor are these sites subject to this Privacy Policy. Before disclosing your personal information on any third-party website we recommend that you examine the terms and conditions and privacy policy of that site.

This Privacy Policy applies when you sign up for, access, or use our services, features, technologies or functions offered on our Websites (collectively ‘Afterpay Services’) and in relation to Personal Information we may otherwise collect during the course of our business as set out in this Privacy Policy.
Afterpay may amend the Privacy Policy at any time. The updated version will be available by following the ‘Privacy’ link on the Websites. The revised version will be effective from the time we post it on the Websites. Afterpay may highlight any material changes to the Privacy Policy that may impact you by notifying you by email or otherwise.

Collecting Personal Information

Afterpay strives to be fair and open about the way we collect information about you and what we intend to do with the information.

We receive and store certain types of information from you when you interact with our Websites to deliver the products you request from us, and help improve your overall online experience.  For example, like many other websites, we store “cookies” and other web-based files on user devices to get certain types of information when your web browser, mobile phone, or other device accesses our Website.  The information sent to us may include data on the pages you access, your computer IP address, device identifiers, the type of operating system you are using, your location, mobile network information, standard web log data and other information. Web log data includes the browser type you are using and traffic to and from our site. When you visit our Websites or use Afterpay Services, we may also collect information about your transactions and your activities. Details on our collection of Personal Information through the use of cookies and analytical services is set out below.

In addition, if you open an Afterpay account with us or use Afterpay Services, we may collect the following types of information:

    • Contact information, such as your name, address, phone number, email and other similar information.
    • Financial information, such as the full bank account numbers and/or credit or debit card numbers that you link to your Afterpay account or give us when you use Afterpay Services.
    • Detailed Personal Information such as your date of birth, driver’s license number, or other identification information or documents.

    We may also obtain information about you from third parties including our Partners and related companies, as well as credit reporting bodies and identity verification services, and publicly or commercially available sources for the purposes of complying with relevant legislation (e.g., anti-money laundering laws).

    You may choose to provide us with access to certain Personal Information stored by third parties such as social media sites (e.g., Facebook, Instagram and Twitter). The information we may receive varies by site and is controlled by that site. By associating an account managed by a third party with your Afterpay account and authorizing Afterpay to have access to this information, you agree that Afterpay may collect, store and use this information in accordance with this Privacy Policy.

    We may also collect your Personal Information if you enter a competition or promotion we run (either directly or through our marketing agents or our Partners), or if you apply for employment with us either directly or through a recruitment or employment agency.

    We may collect Personal Information about our Partners’ staff directly from those staff or from our Partners. The information we collect about our Partners’ staff may include your name, position, contact details and training records.

    We may also collect the Personal Information of our suppliers and service providers’ staff during the course of our business activities. This information may include your name, contact details and position. We will collect this information directly from you, or from the applicable supplier or service provider.

    In order to help protect you from fraud and misuse of your Personal Information, we may collect information about your use and interaction with our Websites or Afterpay Services. For example, we may evaluate your computer, mobile phone or other access device to identify any malicious software or activity.

    We may also collect additional information from or about you in other ways, such as through contact with our customer support team, suppliers or service providers (whether via mail, email or through telephone enquiries), your responses to a market survey, and from interactions with Afterpay’s Partners or as otherwise notified to you at the time.

    In New Zealand, Afterpay NZ Limited is the agency collecting Personal Information and that will hold the information, but may share the information collected with other parties as set out in this Privacy Policy. Afterpay NZ Limited’s address is c/- TMF Group, Level 12, 55 Shortland Street, Auckland 1010, New Zealand.

    Using Personal Information

    Afterpay only collects, holds and handles information about you that is necessary for us to perform the services you request from us, that is otherwise reasonably necessary for our business activities or if required by law, court, or tribunal order.

    We may use Personal Information we collect about you for a number of purposes including:

    • provide (or assess whether to provide) Afterpay Services;
    • customer support;
    • process transactions and send notices about your transactions;
    • resolve disputes, collect fees, and troubleshoot problems;
    • investigate and prevent potentially prohibited or illegal activities;
    • enforce our User Agreement with you;
    • learn more about your level of satisfaction, your expectations of us and our Partners, and how we can meet them (for example, in relation to Afterpay Services, and the goods offered by Afterpay’s retailers);
    • customize, measure, and improve Afterpay Services and the content, layout, and operation of our Websites;
    • deliver targeted marketing, service update notices, and promotional offers based on your communication preferences;
    • contact you via telephone, text (SMS) or email messaging, including as authorized by our User Agreement;
    • compare information for accuracy and verify it with third parties;
    • confirm your identity for the purposes of anti-money laundering and counter-terrorism laws and assess applications and your suitability for Afterpay Services;
    • to consider you for a position at Afterpay for which you have applied;
    • to acquire goods or services from you or from your employer;
    • for the purpose of performing data analytics including to improve our and our Partners’ services;
    • for other purposes to which you have consented; and
    • as required or permitted by relevant laws and regulations.

    You agree that we may use your Personal Information for the purposes for which we collect it and for related purposes which would be reasonably expected by you.

    If all or some of your Personal Information is not collected or cannot be verified, we may be unable to provide you with Afterpay Services or a customized experience, engage with you, or do business with you.



    SMS Terms & Conditions



    By entering your mobile number, you agree to receive text messages for service notifications and verification codes from Afterpay. Message frequency will vary. Reply HELP for help, STOP to stop (or cancel). Standard Message & Data rates may apply. We do not sell your data. Carriers are not liable for delayed or undelivered messages.



    How we share Personal Information with other parties

    We may share your Personal Information with:

    • Our affiliates and related companies;
    • Our Partners and the suppliers and service providers who help with our business operations including in relation to fraud prevention, identity verification, payment collection, marketing, customer service, and technology services;
    • Our retailers, so that they can provide goods or services to you or respond to a complaint by you, or to help them improve the quality and standard of service they provide to you;
    • Financial institutions that we may partner with to jointly create and offer a product;
    • Credit reporting bodies and collection agencies, including to report account information, as permitted by law. When we share your Personal Information with credit reporting bodies we authorize them to use that information for the purposes of providing their credit reporting services. To request a credit report, we will provide information to the credit reporting body that identifies you;
    • Banking partners as may be required by credit card association rules for inclusion on their list of terminated merchants;
    • Companies that we plan to merge with or be acquired by or who may invest in us;
    • Law enforcement, government agencies or officials, or other third parties pursuant to a subpoena, court order, or other legal process or requirement applicable to Afterpay; when we need to do so to comply with law or credit card rules; or when we believe, in our sole discretion, that the disclosure of Personal Information is necessary to prevent physical harm or financial loss, to report suspected illegal activity or to investigate suspected violations of our User Agreement;
    • Your nominated referees so that we may check your references if you are applying for a position with Afterpay; and
    • Other third parties with your consent or direction to do so.


    Please note that these third parties may be in other countries where the laws on processing Personal Information may be less stringent than in your jurisdiction. When we disclose your Personal Information overseas, we will take all reasonable measures to ensure that your information is held, managed and accessed in accordance with appropriate standards for the handling of Personal Information.

    In addition, you should note that retailers you buy goods or services from or contract with (even if such goods or services are purchased using Afterpay Services) have their own privacy policies, and Afterpay is not responsible for their actions, including their information protection practices.

    We will only share your Personal Information with third parties as described in this Privacy Policy or as otherwise notified to you at the time of collection or with your consent.

    If you open an Afterpay account directly on a third-party website or via a third party application, any information that you enter on that website or application (and not directly on Afterpay’s Websites) will be shared with the owner of the third party website or application. These sites are governed by their own privacy policies and you are encouraged to review their privacy policies before providing them with Personal Information. Afterpay is not responsible for the content or information practices of such third parties.

    Consent

    We may require your consent to use and/or disclose your Personal Information if we need to use your information for a purpose that is not related to the purpose for which it was collected.

    If you do not consent to Afterpay collecting, using and/or disclosing your Personal Information for such other purposes, this may affect Afterpay’s ability to deliver and improve our products and services, or to engage or do business with you.

    When you provide us with your name, date of birth and residential address in establishing your profile with us, you consent to us disclosing that information to credit reporting bodies and requesting an assessment of whether it matches personal information held by the body to assist in verifying your identity under anti-money laundering laws. The body may provide us with that assessment and use your personal information, and the names, residential addresses and dates of birth of other individuals, to prepare that assessment.

    If there is a failure to verify your identity in the way described above, we will notify you within the secure Afterpay service or otherwise. In Australia, we use Illion (www.illion.com.au) to provide us with the assessment to assist in verifying your identity.

    If you do not want to proceed in this way to verify your identity, you should contact us, as provided below.

    Marketing and privacy

    Afterpay may send marketing materials from time to time to those who have provided Afterpay with Personal Information about products and services offered by Afterpay and our Partners. We may use your Personal Information to make inferences and present more relevant content, such as your preferred retailers, purchase and spending habits.

    If you signed up to receive newsletters or other marketing communications from us, you can opt-out any time by clicking the unsubscribe link at the bottom of the message.  You can also log-in to your account to opt-out and update your marketing preferences at any time.

    Even after you opt-out or update your marketing preferences, please allow us sufficient time to process your marketing preferences.  Unless otherwise required to process your requests earlier by law, it may take up to 5 days to process your opt out requests in relation to receipt of electronic marketing materials such as emails and SMS, and up to 30 days for all other marketing-related requests.

    Even after you’ve opt-out of receiving marketing communications from us, we may still contact you for transactional or informational purposes.  These include, for example, customer service issues, returns or product-related inquiries, outstanding payment inquiries, surveys or recalls, or any questions regarding a specific order.

    You may also contact us on:
    Email: info@afterpay.com.au
    Phone (Australia): 1300 100 729
    Phone (New Zealand): 0800 461 268
    Phone (US): +1 855 289 6014
    Mail: GPO Box 2269, Melbourne, VIC 3001, Australia

    Cookies and third-party analytical services

    We use cookies and track IP addresses via our Websites so we can improve our services provided by our Websites and enhance your user experience.
    When you access our Websites or use Afterpay Services, we (including our Partners and companies we work with) may place small data files on your computer or other device. These data files may be cookies, pixel tags, “Flash cookies,” or other local storage provided by your browser or associated applications (collectively ‘Cookies’). We use Cookies to ascertain which web pages are visited and how often, to make our Websites more user friendly, to give you a better experience when you return to a website and to target advertising to you that we think you may be interested in.

    For example, Cookies allow us to save your password so you do not have to re-enter it every time you visit our site.

    Most web browsers automatically accept Cookies. You can find information specific to your browser under the “help” menu. You are free to decline our Cookies if your browser or browser add-on permits, unless our Cookies are required to prevent fraud or ensure the security of websites we control. However, declining our Cookies may interfere with your use of our Websites and Afterpay Services.

    Controlling Online Interest-Based Ads

    We sometimes work with online advertising vendors to provide you with relevant and useful ads.  This may include ads served on or through our Websites.  This may also include ads served on other companies’ websites.  These ads may be based on information collected by us or third parties.  For example, your postal code may be used to target an ad for people in your area.  These ads may also be based on your activities on our Websites or on third party websites.

    Our Websites also use Google Analytics, a web analysis service of Google Inc. ('Google'). Google Analytics uses Cookies to monitor traffic to, and use of, the Websites. Information about the use of the Websites generated by these Cookies is generally transferred to a Google server in the USA and stored there. Google uses this information on our behalf to evaluate your Website usage, to compile reports on the Websites activities, and to provide additional services connected with the Websites. We will not identify you to Google, and will not merge personal and non-personal information collected through this service. You can prevent the use of Google Analytics Cookies by adjusting the settings on your browser software, however, you may not be able to fully use all of the functions of the Websites if you do so.

    In addition to Google Analytics, we may also use other third-party analytics tools including but not limited to Amplitude (an analytics service provided by Amplitude Inc.) to monitor, analyze and collect information about your use of the Websites.

    For more information about our ad service provider and its cookies, including information about how to opt out of these technologies, you may visit http://optout.aboutads.info  In addition, users may prevent Google’s collection of data generated by your use of the Websites (including your IP address) by downloading and installing a Browser Plugin available at https://tools.google.com/dlpage/gaoptout?hl=en.

    Protecting Personal Information

    Afterpay will keep your Personal Information secure by taking reasonable steps to protect it from misuse, loss, and unauthorized access, use, modification, and disclosure.

    We protect your information using physical, technical, and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure and alteration.

    We also review our security procedures periodically to consider appropriate new technology and updated methods.  Only properly authorized people who have a need to access Personal Information to perform their job will be able to see or use that information. Even so, despite our reasonable efforts, no security measure is ever perfect or impenetrable.

    Children's Personal Information

    We do not knowingly request to collect Personal Information from any person under the age of 18. If Afterpay suspects a user of being under 18 years of age, we will require the user to close his or her account, will not allow the user to continue using Afterpay Services.  Please notify us if you know of any individuals under the age of 18 using the Afterpay Services so we can take action.

    Accessing and requesting correction of Personal Information

    We will strive to ensure that information about you is accurate when we collect or use it. Subject to some exceptions under privacy law, we will let you see the information we hold about you and correct it if it is inaccurate, incomplete or out-of-date. If we do not grant you access to your Personal Information or do not agree to correct your Personal Information, we will tell you why.

    If you wish to obtain access to and/or correct your Personal Information held by Afterpay, please contact Afterpay on:

    Email: info@afterpay.com.au
    Phone (Australia): 1300 100 729
    Phone (New Zealand): 0800 461 268
    Phone (US): +1 855 289 6014
    Mail: GPO Box 2269, Melbourne, VIC 3001, Australia

    For California Residents.  California Civil Code (Section 1798.83) gives Afterpay customers who are California residents the right to request certain information about our disclosure of Personal Information to third parties for their own direct marketing purposes.  If you wish to make this request, please e-mail, call, or write to us at the address provided above.

    Unless we do not agree to your request for access to Personal Information, in most cases Afterpay will provide you with access as soon as reasonably possible following receipt of your request. If you request corrections to your Personal Information and Afterpay agrees with your request, these changes will be made as soon as practicable. If Afterpay does not agree to your request for correction, it will notify you of the reasons it does not agree and will note your request on the records it holds about you. If you are dissatisfied with our refusal to provide you with access to, or correct, your Personal Information you may also complain to the applicable regulator in your jurisdiction.

    Subject to the terms set out in the Afterpay User Agreement, you can also close your Afterpay account through our Websites. If you close your Afterpay account, we may retain information from your account for a period of time to collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations, prevent fraud or risk, enforce our User Agreement, or take other actions as required or permitted by law.

    Resolving your concerns

    If you have a complaint regarding Afterpay’s management of your Personal Information, please prepare your complaint in writing and email it to us at info@afterpay.com.au

    Afterpay will provide written acknowledgement of your complaint within 7 days of receipt. We will investigate and advise you of the steps we have taken to resolve your complaint within 30 days of receipt of your complaint.