Instant Checkout Pty Ltd (ABN 50 642 933 462) (Instant, we, our, us) provides online checkout and retention marketing services, including Instant Checkout, Instant Audiences, Instant AI, and Instant SMS (each, an Instant Product) to e-commerce store operators (Merchants). When Instant Products are installed on a Merchant’s e-commerce website (Merchant Website), Instant is able to monitor and collect behavioural and other data about visitors to each Merchant Website (each, a Customer), which can then be used to develop a profile of the Customer that can be used by Merchants to optimise the checkout experience for Customers across all Merchant Websites, either via use of the Instant Checkout “Buy Now” button for instant checkout on the Merchant Website, or where the Customer doesn’t complete their purchase, via Instant Audiences and Instant SMS, which offers functionality that enables Merchants to send the Customer related marketing materials and SMS in order to complete purchases on a Merchant Website. We also generate and send marketing materials on behalf of our Customers via Instant AI. Click here to find out more about Instant!
This Privacy Policy describes how we manage the personal information about individuals whose data we collect and process, including via the Instant Products.
The Instant Products include functionality that collects and processes behavioural data about Customers use of Merchant Websites and personal information that is collected from a Customer’s device in order to allow Customers to complete the checkout process faster.
We are committed to complying with our privacy obligations in accordance with all applicable data protection laws, including the Australian Privacy Principles contained in Schedule 1 to the Privacy Act 1988 (Cth) (each, an APP) and relevant privacy laws of the United States. If we decide to change this Privacy Policy, we will post the updated version on this webpage. Our policy is to always be open and transparent about our privacy practices.
This Privacy Policy does not apply to information that Instant collects and processes via the Instant Products on behalf of Merchants that are classified as a ‘controller’ or ‘business’ or similar role under applicable United States privacy laws. Instant processes such information as a ‘service provider’ or ‘processor’ or similar role pursuant to our Terms of Service and under the instructions of the relevant Merchant. Instant’s obligations in respect of such information are not included in this Privacy Policy. If you are a Customer based in the United States and have questions about how your information is collected, please contact the Merchant that has provided your information to us for additional information.
Additional disclosures for residents of certain jurisdictions, including Canada, Mexico, Japan, and Brazil are provided at the end of this Privacy Policy.
1. Consents
Our Merchants are required to comply with all applicable privacy laws.
Our agreement in place with each Merchant requires each Merchant to obtain all relevant privacy consents, approvals and authorisations required by law in order for us and our suppliers to collect and process the personal information about their Customers on each Merchant Website. We require each Merchant to electronically verify that they have obtained their Customers’ consent to the collection and processing of Customers’ personal information by us and our suppliers.
Our Merchants are not permitted to access or use personal information that is collected about their Customers via the Instant Products unless they have obtained all consents required by applicable law.
We encourage each of our Merchants to ensure that their Customers are familiar with their privacy policy so that their Customers will understand how the Merchant will collect, use and otherwise process personal information about them, via Instant Products or otherwise.
2. The types of personal and other information that we collect and hold
We collect and hold the following types of personal information about Customers:
Personal information, including first name, last name, phone number, email address, delivery address, billing information, products and services ordered from a Merchant Website, and payment details. We do not process Customer payments for purchases on Merchant Websites but we do enable the processing of such payment by providing the Customer’s payment details to a payment gateway provider that is responsible for processing such payments.
Behavioural data, including browsing data collected by Instant Checkout or Instant Audiences from the Customers device, which may include session data, pages you access, your computer IP address, device identifiers, the type of operating system you are using, your location including geolocation, mobile network information, standard web log data and other information.
Personal information about Customers generated by Instant’s profile building technology such as information about the Customer’s shopping habits, what types of hobbies they might have, or demographic information (eg inferenced income or age range, household size, or home ownership) as determined by those algorithms.
Marketing engagement data including data collected through emails and marketing campaigns sent via Instant AI, such as email open rates, click-through rates, and engagement metrics.
Some of the above information may be inferred and we may combine any of the information we collect or receive with other information.
We collect and hold the following types of personal information about current and potential Merchants and their personnel:
Personal information, including first name, last name, phone number, email address, delivery address, billing information, products and services ordered from a Merchant Website, and payment details. We do not process Customer payments for purchases on Merchant Websites but we do enable the processing of such payment by providing the Customer’s payment details to a payment gateway provider that is responsible for processing such payments.
We may also obtain information about a current or potential Merchant and their personnel from third parties including Instant Merchants, third party suppliers and commercial partners (together, Partners), as well as credit reporting bodies and identity verification services, and publicly or commercially available sources for the purposes of complying with relevant legislation (e.g. anti-money laundering laws).
Current Merchants and their personnel may provide us with access to certain personal information about them held by third parties such as social media sites (e.g., Facebook and Twitter). The information we may receive varies by site and is controlled by that site. By associating an account held with a third party with your Instant account that is set up for you when you first register with us, and authorising us to have access to this information, each Merchant and their personnel agrees that we may collect, store and use this information in accordance with this Privacy Policy.
We may also collect an individual’s personal information if they interact with our website or participate in a competition or promotion that we offer (either directly or through our marketing agents or our Partners).
We may collect personal information about our Partners and other third party suppliers and their personnel from our Partners and third-party suppliers or directly from their personnel. The information we collect about our Partners and third party service providers and their personnel may include name, position, contact details and training records.
In addition to the personal information described above, we may collect publicly available information from Merchant Websites, including logos, images, design elements, and other brand assets, for the purposes of generating and sending marketing communications and services.
3. How we collect personal information
Our policy is to not collect personal information by means that are unfair or unreasonably intrusive in the circumstances. We only collect personal information that is necessary to provide the functionality of the Instant Products and to otherwise operate our business.
We collect personal information about Customers when it is transmitted to us via Instant Products in accordance with our obligations pursuant to a contract in place with the Merchant. We also collect personal information entered by the Customer into our website, which the Customer is taken to when they click on the “Buy Now” button that has been installed on the Merchant Website. We also collect personal information about each Customer that is collected via a pixel containing a third-party JavaScript agent and the related code used in the Instant JavaScript library, which allows our third-party service providers to collect data about the Customer’s interactions with each Merchant Website.
We also use cookies to collect personal information. We use cookies that identify when a Customer interacts with a Merchant Website that has Instant Products operating on it. We use a number of different cookies on our own website, the details of which are set out below.
We also collect personal information when a Customer voluntarily discloses it on the Merchant Website (via an Instant Product, surveys, online forms or otherwise).
Our Merchants are responsible for ensuring that all Customer consents, approvals and authorisations have been obtained or provided by them as required by law for the lawful collection of the personal information that we collect from them. We receive personal information about Customers from each Merchant via the Instant Checkout or Instant Audiences functionality installed on each Merchant Website.
In the event that any personal information is provided to us which is unsolicited by us, we will review such personal information on an individual basis before destroying or de-identifying the information.
We collect personal information about current and potential Merchants and their personnel when they voluntarily disclose it to us or when we collect it about them when they order or use an Instant Product. We collect personal information about current and potential Customers and their personnel when they enter into a contract with us, order an Instant Product from us, register an end user account on an Instant Product, contact us to enquire about our products or services, to request technical support and/or when they otherwise voluntarily provide it to us.
We collect personal information about current and potential Partners and other service providers and their respective personnel when they voluntarily disclose it to us or when they negotiate or enter into a contract with us, contact us to enquire about engaging them and to provide us technical support.
4. How we use personal information
How we use the personal information that we collect and process.
Category
How we use and process personal information that we collect
Category
Personal information about Customers
To provide the functionality of the Instant Products to Customers and Merchants;
To build profiles of Customers who engage with Merchant Websites and insights about them;
To determine which Customers or prospective Customers are most likely to be interested or disinterested in certain offers
To perform data analytics including to improve our and our third party providers’ services;
To send personal information to our Merchant’s third party marketing service providers, for them to use for the purpose of marketing campaigns directed at Customers that have engaged with the Merchant Website;
To send SMSs to Customers with a link to checkout for products they considered purchasing but abandoned on a Merchant Website;
To generate and send personalised marketing communications to Customers on behalf of Merchants, including for abandoned purchases on a Merchant Website and campaigns;
To optimise the content and delivery of personalised marketing communications based on performance and engagement data;
In order to store personal information in databases and systems in our hosting environments at third party data centres;
To provide technical support in respect of the Instant Products to Merchants;
When backing up and restoring data that includes Customer personal information;
To improve and develop the Instant Products and for general product and business development;
To carry out security audits, investigate security incidents and implement security processes and procedures that require access to personal information; and
To handle complaints.
Required for Merchants and Customers to receive the benefit of the Instant Products;
To enable Merchants and Instant on behalf of Merchants to retarget marketing content to Customers;
Necessary for our legitimate interests, including in order to operate and grow our business, in order to administer and allow the Merchants to operate the Instant Products, to enable us to operate our IT systems and networks, manage our hosting environments, and ensure the successful delivery of the Instant Products;
To provide statistical analysis of de-identified personal information;
To assist Merchants to detect and prevent fraud and provide “validation” or data hygiene services, e.g., by verifying or removing or correcting old, incorrect or outdated information or evaluating whether an email address recently has been active.
For our accounting, billing and other internal administrative purposes;
To comply with our legal and statutory obligations; and
Required in order to determine which privacy law applies to the individual.
Personal information about current and potential Merchants and their personnel
To manage, provide and support the Instant Products for use by Merchants and their personnel;
To inform, market and promote our products and services to potential Merchants and negotiate contracts with them;
In order to store personal information in databases and systems in our hosting environments at third party data centres;
To create and manage your user account or other user profiles;
To provide technical support in respect of Instant Products to Merchants and their personnel;
To send newsletters and other communications to current and potential Merchants and their personnel concerning Instant Products, events and education opportunities, unless you opt-out of receiving them;
When backing up and restoring data that includes personal information about Merchants and their personnel;
To improve and develop the Instant Products and for general product and business development;
To carry out security audits, investigate security incidents and implement security processes and procedures that require access to personal information; and
To handle complaints.
Required for Merchants to receive the benefit of the Instant Products;
Necessary for our legitimate interests, including in order to operate and grow our business, in order to administer and allow the Merchants to operate Instant Products, to enable us to operate our IT systems and networks, manage our hosting environments and ensure the successful delivery of the Instant Products;
For our accounting, billing and other internal administrative purposes;
To comply with our legal and statutory obligations including for the purpose of confirm your identity for the purposes of anti-money laundering and counter-terrorism laws and assess applications and your suitability for Instant Products; and
Required in order to determine which privacy law applies to the individual.
Personal information about current and potential Partners and other third party suppliers and their personnel
To inform, market and promote our products and services to, and to engage, potential Partners and third party suppliers and negotiate contracts with them;
When backing up and restoring data that includes personal information about Partners and other third party suppliers and their personnel;
To carry out security audits, investigate security incidents and implement security processes and procedures that require access to personal information; and
To handle complaints.
Required for Merchants and Customers to receive the benefit of the Instant Products;
Necessary for our legitimate interests, including in order to operate and grow our business, in order to administer and allow the Merchants to operate Instant Products, to enable us to operate our IT systems and networks, manage our hosting environments and ensure the successful delivery of the Instant Products;
For our accounting, billing and other internal administrative purposes;
To comply with our legal and statutory obligations including for the purpose of confirm your identity for the purposes of anti-money laundering and counter-terrorism laws and assess applications and your suitability for Instant Products;
Required in order to determine which privacy law applies to the individual.
5. De-identified data analysis
Personal information may also be de-identified by us and used for statistical analysis. All such data is not held in a form that could reasonably be expected to identify an individual.
We use de-identified personal information to help us review, enhance and improve the Instant Products (for statistical or research purposes) and to develop case studies and marketing material without identifying any individual.
6. How we hold and secure personal information
We hold and store personal information that we collect in our offices, computer systems and third party owned and operated hosting facilities.
We take reasonable steps to protect personal information that we hold using such security safeguards as are reasonable in the circumstances to protect against loss, unauthorised access, modification and disclosure and other misuse, and we implement technical and organisational measures to ensure a level of protection appropriate to the risk of accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal information transmitted, stored or otherwise processed by us.
We:
only use reputable cloud hosting providers to host personal information;
implement passwords and access control procedures, anti-virus, firewall and security controls for email and other applicable computer software and systems;
maintain files, in both hardcopy and electronic form, at our offices and other access-controlled premises;
operate online records managements systems on secure networks;
regularly perform security testing;
maintain physical security measures in our buildings and offices such as visitor access management, cabinet locks, surveillance systems and alarms to ensure the security of information systems (electronic or otherwise);
require our employees, agents and contractors to comply with privacy and confidentiality provisions in their employment and subcontractor agreements that we enter into with them;
use SSL encryption on our systems;
have data backup archiving and disaster recovery processes in place;
if appropriate in the circumstances taking into account the state of the art, the costs of implementation and the nature, scope, content and purpose of the processing, we will encrypt personal information; and
with respect to personal information that we no longer require or where we are otherwise required to destroy it under applicable law, we ensure that such personal information is securely destroyed.
7. Disclosure and sharing of personal information
We will disclose personal information to our employees, officers, professional advisors, suppliers, agents and/or related entities who assist us in the delivery and performance of the Instant Products. We ensure that they are aware of their information security responsibilities, are appropriately trained to meet those responsibilities and have entered into agreements which require them to comply with privacy and confidentiality obligations which apply to personal information that we provide to them.
We disclose personal information that we collect as follows:
To Merchants, being data about their Customers;
To our Partners and other third party suppliers, so that they can provide goods or services to us that we rely on to provide the Instant Products to Merchants. This includes our data storage and software providers who host our databases and information on our behalf and suppliers who support our business operations including in relation to fraud prevention, identity verification, payment collection, marketing, customer service, and technology services (which otherwise assist us to provide, develop, maintain, and improve our services and the Instant Products). This also includes our third party SMS providers for the purpose of supplying Instant SMS to Merchants (all of the above third party providers and suppliers, together, the Service Providers);
when providing information to our legal, accounting or financial advisors or insurers, or to our debt collectors for debt collection purposes or when we need to obtain their advice, or where we require their representation in relation to a legal dispute;
where a person provides written consent to the disclosure of their personal information;
where we become aware that specific personal information needs to be disclosed to protect the safety or vital interests of any person. Please note that while we may monitor personal information entered into, or generated via the Instant Products from time to time, we do not review all such information and do not represent that we will monitor any person’s use of the Instant Products;
if we are contacted by any person who represents to us that they are a Customer, Merchant or their personnel, for security purposes, we will only discuss the personal information that we hold about them with them if they correctly identify themselves as such according to our security measures;
our affiliates and related companies (Affiliates);
financial institutions that we may partner with to jointly create and offer a product;
credit reporting bodies and collection agencies, including to report account information, as permitted by law. When we share your personal information with credit reporting bodies we authorise them to use that information for the purposes of providing their credit reporting services. To request a credit report, we will provide information to the credit reporting body that identifies you;
banking partners as may be required by credit card association rules for inclusion on their list of terminated merchants;
companies that we plan to merge with, be acquired by, acquire, or who may invest in us;
to avoid prejudice to the maintenance of the law by any public sector agency, including the prevention, detection, investigation, prosecution, and punishment of offences;
for the enforcement of a law imposing a pecuniary penalty;
for the conduct of proceedings before any court or tribunal (being proceedings that have been commenced or are reasonably in contemplation); and
to police and other governmental bodies or regulatory authorities.
We will only share your personal information with third parties as described in this Privacy Policy or as otherwise notified to you at the time of collection or with your consent.
If a Merchant subscribes to Instant Products directly on a third party website or via a third party application, any information that the Merchant enters on that website or application (and not directly on Instant’s website) will be shared with the owner of the third party website or application. These sites are governed by their own privacy policies and Merchants are encouraged to review their privacy policies before providing them with any personal information.
8. Interacting with us without disclosing personal information
If you do not provide us with your personal information, you can only have limited interaction with us. For example, you can browse our website without providing us with personal information, such as the pages that generally describe Instant that we make available, and our Contact Us page. However, when you submit a form on our website or order an Instant Product, we need to collect personal information from you in order to identify who you are, so that we can provide you with the Instant Products, and for the other purposes described in this Privacy Policy.
You have the option of not identifying yourself or using a pseudonym when contacting us to enquire about Instant or Instant Products but not if you wish to actually engage Instant, use the Instant Products or any part thereof. It is not practical for us to provide you with access to or use of the Instant Products (or any part thereof) if you refuse to provide us with personal information.
9. Third party products and websites
Our website and the Instant Products may include links to third party websites or applications and integrations with third party products and services. Our linking to those websites or applications does not mean that we endorse or recommend them. We do not warrant or represent that any third party complies with applicable data protection laws. Merchants, Customers and other data subjects should consider the privacy policies of any relevant third party prior to disclosing personal information to them.
10. Offshore disclosure
We may transfer personal information to our contractors and service providers who assist us with the supply and provision of the Instant Products, and to assist us with the operation of our business generally, where we consider it necessary for them to provide that assistance. We will take reasonable steps to ensure that such recipients do not breach the APPs in relation to personal information or other relevant State and Territory laws (as applicable).
11. How to access and correct personal information held by us
Merchants and their personnel who wish to access, correct or delete the personal information held by us about them should contact us. Prior to contacting us or submitting a request for access, correct or deletion of any personal information held about them, Merchants and their personnel can access, update and/or delete their personal information by logging into their account on the Instant Products, where such functionality is available. However, we encourage you to contact us in any event and we would be happy to assist you.
Any Customer or other data subject who wishes to access, correct, delete or otherwise inquire about the personal information held by us about them should contact us using our contact details set out below.
It is our policy to retain personal information in a form which permits identification of any person only as long as is necessary for the purposes for which the personal information was collected; and for any other related, directly related or compatible purposes if and where permitted by applicable law. We will only process personal information that you provide to us for the minimum length of time permitted by applicable law and only thereafter for the purposes of deleting or returning that personal information to you (except where we also need to retain the data in order to comply with our legal obligations, or to retain the data to protect your or any other person's vital interests).
We retain personal information in Instant as follows:
Personal information about a Merchant and its personnel will be held while the Merchant is an Instant customer and thereafter for a period of 5 years for tax purposes.
Personal information about a Partner, other service provider and their respective personnel will be held while the Partner or other service provider is engaged by us and thereafter for a period of 5 years for tax purposes.
Personal information about a Customer will be held while the Customer is an active user of Merchant Websites and thereafter for a period of 12 months, at which time it will be automatically deleted; and
We will only keep personal information for longer periods than specified above, where required under applicable law.
As an alternative to deleting personal information, we may elect to de-identify it where permissible by law. We will use de-identified data for the purpose of improving the Instant Products and for provision to third parties for marketing and research purposes.
Where you require personal information to be returned, it will be returned to you at that time, and we will thereafter delete all then remaining existing copies of that personal information in our possession or control as soon as reasonably practicable thereafter, unless applicable law requires us to retain the personal information, in which case we will notify you of that requirement and only use such retained data for the purposes of complying with those applicable laws.
We will handle all requests for access to personal information in accordance with our statutory obligations. We may require payment of a reasonable fee by any person who requires access to their personal information that we hold, except where such a fee would be contrary to applicable law. We will not charge you for the making of any such request. We will endeavour to provide a response to any request for access to personal information within a reasonable time frame given the circumstances. This may include working with the complainant on a collaborative basis or otherwise resolving the complaint.
12. Marketing and opt-out choices
We may send marketing communications to Merchants about our products and services that we think they may be interested in. If a Merchant signs up to receive newsletters or other marketing communications from us, they can opt-out any time by clicking the unsubscribe link at the bottom of the message or by logging into their account on the Instant Products to update their marketing preferences at any time.
Even after a Merchant opts-out of receiving marketing materials from us, please allow us sufficient time to process such changes. Unless otherwise required by law, it may take up to 5 days to process an opt-out request in relation to the receipt of electronic marketing materials such as emails and SMS, and up to 30 days for all other marketing-related requests.
Even after a Merchant opts-out of receiving marketing communications from us, we may still contact the Merchant for transactional or informational purposes. These include, for example, customer service issues, returns or product-related inquiries, outstanding payment inquiries, surveys or recalls, or any questions regarding a specific order.
We may use personal information about Customers to send marketing communications to Customers on behalf of Merchants about Merchant products and services that the relevant Merchant thinks they may be interested in. Marketing communications sent to Customers by Instant are sent using personal information provided or authorised by the relevant Merchant and may be sent from the Merchant’s domain, but are facilitated by Instant. If a Customer signs up to receive marketing communications from us on behalf of a Merchant, they can opt-out at any time by clicking the unsubscribe link at the bottom of the message, or by logging into their account on Instant Checkout to update their marketing preferences (if applicable). Customers may also opt out of receiving marketing communications sent by Instant on behalf of Merchants by contacting us at help@instant.one. We will action such requests on behalf of the relevant Merchant.
Even after a Customer opts-out of receiving marketing communications from us, please allow us sufficient time to process such changes. Unless otherwise required by law, it may take up to 5 days to process an opt-out request in relation to the receipt of electronic marketing communications such as SMS, and up to 30 days for all other marketing-related requests.
13. Cookies and third-party analytical services
We use cookies to improve our website and the Instant Products, as well as to enhance Customer’s checkout experience.
When you access our website or use Instant Products, we may place small data files on your computer or other device. These data files may be cookies, pixel tags, flash cookies, or other local storage provided by your browser or associated applications (collectively Cookies). We use Cookies to ascertain which web pages are visited and how often, to make our website more user friendly, to give you a better experience when you attend at a Merchant Website and to target advertising to you that we think you may be interested in.
Cookies allow us to save your password and Instant Products account information so you do not have to re-enter it every time you complete an action, like make a purchase via Instant Checkout.
We use two main categories of cookie:
Strictly Necessary Cookies: These cookies are set by us or a third party on our behalf, and are essential to enable you to use the features of our website, such as technically delivering content and experiences, setting your privacy preferences, logging in, making payments or filling in forms. Without these cookies, our website may not work properly.
Optional Cookies: Optional cookies may be 'first party cookies' or 'third party cookies'. First party cookies set directly by us or by a third party at our request. Third party cookies are set directly by a third party or set by us at the request of a third party, such as our analytics or advertising service providers.
Most web browsers automatically accept Cookies. You can find information specific to your browser under the “help” menu. You are free to decline our Cookies if your browser or browser add-on permits, unless our Cookies are required to prevent fraud or ensure the security of websites we control. However, declining our Cookies may interfere with your use of our website and the Instant Products.
14. Controlling Cookies
- Your browser may give you the ability to control Cookies. How you do so, however, depends on your browser and the type of cookie. Certain browsers can be set to reject all browser cookies. If you configure your computer to block all cookies, you may disrupt certain web page features, and limit the functionality we can provide when you visit or use our website and/or Merchant Websites. If you block or delete Cookies, not all of the tracking that we have described in this policy will stop. If you continue without changing your settings, we will assume that you are happy to receive all cookies on our website. You can change your cookie settings at any time. Some browsers have a “Do Not Track” feature that lets you tell websites that you do not want to have your online activities tracked. These browser features are still not uniform and we are not currently set up to respond to those signals.
15. Children’s privacy
- We do not knowingly collect information from children under the age of 16. If you are under the age of 16, please do not provide any information through the Instant Products. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Privacy Policy by instructing their children to never provide any information on this website or any other website without their permission. If you have reason to believe that a child under the age of 16 has provided their information, please email us at help@instant.one, and we will endeavor to delete that information from our databases.
16. Our contact details
- Any person who wishes to contact us for any reason regarding our privacy practices or the personal information that we hold about them, or make a privacy complaint, may contact us as follows:
- We endeavour to resolve any privacy complaint with the complainant within a reasonable time frame given the circumstances. This may include working with the complainant on a collaborative basis or otherwise resolving the complaint.
- If the complainant is not satisfied with the outcome of a complaint or they wish to make a complaint about a breach of the Australian Privacy Principles, they may refer the complaint to the Office of the Australian Information Commissioner who can be contacted using the following details:
Canada Privacy Disclosures Addendum
This section applies to the collection, use, and processing of personal information subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).
Service Provider Role
Where Instant processes personal information of individuals located in Canada, we do so solely on behalf of and under the direction of our Merchant customers, who determine the purposes for which that personal information is collected and used. Instant does not use such personal information for its own purposes.
Cross-Border Transfers
Personal information may be transferred outside of Canada (including to Australia and the United States), where it is subject to the laws of those jurisdictions. Instant implements safeguards to protect such personal information in accordance with PIPEDA.
Your Rights Under PIPEDA
Individuals in Canada may have the right to request access to, or correction of, their personal information. These requests should be directed to the Merchant who collected your information. Instant supports its Merchant customers in fulfilling these requests where applicable.
Contacting Us
For any questions about our privacy practices under PIPEDA, you may contact us at: help@instant.one.
Mexico Privacy Disclosures Addendum
This section applies to the processing of personal information subject to the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Mexican Data Protection Law or LFPDPPP).
Identity and Address of the Data Processor
Instant Checkout Pty Ltd (Instant), located at 23 Foster Street, Surry Hills NSW 2010, Australia, acts as a service provider that processes personal information on behalf of its clients (Merchants). Instant processes personal information only under the instructions of the relevant Merchant, who is responsible for determining the purposes and means of processing personal information.
Processing on Behalf of Merchants
Instant provides services to Merchants and processes personal information solely for the purposes specified by the Merchant and in accordance with applicable agreements. Instant does not independently determine the purposes or means of processing.
Rights of Individuals (ARCO Rights)
Under the Mexican Data Protection Law, individuals may have rights to access, rectify, cancel, or oppose (ARCO Rights) the processing of their personal information. Because Instant acts only as a service provider, requests to exercise ARCO Rights should be directed to the relevant Merchant (the data controller). Upon request by a Merchant, Instant will assist in facilitating the response to any such rights in accordance with our contractual obligations.
Transfers of Personal Information
Instant may engage trusted subprocessors to support the delivery of our services. Any transfer of personal information to subprocessors is conducted in compliance with applicable legal requirements, and subprocessors are required to provide equivalent protections to those described in this Privacy Policy.
Security of Personal Information
Instant implements appropriate administrative, technical, and physical safeguards designed to protect the personal information we process against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
For questions about our data handling practices in Mexico, you may contact us at help@instant.one.
Japan Privacy Disclosures Addendum
This section applies to the collection, use, and processing of personal information subject to Japan’s Act on the Protection of Personal Information (APPI).
Entrusted Data Processing
Where Instant processes personal information on behalf of a Merchant acting as a business operator (controller), Instant does so as an "entrusted party" under APPI. Instant processes such personal information solely in accordance with the Merchant’s instructions and the relevant service agreement.
Purposes of Use
We process personal information for the purposes described in the section titled "How We Use Personal Information." We do not use personal information for any purpose other than those notified or reasonably related purposes as permitted under APPI.
Cross-Border Transfers
Your personal information may be transferred to and stored in countries outside of Japan, including but not limited to the United States and Australia. These countries may not have personal data protection laws equivalent to those in Japan. In such cases, we take appropriate measures to ensure that your personal information is handled securely and in accordance with this Privacy Policy.
Your Rights under APPI
If you are located in Japan, you may have the right to request access to your personal information, request corrections, or request suspension of use or deletion where appropriate. These rights may be exercised by contacting us using the details below.
Contacting Us
If you have any questions about how your personal information is handled under Japanese law, or if you wish to exercise any of your rights, please contact us at: help@instant.one.
Brazil Privacy Disclosures Addendum
This section applies to the processing of personal information subject to Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, or LGPD).
Service Provider Role
Where Instant processes personal information of individuals located in Brazil, we do so solely on behalf of and under the instructions of our Merchant customers, who act as the “controller” (controlador) under LGPD. Instant does not use such personal information for its own purposes.
Purposes and Legal Basis
The legal basis for processing personal information is determined by the Merchant as the controller. Instant processes data for the limited purposes of providing its services to the Merchant and in accordance with the contract between Instant and the Merchant.
International Transfers
Personal information may be transferred to countries outside of Brazil, including Australia and the United States. These transfers are made under contractual safeguards to ensure the protection of personal information consistent with LGPD requirements.
Data Subject Rights
If you are a resident of Brazil, you may have the right to access, correct, delete, or object to the processing of your personal information. These rights should be exercised through the Merchant who collected your information. Instant supports its Merchant customers in fulfilling these rights upon request.
Contacting Us
If you have questions about our processing of personal information under LGPD, you may contact us at: help@instant.one.