Privacy policy

About this policy

This policy applies to Dash ATM Services Pty Ltd as trustee for the Dash ATM Services Trust (ABN 38 548 586 638), referred to as “Dash”, “we” or “us”. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We also have obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) (the AML/CTF Act), which require us to collect and keep some information.

The policy covers our website, our customer portal, and our dealings with ATM site owners, their directors and shareholders, partners and suppliers.

What we collect

When you enquire

Your name, business name, role, email, phone number, details about your site or ATM network, and anything you tell us in your message. We also record the page you came from and, if present, the advertising campaign that brought you to our website.

When you apply to host or operate an ATM

Business details (ABN, entity type, trading address), and for each director and significant shareholder: name, date of birth, residential address and contact details. To verify identity we collect identity documents and may compare your details with official records, including through the Document Verification Service. We also collect the bank account details we need to pay settlement and surcharge income to you.

When you use our ATMs

Our ATMs record transaction data: card type, amount, date, time and result. We don’t receive or store your full card number or PIN. These are handled by the card networks and our payment processor under payment industry security standards.

When you use our website

Standard technical information, such as browser type, pages visited and approximate location, collected through cookies and analytics tools. You can block cookies in your browser; some parts of the site may not work as well.

Why we collect it

• To answer your enquiry and give you a quote
• To assess your application, verify identity and meet our AML/CTF obligations
• To supply, install, service and reconcile ATMs, and to pay settlement and surcharge income
• To provide support, statements and reporting
• To investigate disputes, faults, fraud and security incidents
• To improve our services and website, and to tell you about services we think suit you (you can opt out at any time)

If you don’t give us the information we ask for, we may not be able to provide our services. For example, we can’t approve an ATM agreement without verifying the identity of its directors.

Who we share it with

We share personal information only as needed to provide our services, including with:

• our payment processor, card schemes and banks, to process transactions and pay settlement
• cash-in-transit providers and field technicians, to deliver cash and service ATMs
• identity verification providers, to verify identity
• technology providers that host our systems, such as our CRM, database, email and automation tools
• our professional advisers, insurers and auditors
• regulators and law enforcement, including AUSTRAC, where the law requires or allows it

We don’t sell personal information.

Overseas disclosure

Personal information is stored in the countries where our databases are hosted. Most of our systems are hosted in Australia; some of our technology providers host their databases in the United States and the European Union. We take reasonable steps to make sure these providers handle personal information consistently with the Australian Privacy Principles.

How we protect and keep it

We protect personal information with access controls, encryption in transit, and by limiting access to staff and providers who need it. The AML/CTF Act requires us to keep identity and transaction records for at least seven years. After that, we destroy or de-identify information we no longer need.

Accessing and correcting your information

You can ask for the personal information we hold about you, and ask us to correct it if it’s wrong. Contact us using the details below. We’ll respond within 30 days. In some cases the law allows or requires us to refuse access, for example where AML/CTF rules prevent disclosure. If so, we’ll tell you why.

Complaints

If you think we’ve mishandled your personal information, contact us first and we’ll investigate and reply within 30 days. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Contact us

Privacy Officer, Dash ATM
Email: privacy@dashatm.com.au
Phone: 1300 125 592
Post: 15/80 Mills Rd, Braeside VIC 3195

Changes to this policy

We may update this policy from time to time. The current version is always on this page.