Privacy Policy

1. Who we are

Jack & Jill's Daily Store with Caltex Wilston
Website name: Wilston Servo (Wilston Servo Rewards)
ABN: Pending — contact us for current details
282 Newmarket Rd, Wilston QLD 4051, Australia
Email: admin@wilstonhub.com.au

If you have questions about this policy or wish to exercise your privacy rights, contact us using the details above.

2. Information we collect

We may collect the following personal information when you use our services:

• Identity & contact: name, mobile phone number, email address (if provided)
• Account & security: password (stored as a secure hash), Firebase authentication identifiers
• Rewards data: member ID, points balance, transaction/reward history, birthday (if provided)
• Communications preferences: optional promotional SMS consent
• Technical data: browser type and service usage logs

We collect information directly from you when you register, log in, or interact with our staff at the servo.

3. Why we collect and use your information

We use personal information to:

• create and manage your rewards membership account
• verify your identity (including SMS verification via Firebase)
• award, track, and redeem loyalty points
• send service-related messages you have requested (such as verification codes and account notices)
• send promotional offers where you have given consent (see Section 6)
• improve our website, security, and customer experience
• comply with legal obligations

We only collect information that is reasonably necessary for these purposes.

4. Disclosure to third parties

We may share personal information with trusted service providers who help us operate the program, including:

• Firebase / Google — phone authentication
• Neon (PostgreSQL) — secure database hosting
• SMS / telecommunications providers — delivery of verification codes

Some providers may store or process data outside Australia (including in the United States). Where we disclose information overseas, we take reasonable steps to ensure recipients handle it in a manner consistent with the APPs.

We do not sell your personal information.

5. Storage and security

We store data in encrypted databases and protect accounts using industry-standard security measures, including hashed passwords and secure API access. No method of transmission over the internet is completely secure; we encourage you to use a strong, unique password.

6. Marketing and communications (Spam Act 2003)

Service messages (such as verification codes and account notices) are sent because they are necessary to provide the service you requested.

Promotional SMS messages are only sent where you have given express consent. You may opt out at any time by contacting us or following opt-out instructions in a message.

7. Your rights under Australian privacy law

You have the right to:

• request access to the personal information we hold about you
• request correction of inaccurate or out-of-date information
• withdraw consent for optional marketing communications
• request deletion of your account, subject to legal and operational requirements

To make a request, email admin@wilstonhub.com.au. We will respond within a reasonable period, usually within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

8. Notifiable Data Breaches

If a data breach is likely to result in serious harm, we will comply with the Notifiable Data Breaches scheme under the Privacy Act 1988 and notify affected individuals and the OAIC as required.

9. Cookies and local storage

Our website uses browser local storage to keep you logged in and remember your privacy preferences.

10. Data retention

We keep personal information only as long as needed for the purposes above, or as required by Australian law. Account data is retained while your membership is active. After account deletion, we remove or de-identify personal data within a reasonable period, except where law requires longer retention (e.g. business records).

11. Complaints

To make a privacy complaint, email admin@wilstonhub.com.au with details of your concern. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied, you may contact the OAIC at www.oaic.gov.au.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with an updated date. Material changes will be communicated where appropriate.