Privacy Policy

Q2U Marketplace – Privacy Policy

Q2U Pty Ltd (ABN 47 687 450 255)
Last updated: 11 February 2026

Q2U Pty Ltd (“Q2U”, “we”, “us”, “our”) operates the Q2U Marketplace, including our website, marketplace, directory, and related services (the Platform).

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information, and how you can access or correct your information.

We are committed to protecting your privacy and handling personal information transparently and responsibly.

1. Scope

This Privacy Policy applies to:

Customers
Vendors
Directory-listed businesses
Visitors to our Platform

2. Compliance With Privacy Laws

We comply with:

the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs)

3. What Is Personal Information

“Personal Information” means information that identifies or could reasonably identify an individual, including:

name
contact details
date of birth
government-issued identification
images or documents
IP address and device data
transaction details
sensitive information

4. Types of Personal Information We Collect

4.1 Customers

We may collect:

name,

Address

Email address

Phone numbers

Date of birth

Gender

Occupation

account login information

purchase and transaction details

communications and support requests

age confirmations for restricted products

4.2 Vendors

In addition to the above, we may collect:

business name and ABN

business contact details

identity verification documents (KYC), such as government-issued ID, including verification required by Stripe or other payment providers.

licences or permits (including liquor licences where applicable)

bank or payout-related information (via Stripe)
directory listing information

4.3 Payments

Payment information is processed by Stripe Payments Australia Pty Ltd and other approved payment providers.

Q2U does not store credit or debit card details.

Stripe collects and processes payment data in accordance with its own privacy policy.

4.4 Crypto Payments

Where cryptocurrency is used to pay membership fees:

wallet addresses
transaction hashes
payment confirmation data

may be collected.

Blockchain transactions are public and outside Q2U’s control.

5. How We Collect Personal Information

We collect personal information when you:

create an account
register as a Vendor
purchase a membership
make or receive payments
upload documents or licences
contact us
interact with the Platform

We may also receive information from:

payment processors
identity verification providers
compliance or fraud prevention services

6. Why We Collect Personal Information

We collect and use personal information to:

operate and manage the Platform
verify identities and businesses
process payments and memberships
facilitate transactions between Customers and Vendors
display directory listings
comply with legal and regulatory obligations
prevent fraud and misuse
provide customer support
communicate important information
improve and develop our services

This includes personal information submitted in reviews, ratings, feedback, or other user-generated content.

7. Cookies & Tracking Technologies

We use cookies, pixels, and similar technologies to:

operate the Platform
analyse usage and performance
improve user experience
support marketing and analytics

You can manage cookies through your browser settings.

8. Disclosure of Personal Information

We may disclose personal information to:

Vendors (to fulfil orders or services)
Customers (where necessary for transactions)
payment processors (including Stripe)
identity verification and compliance providers
cloud hosting, analytics, and email service providers
professional advisers
regulators or authorities where required by law
in connection with a sale, merger, restructuring, or transfer of Q2U’s business or assets.

We do not sell personal information.

9. Overseas Disclosure

Some third-party service providers may store or process data outside Australia, including in the United States or other jurisdictions.

Where this occurs, we take reasonable steps to ensure appropriate privacy protections are in place.

This may include data processing by Stripe, cloud hosting providers, analytics providers, or email service providers.

10. Marketing Communications

We may send marketing communications if you have consented or where permitted by law.

You can opt out at any time using the unsubscribe link or by contacting us.

11. Data Security

We take reasonable steps to protect personal information, including:

access controls
encryption where appropriate
secure hosting environments
internal policies and training

No system is completely secure, and we cannot guarantee absolute security.

12. Data Retention

We retain personal information only for as long as necessary to:

operate the Platform
meet legal and regulatory obligations
resolve disputes
enforce agreements

Information is securely deleted or de-identified when no longer required.

Certain personal information, including age verification data collected in connection with alcohol purchases, may be retained for up to six (6) years to comply with legal and regulatory obligations.

13 Criminal or Security Investigations

We may give your information to criminal and security investigation and enforcement bodies as required by law. If you are under investigation for any suspected unlawful activity, we may not be at liberty to advise you that your information has been provided for these purposes.

14. Children & Age Restrictions

The Platform is intended for users aged 18 years and over.

We do not knowingly collect personal information from children.
If we become aware that personal information has been collected from a minor, we will take steps to delete it.

15. Access & Correction

You may:

access and update your account information via the Platform
request access to personal information we hold
request correction of inaccurate information

Requests can be made via our Help Centre or by emailing privacy@q2u.world.

16. Complaints

If you have a privacy complaint, contact us first so we can attempt to resolve it.

If you are not satisfied, you may lodge a complaint with:

the Office of the Australian Information Commissioner (OAIC)

If you believe we have breached your privacy rights or applicable laws, you may make a complaint in writing using the contact details below. We will respond within a reasonable period usually within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner

GPO Box 5218

Sydney NSW 2001

Website: https://www.oaic.gov.au/