Cruze Coffee · Cruze Rewards

Privacy policy

Effective 28 September 2026

This policy explains how Northern Coffee Co Pty Ltd (ABN 43 667 392 207), trading as Cruze Coffee (we, us or Cruze), handles personal information connected with Cruze Rewards. It should be read with the Cruze Rewards terms and conditions.

1. Who we are

Cruze Rewards is operated by Northern Coffee Co Pty Ltd (ABN 43 667 392 207), trading as Cruze Coffee. Privacy enquiries, requests and complaints can be sent to daniel@cruzecoffee.com.au.

2. Information we collect

We may collect your name, email address, phone number, account identifier, encrypted account credentials, member barcode, preferred store and other account details you choose to provide. We also collect loyalty activity such as eligible purchases, store or online order references, items purchased, spend, points, coffee stamps, rewards, redemptions, refunds and cancellations.

Technical information may include the device or browser used to access the portal, dates and times of access, security events and information needed to diagnose errors or prevent misuse.

3. How we collect information

We collect information directly from you when you register, sign in or contact us. We also receive relevant transaction information from participating Cruze stores, point-of-sale systems, kiosks and connected online ordering services when your membership is identified.

4. Why we use it

We use personal information to create and secure your account, identify your membership at checkout, calculate points and coffee stamps, issue and validate rewards, reverse loyalty benefits after refunds or cancellations, provide support, investigate missing points, prevent fraud and improve the program. We may also use information where required or authorised by law.

5. When information is shared

We may share relevant information with service providers that help us operate Cruze Rewards, including Supabase for authentication and loyalty data, Vercel for website hosting, participating point-of-sale or kiosk providers and connected online ordering providers. They receive only the information reasonably required to provide their service. We may also disclose information where required by law or to protect customers, Cruze Coffee or the public.

Some technology providers may process or store information outside Australia. The countries involved can change with provider infrastructure and support arrangements. Contact us if you would like current information about the providers and overseas locations used for Cruze Rewards. We take reasonable steps appropriate to the circumstances when engaging service providers that handle personal information.

6. Security and retention

We use access controls, encrypted connections, restricted administrative access and other reasonable safeguards. No online system is completely risk-free. Please use a strong, unique password and contact us promptly if you believe your account has been accessed without permission.

We retain information for as long as reasonably needed to operate the program, resolve disputes, prevent misuse and meet legal and accounting obligations. Information that is no longer required is deleted or de-identified where reasonably practicable.

7. Access, correction and account closure

You may ask to access or correct personal information we hold about you, or ask us to close your Cruze Rewards account and delete or de-identify information that we are not required to retain. We may need to verify your identity before acting. Legal, accounting, fraud-prevention or dispute-resolution requirements may require us to retain some records after account closure. If we cannot provide access, make a requested correction or delete particular information, we will explain why where required.

8. Direct marketing

We may send program information that is necessary to operate your account, such as security, reward or points-expiry notices. Where permitted, we may separately send offers or marketing communications. You can opt out of marketing using the unsubscribe method provided or by contacting us. Opting out of marketing does not stop essential service messages.

9. Children

Cruze Rewards is not designed to knowingly collect personal information from children who cannot provide valid consent. A parent or guardian who believes a child has created an account without appropriate permission should contact us so we can review and, where appropriate, close the account.

10. Questions and complaints

For a privacy question, correction request or complaint, email daniel@cruzecoffee.com.au. Please describe the issue and provide enough information for us to identify your account. We will acknowledge and investigate privacy complaints and respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner through its privacy complaints process.

11. Changes to this policy

We may update this policy when the program, our providers or legal requirements change. The current version and effective date will remain available from the Cruze Rewards portal.

Important: This operational privacy policy is provided for Cruze Rewards and should be reviewed by your Australian privacy or legal adviser before broad public launch.