Privacy Policy

Who we are

Our website is https://www.mytappo.com.au/. The operator of this site and our products is Laser Label (trading as MyTappo), ABN 22 721 418 162, located at Perth WA 6073, Australia.

What this policy covers

This policy explains how we collect, use, store, and delete personal information when you use MyTappo products, including MyTappo (Smart Contact Kit — MyTappo NFC Tag, Digital QR Code, and hosted MyTappo profiles), gift and NFC experiences, and related services on this website.

Information we collect

Depending on which product you use, we may collect:

• Identity and contact details — name, job title, company, phone numbers, email addresses, website and social links, and a short business description.
• Order and fulfilment — shipping address, account email, NFC Tag colour, hardware choices, and order reference (profile token).
• Hosted profile content — information you choose to show on your public MyTappo profile at /card/{your-link}/, including an optional logo image.
• Security — a 6-digit PIN you choose (stored as a secure hash, not as plain text), recovery email for PIN reset, and technical data related to sign-in attempts. When SMS PIN reset is enabled for our service, we may also send a one-time security SMS (reset link only — not marketing) to the mobile number on your profile.
• Payment — when you pay online, card payments are processed entirely by Stripe. We do not store your credit or debit card details on our website at all (not the card number, expiry, or CVC). We may store payment status, time paid, and Stripe reference IDs only.
• Website use — standard server logs (IP address, browser type, pages requested) and cookies required for the site, checkout, or admin to function.

Why we collect it

We use personal information to:

• Process and fulfil MyTappo and related orders (program NFC, ship products, host your page).
• Provide your hosted MyTappo profile and “add to contacts” download while hosting is active.
• Let you update your own details via our self-service edit page (mobile + PIN).
• Send service emails such as hosting renewal reminders (hosting does not auto-renew).
• Respond to support requests and comply with law where required.

MyTappo — how your page works

Your MyTappo profile link is designed to be shared (tap your MyTappo NFC Tag or scan your Digital QR Code). Anyone with the link may view the contact details you publish while your profile is active. Shipping address and account emails are used for fulfilment and account security; they are not necessarily shown on the public page.

After you order, your page may show as pending until we program your product. When hosting ends, your public page goes offline. After a lapse period, personal data may be removed as described below.

How long we keep information

• While hosting is active — we keep your profile and files needed to run your page (for example logo, QR cache, contact file).
• Hosting period — MyTappo includes 12 months of hosting unless otherwise stated at purchase. Renewal is optional and is not automatic.
• After hosting lapses — your page becomes unavailable. After a further 7 day grace period, we may delete personal information from inactive profiles (names, contact fields, shipping, emails, PIN data, payment references, and uploaded logo files).
• Records we must keep — some billing or tax records may be retained longer where Australian law requires.

Optional AI-assisted setup

If you use AI-assisted import (for example website or business-card scan), text or images you submit may be sent to OpenAI to suggest form fields. Business card photos used for OCR are processed for extraction and are not kept as uploaded files in that flow. You can complete the form manually without AI.

Who we share information with

We do not sell your personal information. We share data only with service providers who help us run the service, for example:

• Stripe — payment processing (subject to Stripe’s privacy policy).
• Hosting and email providers — to operate this website and send service emails.
• SMS providers — when SMS PIN reset is enabled, we use a third-party SMS gateway (for example ClickSend) to deliver one-time security messages to the mobile number on your profile.
• OpenAI — only when you choose AI-assisted import.

We may also disclose information if required by law or to protect our rights, customers, or the public.

Cookies and similar technologies

We use cookies and similar technologies where needed for:

• WordPress and site security (including admin login if you have an account).
• Checkout and payment flows.
• Remembering choices during an order or edit session.

We do not use the default WordPress “comment” cookies unless blog comments are enabled on a page you use.

Your rights and choices

Under Australian privacy law you may request access to, or correction of, personal information we hold about you. You can update many MyTappo details yourself at https://www.mytappo.com.au/card/edit/ using your mobile number and PIN.

To request access, correction, or deletion, contact us at hello@mytappo.com.au. We may need to verify your identity. Deletion may be limited where we must keep records for legal, tax, or dispute reasons.

Security

We take reasonable steps to protect personal information we hold. In practice that includes:

• Encrypted connections — our customer sites use HTTPS so data in transit between your browser and our servers is encrypted.
• PIN protection — your 6-digit edit PIN is stored as a secure hash (not as plain digits), with lockouts after repeated failed attempts.
• Card payments — when you pay online, card details are entered on Stripe’s secure checkout. We do not store your credit or debit card details on our website at all.
• Access control — staff access to order and profile data is limited to authorised administrators, and we use firewall and login protections on our WordPress systems.
• Data lifecycle — when hosting lapses, public pages go offline and, after the grace period above, inactive personal data may be removed.

Your MyTappo profile link is meant to be shared (like a business card). Anyone with that link can see the contact details you publish while the profile is active. Shipping and account emails are for fulfilment and account security and are not necessarily shown on the public page.

No online system is completely secure. Please choose a PIN you do not reuse elsewhere, keep your recovery email up to date, and contact us promptly if you believe your account has been accessed without permission.

Children

Our services and MyTappo Tags are aimed at adults and business use. They are not intended for children under 18. We do not knowingly collect personal information from children under 18 without parental consent. Do not provide a Tag to a child under 18 for unsupervised use.

Changes to this policy

We may update this policy from time to time. The “Effective” date at the top will change when we do. Continued use of our services after an update means you accept the revised policy.

Contact

Privacy enquiries: hello@mytappo.com.au. See also our Terms of Service.