Your privacy, handled honestly.

1. Who we are

RedSpeed Technologies Pty Ltd (ABN 59 695 633 302) ("RedSpeed", "we", "us") is an ACMA compliant Australian telco operating mobile and NBN broadband services. We also build GapGo, the in-room ordering service used by hotels and their restaurants.

This policy covers everything RedSpeed Technologies does — not only the telco. We are bound by the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs), and this explains how we collect, use, disclose, and safeguard your personal information.

2. What information we collect

We collect personal information that is reasonably necessary to provide our services. This includes:

• ·Identity information: full name, date of birth, government ID (for SIM registration as required by the Telecommunications (Interception and Access) Act 1979).
• ·Contact details: email address, phone number, residential and billing address.
• ·Account and billing data: plan selections, payment method (card type and last 4 digits only; full card data is handled by our payment processor and never stored by us), invoices, and usage history.
• ·Network and device data: IP address, device identifiers, call records, SMS metadata, and data volume, as required for network operation and regulatory compliance.
• ·Communications: records of support interactions (chat, email) to resolve issues and improve service. When you use the contact form we also briefly record your IP address to rate-limit abuse; it deletes itself automatically.
• ·Mokles chat: if you chat with Mokles, our homepage robot, we store what you type and his replies, and your IP address, so we can review conversations, prevent abuse, and improve the product. If you share contact details while chatting because you would like to be followed up about our services, we record those too.
• ·GapGo orders: if you order through GapGo at a hotel, we record your room number, the items you ordered, any notes you add, and the name, phone and email you give us — or the email your payment wallet supplies, which for many guests is the only way we can send a receipt. Card numbers go to Stripe and are never stored by us; we keep only the payment reference, amount and status.
• ·Website usage: standard server access logs — the page requested, the time, your IP address, browser type, and the page you came from. They are stored in Australia and deleted automatically after 90 days. We do not run an analytics product on this website: no Google Analytics, no advertising pixels, no tracking cookies.

3. How we use your information

We use your personal information only for the purposes for which it was collected or directly related purposes:

• ·Providing, activating, and managing your mobile and NBN services.
• ·Processing payments and sending invoices.
• ·Identity verification required under Australian telecommunications law.
• ·Customer support and resolving service issues.
• ·Sending service-critical notices (outages, plan changes, regulatory updates).
• ·Marketing communications about RedSpeed products, only with your consent and with an easy unsubscribe in every message.
• ·Improving our network, products, and customer experience using aggregated, de-identified data.
• ·Complying with legal obligations and cooperating with lawful requests from regulators and law enforcement.

4. Who we share your information with

We do not sell your personal information. We share it only where necessary to deliver our services or meet legal obligations:

• ·Network partners: our wholesale mobile network and NBN infrastructure providers, under strict confidentiality agreements.
• ·Payment processors: Stripe Inc., PCI-DSS Level 1 certified. We pass your payment details directly to Stripe and never store them ourselves.
• ·Cloud infrastructure: Amazon Web Services (AWS), Sydney region (ap-southeast-2). Our servers and databases are in Australia. Two things necessarily leave it, and we would rather say so than imply otherwise: our content delivery network serves pages from edge locations around the world, which is what makes the site fast wherever you are, and the reCAPTCHA check below.
• ·AI processing (Mokles chat): if you chat with Mokles, your messages are processed by an AI model (Amazon Bedrock) to generate a reply. This runs within the same AWS Sydney region infrastructure named above, not a separate provider or country — we are naming it on its own line because processing your message through an AI model is a different thing to simply storing it.
• ·Google (reCAPTCHA): our contact form is protected by reCAPTCHA. It loads only once you start filling the form in, and verifying it sends your IP address to Google in the United States. It is used to tell people apart from bots, and for nothing else.
• ·Email delivery: messages you send through the contact form pass through our email provider's servers on the way to our support inbox.
• ·Identity verification providers: for regulatory SIM registration compliance.
• ·Professional advisers: lawyers, accountants, and auditors, bound by confidentiality.
• ·Regulators and law enforcement: the ACMA, ACCC, TIO, or law enforcement when required by law.

5. How we store and protect your data

All personal data is stored on AWS infrastructure in the Sydney region. We apply encryption in transit (TLS 1.2+) and at rest (AES-256). Access is restricted by role-based controls and multi-factor authentication.

We retain your personal information for as long as your account is active and for 7 years thereafter as required by Australian tax and telecommunications law. Usage records (call/data logs) are retained for 2 years under the Telecommunications (Interception and Access) Act.

Website access logs are the exception to those periods: they are deleted automatically 90 days after they are written, and that expiry is enforced by the storage itself rather than by anyone remembering to run a cleanup.

Mokles chat transcripts follow the same 90-day pattern, measured from your most recent message rather than your first, so an occasional returning visitor is not deleted between one chat and the next. If you asked to be followed up about our services during a conversation, that specific conversation is kept until the follow-up is complete rather than expiring on a timer.

6. Your rights

Under the Australian Privacy Principles you have the right to:

• ·Access the personal information we hold about you.
• ·Request correction of inaccurate or out-of-date information.
• ·Opt out of direct marketing communications at any time.
• ·Request deletion of your data (subject to our legal retention obligations).
• ·Make a complaint if you believe we have mishandled your information.

To exercise any of these rights, contact us at privacy@redspeed.com.au. We will respond within 30 days.

7. Cookies and tracking

We use as few cookies as we can, and we run no analytics product — so there is nothing here to opt out of. This is the complete list:

• ·A preference cookie (rs_theme) that remembers whether you chose the light or the dark theme. It lasts a year and contains nothing but the word "light" or "dark".
• ·Google reCAPTCHA may set a security cookie — but only on our contact page, and only after you start filling the form in. It exists to tell people apart from bots.

That is genuinely all of them. Signing in and your checkout progress are kept in your own browser's storage, on your device — not in cookies, and not on our servers until you place an order. We use no advertising cookies, no tracking pixels, and no third-party analytics.

8. Complaints

If you are not satisfied with how we handle your personal information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

OAIC — oaic.gov.au · 1300 363 992 · GPO Box 5218, Sydney NSW 2001

9. Contact us

For any privacy-related questions, access requests, or corrections:

Email: privacy@redspeed.com.au

RedSpeed Technologies Pty Ltd, Australia