Privacy policy

Last updated 8 November 2026

Perked (perked.com.au) is affiliate software for subscription businesses. It is run by John Simeone, a sole trader in Western Australia (ABN 82 809 424 041), referred to here as "Perked", "we" or "us".

This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It covers everyone whose information passes through Perked: businesses that run programs ("owners"), the affiliates (people and businesses) that promote them, the owners' customers, and visitors to sites that use Perked's tracking script.

1. What we collect

What we hold depends on how you use Perked.

Account details. Your name, email address and password (stored only as a hash by our sign-in provider), and when you signed in.
Affiliate details. The programs you join, your link codes, your payout email, and your commission and payout history. If a program collects Australian tax details, your ABN or a signed hobby statement (full legal name, address and typed signature).
Agreements. When you accept a program's terms or sign a tax statement, we keep the wording, the time, your IP address and your browser, as evidence of what was agreed.
Business details (for businesses offering perks). Name, address, opening hours, logo, perks, a PIN (stored only as a hash) and a log of redemptions.
Owners' Stripe data. When an owner connects Stripe through the Perked app, we read (never change) their customers, invoices, refunds, disputes and subscriptions. We use this only to work out commission and perks.
Referred customers. Email address, first name, the owner's Stripe customer and account ids, which affiliate referred them, whether they are paying, and any vouchers and redemptions.
Clicks on affiliate links. A random visitor id, the page landed on, the referring site, campaign tags, approximate location (country, region and city) and network name supplied by Cloudflare, browser and device details, and browser language. We do not store IP addresses for clicks.
Sign-up emails. If an owner's site uses our script, the email address someone types into that site's sign-up form, so the right affiliate can be credited.
Messages you send us, and records of the emails we send you.

2. Cookies

We use a small number of cookies and nothing for advertising.

Sign-in cookies on perked.com.au and program domains, to keep you signed in.
ps_ref, set on an owner's site by Perked's script, remembers which affiliate link you arrived through, for that program's referral window (usually 60 days).
ps_vid, a random visitor id kept for up to a year, so repeat clicks are counted once.

You can block or clear cookies in your browser. Referrals may then not be credited.

3. How we use it

To run Perked: accounts, programs, links, tracking, commission, payout reports, vouchers and redemptions.
To send emails you need: sign-in links, affiliate alerts, payout notices and vouchers. Affiliates can turn alerts off. We do not send marketing emails.
To keep Perked secure and fair, for example spotting self-referrals and bot clicks.
To meet legal obligations, such as tax record keeping.

4. Who sees it

Program owners see their affiliates' details, payout and tax details, link clicks, and their own referred customers.
Affiliates see their own clicks and earnings. Customers they referred are shown as numbers ("Customer 1") or by first name only, as the owner chooses.
Businesses offering a perk see a customer's first name and voucher when it is scanned.
Directory pages show what owners and businesses choose to make public.

5. Service providers

We use these providers to run Perked. Each handles data only to provide its service to us.

Supabase: database and sign-in, hosted in Sydney.
Cloudflare: hosting and network, worldwide.
Postmark (ActiveCampaign): sending email, United States.
Stripe: owners' payment data, read through the Perked app.
Service Area WIZARD: postcode and suburb lookups. Only postcodes and search text are sent.
OpenFreeMap: map images on the business directory, loaded by your browser.

Some of these providers store or process data outside Australia, including in the United States. We choose providers with strong security and privacy commitments.

6. Owners and their customers

When an owner uses Perked, we handle their customers' information on the owner's behalf, to run the owner's affiliate program. Owners are responsible for telling their customers about this in their own privacy policy, and for having a lawful basis to share it.

7. Keeping it safe

Data is encrypted in transit and stored with access controls. Passwords and business PINs are stored only as hashes. Access to owners' Stripe accounts is read-only. No system is perfectly secure, and we will tell affected people and the OAIC about an eligible data breach as the law requires.

8. How long we keep it

We keep information while your account or the program it belongs to is active. Payout and tax records are kept for 5 years, as Australian tax law requires. When information is no longer needed, we delete or de-identify it.

9. Your rights

You can ask to see or correct the information we hold about you, or ask us to delete it, by emailing info@perked.com.au. We will reply within 30 days. Some records, such as payout records, may have to be kept for legal reasons.

If you are unhappy with how we have handled your information, email us first. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

10. Changes

If we change this policy in a way that matters, we will update the date above and tell account holders by email or in Perked.

11. Contact

Email info@perked.com.au.