BUSINESS PORTAL
BUSINESS PORTAL

Privacy Policy

Last updated: October 12, 2026

Privacy Policy

Last updated: 12 October 2026

1. Who we are

LoKo is operated by LOKOAPP PTY LTD (“LoKo”, “we”, “us” or “our”), based on the Gold Coast, Queensland, Australia. This policy explains how we handle personal information through the LoKo app, website, business portal and related support and marketing services (“Platform”).

We seek to handle personal information responsibly and comply with privacy, consumer and communications laws that apply to our activities. This policy does not remove any rights you have under those laws. Reading or accepting this policy is not, by itself, consent to every possible use of your information. We obtain separate consent where required.

2. Information we collect

Depending on the features you use, we collect:

  • Account and contact information: your name, email address, mobile number, registration and verification information, account identifiers, login records and any profile photo or other profile details you provide.
  • Discovery information: selected interests, saved places, businesses and events in your LoKo List, and interactions with listings and app features.
  • Location information: location you enter or select and, with your device permission, approximate or precise device location to support nearby discovery and maps.
  • Business and event information: business names, your role and authority, addresses, contact details, websites, opening hours, categories, descriptions, event details, images and other listing material. Information about sole traders or identifiable business contacts may be personal information.
  • Payment and membership information: the selected package, subscription status, transaction identifiers, payment status, invoices and related billing information. Payment providers process payment card details; LoKo does not store full card numbers or card security codes.
  • Device and technical information: IP address, device and browser details, operating system and app version, notification tokens, usage records, analytics, performance logs and crash reports.
  • Support and correspondence: enquiries, complaints, feedback, deletion requests and information needed to resolve them.

We do not ask you to put sensitive information such as health information in public listings or support messages. If sensitive information is genuinely necessary for a particular request, we will explain why and obtain consent where required.

3. How we collect information

We collect information directly when you register, complete forms, upload content, manage a listing, save items, make a purchase or contact us. Some information is collected automatically when the Platform is used. We also receive relevant information from payment, verification, mapping and technical service providers, and from an authorised person acting for you.

If someone supplies information about another person, they must have a lawful basis to do so and inform that person where appropriate. We may collect public business and event contact information to maintain discovery listings; public availability does not remove any applicable privacy obligations.

You can generally browse our public website without creating an account. You may contact us anonymously or using a pseudonym where practical and lawful, although we may need to identify you to manage an account, payment or deletion request. If essential information is not provided, we may be unable to offer the relevant feature.

4. Why we use information

We use information to create and verify accounts; provide nearby discovery and personalised feeds; maintain your LoKo List; publish and manage business and event listings; process payments and subscriptions; deliver permitted notifications; answer enquiries; maintain security; investigate misuse; diagnose technical issues; improve the Platform; and meet applicable legal and recordkeeping obligations.

Personalisation uses information such as interests, selected location and activity to help select or order discovery content. Paid placements may also affect where listings appear. Recommendations are suggestions, not guarantees about suitability, safety or availability.

Where practical, reports and service improvements use aggregated or de-identified information rather than identifying individual users. We do not sell personal information.

5. What is public and what is shared with advertisers

Business and event listings are public. The material you choose to publish, including business contact details, addresses, descriptions and images, can be seen by other users and may appear on the website, app, search engines or authorised promotional channels.

Personal registration contact details are not intended to become public merely because you open an account. Do not place private contact details or personal information in a public listing unless you intend them to be visible. Published content may be copied by third parties outside our control.

Businesses may receive engagement measures for their listings, such as views and saves. These measures do not, by themselves, authorise disclosure of a user’s name, contact details or precise location to an advertiser. If you follow a booking link or contact an organiser directly, that organisation handles the information you provide under its own privacy arrangements.

6. Who receives information

We disclose relevant information only where reasonably necessary for the purposes described in this policy, with your consent, or as permitted or required by law. Recipients may include:

  • hosting, database, backup and security providers, including Amazon Web Services;
  • payment providers, including Stripe;
  • Google Maps and Firebase services used for mapping, messaging, analytics or technical operation;
  • mobile verification, email delivery, push notification, analytics and crash reporting providers;
  • authorised developers and technical support personnel maintaining the Platform;
  • professional advisers, insurers and authorities where necessary for advice, claims, investigations or legal obligations.

Providers may process information on our behalf or, for some services such as payments or maps, under their own terms. We seek to limit access to what is needed and use appropriate contractual and security controls. If the business is sold or restructured, information may be disclosed to advisers and a prospective or actual successor under appropriate confidentiality and lawful handling arrangements.

7. Australian hosting and overseas handling

LoKo uses cloud hosting and third-party services to operate its website and app. These include services for payments, mapping, email, account verification, notifications and technical support.

Although application data may be hosted in Australia, some personal information may be accessed, stored or processed outside Australia by our service providers or authorised technical support personnel. The location depends on the provider, service configuration and support arrangements.

We take reasonable steps to limit access to information needed for these services and apply appropriate security and confidentiality safeguards. Where Australian privacy law applies, we take the steps required for overseas disclosure. Your use of LoKo does not waive those protections.

For information about overseas recipients and their locations, contact our Privacy Officer at loko@lokoapp.com.au.

8. Location and device permissions

Device permissions control access to features such as location, photos, camera and notifications. We request permissions relevant to the features you choose to use. You can change or withdraw permissions in your device settings. This may affect nearby discovery, image uploads or notifications.

We handle location information for discovery and related technical functions described in this policy. Any background location feature must be explained and permission requested before it is used. Denying precise location permission may reduce the accuracy of nearby results.

9. Cookies and similar technologies

The website and app use technologies such as cookies, local storage and service identifiers to support functions including sessions, preferences, security and analytics. These technologies may be linked to personal information. We do not treat every cookie or identifier as anonymous.

You can manage browser cookies and relevant device permissions. Blocking essential technologies may prevent features from working. Where optional tracking requires consent, it will be requested separately. This policy does not authorise tracking technologies that have not been explained to you or enabled lawfully.

10. Marketing and notifications

We send marketing emails or SMS only with consent or another lawful basis permitted by applicable communications laws. Marketing messages identify LoKo and provide a simple, free way to unsubscribe. We action email and SMS unsubscribe requests within five working days. You do not need to create or log into an account to unsubscribe from those messages.

You can manage push notifications through your device settings and any available app controls. Essential account, payment, security and legal communications may still be sent when necessary, but we will not use service messages to bypass your marketing preferences.

11. Security

We use reasonable safeguards appropriate to the information and risks involved, including access restrictions and technical protections. No online service can guarantee complete security. If you suspect unauthorised access, contact us promptly. We assess and respond to suspected data breaches and notify affected people and regulators where required by law.

12. Retention and account deletion

We retain personal information while it is reasonably necessary to provide the services you request or meet an identifiable legal, security or dispute-related need. Account deletion permanently removes associated account information from active systems, except for limited records that must be retained for those purposes. Deleting a business account also cancels future LoKo membership renewals.

Backups may retain information until they are securely overwritten or deleted through the backup cycle. They are not used to keep a deleted profile active or continue marketing. Where practicable, deletion instructions are applied if backup data is restored. Payment providers and other independent organisations may retain their own transaction or compliance records.

We do not claim that every backup or third-party record is erased immediately. Details about requesting deletion, what it covers and relevant exceptions are available in our Data Deletion & Account Closure page. When information is no longer needed, we take reasonable steps to delete it or de-identify it.

13. Access, correction and choices

You can update available profile and listing details through the Platform. You may also ask us to provide access to, correct or delete personal information we hold about you by contacting our Privacy Officer. We may take proportionate steps to verify your identity and authority before acting.

We respond within a reasonable time. If applicable law permits us to refuse a request, we explain the reason and any available complaint process, unless prohibited from doing so. We do not charge you to make a request. If a charge for providing access is lawful and reasonably necessary, we explain it before proceeding.

14. Children and young people

LoKo accounts are for people aged 13 and over. Users aged 13–17 must have permission from a parent or legal guardian. People under 18 cannot purchase memberships or paid listings. We do not knowingly invite children under 13 to register.

If you believe a child has registered contrary to these requirements or that a child’s information has been supplied without appropriate authority, contact us so we can investigate and take appropriate action. We may need reasonable verification before giving a parent or guardian access to another person’s information.

15. Privacy complaints

Contact us with the issue, relevant dates and your preferred contact details. We aim to acknowledge complaints promptly and provide a substantive response within 30 days. If more time is required, we will explain why and provide an update.

If you are dissatisfied, you may seek assistance from the Office of the Australian Information Commissioner at www.oaic.gov.au, where the complaint is within its jurisdiction, or another relevant regulator. We will not restrict any complaint rights provided by law.

16. Changes and contact details

We update this policy when our practices or legal obligations change and publish the revised date. Material changes will be communicated where appropriate, and additional consent obtained where required. A policy change does not retrospectively authorise an incompatible use of information already collected.

Privacy Officer — LOKOAPP PTY LTD
Gold Coast, Queensland, Australia
Email: loko@lokoapp.com.au
Website: https://lokoapp.com.au/