1Stop Platform: customer app, business app and website
TWCW Pty Ltd (trading as 1Stop) | ACN 665 682 324 | ABN 49 665 682 324
Website: www.theonenetwork.org
Privacy contact: team@1stopapp.com
Your privacy matters to us. This Privacy Policy explains how TWCW Pty Ltd (ACN 665 682 324), trading as 1Stop (TWCW, we, us), handles your personal information when you use the 1Stop customer app, the 1Stop business app or our website at www.theonenetwork.org.
It sets out what we collect, why we collect it, who we share it with, where it is stored, how long we keep it, how we protect it, and the choices and rights you have. It is one of the documents that form part of our Terms of Service, and it works together with our Cookie and Tracking Policy (Schedule 3 of the Terms).
If anything is unclear, contact us at team@1stopapp.com. If you are a Business, please also read the sections that explain what Consumers’ information you can see and how you must handle it, which are in the Terms.
This summary is to help you navigate. The clauses that follow set out the full policy.
Schedules
1.1 Who we are. This Privacy Policy explains how TWCW Pty Ltd (ACN 665 682 324, ABN 49 665 682 324), trading as 1Stop (TWCW, we, us), collects, uses, stores, shares and protects personal information. We operate the 1Stop mobile apps for Consumers and Businesses, the administration tools we use to run them, and the website at www.theonenetwork.org (together, the Platform).
1.2 Who it applies to. It applies to Consumers, Businesses and their representatives, people who contact us, and visitors to our website. You means any of them. Capitalised terms that are not defined here have the meaning given in our Terms of Service.
1.3 Privacy law. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and with any other privacy law that applies to us.
1.4 Part of the Terms. This Policy is one of the documents that form part of our Terms of Service. If you do not agree with it, please do not use the Platform.
1.5 What personal information means. Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. Information about a Business is personal information when it identifies an individual, such as an owner, director or contact person.
2.1 Consumers. When you use the Platform as a Consumer we collect:
2.2 Businesses and their representatives. When you register or run a Business on the Platform we collect:
2.3 Payments. We never receive or store your card number or bank account details. Card details are entered into Stripe's secure payment components, and Businesses give their bank and identity details directly to Stripe when they set up payouts. We keep only a payment record: the Stripe payment reference, amount, currency, status and the Platform Fee or commission.
2.4 Technical and usage information. We collect your device type, operating system, app version, IP address, login and session records, error and crash reports, and in-app usage metrics such as screens viewed and features used. The usage metrics are collected through Google Firebase Analytics.
2.5 Communications. If you contact us we keep your messages, our replies and the information needed to resolve your request, including support requests, reports and complaints.
2.6 Sensitive information. We do not ask for sensitive information (such as health, religion or political opinions) and ask you not to put it in listings, reviews or messages. Business verification documents may show identity document numbers and photographs. We store them privately, show them only to authorised administrators, and delete them as Schedule 2 describes.
2.7 If you do not give it to us. You can choose not to give us some information, but we may then be unable to give you an account, process an Order or verify a Business.
3.1 From you. We collect most information directly from you when you register, set up a shop, place an Order, write a review, change your settings or contact us.
3.2 Automatically. We collect technical and usage information automatically while you use the app, as clause 15 and Schedule 3 of the Terms (Cookie and Tracking Policy) explain.
3.3 From others. We receive payment outcomes from Stripe, and reports, reviews and order messages from other Users. When we verify a Business we may check public registers, such as the Australian Business Register.
4.1 Our purposes. We use personal information only for the purposes we collected it for, or related purposes you would reasonably expect, including to:
4.2 Nothing else. We do not use personal information for any other purpose unless you consent or the law requires or allows it.
5.1 How we use your preferences. We use your In-App Preferences (your interests, saved items, followed Businesses, search terms and activity inside the app) to personalise your feed, recommendations and search results, and to match advertising inside the Platform.
5.2 Inside the Platform only. We use only information from inside the Platform for this. We do not combine it with information from other apps, websites or services, and we do not use third-party advertising networks, tracking pixels or advertising identifiers.
5.3 What Businesses see. Businesses never receive your personal information or individual preferences through advertising. They see only aggregated, de-identified reports.
5.4 Your control. You can reset your preferences or switch off personalised matching in Settings. We do not show personalised advertising to anyone under 18.
6.1 What we automate. We use automated tools to rank and recommend content in your feed from your In-App Preferences, to flag suspicious logins, fraud and Scams, to check uploads against our Terms, and to limit abusive request rates.
6.2 Human review. If an automated decision significantly affects you, such as suspending an account or removing Content, you can ask a person at TWCW to review it by emailing team@1stopapp.com. We do not currently use artificial-intelligence tools to make decisions about individuals. If that changes we will update this Policy first.
7.1 Businesses. When you place an Order, the Business fulfilling it sees your name, delivery details and the items ordered, for that Order only. Businesses do not see your other personal information.
7.2 Service providers. We use service providers to run the Platform. Each receives only the information it needs and acts for us. They include Amazon Web Services (hosting, database, file storage and monitoring), Google Firebase (app data services and analytics), Stripe (payments and payouts), Apple and Google (push notifications, app distribution and Business Subscriptions), an email service provider and DotSquares (app development and support). Schedule 3 lists them.
7.3 Support access. DotSquares engineers can access production data only when needed for support, maintenance or incident response. Access is limited to named engineers and reviewed periodically.
7.4 Regulators and legal requirements. We disclose personal information to Regulators, courts and law-enforcement bodies where the law requires or allows it, including to report suspected Scams or crime, and to Stripe and financial institutions for anti-money-laundering and fraud checks.
7.5 Advisers and insurers. We may share personal information with our lawyers, accountants, auditors and insurers, who must keep it confidential.
7.6 Business changes. If we sell or restructure the business, personal information may transfer to the new owner, who must handle it in line with this Policy.
7.7 Public information. Reviews, shop pages, product pages and advertisement videos are public. Please do not post anyone else's personal information.
7.8 We do not sell personal information. We do not sell personal information and we do not give it to data brokers or advertisers.
8.1 Where we host data. Production data is hosted in Amazon Web Services data centres in Sydney, Australia.
8.2 Providers outside Australia. Some providers may handle personal information outside Australia. These include Stripe, Apple and Google (including Firebase and push notifications), in countries such as the United States, DotSquares support staff and our email provider. Schedule 3 lists the locations we know of.
8.3 Our safeguards. Before we disclose personal information overseas we take reasonable steps to make sure the recipient handles it in line with the APPs, including through contract terms, unless the law allows otherwise.
9.1 Our measures. We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, change or disclosure. Our measures include:
9.2 Backups. We keep automated database backups on a rolling cycle so we can recover from failures.
9.3 Your part. No system is completely secure. Please keep your password and email account safe and tell us promptly if you suspect unauthorised access.
10.1 Our response. If we suspect a data breach we act quickly to contain and assess it. If it is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, as the Notifiable Data Breaches scheme requires. Our providers must tell us promptly of any breach that affects our data [confirm: within 24 to 48 hours].
11.1 Retention. We keep personal information only for as long as we need it for the purposes in clause 4 or the law requires, and then delete or de-identify it. Schedule 2 sets out the periods.
11.2 Deleting your account. You can delete your account in the app. We hide it immediately, permanently delete your profile, addresses, saved items, interests and device tokens within [30] days, and keep order and payment records for the period the law requires for financial records, in de-identified form where possible. Records we must keep by law, such as tax records, may still identify you.
11.3 Backups. Deleted data can remain in backups until they are overwritten under the backup cycle in clause 9.2.
12.1 Access and correction. You can see and edit your profile in the app. You can also ask for a copy of your personal information, or ask us to correct it, by emailing team@1stopapp.com. We will respond within 30 days.
12.2 Checking who you are. We may need to confirm your identity before we act on a request. If we cannot give you access or make a correction, we will tell you why in writing, as the law requires.
12.3 Deletion. You can delete your account in the app (clause 11.2).
12.4 Settings. You can switch off personalised matching, notifications and marketing in Settings, and withdraw location or notification permission in your device settings.
13.1 Minimum age. The Platform is for people aged 16 or over. We do not knowingly collect personal information from anyone younger and will delete it if we learn we have.
13.2 Ages 16 and 17. If you are under 18 we collect only what we need, do not use your information for personalised advertising, and will follow any children's privacy code that applies to us.
13.3 Parents and guardians. A parent or guardian can contact us to ask about or delete a young person's information.
14.1 Service messages. Order updates, verification codes, security alerts and notices of changes to our terms are service messages, not marketing.
14.2 Marketing messages. We send marketing messages only with your consent, which is separate from accepting the Terms. You can withdraw it at any time using the unsubscribe link or in Settings.
15.1 What we use. The Platform uses only the technologies set out in Schedule 3 of our Terms (Cookie and Tracking Policy), and they operate only while you use the app. They are essential session and security tokens, device settings storage, your In-App Preferences, app analytics through Google Firebase, and Stripe's own payment identifiers.
15.2 What we do not use. We do not use third-party advertising or tracking cookies, pixels or advertising identifiers, and we do not track you across other apps, websites or services.
16.1 Visitors. When you visit www.theonenetwork.org we may collect technical information such as your IP address, browser, pages visited and the date and time, to keep the site secure and working.
16.2 Forms. If you contact us or join a waitlist through a form we collect the details you give us, such as your name, email address and message, to reply to you.
16.3 Cookies. The website does not use advertising or third-party tracking cookies.
16.4 Administration tools. The administration tools we use to run the Platform are available only to authorised administrators through a separate login.
17.1 Other sites. The Platform may link to websites run by others, including Businesses. We are not responsible for their privacy practices, so please read their policies.
18.1 Tell us first. If you think we have breached your privacy, email team@1stopapp.com with the details. We will acknowledge your complaint promptly and aim to respond within [30] days.
18.2 The OAIC. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au.
19.1 Updates. We may update this Policy. We will post the new version in the app and on our website with a new effective date, and if a change is significant we will tell you in the app or by email before it takes effect. We record the version you accepted.
Privacy contact: 1Stop Team
Email: team@1stopapp.com
Post: TWCW Pty Ltd (trading as 1Stop), 46 Hampshire Drive, Jindalee WA 6036, Australia
Website: www.theonenetwork.org
Regulator: Office of the Australian Information Commissioner, www.oaic.gov.au
This table lists the information held on the Platform. Card details are shown for completeness: they are never received or stored by us.
Name, email address
Password
Delivery address, phone number
Orders, payment status
Saved items, interests, search terms
Reviews, reports
Push notification device token
Business and shop profile, contact details
Verification documents
Bank and payout details
Products, prices, images, advertisement videos
Subscription status
Card details
Payment record (reference, amount, status, fee)
Login sessions, one-time codes
Terms and policy acceptances
Logs and usage metrics
These periods apply unless the law requires us to keep information for longer (clause 11).
Each provider receives only the information it needs to do its job (clauses 7 and 8). We update this list when a provider is added or changed.
Amazon Web Services
Google Firebase
Stripe
Apple App Store and Google Play
Email service provider
DotSquares
We use cookies to analyze website traffic and optimize your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.