Last updated: March 2026
1. Introduction
This privacy statement explains how Re-X Australasia Limited ("Re-X", "we", "us", "our"), a company incorporated in New Zealand, collects, uses, and protects personal information in connection with the Re-X Portal ("Portal"), a private management platform provided to authorised Re-X clients and their team members for the management of mobile pay-at-pump, marketing automation, loyalty, and customer engagement programs.
2. Information we collect
When you use the Portal, we may collect:
• Account information — your name, email address, and organisation, as provided by your administrator or during sign-in.
• Authentication data — sign-in method (email, Google, or Microsoft), multi-factor authentication status, and session tokens. We do not store your passwords; authentication is handled by Firebase Authentication and, where applicable, your organisation's identity provider.
• Usage data — pages visited, features used, timestamps, and device/browser information, collected to maintain and improve the Portal.
3. How we use your information
We use your information to:
• Authenticate your identity and manage your access to the Portal
• Provide and operate the Portal's features on behalf of your organisation
• Monitor for security issues and prevent unauthorised access
• Improve the Portal's performance and reliability
4. Third-party services
The Portal uses the following third-party services to operate:
• Firebase Authentication (Google) — for identity verification and sign-in
• Microsoft Entra ID — for Microsoft SSO sign-in
• Google Identity Services — for Google SSO sign-in
These providers process authentication data in accordance with their own privacy policies. We do not sell or share your personal information with third parties for marketing purposes.
5. Data sharing
We may share your personal information only:
• With your organisation's administrators, who manage user access and permissions
• With service providers who assist in operating the Portal, under appropriate data protection agreements
• Where required by law, regulation, or legal process
6. Data retention
We retain your account information for as long as your organisation maintains an active relationship with Re-X and your account remains active. When your account is deactivated or your organisation's agreement ends, we will delete or de-identify your personal information within a reasonable timeframe, unless retention is required by law.
7. Security
We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit, secure authentication, and role-based access controls.
8. Your rights
Under the New Zealand Privacy Act 2020, you have the right to access and request correction of your personal information. You may also request deletion of your personal information where it is no longer required for the purposes for which it was collected. To exercise these rights, contact us at support@re-x.com or speak to your organisation's administrator.
9. Changes to this statement
We may update this privacy statement from time to time. Material changes will be communicated through the Portal or via your organisation's administrator.
10. Contact
For privacy-related questions, contact us at support@re-x.com.