1.1 Last updated: 14 October 2026.
1.2 Valorem Pty Ltd (ACN 664 624 622), trading as OnTheMonee Services and OnTheRostrr (in this Policy, "OnTheRostrr", "we", "us" or "our"), is committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This Privacy Policy explains how we collect, hold, use and disclose personal information when you use OnTheRostrr.
1.3 OnTheRostrr is a digital marketplace that connects hospitality venues with independent casual workers. Where you also use OnTheMonee or its associated card, payment, tipping or cashback services, the OnTheMonee Privacy Policy applies in addition to this one in respect of those services.
In this Privacy Policy:
3.1 OnTheRostrr is a two-sided marketplace. Workers and Venues each create their own accounts and provide their own information directly to us. We are the entity responsible for the personal information we collect through the Service.
3.2 The relationship between a Worker and a Venue for any given shift is an independent contract between them. OnTheRostrr is not your employer if you are a Worker, and a Venue that books you through the Service is not your employer through us. We facilitate the connection, the payment and the related platform functions, but we are not a party to the engagement between Worker and Venue.
3.3 Information you provide as a Worker forms a profile that is visible, to the extent set out in this Policy, to Venues that you apply to or that consider you for shifts. Information a Venue provides is visible, to the extent set out in this Policy, to Workers who interact with that Venue through the Service. Section 7 sets out what is shared between Workers and Venues.
We collect and hold the following categories of personal information.
When you sign up for the Service we collect: full name; date of birth; email address; Australian mobile number; account password (stored as a hashed value); the type of account (Worker or Venue); and your residential address (Workers) or business address (Venues), including geographic coordinates returned by our address autocomplete provider.
Workers and Venue principals are required to complete identity verification before using key features of the Service. To do this we collect, or our identity verification provider collects on our behalf:
Biometric information is Sensitive Information under the Privacy Act. We collect it only with your consent, given when you complete the identity verification step in the Service. We use it solely to verify your identity and to satisfy our anti-fraud, anti-money-laundering and counter-terrorism-financing obligations. You can withdraw consent at any time by closing your account, but we cannot offer the relevant parts of the Service to people who have not completed identity verification.
Workers may also provide:
Venues provide:
In the course of using the Service we collect information about your activity on the platform:
When a Venue shortlists a Worker for a specific shift, the Worker's mobile number is shared with that Venue so the Venue can contact the Worker about the shift. This is described in section 7.1.
To process payments through the Service we collect or process:
When you access the Service we collect: device type, operating system, app version, IP address, mobile device identifiers (such as IDFA on iOS or AAID on Android), push notification tokens, crash and diagnostic data, and log data including dates, times and duration of your interactions with the Service.
If you contact us for support, feedback or to make a complaint, we collect the content of those communications and associated metadata (such as the time of contact and the channel used).
We may also send you operational, transactional and, where you have consented, marketing communications by in-app notification, push, SMS or email, and we record your preferences and your engagement with those communications.
5.1 We collect information in the following ways:
5.2 You have a right not to provide information to us. However, because the Service requires us to identify and verify individuals to facilitate shifts and payments, you generally cannot use the Service anonymously or under a pseudonym.
5.3 If we receive personal information we did not ask for, we will determine whether we could have collected it lawfully and whether it is reasonably necessary for the Service. If not, we will destroy or de-identify the information as soon as practicable, where lawful to do so.
6.1 We use your information for the following purposes:
6.2 Algorithmic matching. We use software to suggest matches between Workers and shifts based on factors such as role, qualifications, location, availability and reliability. A Venue makes the final decision about who is shortlisted and booked, and a Worker makes the final decision about which shifts to apply for. We do not use software to make significant decisions about your rights or interests without a human in the loop.
6.3 Marketing. Where permitted by law, we may use your contact details to send you communications about new features of OnTheRostrr, or about other products and services offered by Valorem Pty Ltd (including OnTheMonee), including (without limitation):
You can opt out at any time by following the unsubscribe instructions in those communications or by contacting us using the details in section 12. We do not use Sensitive Information for marketing purposes.
OnTheRostrr is a marketplace, and certain information is shared between users to make the Service work.
What a Venue sees about a Worker:
What a Worker sees about a Venue:
We do not share a Worker's full date of birth, full residential address, identity documents, biometric information or payment card details with Venues. We do not share a Venue's full payment card details or business verification documents with Workers.
We use trusted third-party service providers to operate the Service. These include:
Where we ask a service provider to handle personal information on our behalf, we require them to handle that information consistently with the Australian Privacy Principles and our security requirements. A current list of our key sub-processors is available on request from the contact in section 12.
We may also share your information with:
Some of our service providers are located, or store data, outside Australia. This currently includes recipients in the United States and the European Union, for cloud hosting, analytics, crash reporting and communications services. We take reasonable steps to ensure that overseas recipients handle your information consistently with the Australian Privacy Principles. Where we work with global service or payment providers (such as EML, Mastercard, Apple Pay and Google Pay), your personal information may be processed or stored by them from any of their global locations.
We may de-identify or aggregate information so it cannot reasonably be used to identify you, and use or disclose that de-identified information for analytics, benchmarking, product development and other purposes.
8.1 We use a combination of technical and organisational measures to protect your information, including:
8.2 Sensitive Information, including biometric information collected during identity verification, is handled with additional restrictions. It is used solely for the identity verification purposes described in section 4.2, is not used for marketing, and is retained only for the period described in section 9.
8.3 You are responsible for the confidentiality of your login credentials, PIN and biometric unlock on your own device. If you believe your account has been compromised, contact us immediately using the details in section 12.
9.1 We retain your personal information for as long as is reasonably necessary to provide the Service, to comply with our legal obligations, to resolve disputes and to enforce our agreements.
9.2 Specific retention periods include:
9.3 Without limiting Section 9.2, our payment processor and card issuer may retain records relevant to their AML/CTF obligations for seven years after we cease to be their client, which may be longer than the retention periods set out in Section 9.2.
9.4 When your account is closed or deleted, we will remove your personal information from our active systems within a reasonable period, subject to the retention obligations above. Portions of your data may remain on backup media for a limited period before being securely destroyed or overwritten.
10.1 You can update much of your account information directly within the Service. To request access to other information we hold about you, or to correct it, contact us using the details in section 12. The Australian Privacy Principles set out rules about access and correction, and there are limited circumstances in which we may refuse a request (for example, where access would have an unreasonable impact on the privacy of others, or where the information relates to existing or anticipated legal proceedings). If we refuse a request, we will give you written reasons.
10.2 If you have a privacy complaint, please contact us first using the details in section 12. We will acknowledge your complaint within a reasonable period and aim to respond substantively within 30 days. We may ask for additional information to investigate.
10.3 If you are not satisfied with how we have handled your complaint, you may refer it to the Office of the Australian Information Commissioner (OAIC):
11.1 Subject to Section 11.3, You have a right to withdraw your consent to us using your Personal Information at any time.
11.2 Please contact us via the details below if you would like to make such a request. We will process a request within one (1) month of us receiving such request in writing. Please note that by withdrawing your consent, we may no longer be able to provide you with access to the Site, the Platform and/or the Services. Please refer to section 9 above for the procedure to have your Personal Information deleted.
11.3 Notwithstanding anything in this Section 11, any right to withdraw your consent of use of Personal Information does not affect information we are required to retain under the AML/CTF Act 2006 (Cth) or other laws, which we continue to hold for the period described in section 9.
If we become aware of a data breach that is likely to result in serious harm to an individual whose personal information we hold, we will notify the affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.
The Service is intended for individuals aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we become aware that we hold personal information about a person under 18, we will close the account and delete the information.
We update this Privacy Policy from time to time to reflect changes in our practices, the Service, the law or our operating environment. The current version, with its last-updated date, is available within the Service and on our website. Any information we hold is governed by the most recent version of this Policy.
If you have a question about this Privacy Policy, would like to access or correct your information, or wish to make a privacy complaint, you may contact us at:
OnTheRostrr Privacy Officer
Valorem Pty Ltd
Level 2, 225 Mary St, Richmond VIC 3121
Email: privacy@onthemonee.com