Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
A rewards program can lift repeat purchases, but unclear rules can quickly turn a customer perk into a complaints problem. Retailers often launch points, birthday vouchers or VIP tiers before deciding what happens when a customer returns an item, lets points expire, shares an account or unsubscribes from marketing.
The bigger risk is not just admin confusion. Customer loyalty program terms need to align with the Australian Consumer Law, privacy notices and promotional communications rules, especially where staff are making promises in-store, online and through SMS campaigns.
Well drafted loyalty program terms and conditions in Australia help you decide what customers earn, when rewards can be used, how expiry works, how you can change the program and what data you collect from members.
Loyalty Program Terms Checklist for Retailers
A retail loyalty program works best when the rules are clear enough for customers, staff and your point-of-sale system to follow the same outcome.
Your terms should not read like a dense document hidden at checkout. They should answer the practical questions that come up on a busy Saturday when a customer asks why their points did not appear, whether their voucher can be combined with a sale item or why an account has been suspended.
For most retailers, loyalty program terms should cover:
- Eligibility: who can join, whether members must be Australian residents, whether employees can participate and whether minors need parental or guardian consent.
- Account setup: what information customers must provide, whether one person can have multiple accounts and how online shop terms align with in-store accounts.
- Earning rules: what purchases earn points, the points rate, excluded products, excluded payment methods and what happens if a purchase is returned, cancelled or refunded.
- Rewards: what points can be redeemed for, whether rewards have cash value, whether rewards can be exchanged and whether they can be used with other promotions.
- Expiry: when points, vouchers or tier benefits expire, how members are told and whether expiry can be extended.
- Program changes: how you can change points rates, rewards, tiers, participating stores and program features.
- Member conduct: rules for fraud, misuse, account sharing, resale of rewards and behaviour that harms the business or other customers.
- Privacy and communications: what personal information is collected, why it is used and how promotional emails, SMS or app notifications will be sent.
- Errors and adjustments: how you correct points mistakes, technical issues, duplicate accounts and staff errors.
- Ending the program: how much notice customers receive if you close the loyalty program and what happens to unredeemed points.
Retailers often underestimate how much their staff and marketing team rely on these terms. A campaign that says double points this weekend may sound simple, but the business still needs to know whether double points apply to gift cards, delivery fees, clearance stock, wholesale orders or purchases made through a marketplace.
The best customer loyalty program terms are specific to the way your store operates. A fashion retailer with seasonal returns will need different rules from a cafe rewards app, a beauty business with services and products, or an online homewares store that ships nationally.
A useful starting point is to map the customer journey. A member joins online, buys in-store, returns part of the order, earns a birthday voucher, receives an SMS sale offer, then lets points sit unused for 18 months. Your terms should explain each of those moments without relying on staff discretion.
Common drafting mistakes include saying points have no cash value but then advertising them like cash, promising lifetime membership while reserving a broad right to cancel accounts, or promoting free rewards without explaining spend thresholds and exclusions. These are the kinds of gaps that can create Australian Consumer Law issues as well as customer frustration.
Points, Rewards and Expiry Rules Under Australian Consumer Law
Loyalty rules must match what your business actually promises, because the Australian Consumer Law prohibits misleading or deceptive conduct and false or misleading representations.
The Australian Consumer Law, found in Schedule 2 to the Competition and Consumer Act 2010, applies to retailers when they advertise, sell and communicate with customers. It does not ban loyalty points expiry in Australia, but it does require your claims about points, rewards and benefits to be accurate and not likely to mislead.
If your website says members earn 1 point per dollar spent, your terms should clearly state whether that excludes GST, shipping, gift cards, sale items, returns or purchases using store credit. If your social media post says points never expire, you should not bury a 12 month expiry rule elsewhere. If your staff tell customers a reward can be used anytime, the terms and point-of-sale prompts need to support that.
Points can be structured in several ways. Some retailers use points as a discount currency, such as 100 points equals $5 off. Others use points to access gifts, early access, free shipping or VIP status. The more a reward looks like a monetary benefit, the more carefully you should explain limits and expiry.
Retail loyalty program legal issues often arise around expiry. In Australia, loyalty points are generally not subject to the same rules as gift cards merely because customers earn them through purchases. However, if your program issues vouchers, store credits or gift cards as rewards, separate gift card rules under the Australian Consumer Law may be relevant. Many gift cards must have a minimum expiry period and display expiry information, subject to exceptions.
Practical expiry clauses should state:
- when points are credited to the account
- whether pending points can expire before they become active
- whether expiry is based on the date points are earned, account inactivity or the end of a fixed campaign
- whether all points expire together or only older points expire
- how customers can see their points balance and expiry date
- whether you send reminders before points expire
- whether expired points can be reinstated in limited circumstances
For example, a retailer might say that points expire 12 months after they are earned unless the member redeems them earlier. Another business might use inactivity expiry, where all points expire if the member has not made an eligible purchase for a stated period. Either approach can work if it is clearly disclosed before customers join and repeated in member dashboards or email reminders.
Rewards should also have conditions that match the customer experience. If a $10 birthday voucher cannot be used on sale items, with other discount codes or for postage, say so where the voucher is issued and in your terms of sale. If a free product reward is subject to stock availability, do not advertise it as guaranteed without a backup option.
The ACL can also affect how you handle returns. If a customer returns an item because it has a major failure, you cannot use loyalty terms to reduce their rights under the consumer guarantees. If a customer receives a refund for change of mind under your store policy, you can generally reverse the points earned on that purchase if your terms say so.
Unfair contract terms are another consideration for standard form loyalty terms offered to consumers and small businesses. A clause that lets you remove points, cancel accounts or change rewards for any reason at any time without notice may be risky if it creates a significant imbalance and is not reasonably necessary to protect your legitimate interests. A fairer clause explains the reasons you may act, such as fraud, technical error, supplier changes or program closure, and sets out notice where practical.
The safest position is consistency. Your website, app, checkout signage, staff scripts, email campaigns and terms should tell the same story about points, expiry and exclusions.
Changing the Program Without Losing Customer Trust
Your terms can allow program changes, but the power to change should be specific, fair and supported by clear customer notice.
Retailers change loyalty programs for many reasons. Supplier costs increase, a points rate becomes unsustainable, a store closes, an ecommerce platform changes, or a VIP tier no longer matches customer behaviour. Without a change clause, you may be stuck with rules that no longer suit the business.
A change clause should not be a blank cheque. Broad wording that lets the retailer change everything immediately without telling members can create legal and reputational problems, especially if customers joined or kept buying because of advertised rewards.
A balanced clause usually explains:
- what parts of the program may change, such as earning rates, reward options, tiers, participating locations or technology platforms
- why changes might be made, such as operational needs, supplier availability, fraud prevention, legal compliance or commercial viability
- how members will be notified, such as email, app notice, account dashboard or website update
- when changes take effect
- what happens to points or rewards already earned
- whether members can redeem existing rewards before a major adverse change takes effect
The more negative the change is for customers, the more notice you should consider giving. A small change to excluded brands may need a simple update. A major reduction in points value, removal of a popular reward or closure of the program may call for advance notice and a redemption window.
For example, imagine a retailer has promoted that 500 points equals a $25 voucher. After 12 months, the business wants 500 points to equal a $10 voucher. If customers have already earned points based on the earlier promise, an immediate reduction may feel unfair and may attract complaints. A better approach might be to apply the new rate to points earned after a future date, or give members a period to redeem existing points at the old value.
Your terms should also cover account suspension and cancellation. Retailers need a way to respond to misuse, such as creating fake accounts for sign-up bonuses, returning goods after redeeming points, using stolen payment details, misusing referral codes or reselling reward vouchers. A good clause identifies prohibited conduct and allows you to suspend or close accounts after investigation.
Do not rely only on a discretion to decide what is suspicious. List examples of misuse and explain that you may reverse points, cancel rewards or request proof of identity or purchase history. Where a mistake is caused by your system, such as points being credited twice, your terms should allow reasonable correction while still treating customers fairly.
Membership termination also needs care. If members can leave the program, explain how they do so and what happens to unused points. If unsubscribing from marketing is different from closing the loyalty account, make that clear. A customer may not want promotional emails but may still want to keep points and receive necessary service messages about the program.
Retailers with franchisees, multiple stores or marketplace channels should decide whether loyalty benefits apply everywhere. If the program is available only through company-owned stores, participating franchise locations or your own website, state that clearly. Customers should not discover at checkout that their points cannot be used in a store carrying your brand.
A practical legal review often focuses on whether the business has given itself enough operational flexibility without writing terms that sound one-sided. Customers are more likely to accept program changes if the rules were visible at sign-up, the notice is direct and the treatment of existing rewards is reasonable.
Privacy Notices, Marketing Consent and Member Communications
A loyalty program collects valuable customer data, so privacy notices and marketing consent should be built into the sign-up flow rather than treated as a footer issue.
Retail loyalty programs usually collect names, email addresses, phone numbers, birth dates, purchase history, location, preferences and online behaviour. That data may help personalise offers, but it also increases the compliance burden and the trust customers place in your business.
The Privacy Act 1988 and the Australian Privacy Principles can apply to businesses that meet the relevant criteria, including many larger businesses and some smaller businesses that handle particular types of information or operate in certain ways. Even when a small retailer is not required to comply with every Privacy Act obligation, clear privacy practices are still expected by customers, payment providers, ecommerce platforms and brand partners.
A privacy notice at sign-up should tell members:
- what personal information you collect
- why you collect it, such as account administration, rewards, customer support, analytics and marketing
- whether information is required or optional
- who you may share it with, such as email platforms, SMS providers, point-of-sale providers, fulfilment partners, franchisees or related entities
- whether information may be stored or processed overseas
- how customers can access or correct their information
- how customers can make a privacy complaint
Many retailers also use loyalty data for profiling and targeted advertising. If purchase history is used to send personalised offers, create lookalike audiences, segment customers or measure campaign performance, say so in plain English. Avoid surprising customers by using a birthday or health-related purchase to market sensitive products in a way they did not expect.
Promotional communications and referral program terms need a separate compliance lens. The Spam Act 2003 regulates commercial electronic messages, including many marketing emails, SMS and instant messages. In general, promotional messages need consent, sender identification and a functional unsubscribe facility. Consent may be express, such as ticking a marketing box, or inferred in some circumstances, but retailers should avoid assuming that every loyalty member wants all marketing messages.
A clean sign-up flow separates essential program messages from promotional marketing. For example, account verification, points balance updates, expiry reminders and reward redemption notices may be service-related. Sale alerts, new product promotions and VIP shopping night invitations are usually marketing. If you bundle everything under one vague statement, you may create confusion when a member unsubscribes.
Your customer loyalty program terms should explain that members may receive operational messages necessary to run the program. Your marketing consent wording should explain the promotional channels used, such as email, SMS, app push notifications or direct mail. Your systems should then respect those choices.
Retailers should also consider the Do Not Call Register Act 2006 if telephone marketing is part of the program. Even where a customer is a member, calling them for promotional reasons can raise separate compliance issues.
Children and teenagers require extra care. If your products appeal to young people, your loyalty terms should set age requirements and parental or guardian consent where appropriate. Collect only information that is needed for the program. Birthday rewards may only require day and month rather than full date of birth, depending on your setup.
Prize promotions linked to loyalty programs can trigger additional rules. If loyalty program terms automatically enter members into a chance-based draw when they spend or redeem points, state and territory trade promotion laws may apply, and permits may be required depending on where the promotion runs and the prize value. A simple points program can become a regulated promotion once chance, prizes and advertising are involved.
Staff training matters as much as drafting. A store associate should know not to promise that signing up guarantees free gifts forever. A marketing coordinator should know not to upload loyalty data into a new ad platform without checking privacy wording. A customer support team should know how to answer a request to update details, unsubscribe or delete an account.
Good communications reduce disputes. Send expiry reminders where possible, use clear subject lines, show points balances in accounts and include key exclusions near the offer. A customer should not have to read several documents to understand why a reward did not apply.
FAQs
Do Loyalty Points Have to Last for a Minimum Period in Australia?
There is no general rule that ordinary loyalty points must last for a minimum period. However, expiry must be clearly disclosed and consistent with your advertising. If points are converted into gift cards, vouchers or store credit, separate gift card rules may need to be considered.
Can a Retailer Change Loyalty Program Terms After Customers Join?
Yes, if the terms allow changes and the retailer acts fairly. Significant changes should usually be notified in advance, especially where they reduce the value of existing points or rewards. A change clause should explain what can change and what happens to benefits already earned.
Do We Need a Privacy Policy for a Rewards Program?
Most loyalty programs should have a clear privacy policy or privacy notice, because they collect names, contact details and purchase history. The Privacy Act may apply depending on your business, but transparent collection and use of customer data is good practice for any retailer.
Can We Email or Text Every Loyalty Member With Promotions?
Not automatically. Promotional emails and SMS messages are regulated by the Spam Act and generally require consent, sender details and an unsubscribe option. Your sign-up process should separate program administration from marketing consent.
What Should Happen to Points When a Customer Returns an Item?
Your terms should state that points earned on a refunded or cancelled purchase can be reversed. This should not interfere with the customer guarantees under the Australian Consumer Law, including the customer rights that apply when goods are faulty.
Key Takeaways
- Customer loyalty program terms should clearly cover eligibility, earning rules, rewards, expiry, changes, account misuse, privacy and communications.
- Australian Consumer Law issues often arise when advertising promises about points, value, expiry or free rewards do not match the actual rules.
- Loyalty points expiry in Australia can usually be set by the retailer, but it must be clear, fair and consistent with customer-facing messages.
- Privacy notices and marketing consent should be part of the sign-up process, especially where you use purchase history for personalised offers.
- Program changes, account suspension and closure clauses should protect the business without giving an unfair or overly broad discretion.
- Prize draws, gift cards, SMS campaigns and franchise or multi-store programs can add extra legal considerations.
If you are launching or updating a retail rewards program, Sprintlaw can help with your loyalty program terms, privacy wording, marketing consent language and related customer communications. You can reach our team on 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.







