Privacy Policy

• Identity and contact details: name, business/company name, email address, phone number, and role (builder or supplier).
• Account and profile data: credentials, approval status, preferences, and settings.
• Transactional data: quote requests, quotes, orders, deliveries, invoices, and related messages.
• Payment data: subscription and billing information processed by our payment provider (Stripe). We do not store full card numbers on our servers.
• Technical data: IP address, device and browser information, and usage data collected via cookies and similar technologies.

We collect personal information directly from you when you register, subscribe, or use the Platform, and automatically as you interact with the Platform. Where practicable we collect information directly from the individual concerned, consistent with APP 3.

We use personal information to create and manage your account, operate the marketplace, process subscriptions and payments, provide support, maintain security, comply with legal obligations, and improve the Platform.

We only use your information for the purposes for which it was collected, for reasonably expected related purposes, or where you have consented, as required by APP 6.

We will only send you marketing communications where you have opted in, and every message will include an easy way to unsubscribe, consistent with the Spam Act 2003 (Cth) and APP 7. You can change your marketing preferences at any time in your account settings.

We may disclose personal information to other Platform users where necessary to facilitate a transaction (for example, sharing a builder's request details with a supplier), to service providers who help us operate the Platform (such as hosting, payments, and analytics), and to authorities where required or authorised by law.

We require our service providers to protect your information and to use it only for the services they provide to us.

Some of our service providers (for example, cloud hosting and payment processing) may store or process data outside Australia. Where we disclose information overseas we take reasonable steps to ensure the recipient handles it consistently with the APPs, as required by APP 8. [INSERT the countries where your providers store data, e.g. United States.]

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure (APP 11), including encryption in transit, access controls, and row-level security on our database.

We retain personal information only for as long as necessary for the purposes described or as required by law, and we take reasonable steps to destroy or de-identify it when no longer needed.

You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, or incomplete (APP 12 and APP 13). Much of your information can be viewed and updated directly in your account settings.

To make a request, contact us at [INSERT privacy@yourdomain.com.au]. We will respond within a reasonable period.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Platform is used. You can control cookies through your browser settings, though some features may not function without them.

If you believe we have breached the APPs, contact our Privacy Officer at [INSERT privacy@yourdomain.com.au]. We will investigate and respond. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

We may update this Privacy Policy from time to time. The current version and effective date are shown at the top of this page.