Privacy Policy

1. Scope and contact

This notice concerns Tradies Local's website, marketplace, Tool Box and support. The operator is LOTAY PTY LTD (ABN 62 674 969 923), trading as Tradies Local Australia. Send privacy questions, access/correction requests or complaints to support@tradieslocal.com.au, with “Privacy” in the subject.

The Privacy Act and Australian Privacy Principles apply where the operator and activity fall within their scope; turnover alone does not determine every exemption. This policy is not consent to unrelated marketing, sensitive-information collection or overseas disclosure. Any consent required by law must be obtained separately. Account registration is intended for adults aged 18 or over; do not submit children's details unnecessarily.

2. Information, purposes and visibility

For an enabled marketplace service, information handling must be limited to what is reasonably needed for the described service or another lawful basis:

• Accounts: contact and business details for authentication, account administration and support.
• Credentials: ABN, licence, insurance or identity evidence only for the specific disclosed check or lawful security need.
• Interactions: listings, applications, quotes, messages and reviews for the selected marketplace interaction, integrity and dispute handling.
• Transactions: Stripe handles platform payments through its payment gateway. Payment-related information is processed in connection with authorised purchases, receipts, reconciliation, fraud prevention and refunds, as applicable to the integration. Do not email full card numbers or security codes.
• Support and security: relevant correspondence, incident information and logs for assistance, fraud prevention and legal obligations.

Collection can be direct or, where actually used and lawfully disclosed, from interacting users, business registers and service providers. Collection notices must explain required fields, consequences of not supplying them, purposes, recipients and applicable choices. General enquiries should allow anonymity where practicable and lawful; account and credential features may need identification.

Public profiles, listings and reviews may be seen, copied or indexed by others. Private messages and verification evidence are not public listings. Actual field visibility must be made clear before submission. Do not post access codes, unnecessary street addresses, identity images, health information or another person's details without authority.

Sensitive information requires a lawful basis and, where required, consent. Unsolicited information must be assessed and destroyed or de-identified where law requires. Unrelated secondary uses are not authorised simply by this notice.

3. Website, device data and Tool Box

Website delivery can also involve IP addresses, timestamps, browser details and server/security logs. Production cookie names, providers, purposes, durations and controls need to be documented against the actual deployment; no analytics, advertising or tracking provider is asserted here.

Tool Box calculators use entered values to produce planning results. Using a calculator does not create a marketplace listing, send a support message or hire a tradie. Reports you download, print or share are then subject to your handling. This does not excuse any collection or transmission actually performed by the website; production scripts and data flows must be checked before claims of exclusively local processing are made.

You can manage browser storage and cookies through browser settings. A production service must distinguish essential functions from optional analytics/advertising and obtain consent where required before the relevant collection or use. Visiting an external resource subjects that visit to its publisher's practices.

4. Sharing, providers and overseas handling

Marketplace participants should receive only information needed for the selected interaction and disclosed audience settings. Private records must not automatically be exposed to every user. Necessary service-provider categories can include hosting, payment processing, communications, security and credential checking; only providers actually engaged belong in the production disclosure.

Stripe is our platform payment service provider and handles payments through its gateway. Stripe’s handling of personal information is described in its Privacy Policy. The exact information entered directly into Stripe, sent by Tradies Local and returned to Tradies Local depends on the implemented payment flow. We do not claim that use of Stripe means no payment information is held by us or that all processing occurs in Australia. The relevant Stripe entity, actual information flows, storage/support locations and likely overseas-recipient countries still need to be confirmed against the production integration.

Where the APPs apply, overseas disclosure requires the protections or exceptions prescribed by law; accountability may remain with the operator. Terms acceptance is not a general waiver of those protections. Disclosure may also occur when required or authorised by law, limited to what the lawful purpose requires. A business transfer does not permit unrestricted sale or reuse of personal information.

5. Security, retention, access and correction

Reasonable safeguards must reflect the information held and its risk. No absolute-security guarantee, certification, encryption configuration or continuous-monitoring claim is made without substantiation. Limit access to authorised purposes and do not send passwords or unnecessary sensitive evidence to support.

Information should be retained only for a justified lawful purpose or legal requirement, then destroyed or de-identified where required. Closure does not necessarily erase billing records, live-dispute evidence or backups immediately, but is not a basis for indefinite retention. Production category-specific retention criteria, deletion triggers and backup cycles remain to be confirmed.

Email support@tradieslocal.com.au to request access, correction or account-related deletion. Explain the records concerned; proportionate identity checks may be needed. Where APP rights apply, requests are addressed within a reasonable period. No fee is charged merely to make an access request, any permitted access charge must be reasonable and explained, and correction requests are free.

Where refusal is legally permitted, reasons and complaint options are provided in writing unless an exception applies. Appropriate alternative access, a statement of disagreement and notification of relevant recipients about a correction are considered as required by law. Deletion requests remain subject to lawful retention obligations.

6. Communications and choices

Security, billing and requested activity notices support the selected service. Optional alerts and promotional messages must be distinguishable. Promotional email/SMS requires applicable consent, accurate sender identification and a functional unsubscribe route; mixed promotional/service messages are assessed by their actual content.

Unsubscribe must not require login, extra personal information or more than ordinary communication costs. It must remain usable for at least 30 days after a commercial message and be actioned within five working days. You may also email support@tradieslocal.com.au about marketing preferences. Withdrawal does not itself close your account or stop necessary security and transaction notices.

This preview does not assert that marketing automation, SMS or a consent-management platform is enabled. Branded SMS requires the applicable registered sender-ID and provider arrangements. Production cookie and tracking choices must match technologies actually deployed; a generic banner does not replace accurate disclosure.

7. Privacy complaints, incidents and changes

Email support@tradieslocal.com.au with “Privacy complaint”, relevant dates, the information or practice concerned and your requested outcome. No account is required. We assess matters within a reasonable period, seek necessary evidence and explain the response or next step, taking urgency and legal deadlines into account. No unverified fixed acknowledgement or resolution target is promised.

Where the matter is within its jurisdiction, unresolved concerns may be taken to the Office of the Australian Information Commissioner. The OAIC generally expects the organisation to have an opportunity to respond first. This does not prevent urgent relief or another lawful complaint route.

Where the Notifiable Data Breaches scheme applies, suspected eligible breaches require expeditious assessment, with all reasonable steps to complete that assessment within 30 calendar days. Notification to the OAIC and affected individuals is required as soon as practicable once the legal notification threshold is met. The assessment period does not justify delaying a notification already required.

Production ranking, fraud flags, verification and account decisions must be assessed for actual automation and its effects; this notice does not claim all decisions are manual. From 10 December 2026, APP entities meeting the statutory conditions must include the required policy disclosures for relevant personal-information-based computer-program decisions. Applicable disclosures must be completed before that date or before introducing a relevant system.

Material changes require an updated version/date and appropriate notice. A policy update alone does not authorise incompatible new uses or replace any new consent required by law.