Privacy Policy

This Privacy Policy explains how TradiYard Pty Ltd ("TradiYard", "we", "us") collects, uses, discloses, and protects your personal information. We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the TradiYard platform, website, or mobile application ("the Platform"), you consent to this Policy.

Account information: Name, email, phone number, suburb, state, postcode, profile photo. Tradie-specific: ABN, trade licence number(s), licence type, trade category, years of experience, service area, hourly rate, insurance details. Job and transaction data: Job descriptions, quotes, invoices, in-app messages, reviews, ratings, and payment records. Verification data: ABN verification via the Australian Business Register (ABR) API. Licence verification via state licensing authority registers (ESV, VBA, NSW Fair Trading, QBCC, and others). Technical information: IP address, device type, browser, OS, pages visited, usage patterns, and referring URLs. We do not sell your personal information to third parties under any circumstances.

We use your information to: — Operate and improve the Platform — Match customers with suitable tradies by trade, location, and availability — Process payments and manage Secure Pay escrow transactions — Verify tradie licences, ABNs, and credentials — Send transactional communications (confirmations, receipts, dispute updates) — Send marketing communications where you have opted in (unsubscribe anytime) — Investigate disputes, enforce our Terms of Service, and prevent fraud — Comply with Australian legal and tax obligations — Generate anonymised, aggregated analytics (no individual is identifiable)

With other users: Your first name, suburb, trade category, reviews, and badge status are visible publicly. Full contact details are only shared after a job connection is made. With service providers: Stripe (payments — PCI DSS Level 1), Supabase (database — Sydney AU region), Resend (email), Vercel (hosting). With licensing authorities: We query government registers to verify licences. We do not share your data back to these bodies except as required by law. With law enforcement: Only where required by law or valid court order. We never share your information for advertising or sell it to data brokers.

TradiYard Secure Pay holds customer funds in escrow until a job is satisfactorily completed. All payment processing is handled by Stripe — TradiYard does not store card numbers, account details, or CVV codes. Escrow funds are held in a separate trust account, not company operating funds. Milestone payments (deposit, mid-job, final) are supported. Transaction records are retained for 7 years as required under the Australian Taxation Administration Act 1953.

We verify trade licences via state and territory licensing authorities: — Energy Safe Victoria (ESV) — electricians — Victorian Building Authority (VBA) — builders, plumbers — NSW Fair Trading — various trades — Queensland Building and Construction Commission (QBCC) — SafeWork SA, NT WorkSafe, WorkSafe WA, ACT Access Canberra Verification status (verified / unverified / expired) is displayed on profiles. Full licence numbers are not publicly displayed.

Security measures we implement: — TLS 1.3 encryption for all data in transit — AES-256 encryption for sensitive data at rest — Row-level security (RLS) — users can only access their own data — Multi-factor authentication available for all accounts — Regular security reviews and access controls In the event of a data breach likely to cause serious harm, we will notify affected users and the Office of the Australian Information Commissioner (OAIC) within 30 days, as required under the Notifiable Data Breaches scheme.

Active accounts: Retained while your account is active. Closed accounts: Core records retained for 7 years (Australian tax and legal obligations). Messages and job records: 7 years. Support communications: 3 years. You may request account deletion from Settings. We will delete or anonymise your data within 30 days, except where law requires us to retain certain records.

Under the Privacy Act 1988 (Cth) and Australian Privacy Principles: Access: Request a copy of personal information we hold about you (response within 30 days). Correction: Request correction of inaccurate or incomplete information. Deletion: Request deletion of your personal information (subject to legal retention obligations). Complaints: Lodge a complaint with us at privacy@tradiyard.com.au. If unsatisfied, contact the OAIC at oaic.gov.au or 1300 363 992. Email privacy@tradiyard.com.au with subject "Privacy Request." We respond within 30 days.

Essential cookies: Required for login sessions and Platform security. Cannot be disabled. Analytics cookies: Anonymous usage data only. No personal information shared. Marketing cookies: Only set with your opt-in consent. Control cookies via your browser settings. Disabling essential cookies will affect Platform functionality.

The Platform is for users 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us data, contact privacy@tradiyard.com.au and we will delete it promptly.

Data is stored on Supabase servers in Sydney, Australia (ap-southeast-2 region). Some service providers (Stripe, Resend) may process data outside Australia with appropriate safeguards consistent with the Australian Privacy Principles.

We will notify you of material changes by email and Platform notice at least 14 days before changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

Privacy enquiries, requests, or complaints: Email: privacy@tradiyard.com.au Mail: TradiYard Pty Ltd, Melbourne VIC 3000, Australia Response time: Within 30 days